$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json) Hash identifier: MUgYT5l1YBjytu79VK0Hes3EDMgbQqaxG6nuxJqEaNI= Subject key identifier: 4F:81:2C:26:13:B9:34:D7:46:45:7F:06:6B:16:26:A7:CB:10:EB:DB Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 Certificate issuer: /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Certificate serial: 4B392BB281F46FE2D1309A5AFF597B07290534A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft Manifest number: 01CC Signing time: Wed 15 Apr 2026 21:10:42 +0000 Manifest this update: Wed 15 Apr 2026 21:05:42 +0000 Manifest next update: Sun 19 Apr 2026 03:21:42 +0000 Files and hashes: 1: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: I4l/5SCvPUNR67QS1t6ivbuG/9/G8qw6kcnDyGPuHJY=) 2: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: iDYTU8sInhGMWLkmMTxP14w0JJH1YEmH18o8H1hJaRQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 03:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:39:2b:b2:81:f4:6f:e2:d1:30:9a:5a:ff:59:7b:07:29:05:34:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Validity Not Before: Apr 15 21:05:42 2026 GMT Not After : Apr 19 03:21:42 2026 GMT Subject: CN=4F812C2613B934D746457F066B1626A7CB10EBDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ec:ca:6e:a4:71:0d:71:45:39:c7:ef:a3:3b: 90:ea:6a:f0:67:eb:fd:0c:7f:ae:a7:bd:99:00:bf: c7:fe:16:b8:ac:a3:2b:5c:3d:6c:16:a7:c6:f1:0f: dc:ed:11:e6:e0:7c:fa:68:d7:87:01:e0:57:80:43: 00:26:7a:0b:56:df:b5:c9:3b:03:76:86:55:f3:f6: b9:b0:69:61:ab:5c:a4:36:0e:33:48:b7:63:47:9a: 83:85:61:78:23:d6:c2:fb:b5:fe:55:b3:ad:96:22: 26:d1:c3:a9:c3:1b:dc:9a:5b:c4:ec:84:d7:06:5c: c1:b3:64:46:6c:62:f1:cf:c7:72:4b:25:a7:09:7e: 46:57:be:65:9a:82:a5:10:2d:dd:ca:ec:3d:5e:1f: 05:81:1e:89:26:43:40:05:8b:8d:11:92:9f:a2:51: d3:e5:e5:40:08:af:7f:6e:a9:60:e3:1a:a0:29:ec: 54:2c:19:65:08:a8:6c:0b:e8:f5:83:94:ea:a7:d9: 1c:6b:3e:0c:10:22:94:82:ef:f9:76:e9:5d:d8:ed: 59:75:4d:74:f6:b0:a3:f4:fd:36:4d:51:af:43:35: bc:fd:37:b1:a3:40:e3:ad:90:3f:b9:a6:a0:aa:ed: a5:6b:fe:8e:48:09:28:3c:96:56:9a:f3:ad:83:0c: 35:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:81:2C:26:13:B9:34:D7:46:45:7F:06:6B:16:26:A7:CB:10:EB:DB X509v3 Authority Key Identifier: keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:4e:51:2d:18:76:92:a7:ef:94:23:9a:c0:ae:fb:81:f0:f8: 96:b1:3d:e0:a5:21:a4:68:a1:9f:9c:17:9e:a9:33:b8:7c:6b: cf:8a:d5:a5:cd:18:c3:5a:b2:96:1f:c5:14:8f:1e:81:c3:c8: d9:19:0a:de:13:22:ab:b3:06:49:81:1f:c9:9c:6c:c6:5e:46: 47:28:78:1a:06:d4:29:58:19:1f:ca:a9:c6:9d:07:ad:d7:da: ef:4c:fd:b7:c7:f3:75:82:58:17:f3:02:38:7d:65:36:72:e5: 5a:a3:a7:3b:dd:fb:26:56:64:44:05:a4:02:53:fb:c4:de:83: 52:6f:9e:65:4e:72:ee:d1:e7:29:73:79:76:f6:bc:80:b9:2c: 67:1d:a0:f1:52:16:1a:01:b2:8e:4e:8f:10:91:c4:d6:bc:72: bf:32:21:76:0b:28:71:46:84:77:6f:40:00:cf:fe:fb:78:d1: d8:16:38:ad:c9:e8:f8:b7:13:8b:6b:0e:58:ce:ea:fc:4b:6f: db:2e:3c:ad:53:22:aa:ff:32:5a:3c:0a:91:d5:31:99:29:c0: 86:a3:d9:67:83:63:0f:1f:a0:2b:29:d2:6d:2d:93:ca:53:6e: 76:11:fd:d7:6c:08:da:1e:1a:c5:d8:a0:30:76:0d:0f:b1:b4: d4:44:d8:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSzkrsoH0b+LRMJpa/1l7BykFNKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDEx OEU1NEVCODAeFw0yNjA0MTUyMTA1NDJaFw0yNjA0MTkwMzIxNDJaMDMxMTAvBgNV BAMTKDRGODEyQzI2MTNCOTM0RDc0NjQ1N0YwNjZCMTYyNkE3Q0IxMEVCREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7MpupHENcUU5x++jO5DqavBn 6/0Mf66nvZkAv8f+FrisoytcPWwWp8bxD9ztEebgfPpo14cB4FeAQwAmegtW37XJ OwN2hlXz9rmwaWGrXKQ2DjNIt2NHmoOFYXgj1sL7tf5Vs62WIibRw6nDG9yaW8Ts hNcGXMGzZEZsYvHPx3JLJacJfkZXvmWagqUQLd3K7D1eHwWBHokmQ0AFi40Rkp+i UdPl5UAIr39uqWDjGqAp7FQsGWUIqGwL6PWDlOqn2RxrPgwQIpSC7/l26V3Y7Vl1 TXT2sKP0/TZNUa9DNbz9N7GjQOOtkD+5pqCq7aVr/o5ICSg8llaa862DDDUHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT4EsJhO5NNdGRX8GaxYmp8sQ69swHwYDVR0j BBgwFoAU2x4xtqmFZ5HDG5mnPA85ARjlTrgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTE4ZjhhMC05M2FlLTQzNTktOGE1ZC0xY2E2NzhiZTU2NjgvMC9EQjFFMzFCNkE5 ODU2NzkxQzMxQjk5QTczQzBGMzkwMTE4RTU0RUI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDExOEU1 NEVCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5 MDExOEU1NEVCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJOUS0YdpKn75QjmsCu+4Hw+JaxPeClIaRo oZ+cF56pM7h8a8+K1aXNGMNaspYfxRSPHoHDyNkZCt4TIquzBkmBH8mcbMZeRkco eBoG1ClYGR/KqcadB63X2u9M/bfH83WCWBfzAjh9ZTZy5Vqjpzvd+yZWZEQFpAJT +8Teg1JvnmVOcu7R5ylzeXb2vIC5LGcdoPFSFhoBso5OjxCRxNa8cr8yIXYLKHFG hHdvQADP/vt40dgWOK3J6Pi3E4trDljO6vxLb9suPK1TIqr/Mlo8CpHVMZkpwIaj 2WeDYw8foCsp0m0tk8pTbnYR/ddsCNoeGsXYoDB2DQ+xtNRE2P8= -----END CERTIFICATE-----Generated at Fri Apr 17 13:39:51 2026 by rpki-client