$ rpki-client -vvf repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft File: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft (raw, json) Hash identifier: xVzh59b2vE6tgK/UUNmXR+F9LFfLbKH9Cf8i4aeBlv0= Subject key identifier: 0E:8B:02:49:D1:1E:79:4B:7E:D9:94:52:93:9F:4E:05:74:69:F6:8C Authority key identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 Certificate issuer: /CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Certificate serial: 0B1FDF09EC9DAAD768CA9C3DFE4141169691BB42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft Manifest number: 013C Signing time: Tue 24 Mar 2026 15:40:41 +0000 Manifest this update: Tue 24 Mar 2026 15:35:41 +0000 Manifest next update: Fri 27 Mar 2026 16:45:41 +0000 Files and hashes: 1: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl (hash: 6Ia4Lk0qUE4VfLgCtwK4kmVTTKYdEtgGEg11X1gg+ng=) 2: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: 21V3VhnP5vTGuoZJBlAnPnSOpi0hh8WGXahM4wGxnKo=) 3: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: C39+1H0Bi9PjQOJYBQUdIEuPft+etivv7dszlwc93Yw=) 4: 323430343a653730303a3a2f33322d3438203d3e20313331373238.roa (hash: +/N3DsGhdJUZyRGC4N9f9R2ZbeB7qPD2DAQ97WyJYBk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:1f:df:09:ec:9d:aa:d7:68:ca:9c:3d:fe:41:41:16:96:91:bb:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Validity Not Before: Mar 24 15:35:41 2026 GMT Not After : Mar 27 16:45:41 2026 GMT Subject: CN=0E8B0249D11E794B7ED99452939F4E057469F68C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5e:20:5e:7d:ef:f6:1f:2b:f0:b1:b4:69:fc: 98:e9:0a:f3:0c:d3:98:ab:8b:8f:95:9b:e5:23:37: 99:9f:9a:e0:18:e4:b3:71:dd:a4:63:81:47:5b:e2: 37:75:3c:fe:03:aa:37:3d:98:1e:38:48:06:9b:c6: 84:c1:d2:e5:86:56:4c:a3:e8:4f:2b:ca:bc:d2:0c: fa:4c:a7:20:82:53:68:cb:b4:0c:a1:e5:9d:ba:f4: 6b:1b:9b:d0:c3:79:c9:91:0d:8c:cf:23:51:d9:9d: bb:95:bb:20:6a:29:b5:91:21:b2:b4:26:e5:65:90: 5e:ea:7b:d1:5e:33:52:aa:da:1e:b9:53:9d:a0:08: da:35:5f:2e:8f:4f:9a:67:f1:80:57:17:dc:60:cf: 9e:ba:b2:5e:7d:98:5a:0b:49:b3:9e:a2:7a:20:ec: cb:53:39:10:d5:0d:0b:f9:8c:68:fc:7f:ed:af:fe: d6:e2:70:1e:ba:0b:82:7d:1d:dd:41:60:25:6d:89: 02:69:9d:8a:e0:87:92:75:79:b5:7f:5d:2d:aa:0c: d6:99:43:b6:3e:ca:ef:51:40:89:63:84:57:cf:f5: 5a:98:f8:ee:53:78:b4:4b:7b:70:f5:d8:a0:61:fc: d3:88:ab:92:6e:ac:53:cf:02:4f:e6:02:0b:5c:38: 7d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8B:02:49:D1:1E:79:4B:7E:D9:94:52:93:9F:4E:05:74:69:F6:8C X509v3 Authority Key Identifier: keyid:DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:53:31:f9:26:e1:5f:b5:79:66:f3:8e:b0:db:83:93:ba:e6: ba:f8:24:b8:3f:54:81:85:4c:7c:30:1b:c9:52:7c:fc:68:e5: 0f:de:b0:34:c1:06:85:c8:67:de:ff:4a:eb:34:9e:b9:c9:bc: 2d:20:28:de:ec:a6:c9:a7:ac:3d:95:1d:a9:9e:38:d6:e1:42: 2d:e2:5f:a3:d6:0e:41:d4:4e:15:d2:b7:99:88:d5:ef:64:06: a6:9f:3b:86:0d:5f:8e:c5:bf:32:e3:1c:b0:7f:38:21:c3:9e: 94:d9:ca:27:a6:63:18:83:32:26:4a:88:88:6c:dd:38:b3:91: 93:1d:80:ce:50:70:5a:aa:88:03:6b:62:2c:1f:52:dd:ac:da: 1b:f0:56:f0:25:4f:44:af:1e:00:29:65:04:5f:b9:bb:07:95: f1:90:d7:aa:e5:3e:07:09:0d:56:63:c9:6f:39:e2:48:c0:05: 41:64:43:06:d1:d5:6e:be:f7:d9:94:7b:7c:9d:4e:46:71:f6: 08:59:93:bd:2c:34:79:de:c7:ce:41:a6:4d:61:69:38:4e:34: 02:50:d8:3a:f6:ba:f3:f8:c8:4d:f4:1a:d7:ba:52:ab:c6:bf: 6b:d9:f7:1f:f0:68:d6:03:da:4f:5a:18:9e:19:00:6d:b9:25: 45:ad:b5:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCx/fCeydqtdoypw9/kFBFpaRu0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFC OTU4RTRDNDAeFw0yNjAzMjQxNTM1NDFaFw0yNjAzMjcxNjQ1NDFaMDMxMTAvBgNV BAMTKDBFOEIwMjQ5RDExRTc5NEI3RUQ5OTQ1MjkzOUY0RTA1NzQ2OUY2OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkXiBefe/2HyvwsbRp/JjpCvMM 05iri4+Vm+UjN5mfmuAY5LNx3aRjgUdb4jd1PP4Dqjc9mB44SAabxoTB0uWGVkyj 6E8ryrzSDPpMpyCCU2jLtAyh5Z269Gsbm9DDecmRDYzPI1HZnbuVuyBqKbWRIbK0 JuVlkF7qe9FeM1Kq2h65U52gCNo1Xy6PT5pn8YBXF9xgz566sl59mFoLSbOeonog 7MtTORDVDQv5jGj8f+2v/tbicB66C4J9Hd1BYCVtiQJpnYrgh5J1ebV/XS2qDNaZ Q7Y+yu9RQIljhFfP9VqY+O5TeLRLe3D12KBh/NOIq5JurFPPAk/mAgtcOH0zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDosCSdEeeUt+2ZRSk59OBXRp9owwHwYDVR0j BBgwFoAU23JerC3R5it6AsVKYY16AblY5MQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDE1YTg1NS1iMjljLTQ1MDItYWY4MS1jYmI4YjRmN2YwZjcvMC9EQjcyNUVBQzJE RDFFNjJCN0EwMkM1NEE2MThEN0EwMUI5NThFNEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFCOTU4 RTRDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdB MDFCOTU4RTRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdTMfkm4V+1eWbzjrDbg5O65rr4JLg/VIGF THwwG8lSfPxo5Q/esDTBBoXIZ97/Sus0nrnJvC0gKN7spsmnrD2VHameONbhQi3i X6PWDkHUThXSt5mI1e9kBqafO4YNX47FvzLjHLB/OCHDnpTZyiemYxiDMiZKiIhs 3TizkZMdgM5QcFqqiANrYiwfUt2s2hvwVvAlT0SvHgApZQRfubsHlfGQ16rlPgcJ DVZjyW854kjABUFkQwbR1W6+99mUe3ydTkZx9ghZk70sNHnex85Bpk1haThONAJQ 2Dr2uvP4yE30Gte6UqvGv2vZ9x/waNYD2k9aGJ4ZAG25JUWttT0= -----END CERTIFICATE-----Generated at Thu Mar 26 13:09:37 2026 by rpki-client