$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json) Hash identifier: 171v4HSHg/rB4YHTneh1A0gtdvZRse3v1EptGwarZCw= Subject key identifier: 0E:55:E2:71:03:F8:43:59:1E:96:D2:20:21:41:46:7D:3A:A4:6D:5B Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 Certificate issuer: /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Certificate serial: 7E83244C0B6205DD98022B94B803B8D52DB86C34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft Manifest number: 01B7 Signing time: Sat 28 Feb 2026 22:20:43 +0000 Manifest this update: Sat 28 Feb 2026 22:15:43 +0000 Manifest next update: Tue 03 Mar 2026 22:47:43 +0000 Files and hashes: 1: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: MW+zXOh/GM86VHLv9jRg6I42kwlgC6tDv8hLPiivx3g=) 2: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: hqJzUmkGfm1tL5Cu+d0Y0jzRfSAbuU8h9B0SylrnKNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:83:24:4c:0b:62:05:dd:98:02:2b:94:b8:03:b8:d5:2d:b8:6c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Validity Not Before: Feb 28 22:15:43 2026 GMT Not After : Mar 3 22:47:43 2026 GMT Subject: CN=0E55E27103F843591E96D2202141467D3AA46D5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d7:53:ed:48:93:f8:f1:87:f4:25:68:b7:cd: 7e:ae:15:0c:75:20:23:5b:7f:1e:6f:d5:da:57:e0: f4:d6:10:aa:b4:9e:47:51:69:a5:96:c6:ce:69:1b: 0a:e4:3a:99:c1:56:96:a0:c2:62:cd:f7:97:73:5b: b1:6d:2d:96:b6:c6:00:61:18:0a:9c:1d:25:eb:45: b6:57:76:bd:b7:d7:de:6d:de:2d:31:00:4a:06:fe: 2c:bc:c7:4c:d5:23:b4:4b:30:34:cd:4c:e7:0f:3a: b2:de:c1:18:50:82:47:7c:d9:26:42:cb:dc:6b:34: c9:c5:34:bc:c5:96:81:13:76:77:7d:5e:32:21:18: 33:7e:eb:fa:5c:0c:e6:95:eb:c7:bf:2a:c9:f3:80: 78:c9:4b:6e:7f:74:06:9e:c9:ea:5a:a8:af:fc:c4: 69:b3:29:6d:24:25:f7:f8:81:a7:d6:cd:ab:06:43: bd:4e:99:9f:1f:c8:ce:b2:de:3c:3f:05:52:47:da: 94:30:83:a1:c0:a5:a1:7b:d3:66:12:23:5e:cf:a4: f2:40:47:5f:db:d3:96:fe:36:b7:3a:32:d9:a4:e9: 5e:17:2f:07:08:e1:51:62:af:b3:f1:61:e6:cf:92: 17:a5:13:5b:25:c1:b1:4e:9b:c3:04:48:b7:41:c0: 4b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:55:E2:71:03:F8:43:59:1E:96:D2:20:21:41:46:7D:3A:A4:6D:5B X509v3 Authority Key Identifier: keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5c:d4:43:fe:2a:3f:20:41:dc:2d:46:c7:6c:a0:ca:e5:b0: 20:f8:2a:5b:9d:b4:dc:42:72:e5:b2:fb:a9:ca:8a:31:b1:32: 9e:c5:16:0f:4d:f4:d6:5f:95:9b:ff:07:c7:eb:5c:83:db:16: 33:c7:1b:48:c2:45:24:09:93:88:32:8f:29:36:e8:fe:43:e9: e4:2c:c1:87:ca:44:5b:45:5b:9c:7e:37:0b:23:58:d3:78:8e: 90:62:a0:f4:0c:88:e2:26:a2:20:30:11:53:c5:cb:53:e3:4e: 70:ed:5b:f6:ac:d0:16:10:8d:85:dd:16:59:0e:1f:56:79:30: 4f:12:17:ed:3f:ec:9d:ce:8a:f4:14:0d:ec:e2:90:32:07:4b: 2a:4a:0b:ed:a1:6b:1f:d8:d0:0b:5d:58:79:04:d1:51:53:da: d4:a7:45:13:df:4e:dd:13:9e:a5:6d:30:8c:90:0e:54:a9:07: 06:a5:14:1a:42:fc:70:1d:2e:ac:89:41:be:3e:72:a5:99:87: 42:a0:b7:23:1b:e2:02:32:7b:a2:74:99:06:b0:b4:d6:5b:40: 4c:23:ea:c4:35:3b:cb:20:1a:4f:46:78:83:fe:b7:ce:86:6d: 9e:bc:86:55:16:29:e1:d0:96:f1:17:a5:b7:58:60:6e:2d:81: d8:56:a3:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfoMkTAtiBd2YAiuUuAO41S24bDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDEx OEU1NEVCODAeFw0yNjAyMjgyMjE1NDNaFw0yNjAzMDMyMjQ3NDNaMDMxMTAvBgNV BAMTKDBFNTVFMjcxMDNGODQzNTkxRTk2RDIyMDIxNDE0NjdEM0FBNDZENUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC311PtSJP48Yf0JWi3zX6uFQx1 ICNbfx5v1dpX4PTWEKq0nkdRaaWWxs5pGwrkOpnBVpagwmLN95dzW7FtLZa2xgBh GAqcHSXrRbZXdr23195t3i0xAEoG/iy8x0zVI7RLMDTNTOcPOrLewRhQgkd82SZC y9xrNMnFNLzFloETdnd9XjIhGDN+6/pcDOaV68e/KsnzgHjJS25/dAaeyepaqK/8 xGmzKW0kJff4gafWzasGQ71OmZ8fyM6y3jw/BVJH2pQwg6HApaF702YSI17PpPJA R1/b05b+Nrc6Mtmk6V4XLwcI4VFir7PxYebPkhelE1slwbFOm8MESLdBwEvXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDlXicQP4Q1keltIgIUFGfTqkbVswHwYDVR0j BBgwFoAU2x4xtqmFZ5HDG5mnPA85ARjlTrgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTE4ZjhhMC05M2FlLTQzNTktOGE1ZC0xY2E2NzhiZTU2NjgvMC9EQjFFMzFCNkE5 ODU2NzkxQzMxQjk5QTczQzBGMzkwMTE4RTU0RUI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDExOEU1 NEVCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5 MDExOEU1NEVCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtc1EP+Kj8gQdwtRsdsoMrlsCD4KludtNxC cuWy+6nKijGxMp7FFg9N9NZflZv/B8frXIPbFjPHG0jCRSQJk4gyjyk26P5D6eQs wYfKRFtFW5x+NwsjWNN4jpBioPQMiOImoiAwEVPFy1PjTnDtW/as0BYQjYXdFlkO H1Z5ME8SF+0/7J3OivQUDezikDIHSypKC+2hax/Y0AtdWHkE0VFT2tSnRRPfTt0T nqVtMIyQDlSpBwalFBpC/HAdLqyJQb4+cqWZh0KgtyMb4gIye6J0mQawtNZbQEwj 6sQ1O8sgGk9GeIP+t86GbZ68hlUWKeHQlvEXpbdYYG4tgdhWo+A= -----END CERTIFICATE-----Generated at Mon Mar 2 01:14:21 2026 by rpki-client