$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json) Hash identifier: jPsvUzcKPziigaXa4/PtPRy6uWYmxGm/HV4DihnPpso= Subject key identifier: C5:67:53:54:33:FF:CC:C4:9A:E3:CB:73:DC:4B:EA:56:5A:EE:B2:77 Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 494F106E46D35EB86173E7298267738D4FFF6492 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft Manifest number: 0124 Signing time: Wed 25 Mar 2026 11:12:21 +0000 Manifest this update: Wed 25 Mar 2026 11:07:21 +0000 Manifest next update: Sat 28 Mar 2026 20:28:21 +0000 Files and hashes: 1: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (hash: 0mKtpX4YHjqhZYuwbm2O+wY91w1T7BNCRQPDyuS9qF8=) 2: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: 2OLXl8PpMYAQ9QWehn08tNPR2idiz+9SA32mBcWRClU=) 3: 3130332e3136332e3234302e302f32342d3234203d3e20313431383837.roa (hash: +teKINZvaHmO1Q+Kg4FSm38760XvHDKTZ7byNyW4UzY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:4f:10:6e:46:d3:5e:b8:61:73:e7:29:82:67:73:8d:4f:ff:64:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: Mar 25 11:07:21 2026 GMT Not After : Mar 28 20:28:21 2026 GMT Subject: CN=C567535433FFCCC49AE3CB73DC4BEA565AEEB277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:43:db:91:27:32:51:c0:37:7f:e6:60:d0:5d: 42:7a:3b:fb:56:d1:52:a9:ec:37:88:54:be:5a:a7: 0d:8e:29:38:4a:16:a5:e6:bb:b9:37:be:2c:c7:b9: a7:76:f5:d6:fb:4b:74:0d:ac:d2:78:41:c9:dc:2c: 22:61:45:45:6c:94:01:d4:57:15:e8:b3:b2:ca:90: d1:69:0b:1f:61:8d:82:d6:6f:7c:3e:d4:e0:3c:09: 3a:09:27:94:ac:65:39:43:cd:f9:ef:b6:01:ad:ba: 18:eb:cd:38:86:40:1b:59:8f:ff:50:38:12:b3:af: 15:a0:70:3b:9a:b1:d2:6d:b7:ae:80:85:9f:d8:31: 16:b2:4e:74:b3:6d:65:68:56:d1:e6:ef:29:71:47: ea:74:0e:23:b1:de:4f:19:6c:64:24:c3:e2:e6:a2: 43:be:33:86:2f:d8:08:b9:fd:41:2b:60:e8:4c:19: 9a:8b:09:77:af:96:f6:ee:2c:9d:58:e7:8f:a7:f3: b5:18:29:00:05:d0:11:77:9a:c1:65:11:0a:27:96: 65:d9:76:62:76:84:40:1b:e3:8a:e4:d2:55:4e:11: fa:6d:e6:08:fd:bc:8d:89:a3:75:88:ef:d1:57:a6: 84:7f:1f:00:44:b1:1f:3a:61:cc:ff:8c:e8:da:af: 7e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:67:53:54:33:FF:CC:C4:9A:E3:CB:73:DC:4B:EA:56:5A:EE:B2:77 X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:4e:9c:a7:91:0e:eb:98:a8:12:b5:ad:27:2c:6b:81:22:f6: ae:1b:51:94:ab:05:02:09:d0:05:1d:80:a3:45:dd:79:0b:43: 4b:cf:95:0f:d6:c2:74:b9:80:da:96:df:41:10:b4:68:30:cf: ff:02:6f:5b:a7:ba:e0:7c:42:2d:17:a9:80:1b:7e:be:96:65: 06:18:72:cb:45:74:7b:59:1e:f0:19:e1:67:5b:2e:29:8b:ce: 19:e8:69:36:38:cb:7d:37:85:36:cf:ca:2c:03:cd:01:f1:9a: c9:a4:57:1c:88:d7:2d:a5:03:39:f9:25:1c:6d:4c:69:bb:20: 74:a6:71:21:e7:80:2f:6b:f3:a2:17:a3:4b:54:79:9e:df:87: 44:19:26:35:52:f0:21:19:e3:c4:b5:b4:f3:9c:d7:fe:9e:7c: ac:b8:de:30:f2:09:5d:b7:60:67:ae:44:4c:71:68:32:08:0a: f4:a1:cd:c9:d0:9f:d5:0a:6d:47:92:97:6c:c4:16:c5:6d:9b: 92:87:dc:0e:5d:c6:8b:49:30:6b:29:03:96:69:ee:f5:8d:dc: 07:1c:95:36:bf:b0:f9:2d:94:f1:b1:ed:4e:c5:a2:92:c4:39: 47:89:ca:8f:af:9f:e9:2e:b9:30:3c:47:7e:78:47:fe:eb:14: e0:c7:4f:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSU8QbkbTXrhhc+cpgmdzjU//ZJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNjAzMjUxMTA3MjFaFw0yNjAzMjgyMDI4MjFaMDMxMTAvBgNV BAMTKEM1Njc1MzU0MzNGRkNDQzQ5QUUzQ0I3M0RDNEJFQTU2NUFFRUIyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQ9uRJzJRwDd/5mDQXUJ6O/tW 0VKp7DeIVL5apw2OKThKFqXmu7k3vizHuad29db7S3QNrNJ4QcncLCJhRUVslAHU VxXos7LKkNFpCx9hjYLWb3w+1OA8CToJJ5SsZTlDzfnvtgGtuhjrzTiGQBtZj/9Q OBKzrxWgcDuasdJtt66AhZ/YMRayTnSzbWVoVtHm7ylxR+p0DiOx3k8ZbGQkw+Lm okO+M4Yv2Ai5/UErYOhMGZqLCXevlvbuLJ1Y54+n87UYKQAF0BF3msFlEQonlmXZ dmJ2hEAb44rk0lVOEfpt5gj9vI2Jo3WI79FXpoR/HwBEsR86Ycz/jOjar355AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxWdTVDP/zMSa48tz3EvqVlrusncwHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcx QkQ4Njk5RkU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZOnKeRDuuYqBK1rScsa4Ei9q4bUZSrBQIJ 0AUdgKNF3XkLQ0vPlQ/WwnS5gNqW30EQtGgwz/8Cb1unuuB8Qi0XqYAbfr6WZQYY cstFdHtZHvAZ4WdbLimLzhnoaTY4y303hTbPyiwDzQHxmsmkVxyI1y2lAzn5JRxt TGm7IHSmcSHngC9r86IXo0tUeZ7fh0QZJjVS8CEZ48S1tPOc1/6efKy43jDyCV23 YGeuRExxaDIICvShzcnQn9UKbUeSl2zEFsVtm5KH3A5dxotJMGspA5Zp7vWN3Acc lTa/sPktlPGx7U7FopLEOUeJyo+vn+kuuTA8R354R/7rFODHT6M= -----END CERTIFICATE-----Generated at Fri Mar 27 04:43:46 2026 by rpki-client