$ rpki-client -vvf repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft File: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft (raw, json) Hash identifier: XwL06CEkTnVxTCW68eJ3sdO4fpqk0DbvDhwxb7uCW8Q= Subject key identifier: 19:1B:25:C8:51:4B:9F:9D:1B:2A:99:7F:5D:05:25:6A:78:43:CD:F3 Authority key identifier: DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE Certificate issuer: /CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Certificate serial: 037084ED9D39E82B3A3CE664A454457F7B5585F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft Manifest number: D2 Signing time: Sat 18 Apr 2026 19:42:02 +0000 Manifest this update: Sat 18 Apr 2026 19:37:02 +0000 Manifest next update: Wed 22 Apr 2026 05:10:02 +0000 Files and hashes: 1: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: GqPoKCikWixpTyaRkrl7PIpso4FRMb2kN+4gyGItvwo=) 2: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl (hash: a+Dw95V//AYb3M7mC4WhfBq0J+Oz02EvHH0OSbnsrlg=) 3: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: 9p0fRZPTZcBitKDv/Ff3qr0g0F27xt5vAwhxIzmdswY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 05:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:70:84:ed:9d:39:e8:2b:3a:3c:e6:64:a4:54:45:7f:7b:55:85:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Validity Not Before: Apr 18 19:37:02 2026 GMT Not After : Apr 22 05:10:02 2026 GMT Subject: CN=191B25C8514B9F9D1B2A997F5D05256A7843CDF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d5:6e:f9:e9:7f:28:47:44:ce:8d:1c:cd:26: 2b:96:67:1e:01:ec:e8:af:f7:82:ce:df:77:8f:78: 30:74:4c:e2:08:30:25:cb:70:9a:f0:a8:0d:59:e6: ee:13:97:b4:9e:e4:4b:11:24:07:27:d6:e9:47:d1: f1:09:02:9b:59:08:b2:7e:77:8d:cb:e6:8a:ed:47: c0:20:7d:b9:bf:21:c7:e6:49:76:c9:2a:ca:50:ec: 32:9c:7f:96:f3:c2:07:0e:2b:41:e4:20:cb:c1:2b: 3f:ad:61:f5:55:45:37:a2:ec:0f:66:52:2b:6a:50: 5c:f7:e3:e9:7d:91:07:6e:95:28:53:9c:40:bd:52: f3:83:b1:29:df:31:1a:8e:9b:1a:38:07:6e:ba:0f: 38:cd:86:be:23:25:b9:87:56:24:33:7e:2f:f9:8e: 96:9c:ce:26:d3:43:0d:90:94:56:50:e9:b2:61:25: c8:11:f0:01:a7:53:e6:85:f2:b1:3e:aa:b1:c0:39: 20:01:fa:43:9b:62:a2:96:dd:3d:22:b1:08:90:f1: cb:bb:27:71:a9:da:46:6d:81:a9:40:e7:79:93:2c: da:b0:e4:06:77:7e:d8:a1:38:08:38:94:dd:75:6a: f5:f9:f7:a3:82:2e:fb:dd:3a:d8:9d:85:b9:8e:f6: 81:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1B:25:C8:51:4B:9F:9D:1B:2A:99:7F:5D:05:25:6A:78:43:CD:F3 X509v3 Authority Key Identifier: keyid:DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c3:12:3f:79:d4:05:ac:0f:05:ad:61:b0:6d:14:aa:d3:d0: a6:9b:de:bc:33:31:d5:69:9e:72:e3:f4:33:67:e9:0f:eb:b5: 63:c2:60:d1:96:e8:5a:55:27:1b:f6:00:1a:88:1c:83:92:51: 57:61:91:9a:9a:59:0d:62:b5:53:7e:ce:c6:f9:7b:db:65:40: 14:20:c3:52:eb:d4:d0:2c:5f:79:57:5e:96:23:a7:9e:c7:a6: 68:73:13:40:9c:5e:28:96:5f:23:7e:84:91:30:75:17:6c:c1: b9:81:7e:c4:71:18:26:53:97:bd:f2:aa:52:7f:9f:ca:4e:ca: 0a:5a:6e:0b:59:f2:95:ba:a2:8f:bb:2b:0b:07:d2:d1:6c:05: b7:a6:cc:d6:01:4b:64:17:b0:51:78:e9:fb:50:3d:e3:5d:71: bb:d8:2a:9a:84:26:cd:17:91:ec:45:30:05:43:c7:3e:c6:1f: 04:2c:02:8f:de:65:fb:42:d4:b5:5d:2e:29:f5:e9:3c:50:6f: e5:80:45:29:ab:bb:c9:9f:4b:7a:9f:ab:e4:56:56:70:cc:b0: b8:84:f6:0c:a6:a7:76:57:e5:c5:20:f9:f7:b8:58:df:26:40: 8d:ad:d4:2b:51:24:97:5c:a6:71:d5:86:88:43:38:c9:bd:00: ad:af:da:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA3CE7Z056Cs6POZkpFRFf3tVhfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5 NTFCNkNFRTAeFw0yNjA0MTgxOTM3MDJaFw0yNjA0MjIwNTEwMDJaMDMxMTAvBgNV BAMTKDE5MUIyNUM4NTE0QjlGOUQxQjJBOTk3RjVEMDUyNTZBNzg0M0NERjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf1W756X8oR0TOjRzNJiuWZx4B 7Oiv94LO33ePeDB0TOIIMCXLcJrwqA1Z5u4Tl7Se5EsRJAcn1ulH0fEJAptZCLJ+ d43L5ortR8Agfbm/IcfmSXbJKspQ7DKcf5bzwgcOK0HkIMvBKz+tYfVVRTei7A9m UitqUFz34+l9kQdulShTnEC9UvODsSnfMRqOmxo4B266DzjNhr4jJbmHViQzfi/5 jpaczibTQw2QlFZQ6bJhJcgR8AGnU+aF8rE+qrHAOSAB+kObYqKW3T0isQiQ8cu7 J3Gp2kZtgalA53mTLNqw5AZ3ftihOAg4lN11avX596OCLvvdOtidhbmO9oENAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGRslyFFLn50bKpl/XQUlanhDzfMwHwYDVR0j BBgwFoAU2/cdb4wkvbgNaSvobW9605UbbO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJjYWUzZi1iMzI5LTQ0MWItOTdmYy01YmI5ZmNjMDUxZDIvMC9EQkY3MUQ2RjhD MjRCREI4MEQ2OTJCRTg2RDZGN0FEMzk1MUI2Q0VFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5NTFC NkNFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdB RDM5NTFCNkNFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfDEj951AWsDwWtYbBtFKrT0Kab3rwzMdVp nnLj9DNn6Q/rtWPCYNGW6FpVJxv2ABqIHIOSUVdhkZqaWQ1itVN+zsb5e9tlQBQg w1Lr1NAsX3lXXpYjp57HpmhzE0CcXiiWXyN+hJEwdRdswbmBfsRxGCZTl73yqlJ/ n8pOygpabgtZ8pW6oo+7KwsH0tFsBbemzNYBS2QXsFF46ftQPeNdcbvYKpqEJs0X kexFMAVDxz7GHwQsAo/eZftC1LVdLin16TxQb+WARSmru8mfS3qfq+RWVnDMsLiE 9gymp3ZX5cUg+fe4WN8mQI2t1CtRJJdcpnHVhohDOMm9AK2v2gU= -----END CERTIFICATE-----Generated at Sun Apr 19 12:58:19 2026 by rpki-client