$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json) Hash identifier: DzjB6toz42rH4pjVoYr9gM9S3uPbZ/dzc2lpDJCyN8g= Subject key identifier: 52:68:DA:56:C8:AA:6A:56:23:19:95:46:03:20:BB:BC:27:A5:B4:D5 Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Certificate serial: 58C89EE24AD7E5C718A5F550C6F3AC7CB70BE4AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft Manifest number: 056B Signing time: Sat 18 Apr 2026 16:31:53 +0000 Manifest this update: Sat 18 Apr 2026 16:26:53 +0000 Manifest next update: Tue 21 Apr 2026 22:51:53 +0000 Files and hashes: 1: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: iDwSin9srOGKT5atOmt0iLuShHzndQDwuU2x/RU2cYM=) 2: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 7MfETz0OOU0/EW0Af0KTT2gYnfzpkWj/UcRR+LXANfU=) 3: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: JOav8IsM+hwbd0g9kqojLoo0P20V840LxRz/2o4sCrk=) 4: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: yangIWxRfp5g4q3g5tzxpJf4/ZTvbChL+OGjEKq0xNw=) 5: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: SgJaLekQ3Q9cVNBqu5Sas48wyzpxdaLZB6LIMnNqJ+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 22:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:c8:9e:e2:4a:d7:e5:c7:18:a5:f5:50:c6:f3:ac:7c:b7:0b:e4:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Validity Not Before: Apr 18 16:26:53 2026 GMT Not After : Apr 21 22:51:53 2026 GMT Subject: CN=5268DA56C8AA6A56231995460320BBBC27A5B4D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:02:45:55:c7:0d:95:90:32:05:67:7d:3e: 13:ae:e4:c0:c8:72:f7:5c:02:d1:9c:85:fd:ea:de: ac:a8:50:a1:30:3a:d2:5a:1e:44:3a:38:b6:5f:27: 6e:db:2a:6e:0a:82:71:7a:f9:80:7b:80:02:52:45: 7c:9a:08:9b:12:56:02:53:a5:25:63:57:4f:12:88: 2e:9e:ea:ea:d9:f4:c4:32:bc:25:32:37:76:17:0b: 0e:a2:43:96:bf:96:7b:f7:55:80:67:92:ab:aa:8d: 89:ca:53:7d:38:15:07:1b:c4:7c:2f:88:6d:c4:fc: 24:fd:76:12:38:18:51:10:b3:eb:84:71:17:d8:6e: fb:69:96:ef:34:22:83:95:4f:2e:9b:20:ec:20:c6: 9f:73:2f:79:44:d7:ea:b8:36:c9:0d:a6:10:b9:e2: 7e:02:44:37:b9:fb:07:f5:cd:77:8c:20:b6:f7:df: 2d:3a:55:d1:c8:e0:fd:a6:6a:6e:cd:53:67:01:07: ea:cf:df:7d:69:e6:f5:6a:18:9f:5a:5f:d7:51:db: 02:af:72:d5:d2:37:1e:52:be:1d:66:9f:c2:7c:c8: 49:3f:f9:01:99:8b:73:f3:0a:16:f5:c2:7a:50:c9: 07:d8:a0:97:76:4c:b2:fe:7a:8b:5c:6c:22:15:6e: 3a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:68:DA:56:C8:AA:6A:56:23:19:95:46:03:20:BB:BC:27:A5:B4:D5 X509v3 Authority Key Identifier: keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:97:7f:99:61:7f:5e:8c:67:b5:6b:ac:bf:4d:73:9c:37:3a: 11:73:65:1b:9c:84:22:c1:c7:6c:71:ab:76:e7:c3:bb:18:41: 78:1f:eb:df:7a:44:a0:3f:8c:55:20:a3:50:c6:c7:d2:9a:c6: 22:d7:a6:22:c4:36:e9:eb:49:ab:ca:92:0e:2d:7d:de:62:8b: 3a:11:99:7a:68:2b:ed:2b:54:39:ce:03:b7:b9:22:1e:92:3b: c3:19:7d:24:7e:0c:7d:8d:39:a7:70:f1:1c:a0:6c:0a:7b:a3: b8:37:6d:c6:4e:0c:e3:09:01:56:12:42:22:b0:e3:ea:d3:ea: 20:22:93:b9:14:e6:f9:cb:ac:2e:a2:10:0b:c2:82:a7:42:a9: f3:ab:82:b8:4c:6b:1e:ed:0f:e3:ef:00:09:9f:09:31:f8:9d: 65:ee:ee:31:bb:37:98:3e:06:17:3d:bf:0e:15:e7:3e:e7:22: c5:94:f2:69:2f:86:6e:1b:59:45:50:a6:f6:74:68:08:72:ce: 07:71:60:9a:a0:6b:2e:ae:24:c2:0c:9f:e3:8e:2f:de:13:2f: 97:a9:1d:07:da:0a:d2:79:d9:73:e1:67:e1:95:b6:03:fb:df: e1:59:d9:98:51:08:28:25:84:96:55:cf:25:e7:3b:36:9c:a7: 92:92:d2:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWMie4krX5ccYpfVQxvOsfLcL5K4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy REMyRDdGMzAeFw0yNjA0MTgxNjI2NTNaFw0yNjA0MjEyMjUxNTNaMDMxMTAvBgNV BAMTKDUyNjhEQTU2QzhBQTZBNTYyMzE5OTU0NjAzMjBCQkJDMjdBNUI0RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLtwJFVccNlZAyBWd9PhOu5MDI cvdcAtGchf3q3qyoUKEwOtJaHkQ6OLZfJ27bKm4KgnF6+YB7gAJSRXyaCJsSVgJT pSVjV08SiC6e6urZ9MQyvCUyN3YXCw6iQ5a/lnv3VYBnkquqjYnKU304FQcbxHwv iG3E/CT9dhI4GFEQs+uEcRfYbvtplu80IoOVTy6bIOwgxp9zL3lE1+q4NskNphC5 4n4CRDe5+wf1zXeMILb33y06VdHI4P2mam7NU2cBB+rP331p5vVqGJ9aX9dR2wKv ctXSNx5Svh1mn8J8yEk/+QGZi3PzChb1wnpQyQfYoJd2TLL+eotcbCIVbjpdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUmjaVsiqalYjGZVGAyC7vCeltNUwHwYDVR0j BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy RDdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3 OUQyREMyRDdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmXf5lhf16MZ7VrrL9Nc5w3OhFzZRuchCLB x2xxq3bnw7sYQXgf6996RKA/jFUgo1DGx9KaxiLXpiLENunrSavKkg4tfd5iizoR mXpoK+0rVDnOA7e5Ih6SO8MZfSR+DH2NOadw8RygbAp7o7g3bcZODOMJAVYSQiKw 4+rT6iAik7kU5vnLrC6iEAvCgqdCqfOrgrhMax7tD+PvAAmfCTH4nWXu7jG7N5g+ Bhc9vw4V5z7nIsWU8mkvhm4bWUVQpvZ0aAhyzgdxYJqgay6uJMIMn+OOL94TL5ep HQfaCtJ52XPhZ+GVtgP73+FZ2ZhRCCglhJZVzyXnOzacp5KS0qU= -----END CERTIFICATE-----Generated at Mon Apr 20 22:24:27 2026 by rpki-client