$ rpki-client -vvf repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft File: DB03D7B542C60D3D72565734C86589420DF070A0.mft (raw, json) Hash identifier: F7UsItLX1+S/xVTqcKopJq1D40JX3OveuGz9HRuSXao= Subject key identifier: 42:C1:55:6E:7A:72:C9:DF:9D:B7:75:2A:06:D8:73:FD:5F:B1:22:C6 Authority key identifier: DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 Certificate issuer: /CN=DB03D7B542C60D3D72565734C86589420DF070A0 Certificate serial: 744A09D248EB616A4E51075CC4BE44EDF9557847 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft Manifest number: 0277 Signing time: Wed 25 Mar 2026 11:32:24 +0000 Manifest this update: Wed 25 Mar 2026 11:27:24 +0000 Manifest next update: Sat 28 Mar 2026 18:20:24 +0000 Files and hashes: 1: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: J4k4RdB2cM1E1T6rzDg02YfTq6FIMpH6pD8r2mvujP4=) 2: DB03D7B542C60D3D72565734C86589420DF070A0.crl (hash: hrhxG1wJmZ+J1MpimajREQtQSpob53/XzsUhulMspvA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:4a:09:d2:48:eb:61:6a:4e:51:07:5c:c4:be:44:ed:f9:55:78:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB03D7B542C60D3D72565734C86589420DF070A0 Validity Not Before: Mar 25 11:27:24 2026 GMT Not After : Mar 28 18:20:24 2026 GMT Subject: CN=42C1556E7A72C9DF9DB7752A06D873FD5FB122C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:f5:a8:76:10:97:11:c7:cd:9a:8f:33:5d: 0d:97:64:a0:ac:9e:b9:34:08:6a:de:a5:fc:23:71: 5f:2d:11:8c:29:51:82:e4:ae:48:71:9c:75:b8:70: 8e:c9:ba:ca:24:55:69:7a:5b:8f:09:3d:e6:04:52: 45:2a:8a:e4:01:af:22:e0:6c:95:8f:42:f4:f5:06: 3a:ff:7b:7f:ac:2e:f5:47:e1:82:c0:7a:c7:2a:21: bc:64:e4:ec:76:06:77:fc:20:c4:38:26:6f:ef:cf: a8:00:c1:6e:43:c5:e4:a1:8d:ec:47:28:46:07:e6: 16:fc:42:39:73:19:6e:16:df:0f:a0:ea:a1:15:80: c9:93:f8:de:60:2c:d5:6e:bf:e0:e8:98:06:a9:c4: 62:15:8c:b6:0a:10:34:29:f2:59:4e:56:b0:69:99: 5f:bf:e3:fc:63:b8:09:18:3b:ba:a9:67:59:9f:ef: 3b:71:c5:06:64:1f:ce:57:16:cc:f7:2a:1e:2d:3c: 95:86:f7:87:58:c4:2d:b2:bb:ab:99:01:59:27:62: 18:1d:df:34:c4:d8:ed:2a:62:98:65:88:8b:d2:87: a7:b9:ea:25:e5:12:1a:65:f8:4e:53:39:d4:2a:72: b2:71:03:87:43:2a:da:d4:c0:18:7f:56:bd:5c:a4: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C1:55:6E:7A:72:C9:DF:9D:B7:75:2A:06:D8:73:FD:5F:B1:22:C6 X509v3 Authority Key Identifier: keyid:DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ca:b8:82:b4:d7:06:f2:31:9f:43:e8:d4:e4:18:de:fc:00: 19:8b:b0:c2:37:f5:60:d6:da:9b:71:98:63:98:31:a1:62:18: 06:3e:f7:6f:f4:98:44:d9:82:b4:d1:ae:26:b4:51:d6:d0:67: b8:39:df:d0:43:ef:50:f7:8e:95:f9:9a:d0:f4:96:0b:ba:e4: 44:26:a2:1c:2c:97:24:94:07:80:b7:f6:ab:7a:ff:f5:81:d1: 3a:1c:76:02:dc:41:79:96:89:a9:10:c9:44:5b:4a:bb:65:d4: 7a:4f:7a:2b:e0:ba:bb:95:73:c3:ed:61:ba:f8:4d:59:f1:bb: 75:14:4d:63:d7:06:fc:08:72:f1:48:21:a0:ef:38:8b:f5:29: 0c:72:c9:ea:4f:e4:cd:5d:ff:22:b8:76:58:1b:0e:c6:2d:38: cd:33:b1:c8:24:81:d8:f7:92:1b:3a:96:55:64:99:15:35:65: dc:33:e8:01:6e:9c:e7:87:af:13:04:00:13:b4:bb:dd:15:24: 6f:33:e1:43:e9:9e:1f:4f:5b:a7:e3:ed:ab:60:37:72:b6:e9: 22:f5:43:10:2d:b7:43:0e:6f:52:6b:5f:6a:f5:18:76:60:27: 62:1d:0f:bc:ef:19:b9:41:84:97:cb:2c:24:c7:e6:df:eb:db: b8:d4:42:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdEoJ0kjrYWpOUQdcxL5E7flVeEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIw REYwNzBBMDAeFw0yNjAzMjUxMTI3MjRaFw0yNjAzMjgxODIwMjRaMDMxMTAvBgNV BAMTKDQyQzE1NTZFN0E3MkM5REY5REI3NzUyQTA2RDg3M0ZENUZCMTIyQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9vWodhCXEcfNmo8zXQ2XZKCs nrk0CGrepfwjcV8tEYwpUYLkrkhxnHW4cI7JusokVWl6W48JPeYEUkUqiuQBryLg bJWPQvT1Bjr/e3+sLvVH4YLAescqIbxk5Ox2Bnf8IMQ4Jm/vz6gAwW5DxeShjexH KEYH5hb8QjlzGW4W3w+g6qEVgMmT+N5gLNVuv+DomAapxGIVjLYKEDQp8llOVrBp mV+/4/xjuAkYO7qpZ1mf7ztxxQZkH85XFsz3Kh4tPJWG94dYxC2yu6uZAVknYhgd 3zTE2O0qYphliIvSh6e56iXlEhpl+E5TOdQqcrJxA4dDKtrUwBh/Vr1cpAI5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQsFVbnpyyd+dt3UqBthz/V+xIsYwHwYDVR0j BBgwFoAU2wPXtULGDT1yVlc0yGWJQg3wcKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGYyODIzNS0wYmE4LTRlMTQtOGI4NS0yOWMzYTRhNzZlYWIvMC9EQjAzRDdCNTQy QzYwRDNENzI1NjU3MzRDODY1ODk0MjBERjA3MEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIwREYw NzBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5 NDIwREYwNzBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTKuIK01wbyMZ9D6NTkGN78ABmLsMI39WDW 2ptxmGOYMaFiGAY+92/0mETZgrTRria0UdbQZ7g539BD71D3jpX5mtD0lgu65EQm ohwslySUB4C39qt6//WB0TocdgLcQXmWiakQyURbSrtl1HpPeivguruVc8PtYbr4 TVnxu3UUTWPXBvwIcvFIIaDvOIv1KQxyyepP5M1d/yK4dlgbDsYtOM0zscgkgdj3 khs6llVkmRU1Zdwz6AFunOeHrxMEABO0u90VJG8z4UPpnh9PW6fj7atgN3K26SL1 QxAtt0MOb1JrX2r1GHZgJ2IdD7zvGblBhJfLLCTH5t/r27jUQrs= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:32 2026 by rpki-client