$ rpki-client -vvf repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft File: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft (raw, json) Hash identifier: tYCmmBOuNi19bBRWn9yPpMVCCWvr8thCeY0nhm0j4Ks= Subject key identifier: 43:6C:42:25:2F:EF:B0:76:64:9D:71:70:87:ED:97:C8:7B:C1:B7:28 Authority key identifier: DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE Certificate issuer: /CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Certificate serial: 39E2FF4E69CF3A0A087D8BF81E1E31664892BD71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft Manifest number: BC Signing time: Sat 28 Feb 2026 09:31:55 +0000 Manifest this update: Sat 28 Feb 2026 09:26:55 +0000 Manifest next update: Tue 03 Mar 2026 15:34:55 +0000 Files and hashes: 1: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: GqPoKCikWixpTyaRkrl7PIpso4FRMb2kN+4gyGItvwo=) 2: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: 9p0fRZPTZcBitKDv/Ff3qr0g0F27xt5vAwhxIzmdswY=) 3: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl (hash: tNlMcAkNuXZF0MpikxSLDJPlQECGbhM3rWKLJqaNt0A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e2:ff:4e:69:cf:3a:0a:08:7d:8b:f8:1e:1e:31:66:48:92:bd:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Validity Not Before: Feb 28 09:26:55 2026 GMT Not After : Mar 3 15:34:55 2026 GMT Subject: CN=436C42252FEFB076649D717087ED97C87BC1B728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cf:42:da:4a:75:59:1d:ae:d5:b6:be:c7:da: c1:42:63:3c:9d:c4:30:7b:fc:94:37:09:35:00:c7: 6a:40:a9:67:44:5a:11:de:62:1d:ef:d3:7c:f8:9b: ca:67:f2:15:2e:5d:2e:34:72:9d:74:99:7c:b3:53: 31:23:6e:29:4b:68:23:6f:ff:b0:a0:30:44:7a:89: c6:60:0d:e2:0c:55:27:01:0d:17:0c:4f:44:bb:5e: 1e:1d:ab:64:69:77:c8:f2:99:1b:a5:52:b9:ff:b7: 9a:09:6f:ae:cf:7a:c5:aa:45:95:0e:86:86:29:94: 7a:6d:63:a1:14:2f:0a:f2:37:0f:e3:2e:1b:32:5f: 2c:26:06:79:aa:4b:a1:90:31:51:58:98:f2:16:99: d8:89:89:13:e0:d7:53:9d:f1:e9:08:e9:a6:24:9c: 29:f0:dc:c1:24:6e:c5:cd:c5:c5:54:92:0e:ca:25: f2:12:2e:54:ee:ad:c8:43:3b:c3:72:04:68:bd:cb: 67:9e:5d:22:a6:22:84:71:bc:09:6b:0d:c8:3a:0e: 05:f1:35:fe:c6:92:53:c4:a2:96:50:f9:89:a4:5e: 00:f0:eb:36:22:96:4e:38:41:62:fd:fe:d1:7f:f8: ba:94:6f:27:d9:45:24:2e:70:7d:15:49:47:ec:8a: ce:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6C:42:25:2F:EF:B0:76:64:9D:71:70:87:ED:97:C8:7B:C1:B7:28 X509v3 Authority Key Identifier: keyid:DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:75:15:58:8c:e1:2d:82:69:be:a2:5a:99:94:35:66:72:f5: be:cf:ec:d9:f5:61:cc:4b:4f:72:cb:6d:27:0f:22:9c:8d:20: 0a:95:1b:7f:44:8b:b6:62:a2:1b:9e:2d:22:fe:04:f9:1b:73: ff:e7:bf:e8:c8:8e:0a:6e:3f:58:11:99:ef:68:ca:77:88:78: 19:1d:e4:64:75:28:40:6e:3c:94:4b:70:b3:8f:c3:0f:f8:4c: a4:e3:aa:07:84:7e:54:90:04:21:58:f4:b6:bc:07:61:3c:11: 52:f2:ca:da:b1:64:e3:78:d9:05:43:24:3d:9b:b0:fe:2f:27: 67:3b:05:12:57:bd:11:cc:8b:45:69:ba:f2:ed:0c:eb:72:85: 44:f3:58:86:e4:e1:49:7a:13:06:89:d9:52:ae:5c:7d:26:ff: b2:2e:fa:c3:2b:c0:cd:66:bf:c8:3a:55:c6:2a:60:bf:14:66: 56:03:d0:d2:d6:af:5b:87:13:2e:5f:c7:d3:e7:32:16:d5:5b: 4f:ba:5f:86:6d:5c:5b:6e:d7:56:4c:b9:ff:aa:1d:9c:ba:b0: eb:11:fb:d4:72:3e:00:50:21:05:df:1a:f7:30:e7:a8:a9:95: 4b:e5:f6:ba:12:38:2a:34:43:69:97:31:44:9d:33:4e:cd:4b: b4:66:09:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOeL/TmnPOgoIfYv4Hh4xZkiSvXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5 NTFCNkNFRTAeFw0yNjAyMjgwOTI2NTVaFw0yNjAzMDMxNTM0NTVaMDMxMTAvBgNV BAMTKDQzNkM0MjI1MkZFRkIwNzY2NDlENzE3MDg3RUQ5N0M4N0JDMUI3MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFz0LaSnVZHa7Vtr7H2sFCYzyd xDB7/JQ3CTUAx2pAqWdEWhHeYh3v03z4m8pn8hUuXS40cp10mXyzUzEjbilLaCNv /7CgMER6icZgDeIMVScBDRcMT0S7Xh4dq2Rpd8jymRulUrn/t5oJb67PesWqRZUO hoYplHptY6EULwryNw/jLhsyXywmBnmqS6GQMVFYmPIWmdiJiRPg11Od8ekI6aYk nCnw3MEkbsXNxcVUkg7KJfISLlTurchDO8NyBGi9y2eeXSKmIoRxvAlrDcg6DgXx Nf7GklPEopZQ+YmkXgDw6zYilk44QWL9/tF/+LqUbyfZRSQucH0VSUfsis7jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ2xCJS/vsHZknXFwh+2XyHvBtygwHwYDVR0j BBgwFoAU2/cdb4wkvbgNaSvobW9605UbbO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJjYWUzZi1iMzI5LTQ0MWItOTdmYy01YmI5ZmNjMDUxZDIvMC9EQkY3MUQ2RjhD MjRCREI4MEQ2OTJCRTg2RDZGN0FEMzk1MUI2Q0VFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5NTFC NkNFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdB RDM5NTFCNkNFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHd1FViM4S2Cab6iWpmUNWZy9b7P7Nn1YcxL T3LLbScPIpyNIAqVG39Ei7ZiohueLSL+BPkbc//nv+jIjgpuP1gRme9oyneIeBkd 5GR1KEBuPJRLcLOPww/4TKTjqgeEflSQBCFY9La8B2E8EVLyytqxZON42QVDJD2b sP4vJ2c7BRJXvRHMi0VpuvLtDOtyhUTzWIbk4Ul6EwaJ2VKuXH0m/7Iu+sMrwM1m v8g6VcYqYL8UZlYD0NLWr1uHEy5fx9PnMhbVW0+6X4ZtXFtu11ZMuf+qHZy6sOsR +9RyPgBQIQXfGvcw56iplUvl9roSOCo0Q2mXMUSdM07NS7RmCbs= -----END CERTIFICATE-----Generated at Mon Mar 2 03:51:28 2026 by rpki-client