$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json) Hash identifier: WfVLs527ctWIHZFROlEW634zpamdbNM85jW+Jm1x1J8= Subject key identifier: 82:3E:F8:CA:4A:AF:AB:31:AF:46:E2:3E:EE:43:74:D4:78:29:BD:2F Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Certificate serial: 40C89B7CCFBF9AF4BD8BC0D0C34855D08E750392 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft Manifest number: 0560 Signing time: Tue 24 Mar 2026 12:51:49 +0000 Manifest this update: Tue 24 Mar 2026 12:46:49 +0000 Manifest next update: Fri 27 Mar 2026 13:48:49 +0000 Files and hashes: 1: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: iDwSin9srOGKT5atOmt0iLuShHzndQDwuU2x/RU2cYM=) 2: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: SgJaLekQ3Q9cVNBqu5Sas48wyzpxdaLZB6LIMnNqJ+c=) 3: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 7MfETz0OOU0/EW0Af0KTT2gYnfzpkWj/UcRR+LXANfU=) 4: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: yangIWxRfp5g4q3g5tzxpJf4/ZTvbChL+OGjEKq0xNw=) 5: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: vyMAjCFe632ry0DDc/KoNke5hOBeIQFqxCycXDjRNwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c8:9b:7c:cf:bf:9a:f4:bd:8b:c0:d0:c3:48:55:d0:8e:75:03:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Validity Not Before: Mar 24 12:46:49 2026 GMT Not After : Mar 27 13:48:49 2026 GMT Subject: CN=823EF8CA4AAFAB31AF46E23EEE4374D47829BD2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:ea:c0:bd:c7:96:38:f6:33:c0:c6:71:df: e1:dc:87:4b:8b:f6:0b:30:53:76:26:d1:ce:9e:8b: 51:65:e8:a3:dc:da:ca:a1:a7:1f:d6:3b:f9:6b:05: 0a:ee:f0:ce:dd:31:e0:fc:a6:80:54:30:f7:9e:bc: ca:ca:4b:2b:8e:51:fc:39:58:b0:9e:ce:e7:83:9f: 67:4c:ec:aa:19:3c:99:d6:e3:66:50:3d:eb:8a:2b: 81:13:3f:49:db:c4:54:3e:f1:28:6e:ce:74:aa:1e: 2f:57:9f:1a:5b:3f:7e:42:a9:8b:9f:3d:e5:dd:ba: e2:2d:f6:86:26:4e:8f:62:2b:3a:d0:84:fd:98:0c: 83:bf:13:aa:c9:35:7b:69:c5:99:72:37:c7:b8:2e: c5:72:89:46:52:47:ef:db:49:ec:91:dc:f6:92:f1: 76:4f:1d:97:32:06:a4:e8:37:db:7d:13:9d:47:89: b2:0d:16:da:fa:02:3b:af:41:12:6c:06:a5:e4:18: 6e:d1:45:8e:29:9e:c4:8b:9e:d3:67:54:2d:a8:f9: 52:42:cc:9a:38:31:8b:a7:16:3a:69:e1:49:52:f4: 1e:16:2f:59:76:2d:cb:35:0c:de:09:b8:1e:df:5f: e3:73:1e:88:59:09:15:39:a8:85:f8:bf:65:9e:f0: 9b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3E:F8:CA:4A:AF:AB:31:AF:46:E2:3E:EE:43:74:D4:78:29:BD:2F X509v3 Authority Key Identifier: keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:f7:0c:bf:35:98:5b:20:d6:94:42:86:55:97:0c:6e:3e:f7: 96:24:02:55:16:bc:8c:7e:19:ed:bf:d4:f5:18:55:25:a7:8b: 72:b9:e5:d4:b9:4d:08:b3:3b:47:9f:f6:d4:17:49:e6:a8:70: 78:94:81:75:27:21:24:a4:7e:e2:6c:4a:42:f4:5d:f7:af:38: 8d:a1:c7:42:fa:a5:2e:1e:97:43:5c:0b:8a:ab:f5:d8:a2:c2: 48:b5:9b:a1:96:81:9c:9c:84:88:5f:62:e3:25:b0:54:b8:58: 05:05:dd:09:b5:ec:72:cc:c7:4b:9c:74:65:9a:22:cb:f5:a5: c5:ea:7b:5c:c2:66:f7:b5:d4:b8:cd:50:79:7e:8b:42:ee:18: 9c:8b:ae:c0:6a:9e:a5:4e:42:5b:05:3a:ba:5f:3f:a9:7b:4e: d4:0a:f0:8f:e8:c4:b0:6e:d6:67:d6:2c:8e:ae:26:e0:dd:dd: d7:5f:48:06:38:12:fb:68:27:e0:88:fb:51:cc:81:ca:da:eb: 0c:ae:92:a4:51:3d:1b:5c:33:8f:93:fd:57:f0:ec:00:4d:33: ed:39:bf:fa:3d:a3:62:de:22:24:50:fd:eb:75:08:6c:c3:1b: 25:35:e5:b7:46:fb:bd:d9:de:9d:38:70:73:e3:ef:ed:3d:9e: ae:8e:b9:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQMibfM+/mvS9i8DQw0hV0I51A5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy REMyRDdGMzAeFw0yNjAzMjQxMjQ2NDlaFw0yNjAzMjcxMzQ4NDlaMDMxMTAvBgNV BAMTKDgyM0VGOENBNEFBRkFCMzFBRjQ2RTIzRUVFNDM3NEQ0NzgyOUJEMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd7+rAvceWOPYzwMZx3+Hch0uL 9gswU3Ym0c6ei1Fl6KPc2sqhpx/WO/lrBQru8M7dMeD8poBUMPeevMrKSyuOUfw5 WLCezueDn2dM7KoZPJnW42ZQPeuKK4ETP0nbxFQ+8ShuznSqHi9XnxpbP35CqYuf PeXduuIt9oYmTo9iKzrQhP2YDIO/E6rJNXtpxZlyN8e4LsVyiUZSR+/bSeyR3PaS 8XZPHZcyBqToN9t9E51HibINFtr6AjuvQRJsBqXkGG7RRY4pnsSLntNnVC2o+VJC zJo4MYunFjpp4UlS9B4WL1l2Lcs1DN4JuB7fX+NzHohZCRU5qIX4v2We8JtbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgj74ykqvqzGvRuI+7kN01HgpvS8wHwYDVR0j BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy RDdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3 OUQyREMyRDdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABj3DL81mFsg1pRChlWXDG4+95YkAlUWvIx+ Ge2/1PUYVSWni3K55dS5TQizO0ef9tQXSeaocHiUgXUnISSkfuJsSkL0XfevOI2h x0L6pS4el0NcC4qr9diiwki1m6GWgZychIhfYuMlsFS4WAUF3Qm17HLMx0ucdGWa Isv1pcXqe1zCZve11LjNUHl+i0LuGJyLrsBqnqVOQlsFOrpfP6l7TtQK8I/oxLBu 1mfWLI6uJuDd3ddfSAY4EvtoJ+CI+1HMgcra6wyukqRRPRtcM4+T/Vfw7ABNM+05 v/o9o2LeIiRQ/et1CGzDGyU15bdG+73Z3p04cHPj7+09nq6OubI= -----END CERTIFICATE-----Generated at Thu Mar 26 11:31:07 2026 by rpki-client