$ rpki-client -vvf repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft File: DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft (raw, json) Hash identifier: c/QtKcFlMOAJhogAk//EwD0PTGYN3j3lDvaRhA9b1zA= Subject key identifier: 44:F5:D0:A7:B8:75:DA:D2:E9:56:C9:FA:E9:E7:70:6B:0C:86:CC:33 Authority key identifier: DB:B2:73:D6:AE:AB:E4:2B:DD:27:C4:B5:41:94:6E:6F:1F:1A:59:35 Certificate issuer: /CN=DBB273D6AEABE42BDD27C4B541946E6F1F1A5935 Certificate serial: 6D89204CAEF525D2BF5D6D9380276F4DF7BF0E23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft Manifest number: 09 Signing time: Sat 28 Feb 2026 05:11:34 +0000 Manifest this update: Sat 28 Feb 2026 05:06:34 +0000 Manifest next update: Tue 03 Mar 2026 13:17:34 +0000 Files and hashes: 1: DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.crl (hash: wufIpJIeiUKeDyrOZRnAzYiwmYgodMq6UmENkQ59+GM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.crl rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 13:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:89:20:4c:ae:f5:25:d2:bf:5d:6d:93:80:27:6f:4d:f7:bf:0e:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBB273D6AEABE42BDD27C4B541946E6F1F1A5935 Validity Not Before: Feb 28 05:06:34 2026 GMT Not After : Mar 3 13:17:34 2026 GMT Subject: CN=44F5D0A7B875DAD2E956C9FAE9E7706B0C86CC33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f4:a0:e6:cc:78:e7:f6:65:a2:c1:e1:5e:2f: 55:db:a6:a6:9d:8b:4f:f6:90:1b:be:f3:6b:5f:7f: 0d:39:7b:ce:44:fb:6d:4a:9a:39:ca:b1:91:81:b8: e8:54:3e:66:06:2f:30:e7:48:a9:45:26:6c:c9:97: 11:66:a2:00:36:40:6c:7f:69:52:fb:d6:ab:a3:ef: 86:bc:60:ce:f6:f8:fc:d1:3d:25:ed:94:16:1f:20: 75:1b:ff:29:89:60:d7:01:05:14:db:a0:bb:90:14: d4:88:ce:be:57:3a:d1:65:b5:89:a7:47:9c:ce:ef: 9e:7a:2c:56:a8:20:8a:5d:47:7e:16:c9:c5:58:a7: bb:09:88:09:51:f6:e3:e4:5a:3f:ed:25:91:ab:e0: 22:b1:c1:3c:21:98:78:d5:83:0f:4b:17:e0:5c:a9: eb:7d:ab:f6:54:0e:d6:a2:cb:d0:6f:28:0b:11:71: ae:73:ea:c5:4c:9e:45:85:38:74:78:84:ba:40:a1: e4:37:58:1a:ea:d1:5c:bf:7a:48:a0:42:cd:aa:80: 29:52:6a:66:11:93:81:13:b0:64:70:c3:e7:7c:02: a9:a8:3f:81:55:4e:bd:cc:8a:cb:86:a1:5b:f1:b0: bc:4c:fc:2d:00:c2:bf:4a:b7:32:c5:fd:00:49:54: 5d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F5:D0:A7:B8:75:DA:D2:E9:56:C9:FA:E9:E7:70:6B:0C:86:CC:33 X509v3 Authority Key Identifier: keyid:DB:B2:73:D6:AE:AB:E4:2B:DD:27:C4:B5:41:94:6E:6F:1F:1A:59:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a8:b6:e3:6e:94:ae:c9:ea:28:b7:31:34:40:51:b6:b6:9f: 64:53:69:ba:af:aa:bd:82:9d:c0:22:64:58:50:99:21:d4:b8: f1:db:f4:0e:84:66:a9:a9:cc:76:eb:36:8b:94:ca:c4:52:41: bc:34:44:8e:00:87:bb:02:66:6c:a2:8a:8b:69:3e:26:f6:b0: 6c:cf:5b:10:f2:2e:ba:03:48:2a:81:5d:32:bb:18:ea:c4:45: a5:a7:ce:a4:3b:eb:f9:8e:aa:ff:fb:c4:c9:8c:a8:9a:28:81: 28:14:39:f2:2a:fa:2a:17:ab:6c:d9:8d:4c:21:c5:f8:d9:9b: 37:1d:ff:41:40:70:df:9d:19:21:ea:60:81:fb:ec:28:c9:57: 05:5f:55:13:d1:ce:30:a2:5c:cd:0d:34:2b:51:bd:8b:ec:b2: e8:1c:86:41:b3:a7:ac:1d:0e:13:15:43:7a:26:66:ba:84:aa: b7:85:b4:3b:3c:23:f6:ad:a7:32:cd:b6:41:70:53:9b:68:f1: 1b:ca:03:77:1e:33:97:46:93:f5:a6:f6:35:cd:7a:a5:59:44: 3a:dd:2a:f4:0b:66:21:be:91:72:96:b6:89:cd:cb:f0:c4:a5: 46:fa:34:c9:64:47:e3:0f:22:7f:2b:df:eb:13:3a:77:1e:6c: 8b:0e:03:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbYkgTK71JdK/XW2TgCdvTfe/DiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJCMjczRDZBRUFCRTQyQkREMjdDNEI1NDE5NDZFNkYx RjFBNTkzNTAeFw0yNjAyMjgwNTA2MzRaFw0yNjAzMDMxMzE3MzRaMDMxMTAvBgNV BAMTKDQ0RjVEMEE3Qjg3NURBRDJFOTU2QzlGQUU5RTc3MDZCMEM4NkNDMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9KDmzHjn9mWiweFeL1Xbpqad i0/2kBu+82tffw05e85E+21KmjnKsZGBuOhUPmYGLzDnSKlFJmzJlxFmogA2QGx/ aVL71quj74a8YM72+PzRPSXtlBYfIHUb/ymJYNcBBRTboLuQFNSIzr5XOtFltYmn R5zO7556LFaoIIpdR34WycVYp7sJiAlR9uPkWj/tJZGr4CKxwTwhmHjVgw9LF+Bc qet9q/ZUDtaiy9BvKAsRca5z6sVMnkWFOHR4hLpAoeQ3WBrq0Vy/ekigQs2qgClS amYRk4ETsGRww+d8AqmoP4FVTr3MisuGoVvxsLxM/C0Awr9KtzLF/QBJVF0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURPXQp7h12tLpVsn66edwawyGzDMwHwYDVR0j BBgwFoAU27Jz1q6r5CvdJ8S1QZRubx8aWTUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZWYxNmYzMS02MGNlLTQ3YTctYWU4ZC01YTI4YzUxMWM5NDcvMC9EQkIyNzNENkFF QUJFNDJCREQyN0M0QjU0MTk0NkU2RjFGMUE1OTM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJCMjczRDZBRUFCRTQyQkREMjdDNEI1NDE5NDZFNkYxRjFB NTkzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzAvREJCMjczRDZBRUFCRTQyQkREMjdDNEI1NDE5NDZF NkYxRjFBNTkzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+otuNulK7J6ii3MTRAUba2n2RTabqvqr2C ncAiZFhQmSHUuPHb9A6EZqmpzHbrNouUysRSQbw0RI4Ah7sCZmyiiotpPib2sGzP WxDyLroDSCqBXTK7GOrERaWnzqQ76/mOqv/7xMmMqJoogSgUOfIq+ioXq2zZjUwh xfjZmzcd/0FAcN+dGSHqYIH77CjJVwVfVRPRzjCiXM0NNCtRvYvssugchkGzp6wd DhMVQ3omZrqEqreFtDs8I/atpzLNtkFwU5to8RvKA3ceM5dGk/Wm9jXNeqVZRDrd KvQLZiG+kXKWtonNy/DEpUb6NMlkR+MPIn8r3+sTOncebIsOA+4= -----END CERTIFICATE-----Generated at Mon Mar 2 10:34:19 2026 by rpki-client