$ rpki-client -vvf repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft File: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft (raw, json) Hash identifier: 0B0NHLj5Bxj5b7644DhA81eaNOg0oyCTRBYlFUbUulg= Subject key identifier: 12:24:69:23:8E:7A:2D:B1:B5:3C:AD:19:5F:67:C5:23:AE:90:CC:52 Authority key identifier: DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF Certificate issuer: /CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF Certificate serial: 2D6BBDB5D1B7B4C70E297353EA5F2FB0AF02A3F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft Manifest number: 0111 Signing time: Tue 21 Apr 2026 00:22:10 +0000 Manifest this update: Tue 21 Apr 2026 00:17:10 +0000 Manifest next update: Fri 24 Apr 2026 05:55:10 +0000 Files and hashes: 1: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl (hash: 2Tzj9UyfD4eEzkclcUmSKdU+0GHgQ6Hg0HT+TyPn93A=) 2: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: ZYpQlmxLS5aJFefjxbbBQvH2zXoYQl6ndeOBHWuaRz8=) 3: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: idjxpfeAxHssuGIMoqlSNQnvrimnNEAu/Mw7vVOi7mA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:6b:bd:b5:d1:b7:b4:c7:0e:29:73:53:ea:5f:2f:b0:af:02:a3:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF Validity Not Before: Apr 21 00:17:10 2026 GMT Not After : Apr 24 05:55:10 2026 GMT Subject: CN=122469238E7A2DB1B53CAD195F67C523AE90CC52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1d:77:96:fb:2e:63:82:08:e5:cf:83:3d:56: 12:fb:12:52:cc:dc:5a:90:19:0a:db:23:ca:98:04: 1f:bd:83:ac:d1:7d:f4:6f:6c:a5:cb:b1:99:6f:6d: 19:2f:85:cf:9f:3d:c8:b5:24:9a:35:cc:02:71:ff: f4:6d:73:d9:60:18:59:39:97:ab:dd:e8:86:c8:0b: c3:ad:a4:9e:86:b4:2f:1b:44:d3:28:11:f5:3e:58: a9:cc:27:91:21:49:82:fb:b9:37:bd:a6:7b:51:d4: 03:46:fe:47:e7:f6:1f:ac:40:54:e5:a8:64:cc:ff: b6:ce:09:6a:b5:9a:9a:72:ec:40:11:18:8d:d6:a0: 0e:51:7c:94:11:37:c8:b5:c9:f0:b9:93:50:f5:56: 66:86:ed:49:0b:e6:10:67:80:46:38:d0:ae:44:f3: 31:89:cc:f4:81:a3:27:af:fb:b9:94:fa:8f:11:3a: 79:3d:eb:60:58:6d:04:57:b8:f3:ab:23:4f:7d:91: 76:38:c4:3a:85:f9:8f:a6:4e:2b:63:ef:3f:ec:7b: 09:9d:e9:de:e5:f9:64:47:24:0c:b9:37:8e:f0:d7: 4f:5e:a0:72:e0:ef:da:6b:b0:b4:77:84:1f:3b:9c: 76:87:df:93:3d:ea:1b:e5:f3:8e:cb:e4:5c:01:8b: 58:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:24:69:23:8E:7A:2D:B1:B5:3C:AD:19:5F:67:C5:23:AE:90:CC:52 X509v3 Authority Key Identifier: keyid:DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:69:64:b4:b8:c4:32:4b:ea:51:51:15:3f:3b:07:0c:47:6d: b4:7a:10:1f:d0:2f:c0:c4:6c:cf:ee:46:5c:3c:49:97:9e:e9: 8c:22:3b:08:2d:8b:53:73:c4:41:24:45:92:2e:3c:e8:7b:fc: 42:1e:03:14:8d:89:15:03:12:c9:f8:7b:b4:8a:75:82:64:60: 48:cf:88:78:0f:ca:e5:6f:88:6e:5f:86:84:87:b5:20:74:a1: 10:e7:06:bb:85:d5:82:d5:65:9b:0e:df:38:24:f2:e7:5a:52: e2:0f:03:79:7f:b9:13:0c:24:ea:61:a1:d0:eb:3e:aa:e1:d7: 56:d6:13:d1:fc:f0:1f:2b:9a:45:2c:34:ce:91:e3:26:b5:66: 79:02:4b:b0:52:fc:e2:6f:4d:a2:0a:08:f2:34:49:47:86:13: 23:42:14:41:5a:70:43:fa:9b:57:7a:10:b4:fb:a4:27:6c:60: ac:f7:1d:36:69:d3:62:b2:b6:03:bf:d4:3f:f7:66:87:4b:d3: c7:76:ab:00:b0:e6:58:d0:ea:48:1a:1a:47:7f:09:31:ea:5a: 69:8a:43:0c:eb:0a:4f:a9:98:52:c6:e7:47:be:55:c5:fa:36: 7c:f8:dd:49:a7:74:1a:d9:b1:8b:e8:89:92:65:e4:91:50:8b: eb:3f:c6:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULWu9tdG3tMcOKXNT6l8vsK8Co/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEw RkM3QzBERjAeFw0yNjA0MjEwMDE3MTBaFw0yNjA0MjQwNTU1MTBaMDMxMTAvBgNV BAMTKDEyMjQ2OTIzOEU3QTJEQjFCNTNDQUQxOTVGNjdDNTIzQUU5MENDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfHXeW+y5jggjlz4M9VhL7ElLM 3FqQGQrbI8qYBB+9g6zRffRvbKXLsZlvbRkvhc+fPci1JJo1zAJx//Rtc9lgGFk5 l6vd6IbIC8OtpJ6GtC8bRNMoEfU+WKnMJ5EhSYL7uTe9pntR1ANG/kfn9h+sQFTl qGTM/7bOCWq1mppy7EARGI3WoA5RfJQRN8i1yfC5k1D1VmaG7UkL5hBngEY40K5E 8zGJzPSBoyev+7mU+o8ROnk962BYbQRXuPOrI099kXY4xDqF+Y+mTitj7z/sewmd 6d7l+WRHJAy5N47w109eoHLg79prsLR3hB87nHaH35M96hvl847L5FwBi1gTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEiRpI456LbG1PK0ZX2fFI66QzFIwHwYDVR0j BBgwFoAU22qJgMUPIQyAQaIQEObb8Q/HwN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 M2IxNzg1Ny1iZTNkLTQxMzItOGYxOS0xMDgzNmY0MDg1NDYvMC9EQjZBODk4MEM1 MEYyMTBDODA0MUEyMTAxMEU2REJGMTBGQzdDMERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEwRkM3 QzBERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjNiMTc4NTctYmUzZC00MTMyLThm MTktMTA4MzZmNDA4NTQ2LzAvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRC RjEwRkM3QzBERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtpZLS4xDJL6lFRFT87BwxHbbR6EB/QL8DE bM/uRlw8SZee6YwiOwgti1NzxEEkRZIuPOh7/EIeAxSNiRUDEsn4e7SKdYJkYEjP iHgPyuVviG5fhoSHtSB0oRDnBruF1YLVZZsO3zgk8udaUuIPA3l/uRMMJOphodDr Pqrh11bWE9H88B8rmkUsNM6R4ya1ZnkCS7BS/OJvTaIKCPI0SUeGEyNCFEFacEP6 m1d6ELT7pCdsYKz3HTZp02KytgO/1D/3ZodL08d2qwCw5ljQ6kgaGkd/CTHqWmmK QwzrCk+pmFLG50e+VcX6Nnz43UmndBrZsYvoiZJl5JFQi+s/xug= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:48 2026 by rpki-client