$ rpki-client -vvf repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft File: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft (raw, json) Hash identifier: xHmP7PEa9JMJ8nPWY614usKQtZoulXHkB9OPeWTQIJg= Subject key identifier: A5:08:A6:29:AE:3A:56:D8:DF:A2:41:37:41:C5:FE:CB:01:CB:C9:C2 Authority key identifier: DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C Certificate issuer: /CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Certificate serial: 20BF3605EAD713C1C0693932EB2F92D485031F2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft Manifest number: 0226 Signing time: Thu 19 Mar 2026 07:51:49 +0000 Manifest this update: Thu 19 Mar 2026 07:46:49 +0000 Manifest next update: Sun 22 Mar 2026 12:45:49 +0000 Files and hashes: 1: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: 2Vms/JsMQPaw+vYfPtEtlm+57xmqH/10AEwVvJR2JV8=) 2: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl (hash: n7f06oNTMJYDYgZVXKPya8/ChBZ0jdvhfABUh+QLxAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 12:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:bf:36:05:ea:d7:13:c1:c0:69:39:32:eb:2f:92:d4:85:03:1f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Validity Not Before: Mar 19 07:46:49 2026 GMT Not After : Mar 22 12:45:49 2026 GMT Subject: CN=A508A629AE3A56D8DFA2413741C5FECB01CBC9C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c0:c8:a2:ed:54:95:69:64:f9:33:da:b2:6a: 48:c2:90:a9:4d:fb:a3:43:2e:8a:26:50:e1:b1:96: dd:3f:70:36:c8:dd:51:ce:58:43:05:ff:42:5a:4c: 7f:9a:39:a7:4b:e7:6f:cb:8a:bd:59:d9:a9:f6:12: 2e:c7:7b:fc:b5:17:a3:7e:23:08:4b:60:12:58:9f: 22:a2:28:cd:98:e3:6a:52:fb:f7:0d:78:9f:33:78: 99:99:65:5c:7a:d3:45:82:db:c5:7b:4f:b7:9f:15: ef:15:3d:3a:fd:7e:2c:e2:f9:b5:ae:a8:4a:1a:98: 23:0d:be:0d:85:01:9a:4a:b8:74:b8:c0:e5:c7:4a: e0:92:ce:20:99:ac:43:5c:6e:72:11:0c:a4:07:21: f6:70:4a:b8:47:79:aa:c6:df:8d:c2:b3:41:3f:fa: c6:04:3d:ba:b3:d8:9c:3a:79:b2:d0:85:f2:48:53: c1:24:11:61:bb:2b:87:8f:e6:b9:17:4a:b9:6e:23: 7d:a0:0a:92:f3:78:bf:98:bb:7c:dd:2b:7f:f2:5f: 15:56:bb:30:2e:ad:f4:9c:3f:9c:90:31:f1:63:77: b3:8e:04:7f:49:a3:e9:d3:01:2f:ff:5b:23:c5:23: 7e:05:95:eb:44:10:e4:92:95:4f:af:c5:b9:3c:49: 62:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:08:A6:29:AE:3A:56:D8:DF:A2:41:37:41:C5:FE:CB:01:CB:C9:C2 X509v3 Authority Key Identifier: keyid:DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2f:49:31:5b:a1:cd:c3:19:35:34:6e:30:25:e7:2c:db:95: 2e:c6:cc:c8:d9:5a:86:f9:ea:cf:e6:69:e9:cf:4e:7a:51:5e: 0c:2d:70:6a:c4:8c:9a:d1:6e:59:7d:56:5f:d1:90:7a:25:0d: b4:bd:e2:e1:5b:b4:5d:74:2e:bd:31:67:1a:71:f4:3d:62:8e: 34:03:e9:00:f3:e0:f8:e9:84:01:d9:8f:7a:6e:5e:92:b6:dc: 27:68:86:99:43:b1:6a:6f:b0:0e:76:41:d2:bb:9b:be:27:2c: 3e:10:6c:5b:9a:e1:54:80:69:1c:32:7b:1f:ad:f2:01:f4:67: 17:30:48:36:6f:c9:92:8b:be:7b:ef:85:26:f6:e0:7e:85:0e: 39:36:3c:29:64:02:c2:63:f3:1c:dd:58:cb:72:18:4e:5f:99: 70:6c:fe:cc:3b:e1:5e:e6:eb:57:5a:65:9d:0d:2c:29:31:39: 53:9e:c1:f9:f0:25:4c:95:10:38:f5:09:79:84:ac:5e:b0:8d: 4c:9d:fe:f8:95:5b:41:2a:8e:00:f8:c1:1e:a4:4b:17:f9:7a: 13:8c:ab:bb:11:cf:ee:19:39:81:e1:1a:fd:54:f1:cd:a7:21: 46:13:15:1a:70:ec:21:3f:21:c1:14:80:ec:30:cd:c1:93:f8: b4:33:51:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIL82BerXE8HAaTky6y+S1IUDHy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBF NDkzNUEzQzAeFw0yNjAzMTkwNzQ2NDlaFw0yNjAzMjIxMjQ1NDlaMDMxMTAvBgNV BAMTKEE1MDhBNjI5QUUzQTU2RDhERkEyNDEzNzQxQzVGRUNCMDFDQkM5QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdwMii7VSVaWT5M9qyakjCkKlN +6NDLoomUOGxlt0/cDbI3VHOWEMF/0JaTH+aOadL52/Lir1Z2an2Ei7He/y1F6N+ IwhLYBJYnyKiKM2Y42pS+/cNeJ8zeJmZZVx600WC28V7T7efFe8VPTr9fizi+bWu qEoamCMNvg2FAZpKuHS4wOXHSuCSziCZrENcbnIRDKQHIfZwSrhHearG343Cs0E/ +sYEPbqz2Jw6ebLQhfJIU8EkEWG7K4eP5rkXSrluI32gCpLzeL+Yu3zdK3/yXxVW uzAurfScP5yQMfFjd7OOBH9Jo+nTAS//WyPFI34FletEEOSSlU+vxbk8SWIbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpQimKa46VtjfokE3QcX+ywHLycIwHwYDVR0j BBgwFoAU2xvXhR/RpIewEoP2rktG4OSTWjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2IyZWU3NC04YzNjLTRiYzMtYjZmYi1mMzViMjAwYTIwZWIvMC9EQjFCRDc4NTFG RDFBNDg3QjAxMjgzRjZBRTRCNDZFMEU0OTM1QTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBFNDkz NUEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2 RTBFNDkzNUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHovSTFboc3DGTU0bjAl5yzblS7GzMjZWob5 6s/maenPTnpRXgwtcGrEjJrRbll9Vl/RkHolDbS94uFbtF10Lr0xZxpx9D1ijjQD 6QDz4PjphAHZj3puXpK23CdohplDsWpvsA52QdK7m74nLD4QbFua4VSAaRwyex+t 8gH0ZxcwSDZvyZKLvnvvhSb24H6FDjk2PClkAsJj8xzdWMtyGE5fmXBs/sw74V7m 61daZZ0NLCkxOVOewfnwJUyVEDj1CXmErF6wjUyd/viVW0EqjgD4wR6kSxf5ehOM q7sRz+4ZOYHhGv1U8c2nIUYTFRpw7CE/IcEUgOwwzcGT+LQzUeE= -----END CERTIFICATE-----Generated at Thu Mar 19 12:12:57 2026 by rpki-client