$ rpki-client -vvf repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft File: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft (raw, json) Hash identifier: zrDO0d0BvTlTjoG7zcjtOUdxXqEbRgjODvHeZ9ARgbk= Subject key identifier: F0:54:C9:D5:3E:31:E5:07:FF:42:37:8F:2C:C1:94:49:6E:F1:99:6C Authority key identifier: DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE Certificate issuer: /CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Certificate serial: 79C29BA851232ED5F4E5649F3D78F2BD464F029B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft Manifest number: C7 Signing time: Wed 25 Mar 2026 00:22:03 +0000 Manifest this update: Wed 25 Mar 2026 00:17:03 +0000 Manifest next update: Sat 28 Mar 2026 07:50:03 +0000 Files and hashes: 1: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: GqPoKCikWixpTyaRkrl7PIpso4FRMb2kN+4gyGItvwo=) 2: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: 9p0fRZPTZcBitKDv/Ff3qr0g0F27xt5vAwhxIzmdswY=) 3: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl (hash: b9+wHLPVk7Df0jRgvAzQ8WAl/aT9zLh6yyX8lcBPMMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c2:9b:a8:51:23:2e:d5:f4:e5:64:9f:3d:78:f2:bd:46:4f:02:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Validity Not Before: Mar 25 00:17:03 2026 GMT Not After : Mar 28 07:50:03 2026 GMT Subject: CN=F054C9D53E31E507FF42378F2CC194496EF1996C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9d:13:d9:37:df:63:18:6a:ac:ce:5d:c7:4f: fa:6c:4f:ff:16:da:b1:6e:15:7b:15:0b:d0:80:ae: 73:e7:0f:14:7b:89:3d:8a:0b:e2:a3:b6:29:f4:85: 77:0e:68:8e:0b:0e:74:af:50:e1:3f:4e:df:18:21: 27:d8:f5:63:0b:cd:35:8c:16:56:fc:a8:d6:3e:eb: d7:9c:b0:05:4d:8f:ed:05:9e:f7:1b:f7:59:71:73: 4d:05:69:b6:9a:24:ca:56:88:66:21:eb:25:2c:27: 01:ac:76:36:a5:ef:75:42:47:62:b4:4f:0a:17:3c: 8d:51:00:dc:a4:cb:13:a0:1f:8f:8b:8e:dd:c6:a5: fb:e3:d6:04:2e:bb:3c:03:e9:a6:c2:42:ab:80:55: 76:bc:b0:3b:ad:9f:e0:b3:4a:7a:c3:cb:c9:1c:37: 5f:59:d3:c7:6e:1e:d9:69:71:8a:fa:51:50:6c:79: a1:59:d1:fb:ab:39:00:7b:cb:4f:33:f8:ce:58:8d: b3:29:21:a0:9f:d7:ed:e7:0a:ac:f5:f1:35:b0:5a: 0c:cd:9d:cc:ac:bb:a9:49:bd:50:e6:d6:6f:e0:c3: 20:d7:9a:dd:e4:97:94:8e:0f:38:c7:49:af:d2:3f: c0:32:8c:44:cf:c8:d7:cc:fd:80:9f:17:d3:59:25: 26:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:54:C9:D5:3E:31:E5:07:FF:42:37:8F:2C:C1:94:49:6E:F1:99:6C X509v3 Authority Key Identifier: keyid:DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f5:8f:78:f0:1f:b2:b1:b8:15:d3:31:c9:ca:ca:63:fa:a5: ec:96:46:3a:b7:17:4d:ca:69:68:0f:01:5a:b8:d6:fe:84:b0: f9:2e:48:44:eb:57:1a:85:49:52:bd:ca:6a:aa:4d:fa:e4:54: fa:fb:a0:4e:37:cb:57:db:93:b2:d9:8d:ba:15:b3:cb:c3:97: 7b:3c:90:5b:6e:bb:f0:ac:4a:97:3e:66:d9:85:38:66:d6:8e: 86:0c:61:98:f7:5d:6b:46:2c:20:17:a7:fd:59:34:ec:dd:69: d7:85:d5:f5:51:f0:fc:58:2c:08:35:5b:0d:55:fd:bd:18:23: ba:7b:68:ff:fb:c5:40:b2:58:da:de:8b:e3:da:55:a9:60:b1: 79:59:98:e4:86:ad:3d:d6:1f:b2:9b:cd:c1:d0:80:af:f6:2e: 6a:c9:c9:5c:84:04:70:c8:1e:d1:61:56:88:44:5d:b7:b7:9a: 20:38:fc:92:8b:7d:3e:4a:9c:1c:b7:2c:f4:d2:83:29:3d:0f: b5:61:a0:09:88:17:2e:ba:9b:bd:14:54:b2:28:82:fd:1d:e0: e4:b3:75:1a:aa:a9:bc:f8:d5:9b:b3:56:71:b2:ba:3e:30:cc: e5:79:9b:04:d9:95:d0:ca:73:5c:13:99:24:cf:af:93:56:4a: d9:71:f5:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUecKbqFEjLtX05WSfPXjyvUZPApswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5 NTFCNkNFRTAeFw0yNjAzMjUwMDE3MDNaFw0yNjAzMjgwNzUwMDNaMDMxMTAvBgNV BAMTKEYwNTRDOUQ1M0UzMUU1MDdGRjQyMzc4RjJDQzE5NDQ5NkVGMTk5NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbnRPZN99jGGqszl3HT/psT/8W 2rFuFXsVC9CArnPnDxR7iT2KC+Kjtin0hXcOaI4LDnSvUOE/Tt8YISfY9WMLzTWM Flb8qNY+69ecsAVNj+0Fnvcb91lxc00FabaaJMpWiGYh6yUsJwGsdjal73VCR2K0 TwoXPI1RANykyxOgH4+Ljt3Gpfvj1gQuuzwD6abCQquAVXa8sDutn+CzSnrDy8kc N19Z08duHtlpcYr6UVBseaFZ0furOQB7y08z+M5YjbMpIaCf1+3nCqz18TWwWgzN ncysu6lJvVDm1m/gwyDXmt3kl5SODzjHSa/SP8AyjETPyNfM/YCfF9NZJSalAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8FTJ1T4x5Qf/QjePLMGUSW7xmWwwHwYDVR0j BBgwFoAU2/cdb4wkvbgNaSvobW9605UbbO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJjYWUzZi1iMzI5LTQ0MWItOTdmYy01YmI5ZmNjMDUxZDIvMC9EQkY3MUQ2RjhD MjRCREI4MEQ2OTJCRTg2RDZGN0FEMzk1MUI2Q0VFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5NTFC NkNFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdB RDM5NTFCNkNFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJr1j3jwH7KxuBXTMcnKymP6peyWRjq3F03K aWgPAVq41v6EsPkuSETrVxqFSVK9ymqqTfrkVPr7oE43y1fbk7LZjboVs8vDl3s8 kFtuu/CsSpc+ZtmFOGbWjoYMYZj3XWtGLCAXp/1ZNOzdadeF1fVR8PxYLAg1Ww1V /b0YI7p7aP/7xUCyWNrei+PaValgsXlZmOSGrT3WH7KbzcHQgK/2LmrJyVyEBHDI HtFhVohEXbe3miA4/JKLfT5KnBy3LPTSgyk9D7VhoAmIFy66m70UVLIogv0d4OSz dRqqqbz41ZuzVnGyuj4wzOV5mwTZldDKc1wTmSTPr5NWStlx9Sw= -----END CERTIFICATE-----Generated at Thu Mar 26 12:54:54 2026 by rpki-client