$ rpki-client -vvf repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft File: DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft (raw, json) Hash identifier: EE83GrHS/kL8KYhWNKVBfUsT0jk0lLDLExDxSbUHA9U= Subject key identifier: 01:1B:6D:45:18:F9:B5:AD:21:6E:0F:6E:29:76:B5:3E:56:E9:EA:28 Authority key identifier: DB:B2:73:D6:AE:AB:E4:2B:DD:27:C4:B5:41:94:6E:6F:1F:1A:59:35 Certificate issuer: /CN=DBB273D6AEABE42BDD27C4B541946E6F1F1A5935 Certificate serial: 04256DFBF56D5A1CB14D1C72603A954D35472810 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft Manifest number: 11 Signing time: Wed 18 Mar 2026 10:41:41 +0000 Manifest this update: Wed 18 Mar 2026 10:36:41 +0000 Manifest next update: Sat 21 Mar 2026 11:37:41 +0000 Files and hashes: 1: DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.crl (hash: DXvdCeK2kCChxxfXNhT+fYNbdz6EX/GnABSjFBvlokM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.crl rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 11:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:25:6d:fb:f5:6d:5a:1c:b1:4d:1c:72:60:3a:95:4d:35:47:28:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBB273D6AEABE42BDD27C4B541946E6F1F1A5935 Validity Not Before: Mar 18 10:36:41 2026 GMT Not After : Mar 21 11:37:41 2026 GMT Subject: CN=011B6D4518F9B5AD216E0F6E2976B53E56E9EA28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a6:71:b7:55:fd:94:03:82:b8:89:57:ea:f7: 45:9d:30:85:70:71:69:d7:eb:3d:96:d1:9c:f9:0c: 96:4e:6a:cc:ab:c3:5b:2b:8b:b5:1b:4a:81:4e:bc: 52:f6:ae:be:c1:29:15:ea:41:76:27:9f:f6:8c:59: e7:0e:6e:90:8a:70:2c:19:61:22:0d:ae:23:64:ee: 68:26:2e:ee:78:ca:ba:26:87:15:b6:49:76:62:ca: 41:60:3b:4d:04:55:85:ba:81:0a:47:f8:62:24:69: ef:28:9c:46:7c:df:e7:56:7f:9d:ea:26:cd:b1:d7: 80:39:53:36:f3:9d:09:df:15:5c:02:d7:30:36:06: d1:bb:62:fa:b9:02:f6:96:1d:92:06:2f:fd:ec:ce: ba:9f:a8:24:19:ca:93:01:46:e0:24:00:a3:65:e5: c5:f8:54:86:02:ec:4a:10:86:8c:da:cd:00:6e:a6: 25:0f:1c:a6:d1:d2:57:7d:16:d3:35:ac:e3:d6:53: e8:e6:22:ad:38:14:c5:0b:af:a7:a0:92:8e:75:59: 81:72:82:3f:f3:ce:df:61:88:09:a9:38:a3:e5:58: 49:76:a7:b1:03:5f:ef:fc:a1:97:90:0f:32:96:a5: 1a:24:bc:1a:d3:d1:e7:04:ec:c4:83:d3:be:8a:7e: 35:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1B:6D:45:18:F9:B5:AD:21:6E:0F:6E:29:76:B5:3E:56:E9:EA:28 X509v3 Authority Key Identifier: keyid:DB:B2:73:D6:AE:AB:E4:2B:DD:27:C4:B5:41:94:6E:6F:1F:1A:59:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:f6:37:2f:00:89:5e:e5:dc:bf:17:ee:6d:04:cd:9e:53:48: 1a:e7:1c:24:1d:66:62:16:f7:05:8e:ff:6c:bc:98:4b:61:b5: d1:ae:2a:46:4d:e9:9e:28:f1:ce:cc:a2:33:e6:55:5e:eb:ee: 35:41:c4:e1:f8:e0:f5:ae:f9:bd:c9:e8:c1:b1:04:c7:db:0d: c4:58:85:e2:ff:90:8f:2d:d2:68:5a:fa:5c:43:c6:d7:18:18: 26:90:f5:b8:28:dc:41:07:29:16:ac:9a:3c:43:f1:5e:cd:46: 1d:a2:ce:65:a9:8e:9e:67:7d:19:29:86:a4:e0:34:90:30:c9: 34:a9:d0:d4:f6:14:6e:07:71:87:15:43:04:2c:9e:01:86:c8: 98:7d:2b:df:bb:86:bc:02:11:6a:44:d4:45:71:cf:41:b0:4e: 77:ca:c0:41:bf:a6:c2:90:38:84:bc:e0:be:44:54:c3:1f:08: f1:4e:d7:d9:e8:45:5b:18:2a:56:bd:35:e2:3e:8f:2e:2e:b0: 30:8b:f1:4a:f4:42:85:22:4c:3b:ec:39:e2:fe:67:f8:67:41: ef:76:51:d6:bd:8a:c2:a1:5a:7c:f5:e6:93:7c:f8:6c:07:be: 56:03:73:3f:71:53:6a:9e:08:a0:9e:8b:0c:f2:f5:97:e6:9f: 60:da:ce:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBCVt+/VtWhyxTRxyYDqVTTVHKBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJCMjczRDZBRUFCRTQyQkREMjdDNEI1NDE5NDZFNkYx RjFBNTkzNTAeFw0yNjAzMTgxMDM2NDFaFw0yNjAzMjExMTM3NDFaMDMxMTAvBgNV BAMTKDAxMUI2RDQ1MThGOUI1QUQyMTZFMEY2RTI5NzZCNTNFNTZFOUVBMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdpnG3Vf2UA4K4iVfq90WdMIVw cWnX6z2W0Zz5DJZOasyrw1sri7UbSoFOvFL2rr7BKRXqQXYnn/aMWecObpCKcCwZ YSINriNk7mgmLu54yromhxW2SXZiykFgO00EVYW6gQpH+GIkae8onEZ83+dWf53q Js2x14A5UzbznQnfFVwC1zA2BtG7Yvq5AvaWHZIGL/3szrqfqCQZypMBRuAkAKNl 5cX4VIYC7EoQhozazQBupiUPHKbR0ld9FtM1rOPWU+jmIq04FMULr6egko51WYFy gj/zzt9hiAmpOKPlWEl2p7EDX+/8oZeQDzKWpRokvBrT0ecE7MSD076KfjV9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUARttRRj5ta0hbg9uKXa1Plbp6igwHwYDVR0j BBgwFoAU27Jz1q6r5CvdJ8S1QZRubx8aWTUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZWYxNmYzMS02MGNlLTQ3YTctYWU4ZC01YTI4YzUxMWM5NDcvMC9EQkIyNzNENkFF QUJFNDJCREQyN0M0QjU0MTk0NkU2RjFGMUE1OTM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJCMjczRDZBRUFCRTQyQkREMjdDNEI1NDE5NDZFNkYxRjFB NTkzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzAvREJCMjczRDZBRUFCRTQyQkREMjdDNEI1NDE5NDZF NkYxRjFBNTkzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFT2Ny8AiV7l3L8X7m0EzZ5TSBrnHCQdZmIW 9wWO/2y8mEthtdGuKkZN6Z4o8c7MojPmVV7r7jVBxOH44PWu+b3J6MGxBMfbDcRY heL/kI8t0mha+lxDxtcYGCaQ9bgo3EEHKRasmjxD8V7NRh2izmWpjp5nfRkphqTg NJAwyTSp0NT2FG4HcYcVQwQsngGGyJh9K9+7hrwCEWpE1EVxz0GwTnfKwEG/psKQ OIS84L5EVMMfCPFO19noRVsYKla9NeI+jy4usDCL8Ur0QoUiTDvsOeL+Z/hnQe92 Uda9isKhWnz15pN8+GwHvlYDcz9xU2qeCKCeiwzy9Zfmn2Dazrk= -----END CERTIFICATE-----Generated at Thu Mar 19 09:35:57 2026 by rpki-client