
$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json)
Hash identifier: 1AVZm2zdrPz6gBP/Lvz/KwHcekAN2rW2q8N44eBrpvo=
Subject key identifier: AD:D8:76:9F:1E:43:76:DE:9B:CD:D6:EC:11:CA:15:9B:22:2C:54:D9
Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3
Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
Certificate serial: 53EDB6E2CC7D2320B006FFC08A8DCF21EE4698D9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
Manifest number: 0551
Signing time: Thu 19 Feb 2026 00:01:46 +0000
Manifest this update: Wed 18 Feb 2026 23:56:46 +0000
Manifest next update: Sun 22 Feb 2026 07:31:46 +0000
Files and hashes: 1: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 7MfETz0OOU0/EW0Af0KTT2gYnfzpkWj/UcRR+LXANfU=)
2: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: iDwSin9srOGKT5atOmt0iLuShHzndQDwuU2x/RU2cYM=)
3: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: SgJaLekQ3Q9cVNBqu5Sas48wyzpxdaLZB6LIMnNqJ+c=)
4: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: yangIWxRfp5g4q3g5tzxpJf4/ZTvbChL+OGjEKq0xNw=)
5: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: 0nmSCmYxjPafjuGfKxLQYjOswoBInr8fsUd/oGOPUvc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl
rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Feb 2026 07:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ed:b6:e2:cc:7d:23:20:b0:06:ff:c0:8a:8d:cf:21:ee:46:98:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
Validity
Not Before: Feb 18 23:56:46 2026 GMT
Not After : Feb 22 07:31:46 2026 GMT
Subject: CN=ADD8769F1E4376DE9BCDD6EC11CA159B222C54D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:2c:cb:18:84:f3:64:22:83:2c:d0:a6:0b:
f0:4c:bb:80:5d:cf:ad:26:7e:80:cf:40:20:63:ad:
23:f8:23:36:be:3d:d5:7b:c1:29:bf:70:19:b1:24:
80:39:2a:13:48:63:f5:4f:f9:7b:a4:88:a2:aa:a6:
c7:cb:4d:69:e6:a0:a2:5f:59:a4:71:a2:f9:3b:c6:
77:04:58:40:c5:99:47:5a:3a:54:b2:7d:96:ec:18:
19:42:4a:cb:3b:90:6b:6d:6c:cb:7f:0f:b8:3e:72:
1d:58:ce:14:9f:8b:6a:3c:94:be:0f:af:e7:13:ca:
b1:2d:c2:64:e0:f9:c7:e0:3c:3c:0a:6f:4e:a0:e0:
36:67:ab:29:c5:fc:c0:39:34:42:fe:da:39:30:ec:
59:00:0a:03:5b:0f:13:79:9c:76:d3:5a:88:6e:e3:
cf:8f:2c:37:2e:07:bf:d1:c5:a8:3c:7f:e0:0d:ee:
eb:de:d0:cd:5b:c2:32:c3:3c:f1:fc:40:01:f5:56:
2a:39:51:e4:2e:9b:5c:f2:05:8d:e1:7e:69:50:f7:
ff:a6:b2:88:75:de:ec:ea:f3:20:c0:88:a6:bc:cf:
bd:95:a3:67:76:b5:b4:a2:4a:62:0c:6e:e5:e8:20:
18:09:c4:c9:e7:fa:c7:5b:1b:ce:79:22:51:a6:b8:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D8:76:9F:1E:43:76:DE:9B:CD:D6:EC:11:CA:15:9B:22:2C:54:D9
X509v3 Authority Key Identifier:
keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:28:29:8e:65:7e:2f:ff:e0:75:98:07:83:33:05:e6:7b:cc:
ec:19:e7:95:03:22:cd:27:a2:6b:23:56:b7:3a:6f:59:e9:93:
92:86:85:77:25:af:85:2a:bf:d0:3f:c8:60:dc:d5:93:3f:eb:
30:45:f1:8d:a8:bd:35:27:6a:35:2a:09:1a:55:de:fa:79:42:
46:0c:0f:c4:df:be:5d:6a:26:7e:79:0d:ad:33:f2:d4:39:7d:
f9:39:15:75:6a:7e:a2:ff:04:c4:18:42:ca:66:82:dd:61:7d:
0e:2d:4d:b5:05:0e:85:68:ed:96:fc:b3:cb:ba:99:63:b0:b8:
22:30:c8:b9:4f:89:93:d1:49:58:a0:51:b5:24:8c:11:d2:e3:
cb:ce:1c:7f:8a:01:e0:65:3c:0d:47:31:bc:ee:b0:17:db:1e:
8a:43:f0:9e:36:19:38:30:b0:a6:52:96:1a:40:56:78:a2:a1:
c0:ba:9a:2b:89:58:9e:f7:d4:af:c7:f5:28:b9:75:1d:e9:98:
9d:b2:ed:e2:bb:15:ce:ab:87:92:82:2c:d8:21:23:8c:83:f7:
45:d3:05:c5:d6:20:ef:28:a5:a1:81:2e:6a:16:9c:85:6d:a7:
ff:11:1d:7c:24:30:5b:63:ba:5e:9b:32:00:d7:27:68:5a:eb:
e1:34:0b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:31:04 2026 by rpki-client