$ rpki-client -vvf repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft File: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft (raw, json) Hash identifier: ilI1jSNXh/Ee1bDH3TNnzwTZHHrURz4jPiVX7AKKlhc= Subject key identifier: 1C:6D:C7:91:8C:D6:2F:CD:71:F1:1E:16:28:25:88:40:89:DA:11:35 Authority key identifier: DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF Certificate issuer: /CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF Certificate serial: 4DF2D7E9FAD2C042FB40E069688A928ADF0F46D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft Manifest number: 0105 Signing time: Wed 25 Mar 2026 18:12:14 +0000 Manifest this update: Wed 25 Mar 2026 18:07:14 +0000 Manifest next update: Sun 29 Mar 2026 05:47:14 +0000 Files and hashes: 1: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl (hash: wZoOvSw506RPsVQ1RJ3OxzV26AmyxmMTCtp2uFkwVpQ=) 2: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: ZYpQlmxLS5aJFefjxbbBQvH2zXoYQl6ndeOBHWuaRz8=) 3: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: idjxpfeAxHssuGIMoqlSNQnvrimnNEAu/Mw7vVOi7mA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f2:d7:e9:fa:d2:c0:42:fb:40:e0:69:68:8a:92:8a:df:0f:46:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF Validity Not Before: Mar 25 18:07:14 2026 GMT Not After : Mar 29 05:47:14 2026 GMT Subject: CN=1C6DC7918CD62FCD71F11E162825884089DA1135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:06:59:cc:cd:41:48:af:f7:38:42:f3:07: cc:0f:cf:bd:7b:84:34:40:15:b0:a7:8d:f6:07:d9: 4c:18:1a:b3:86:ed:93:ad:c2:8e:2d:a8:dd:4b:fd: 91:1e:69:da:4c:5b:05:05:b9:0e:85:07:58:97:84: 46:2f:71:fa:a6:ee:40:98:17:01:35:1b:17:74:66: d5:21:de:bf:c1:94:d4:15:e4:46:1a:6d:39:47:bc: 72:32:d9:c1:37:f6:2a:2c:3c:d4:a4:2b:b5:88:f5: 67:c4:78:41:ad:c4:db:6f:de:a2:33:36:8e:d8:7b: a2:b6:92:7a:9e:45:2a:b0:59:13:b7:3e:ce:4b:73: 94:77:75:03:5e:db:7c:3c:b1:1e:c9:96:4d:26:a2: 65:5d:38:3f:e1:e7:a6:1b:3d:4c:4a:cb:81:a1:17: 86:c6:b2:e2:e4:e7:12:c6:b4:f6:0e:8e:9f:32:1e: e7:9c:d6:5d:53:a2:44:df:95:c7:ee:21:66:a5:de: 59:d5:4e:fc:b8:fe:83:16:7d:44:6d:39:5a:bd:b9: 5a:4e:08:33:bf:35:35:87:98:37:78:8c:61:04:47: 34:f7:e4:58:09:53:28:92:fe:37:15:70:23:3f:ee: 0e:48:1b:bc:33:e1:ec:fa:a2:1b:67:30:b9:7e:80: 88:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6D:C7:91:8C:D6:2F:CD:71:F1:1E:16:28:25:88:40:89:DA:11:35 X509v3 Authority Key Identifier: keyid:DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:14:03:af:d4:2d:c6:42:c6:7a:2d:c9:17:e0:27:6f:d0:6e: fd:14:9a:0f:f9:2c:85:e4:44:48:3d:aa:96:51:e2:ca:98:84: 97:16:88:49:c2:a8:c0:08:73:84:6b:c2:42:84:2b:24:6d:27: db:60:88:7d:59:c7:2f:1e:49:5e:0f:d3:e9:dc:e6:cd:f8:b9: f7:7c:99:64:ed:5f:c4:b2:fb:23:59:60:3e:38:c2:06:5e:3d: 2a:b7:da:d8:64:ee:4b:a4:c9:4f:cd:cc:c4:9e:48:94:ce:d6: 2d:62:e3:08:c0:d4:0d:b0:06:ed:a6:97:a8:63:d2:32:29:01: 4a:bb:96:53:9a:5e:df:c0:c5:52:c5:5d:cb:a1:b8:9f:bb:3e: 3e:14:88:4b:23:f0:a0:d5:c3:c5:dc:e8:32:df:a9:ac:25:51: f6:75:ce:a7:f9:8f:c0:09:fd:4a:3e:72:06:7f:f5:a2:e9:d3: e8:16:b9:13:97:63:53:5e:6c:d3:5e:60:87:35:ff:bf:36:39: 49:e8:ca:6f:c5:d5:12:b7:eb:05:e8:fc:ff:37:00:22:44:f5: e3:25:7c:eb:8c:01:31:5d:d2:01:d7:f0:71:dc:1c:93:db:ee: 67:58:9b:f8:7f:c6:93:61:9a:7a:ca:d0:35:c3:2b:cb:e6:4d: 7f:c6:a2:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTfLX6frSwEL7QOBpaIqSit8PRtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEw RkM3QzBERjAeFw0yNjAzMjUxODA3MTRaFw0yNjAzMjkwNTQ3MTRaMDMxMTAvBgNV BAMTKDFDNkRDNzkxOENENjJGQ0Q3MUYxMUUxNjI4MjU4ODQwODlEQTExMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBogZZzM1BSK/3OELzB8wPz717 hDRAFbCnjfYH2UwYGrOG7ZOtwo4tqN1L/ZEeadpMWwUFuQ6FB1iXhEYvcfqm7kCY FwE1Gxd0ZtUh3r/BlNQV5EYabTlHvHIy2cE39iosPNSkK7WI9WfEeEGtxNtv3qIz No7Ye6K2knqeRSqwWRO3Ps5Lc5R3dQNe23w8sR7Jlk0momVdOD/h56YbPUxKy4Gh F4bGsuLk5xLGtPYOjp8yHuec1l1TokTflcfuIWal3lnVTvy4/oMWfURtOVq9uVpO CDO/NTWHmDd4jGEERzT35FgJUyiS/jcVcCM/7g5IG7wz4ez6ohtnMLl+gIiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHG3HkYzWL81x8R4WKCWIQInaETUwHwYDVR0j BBgwFoAU22qJgMUPIQyAQaIQEObb8Q/HwN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 M2IxNzg1Ny1iZTNkLTQxMzItOGYxOS0xMDgzNmY0MDg1NDYvMC9EQjZBODk4MEM1 MEYyMTBDODA0MUEyMTAxMEU2REJGMTBGQzdDMERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEwRkM3 QzBERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjNiMTc4NTctYmUzZC00MTMyLThm MTktMTA4MzZmNDA4NTQ2LzAvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRC RjEwRkM3QzBERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkUA6/ULcZCxnotyRfgJ2/Qbv0Umg/5LIXk REg9qpZR4sqYhJcWiEnCqMAIc4RrwkKEKyRtJ9tgiH1Zxy8eSV4P0+nc5s34ufd8 mWTtX8Sy+yNZYD44wgZePSq32thk7kukyU/NzMSeSJTO1i1i4wjA1A2wBu2ml6hj 0jIpAUq7llOaXt/AxVLFXcuhuJ+7Pj4UiEsj8KDVw8Xc6DLfqawlUfZ1zqf5j8AJ /Uo+cgZ/9aLp0+gWuROXY1NebNNeYIc1/782OUnoym/F1RK36wXo/P83ACJE9eMl fOuMATFd0gHX8HHcHJPb7mdYm/h/xpNhmnrK0DXDK8vmTX/GotM= -----END CERTIFICATE-----Generated at Thu Mar 26 16:53:35 2026 by rpki-client