$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json) Hash identifier: 8UPF+PFopcWaViIiPMoW4i04NPZ29jCrhNdwywCZYg8= Subject key identifier: 1A:B1:86:CA:55:26:7C:03:F3:A3:7C:46:6C:B1:DD:B6:FC:E4:AB:99 Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 Certificate issuer: /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Certificate serial: 39D722D9E0F2C9ED091D4A977B98E49811A27395 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft Manifest number: 01C3 Signing time: Thu 26 Mar 2026 03:02:45 +0000 Manifest this update: Thu 26 Mar 2026 02:57:45 +0000 Manifest next update: Sun 29 Mar 2026 13:44:45 +0000 Files and hashes: 1: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: xy9rUI+pZoArZWaU9mOiLKyWILJBiOClDOK9ZvRr3GY=) 2: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: I4l/5SCvPUNR67QS1t6ivbuG/9/G8qw6kcnDyGPuHJY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:d7:22:d9:e0:f2:c9:ed:09:1d:4a:97:7b:98:e4:98:11:a2:73:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Validity Not Before: Mar 26 02:57:45 2026 GMT Not After : Mar 29 13:44:45 2026 GMT Subject: CN=1AB186CA55267C03F3A37C466CB1DDB6FCE4AB99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:dd:aa:60:32:1f:04:9c:b5:de:a0:bf:f7: 57:22:5d:f4:89:8a:3a:ac:58:0c:cb:7b:31:0c:09: 74:bf:0c:1f:34:ec:39:11:f7:90:fd:18:7c:19:88: bd:69:88:37:54:e3:4e:19:46:89:ab:f7:70:b7:13: c5:28:72:76:06:0b:b3:49:a6:fd:bf:c8:44:7a:14: 0a:8e:a1:be:b4:40:9d:7f:d7:09:ba:a7:95:60:e0: c1:70:1f:e7:b5:87:e7:b9:55:fa:a7:55:89:67:48: ad:cc:d5:d4:d0:91:53:9a:a4:43:3b:2f:60:04:9a: ea:57:65:d0:af:45:03:93:ad:9b:ee:b7:a0:7a:26: 98:43:3f:06:0b:21:32:93:90:c8:d2:0d:9e:79:4c: e7:c2:e8:a7:2c:6a:d5:16:c7:8e:c2:20:71:9f:87: 71:59:93:05:bb:eb:54:a4:bc:d2:e5:67:dd:e9:e3: e5:4a:17:fe:2d:b1:52:0a:58:35:7d:7f:5a:62:39: c2:5b:16:eb:6a:aa:99:c5:71:51:39:cb:83:1b:c6: 69:25:05:47:04:bb:51:01:9a:d1:66:4f:7c:13:e4: 07:9a:61:da:a1:50:f7:34:fd:0c:8d:87:ab:cf:db: 85:c4:24:d8:5b:d2:79:dd:f8:b7:97:60:75:43:b8: 17:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B1:86:CA:55:26:7C:03:F3:A3:7C:46:6C:B1:DD:B6:FC:E4:AB:99 X509v3 Authority Key Identifier: keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:cb:3f:20:1b:2d:a4:11:6a:2a:fe:37:60:a9:f7:7f:77:5d: 6f:d4:6c:76:a0:0e:5c:a5:a4:c7:64:cf:42:91:b3:b5:d4:12: e7:81:2f:9d:c6:61:90:ff:fb:b0:69:2c:cf:6e:2f:ad:e8:33: 60:73:2e:52:c5:bf:5c:b2:7d:09:cd:36:fc:5a:12:24:03:e8: 87:14:38:d8:96:7c:92:d6:30:29:27:ea:2b:a4:25:1e:6c:27: 89:f4:82:9c:07:4d:ed:15:60:a6:7f:b3:4a:9b:05:49:ac:a3: dc:3c:bc:39:03:53:bf:fa:d2:f2:46:87:49:96:f4:a6:1b:0c: 95:a2:98:52:5f:e7:40:6d:10:79:f2:38:fb:5c:06:57:a9:bf: 88:7c:55:90:0f:19:3c:73:7a:71:71:3b:c2:88:fc:6c:90:e4: 04:1f:aa:8b:1c:83:c0:d7:97:e7:4e:c3:c5:4d:d7:91:19:bb: 05:88:09:92:b6:92:3a:80:f2:cf:a7:5a:e5:f6:5a:df:db:a7: f3:b8:2c:a6:19:ab:24:12:0a:09:ef:de:a3:29:45:4a:b2:90: 26:7e:70:66:5b:40:8d:61:c9:ac:58:e0:28:51:4e:a2:1b:83: 7e:f4:17:3b:3d:25:81:67:81:ca:8f:2d:44:31:e9:83:ee:d8: d4:4d:19:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOdci2eDyye0JHUqXe5jkmBGic5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDEx OEU1NEVCODAeFw0yNjAzMjYwMjU3NDVaFw0yNjAzMjkxMzQ0NDVaMDMxMTAvBgNV BAMTKDFBQjE4NkNBNTUyNjdDMDNGM0EzN0M0NjZDQjFEREI2RkNFNEFCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDs92qYDIfBJy13qC/91ciXfSJ ijqsWAzLezEMCXS/DB807DkR95D9GHwZiL1piDdU404ZRomr93C3E8UocnYGC7NJ pv2/yER6FAqOob60QJ1/1wm6p5Vg4MFwH+e1h+e5VfqnVYlnSK3M1dTQkVOapEM7 L2AEmupXZdCvRQOTrZvut6B6JphDPwYLITKTkMjSDZ55TOfC6KcsatUWx47CIHGf h3FZkwW761SkvNLlZ93p4+VKF/4tsVIKWDV9f1piOcJbFutqqpnFcVE5y4Mbxmkl BUcEu1EBmtFmT3wT5AeaYdqhUPc0/QyNh6vP24XEJNhb0nnd+LeXYHVDuBdHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGrGGylUmfAPzo3xGbLHdtvzkq5kwHwYDVR0j BBgwFoAU2x4xtqmFZ5HDG5mnPA85ARjlTrgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTE4ZjhhMC05M2FlLTQzNTktOGE1ZC0xY2E2NzhiZTU2NjgvMC9EQjFFMzFCNkE5 ODU2NzkxQzMxQjk5QTczQzBGMzkwMTE4RTU0RUI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDExOEU1 NEVCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5 MDExOEU1NEVCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjLPyAbLaQRair+N2Cp9393XW/UbHagDlyl pMdkz0KRs7XUEueBL53GYZD/+7BpLM9uL63oM2BzLlLFv1yyfQnNNvxaEiQD6IcU ONiWfJLWMCkn6iukJR5sJ4n0gpwHTe0VYKZ/s0qbBUmso9w8vDkDU7/60vJGh0mW 9KYbDJWimFJf50BtEHnyOPtcBlepv4h8VZAPGTxzenFxO8KI/GyQ5AQfqoscg8DX l+dOw8VN15EZuwWICZK2kjqA8s+nWuX2Wt/bp/O4LKYZqyQSCgnv3qMpRUqykCZ+ cGZbQI1hyaxY4ChRTqIbg370Fzs9JYFngcqPLUQx6YPu2NRNGSU= -----END CERTIFICATE-----Generated at Thu Mar 26 05:46:08 2026 by rpki-client