$ rpki-client -vvf repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft File: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft (raw, json) Hash identifier: RhE1BBPIB0exIWJlkhz6ePFjBE6G++3TJCEcZov06Ao= Subject key identifier: 69:3C:58:9B:84:AC:EC:6C:A4:9B:9E:04:3A:62:12:8D:B4:F8:32:E8 Authority key identifier: DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E Certificate issuer: /CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Certificate serial: 34A0258CABA352A07B5E41013F4F156FA764BD5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft Manifest number: 055B Signing time: Wed 25 Mar 2026 12:21:39 +0000 Manifest this update: Wed 25 Mar 2026 12:16:39 +0000 Manifest next update: Sat 28 Mar 2026 21:17:39 +0000 Files and hashes: 1: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl (hash: /xkAk2EeAwqpemjgUyZwaaD3ngB64wRWkYeK/93FzJo=) 2: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: 6nfQfvYHsKjsaw/P97GpMinNY5TWkRYJKWFHck6y3/Q=) 3: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: obl90Ju8Uh49WHiF5evmIzEfZW09mIiXbUTRedxtitw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a0:25:8c:ab:a3:52:a0:7b:5e:41:01:3f:4f:15:6f:a7:64:bd:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Validity Not Before: Mar 25 12:16:39 2026 GMT Not After : Mar 28 21:17:39 2026 GMT Subject: CN=693C589B84ACEC6CA49B9E043A62128DB4F832E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:54:79:c9:12:69:60:db:b6:3b:80:70:06: f1:8d:ae:53:5f:ad:db:c6:cc:b2:e1:66:38:c3:72: cf:42:f7:1f:0d:53:25:17:18:cb:a2:78:8c:fc:be: 56:7b:4c:3d:c0:bb:5a:3f:2f:0d:d7:92:68:34:9b: 5e:d2:fd:39:8c:e1:0b:e7:0f:d3:65:22:55:52:d2: d4:93:50:98:12:9e:d4:46:24:81:1f:23:18:6d:3c: 46:26:05:e6:7c:31:fb:96:4a:e8:03:83:79:90:c5: 09:e1:ce:3d:d6:d7:3b:f1:89:be:b8:24:4f:f1:c6: ad:11:2b:0c:87:59:4a:9d:89:70:bb:10:f2:f3:e3: 0f:66:8f:e9:fa:91:46:48:06:93:30:d2:aa:08:d3: a6:ec:b0:4a:43:e4:04:e3:d3:c9:3d:03:d5:87:de: a6:9f:d1:15:e2:82:d7:0b:48:15:1b:93:4c:ac:d5: 63:14:72:1d:2f:19:87:48:24:e0:26:48:ac:40:31: d2:0a:ef:08:f8:67:94:f8:2a:f7:da:b3:7e:f6:8a: 47:a4:8c:cf:68:30:48:f6:1e:4b:83:55:25:e7:8f: e0:b7:df:94:1c:56:be:5d:05:b6:d7:03:ec:64:8d: 75:08:03:d6:4c:22:cc:24:5d:b0:bb:9f:b3:09:4b: 12:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3C:58:9B:84:AC:EC:6C:A4:9B:9E:04:3A:62:12:8D:B4:F8:32:E8 X509v3 Authority Key Identifier: keyid:DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:60:5b:ea:17:e2:df:f8:bc:16:28:bd:2e:95:bf:ff:60:78: ef:79:95:9a:2d:13:80:cc:d8:67:18:63:63:b4:69:15:3d:65: 06:4d:9e:1f:40:cd:2e:9b:e6:41:28:43:a2:50:a5:fe:28:32: f0:e9:10:12:27:58:75:45:f4:2a:5a:4a:c1:5d:08:08:09:76: 4a:9a:47:17:db:c5:61:25:3c:82:22:03:9c:38:e5:cf:8f:7d: de:2e:c0:48:ae:00:0d:7f:82:f1:82:be:0c:cd:32:a2:52:fb: 7f:d1:72:7c:97:d9:ee:31:e8:fc:73:60:7d:c9:18:55:f6:01: ff:1d:01:b2:d8:b1:df:d2:b7:33:51:03:c6:26:37:1b:ee:78: 6e:22:97:54:b2:7f:07:12:f6:1c:07:c9:e3:19:74:e6:27:9d: f9:aa:94:82:7f:75:54:6f:b7:8a:f6:a7:3b:11:09:d9:6c:b8: dd:72:05:0f:69:5b:9d:9f:b4:1b:4d:2f:bc:e3:8c:2f:d7:d3: 82:2c:5b:40:5f:e8:85:40:aa:ac:b5:72:ab:a4:1b:cb:c3:91: 9c:5a:2f:3b:72:b5:12:bb:29:f9:9e:e2:c9:c3:8c:bd:29:ac: f2:30:86:d7:8f:90:22:66:3c:d8:8b:53:29:17:4e:78:d4:90: 32:87:f6:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNKAljKujUqB7XkEBP08Vb6dkvV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMw MkVBN0Q5RTAeFw0yNjAzMjUxMjE2MzlaFw0yNjAzMjgyMTE3MzlaMDMxMTAvBgNV BAMTKDY5M0M1ODlCODRBQ0VDNkNBNDlCOUUwNDNBNjIxMjhEQjRGODMyRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAwFR5yRJpYNu2O4BwBvGNrlNf rdvGzLLhZjjDcs9C9x8NUyUXGMuieIz8vlZ7TD3Au1o/Lw3Xkmg0m17S/TmM4Qvn D9NlIlVS0tSTUJgSntRGJIEfIxhtPEYmBeZ8MfuWSugDg3mQxQnhzj3W1zvxib64 JE/xxq0RKwyHWUqdiXC7EPLz4w9mj+n6kUZIBpMw0qoI06bssEpD5ATj08k9A9WH 3qaf0RXigtcLSBUbk0ys1WMUch0vGYdIJOAmSKxAMdIK7wj4Z5T4Kvfas372ikek jM9oMEj2HkuDVSXnj+C335QcVr5dBbbXA+xkjXUIA9ZMIswkXbC7n7MJSxLbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaTxYm4Ss7Gykm54EOmISjbT4MugwHwYDVR0j BBgwFoAU2+kVYOvljzHwH1Q9dRsD/ALqfZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzI4Yzc3Yi0yMTAwLTRmMmEtOTBkOS0wOGM1M2U4NDFlMWIvMC9EQkU5MTU2MEVC RTU4RjMxRjAxRjU0M0Q3NTFCMDNGQzAyRUE3RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMwMkVB N0Q5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjcyOGM3N2ItMjEwMC00ZjJhLTkw ZDktMDhjNTNlODQxZTFiLzAvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAz RkMwMkVBN0Q5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhgW+oX4t/4vBYovS6Vv/9geO95lZotE4DM 2GcYY2O0aRU9ZQZNnh9AzS6b5kEoQ6JQpf4oMvDpEBInWHVF9CpaSsFdCAgJdkqa RxfbxWElPIIiA5w45c+Pfd4uwEiuAA1/gvGCvgzNMqJS+3/RcnyX2e4x6PxzYH3J GFX2Af8dAbLYsd/StzNRA8YmNxvueG4il1SyfwcS9hwHyeMZdOYnnfmqlIJ/dVRv t4r2pzsRCdlsuN1yBQ9pW52ftBtNL7zjjC/X04IsW0Bf6IVAqqy1cqukG8vDkZxa LztytRK7Kfme4snDjL0prPIwhtePkCJmPNiLUykXTnjUkDKH9uM= -----END CERTIFICATE-----Generated at Thu Mar 26 12:07:25 2026 by rpki-client