$ rpki-client -vvf repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft File: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft (raw, json) Hash identifier: COSjfIYZ1vbcOP+6Yv8S6VR4sfoWqGa4HSE/tWbx1gY= Subject key identifier: 45:5C:5D:F9:4F:E6:D0:9D:E1:5B:8B:77:6A:BF:6C:42:A3:62:E4:CA Authority key identifier: DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C Certificate issuer: /CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Certificate serial: 0B07CD08F87A99CB5C24EFF7A496845E50C50ED5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft Manifest number: 0229 Signing time: Thu 26 Mar 2026 06:11:50 +0000 Manifest this update: Thu 26 Mar 2026 06:06:50 +0000 Manifest next update: Sun 29 Mar 2026 13:23:50 +0000 Files and hashes: 1: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: 2Vms/JsMQPaw+vYfPtEtlm+57xmqH/10AEwVvJR2JV8=) 2: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl (hash: yfDPm+kyZMY5SUamDgpeBpJr8q75ppdZ3yCi1cwIBoY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 13:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:07:cd:08:f8:7a:99:cb:5c:24:ef:f7:a4:96:84:5e:50:c5:0e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Validity Not Before: Mar 26 06:06:50 2026 GMT Not After : Mar 29 13:23:50 2026 GMT Subject: CN=455C5DF94FE6D09DE15B8B776ABF6C42A362E4CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:43:4d:99:df:a5:1a:8a:68:c9:ba:84:be: 18:c6:b1:b9:c6:03:38:18:c4:3c:81:30:37:c2:54: c5:b2:10:13:db:f7:be:da:17:54:e2:34:83:6a:34: d4:89:d4:37:46:08:4b:f5:bf:fa:8c:b8:c9:c6:08: 5b:d4:c0:b8:f4:ca:dd:a7:a0:a6:49:75:06:69:99: af:0a:d1:31:32:46:0c:38:66:ee:0f:dc:a6:23:9e: 31:82:35:1f:8d:08:1f:87:97:b7:a3:47:6a:51:3d: eb:f9:d2:d3:56:bb:01:32:56:2d:e6:53:0b:2d:9a: 0e:7e:5f:43:88:e1:d4:39:27:d4:30:b7:54:36:96: 2e:23:88:0b:dc:b5:7a:1f:19:76:e8:ce:86:56:a8: 03:d8:e4:3b:df:88:01:fa:c8:34:3f:a7:54:44:16: b1:51:d0:3d:6c:96:6a:a4:bd:a3:28:f6:6c:23:da: e3:89:52:35:96:0f:f5:fd:40:d9:4d:1b:6c:4f:f1: fd:68:fa:1a:db:97:59:de:51:63:19:96:4f:62:74: 8f:4c:63:3a:c7:2d:ca:0f:b7:0d:bc:be:cc:c7:78: a7:ec:58:dd:21:aa:50:b2:eb:d4:17:8f:01:26:21: 5a:ac:ec:31:f0:c3:77:15:3a:e0:c6:8d:e2:2f:f5: 2a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5C:5D:F9:4F:E6:D0:9D:E1:5B:8B:77:6A:BF:6C:42:A3:62:E4:CA X509v3 Authority Key Identifier: keyid:DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ad:64:1d:1e:f5:ae:ff:7d:f4:73:45:15:35:ce:26:f0:07: e8:01:cd:51:6e:f0:bf:d8:70:8f:4f:5f:c8:3d:fe:f3:ea:d8: c4:cd:9b:36:3c:32:c9:e0:ec:fd:cb:3d:1e:d4:b2:e7:a6:7e: bc:f3:6f:a3:8e:18:e0:10:99:8f:57:f1:03:48:35:52:5d:7a: 5d:c5:ba:a0:d7:dc:a4:7e:72:ee:6e:25:1e:54:36:ee:8d:e4: 70:bb:f9:2d:d3:55:9a:10:66:43:d5:90:ec:f7:1b:8f:0a:3d: e8:9e:1d:61:02:72:6d:b2:e9:6c:18:30:a4:ce:3c:a8:1a:9c: 01:7f:5c:4b:e0:e7:62:13:2d:fb:68:3e:61:c0:ee:d5:20:3d: 06:dc:2c:8c:7e:57:2e:62:24:59:ec:34:48:56:1a:a7:a0:eb: c7:7e:ea:55:51:df:f9:0f:53:b1:b8:6a:80:2f:76:de:9b:99: ae:41:df:c6:f3:cb:c1:21:00:a7:8c:c0:7e:b3:9a:d4:b7:73: 31:f8:38:08:b2:b3:e0:27:cb:26:a1:71:14:c1:f8:d5:a8:a3: c0:94:ef:6c:26:48:56:47:4e:25:4f:bb:29:8e:6f:95:5f:4b: 5e:30:23:91:00:ce:5b:68:58:ae:96:e6:07:52:00:d1:92:57: 5e:ce:1c:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCwfNCPh6mctcJO/3pJaEXlDFDtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBF NDkzNUEzQzAeFw0yNjAzMjYwNjA2NTBaFw0yNjAzMjkxMzIzNTBaMDMxMTAvBgNV BAMTKDQ1NUM1REY5NEZFNkQwOURFMTVCOEI3NzZBQkY2QzQyQTM2MkU0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz0UNNmd+lGopoybqEvhjGsbnG AzgYxDyBMDfCVMWyEBPb977aF1TiNINqNNSJ1DdGCEv1v/qMuMnGCFvUwLj0yt2n oKZJdQZpma8K0TEyRgw4Zu4P3KYjnjGCNR+NCB+Hl7ejR2pRPev50tNWuwEyVi3m Uwstmg5+X0OI4dQ5J9Qwt1Q2li4jiAvctXofGXbozoZWqAPY5DvfiAH6yDQ/p1RE FrFR0D1slmqkvaMo9mwj2uOJUjWWD/X9QNlNG2xP8f1o+hrbl1neUWMZlk9idI9M YzrHLcoPtw28vszHeKfsWN0hqlCy69QXjwEmIVqs7DHww3cVOuDGjeIv9SpVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURVxd+U/m0J3hW4t3ar9sQqNi5MowHwYDVR0j BBgwFoAU2xvXhR/RpIewEoP2rktG4OSTWjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2IyZWU3NC04YzNjLTRiYzMtYjZmYi1mMzViMjAwYTIwZWIvMC9EQjFCRDc4NTFG RDFBNDg3QjAxMjgzRjZBRTRCNDZFMEU0OTM1QTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBFNDkz NUEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2 RTBFNDkzNUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGtZB0e9a7/ffRzRRU1zibwB+gBzVFu8L/Y cI9PX8g9/vPq2MTNmzY8Msng7P3LPR7Usuemfrzzb6OOGOAQmY9X8QNINVJdel3F uqDX3KR+cu5uJR5UNu6N5HC7+S3TVZoQZkPVkOz3G48KPeieHWECcm2y6WwYMKTO PKganAF/XEvg52ITLftoPmHA7tUgPQbcLIx+Vy5iJFnsNEhWGqeg68d+6lVR3/kP U7G4aoAvdt6bma5B38bzy8EhAKeMwH6zmtS3czH4OAiys+AnyyahcRTB+NWoo8CU 72wmSFZHTiVPuymOb5VfS14wI5EAzltoWK6W5gdSANGSV17OHCk= -----END CERTIFICATE-----Generated at Thu Mar 26 21:02:02 2026 by rpki-client