$ rpki-client -vvf repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft File: DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft (raw, json) Hash identifier: qmVbaNeIkAq/st0XfsmhPHum7MUvJ9mWRrBkJvBYnnY= Subject key identifier: BE:C4:2B:E1:CA:38:CC:F4:EF:C0:5F:E9:01:B2:8A:B1:3B:CC:D4:DC Authority key identifier: DB:B2:73:D6:AE:AB:E4:2B:DD:27:C4:B5:41:94:6E:6F:1F:1A:59:35 Certificate issuer: /CN=DBB273D6AEABE42BDD27C4B541946E6F1F1A5935 Certificate serial: 3F2AD8603065C54E033992C3F5B3996F8EB17692 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft Manifest number: 14 Signing time: Wed 25 Mar 2026 08:01:38 +0000 Manifest this update: Wed 25 Mar 2026 07:56:38 +0000 Manifest next update: Sat 28 Mar 2026 19:51:38 +0000 Files and hashes: 1: DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.crl (hash: Cmb3Mpc5D67QSm8R0vu9Y3VlBDf+o0i6YCq0pbaBHRk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.crl rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 19:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:2a:d8:60:30:65:c5:4e:03:39:92:c3:f5:b3:99:6f:8e:b1:76:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBB273D6AEABE42BDD27C4B541946E6F1F1A5935 Validity Not Before: Mar 25 07:56:38 2026 GMT Not After : Mar 28 19:51:38 2026 GMT Subject: CN=BEC42BE1CA38CCF4EFC05FE901B28AB13BCCD4DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9a:6a:bd:46:31:cc:57:40:96:a1:81:55:ff: 54:a2:e2:e4:37:e6:b4:6a:17:a4:10:85:a9:55:86: dd:f3:4d:8c:dd:fe:a2:96:8b:06:20:5a:6a:2f:f6: f8:93:61:96:94:f6:97:7f:f3:cb:c7:6f:0f:70:0f: 2c:f8:b7:1f:7c:52:b2:e8:40:57:b0:68:57:bc:e0: 8c:91:bd:ae:7f:93:fa:05:5c:ea:4e:c9:18:87:00: 60:25:c2:da:8b:28:45:16:76:fa:b9:20:dc:91:ba: 18:3a:d8:2a:c9:cd:6b:b9:5f:07:e3:02:3b:17:b7: b5:d8:39:3c:7a:d4:18:55:5c:b8:66:64:08:c5:d0: df:b1:75:66:ba:d4:3c:79:84:32:a9:a2:75:a5:30: c0:09:b4:f9:48:23:f7:b3:a9:4c:ae:b4:1d:e7:dd: 81:26:3e:39:41:15:3c:fe:70:87:f5:be:db:14:ab: 28:22:fd:02:db:31:f7:57:79:46:d8:1d:d2:8d:8f: 66:ff:76:6e:04:52:a9:d8:65:b5:fd:b1:df:cb:90: 39:85:27:23:6c:78:d5:56:f5:82:c9:7d:2a:e3:f1: 03:33:da:9e:37:8b:66:f5:6e:64:12:7f:79:7a:52: f3:71:df:33:0f:81:b4:8c:f4:0c:8d:22:76:f6:b1: d1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C4:2B:E1:CA:38:CC:F4:EF:C0:5F:E9:01:B2:8A:B1:3B:CC:D4:DC X509v3 Authority Key Identifier: keyid:DB:B2:73:D6:AE:AB:E4:2B:DD:27:C4:B5:41:94:6E:6F:1F:1A:59:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:31:d5:68:30:6c:2b:92:72:7c:87:c2:08:9e:f6:d4:6b:f1: 6c:37:9a:13:e9:42:8b:5b:db:2e:24:ee:8c:c5:b7:a0:ef:9f: e9:38:6b:58:5c:a6:4a:9c:c8:76:10:99:3c:cc:ca:11:1d:12: 53:d0:ce:db:42:31:82:de:29:71:fd:9d:58:bb:0d:d4:b3:22: f1:a7:de:71:20:66:64:47:0d:f5:1e:f8:80:90:d5:22:d2:a2: fb:66:f2:8c:92:d4:73:ea:04:7b:a8:c9:1a:9e:5d:3e:4d:cf: a8:a2:8e:10:e4:95:64:e0:e6:10:82:f6:ea:f4:27:41:35:87: 5d:2b:fe:5a:a3:2b:20:8f:75:33:d5:d8:0f:c3:61:e4:f4:1c: f5:29:51:53:50:54:e0:df:f3:33:f6:ea:df:47:9c:b9:13:c7: 84:69:d2:f2:c5:0a:99:e1:97:dd:1d:f9:3b:b3:3d:54:fe:80: 7d:cf:6a:b9:44:54:f8:12:8e:d1:00:19:55:a3:be:32:ba:5c: 04:ad:95:f9:d4:7f:96:fe:c4:f0:65:97:90:a8:03:5c:59:34: 6d:0b:61:09:ce:08:e1:d6:9b:0a:52:31:38:08:cd:6f:80:c4: 7c:27:d0:99:10:93:ec:7a:d5:01:bd:8e:f9:bf:67:b6:be:0d: b3:85:f8:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPyrYYDBlxU4DOZLD9bOZb46xdpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJCMjczRDZBRUFCRTQyQkREMjdDNEI1NDE5NDZFNkYx RjFBNTkzNTAeFw0yNjAzMjUwNzU2MzhaFw0yNjAzMjgxOTUxMzhaMDMxMTAvBgNV BAMTKEJFQzQyQkUxQ0EzOENDRjRFRkMwNUZFOTAxQjI4QUIxM0JDQ0Q0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2mmq9RjHMV0CWoYFV/1Si4uQ3 5rRqF6QQhalVht3zTYzd/qKWiwYgWmov9viTYZaU9pd/88vHbw9wDyz4tx98UrLo QFewaFe84IyRva5/k/oFXOpOyRiHAGAlwtqLKEUWdvq5INyRuhg62CrJzWu5Xwfj AjsXt7XYOTx61BhVXLhmZAjF0N+xdWa61Dx5hDKponWlMMAJtPlII/ezqUyutB3n 3YEmPjlBFTz+cIf1vtsUqygi/QLbMfdXeUbYHdKNj2b/dm4EUqnYZbX9sd/LkDmF JyNseNVW9YLJfSrj8QMz2p43i2b1bmQSf3l6UvNx3zMPgbSM9AyNInb2sdGHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvsQr4co4zPTvwF/pAbKKsTvM1NwwHwYDVR0j BBgwFoAU27Jz1q6r5CvdJ8S1QZRubx8aWTUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZWYxNmYzMS02MGNlLTQ3YTctYWU4ZC01YTI4YzUxMWM5NDcvMC9EQkIyNzNENkFF QUJFNDJCREQyN0M0QjU0MTk0NkU2RjFGMUE1OTM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJCMjczRDZBRUFCRTQyQkREMjdDNEI1NDE5NDZFNkYxRjFB NTkzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzAvREJCMjczRDZBRUFCRTQyQkREMjdDNEI1NDE5NDZF NkYxRjFBNTkzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYx1WgwbCuScnyHwgie9tRr8Ww3mhPpQotb 2y4k7ozFt6Dvn+k4a1hcpkqcyHYQmTzMyhEdElPQzttCMYLeKXH9nVi7DdSzIvGn 3nEgZmRHDfUe+ICQ1SLSovtm8oyS1HPqBHuoyRqeXT5Nz6iijhDklWTg5hCC9ur0 J0E1h10r/lqjKyCPdTPV2A/DYeT0HPUpUVNQVODf8zP26t9HnLkTx4Rp0vLFCpnh l90d+TuzPVT+gH3ParlEVPgSjtEAGVWjvjK6XAStlfnUf5b+xPBll5CoA1xZNG0L YQnOCOHWmwpSMTgIzW+AxHwn0JkQk+x61QG9jvm/Z7a+DbOF+C4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:41:05 2026 by rpki-client