$ rpki-client -vvf repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft File: DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft (raw, json) Hash identifier: t5ucKW6Du9QBr9K1e6mAYlUwKU0nanrsG35X2TPukGI= Subject key identifier: 2D:57:52:D9:93:B4:42:03:BE:DC:11:A1:CF:3F:15:E8:8F:9E:FC:70 Authority key identifier: DB:B2:73:D6:AE:AB:E4:2B:DD:27:C4:B5:41:94:6E:6F:1F:1A:59:35 Certificate issuer: /CN=DBB273D6AEABE42BDD27C4B541946E6F1F1A5935 Certificate serial: 5F084B474A62E4328FE2B0093761F9A3B1399067 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft Manifest number: 1F Signing time: Sat 18 Apr 2026 22:31:38 +0000 Manifest this update: Sat 18 Apr 2026 22:26:38 +0000 Manifest next update: Wed 22 Apr 2026 01:01:38 +0000 Files and hashes: 1: DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.crl (hash: 2v/kwYnaBzqWPMauhln7ZxMHlPkQoQ51B6+k25fmxrg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.crl rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:08:4b:47:4a:62:e4:32:8f:e2:b0:09:37:61:f9:a3:b1:39:90:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBB273D6AEABE42BDD27C4B541946E6F1F1A5935 Validity Not Before: Apr 18 22:26:38 2026 GMT Not After : Apr 22 01:01:38 2026 GMT Subject: CN=2D5752D993B44203BEDC11A1CF3F15E88F9EFC70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:64:8e:1d:24:5d:e8:ea:02:ec:75:f3:eb:b0: dd:91:a0:d5:ca:8e:16:a1:ca:fd:d7:cd:8d:09:db: 36:d5:59:ac:ea:f6:ed:65:62:43:f7:86:2a:68:46: f6:05:f7:4d:ea:54:5b:21:f5:a7:07:be:e3:a0:55: 9a:15:fb:42:01:73:e4:c8:f5:cd:94:ac:87:f2:8b: 81:a8:16:80:87:ab:37:ed:23:d5:cc:5c:a1:42:77: 50:c9:62:30:07:d5:82:12:46:ae:ad:30:f6:4c:c0: ac:1c:7d:7c:0f:88:b6:5e:12:9e:18:87:d1:a5:4d: e1:d9:97:d3:4f:17:6d:49:96:05:f5:c9:a9:5e:73: 5f:db:43:c7:a4:c4:2c:c4:e9:d2:6e:a5:91:fa:7b: 17:75:09:8d:bc:96:d8:19:eb:9e:35:34:2f:59:87: ed:7c:d1:d4:2e:b4:b4:72:28:16:e6:d9:4f:e2:a9: dc:c6:19:8d:d3:57:2a:f7:2e:29:07:4c:02:42:f0: d4:8d:c4:fd:29:cc:33:c8:7f:be:de:c6:fb:e9:cc: f6:d1:cc:f4:e4:42:ae:10:b3:c5:bc:8d:dc:90:19: 65:d8:39:6c:4a:fb:ef:ac:55:8e:68:0d:df:01:93: f6:a1:ba:42:83:45:df:1b:1e:86:f6:be:3e:4a:12: 19:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:57:52:D9:93:B4:42:03:BE:DC:11:A1:CF:3F:15:E8:8F:9E:FC:70 X509v3 Authority Key Identifier: keyid:DB:B2:73:D6:AE:AB:E4:2B:DD:27:C4:B5:41:94:6E:6F:1F:1A:59:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:ac:5c:a9:6c:d8:6e:ab:4c:d5:1f:3c:9f:4e:6d:ff:54:f0: 75:1d:6c:a4:f4:54:3c:89:c3:50:71:34:96:33:fe:eb:bc:96: dc:79:3c:c7:fe:20:cb:e8:bf:85:ad:3e:b2:bb:e2:d4:05:c6: c7:9d:74:7d:32:e0:5d:e5:85:39:c3:15:19:4a:03:22:ee:58: fb:e6:56:41:21:96:2e:6e:63:71:2f:25:92:9c:69:fc:9e:43: d2:b2:82:9c:4f:97:34:e3:f2:3f:4f:59:08:c3:d6:60:cb:2c: a7:17:3a:97:75:2d:ff:42:19:07:57:77:e7:9f:7b:78:8a:0e: 6d:3f:ab:c2:00:96:b4:44:23:ef:69:01:76:e2:92:8a:6e:36: 74:a5:59:16:2b:c9:b1:df:d6:a6:5a:57:cf:d3:51:00:0a:cf: 99:ad:0f:63:f8:e7:2f:95:3f:ba:15:fe:28:84:dc:fa:b1:a2: 87:a8:70:9d:a3:ab:9f:51:e9:31:5c:58:1a:d8:d1:f5:ea:c4: 7e:f6:02:d4:a4:f2:4c:d9:74:e2:16:54:14:db:d4:81:e9:c7: 00:b2:09:20:a6:a2:18:d3:30:da:2c:8a:8e:b3:8b:f0:5e:f8: d2:98:c7:9e:82:06:67:6b:c9:81:56:9f:43:14:7a:8d:b5:8e: cf:20:56:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXwhLR0pi5DKP4rAJN2H5o7E5kGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJCMjczRDZBRUFCRTQyQkREMjdDNEI1NDE5NDZFNkYx RjFBNTkzNTAeFw0yNjA0MTgyMjI2MzhaFw0yNjA0MjIwMTAxMzhaMDMxMTAvBgNV BAMTKDJENTc1MkQ5OTNCNDQyMDNCRURDMTFBMUNGM0YxNUU4OEY5RUZDNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbZI4dJF3o6gLsdfPrsN2RoNXK jhahyv3XzY0J2zbVWazq9u1lYkP3hipoRvYF903qVFsh9acHvuOgVZoV+0IBc+TI 9c2UrIfyi4GoFoCHqzftI9XMXKFCd1DJYjAH1YISRq6tMPZMwKwcfXwPiLZeEp4Y h9GlTeHZl9NPF21JlgX1yalec1/bQ8ekxCzE6dJupZH6exd1CY28ltgZ6541NC9Z h+180dQutLRyKBbm2U/iqdzGGY3TVyr3LikHTAJC8NSNxP0pzDPIf77exvvpzPbR zPTkQq4Qs8W8jdyQGWXYOWxK+++sVY5oDd8Bk/ahukKDRd8bHob2vj5KEhltAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULVdS2ZO0QgO+3BGhzz8V6I+e/HAwHwYDVR0j BBgwFoAU27Jz1q6r5CvdJ8S1QZRubx8aWTUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZWYxNmYzMS02MGNlLTQ3YTctYWU4ZC01YTI4YzUxMWM5NDcvMC9EQkIyNzNENkFF QUJFNDJCREQyN0M0QjU0MTk0NkU2RjFGMUE1OTM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJCMjczRDZBRUFCRTQyQkREMjdDNEI1NDE5NDZFNkYxRjFB NTkzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzAvREJCMjczRDZBRUFCRTQyQkREMjdDNEI1NDE5NDZF NkYxRjFBNTkzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANSsXKls2G6rTNUfPJ9Obf9U8HUdbKT0VDyJ w1BxNJYz/uu8ltx5PMf+IMvov4WtPrK74tQFxseddH0y4F3lhTnDFRlKAyLuWPvm VkEhli5uY3EvJZKcafyeQ9KygpxPlzTj8j9PWQjD1mDLLKcXOpd1Lf9CGQdXd+ef e3iKDm0/q8IAlrREI+9pAXbikopuNnSlWRYrybHf1qZaV8/TUQAKz5mtD2P45y+V P7oV/iiE3PqxooeocJ2jq59R6TFcWBrY0fXqxH72AtSk8kzZdOIWVBTb1IHpxwCy CSCmohjTMNosio6zi/Be+NKYx56CBmdryYFWn0MUeo21js8gVnc= -----END CERTIFICATE-----Generated at Sun Apr 19 10:21:02 2026 by rpki-client