$ rpki-client -vvf repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft File: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft (raw, json) Hash identifier: AQKCk8qeB149t5YGqwYYbUc8sj0pdOkRyQDrHF0uRLk= Subject key identifier: 07:1E:63:D4:79:36:B6:F1:23:B3:7E:DD:92:B0:F4:8F:97:65:32:6C Authority key identifier: DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C Certificate issuer: /CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Certificate serial: 726D97F637F9B1A729C5563E893EEBB5C4A580AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft Manifest number: 021E Signing time: Sat 28 Feb 2026 16:21:47 +0000 Manifest this update: Sat 28 Feb 2026 16:16:47 +0000 Manifest next update: Tue 03 Mar 2026 23:45:47 +0000 Files and hashes: 1: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl (hash: KAlN3DkEQSeLf6FgUhyGwiSuelN954TuYsvTFJBA6Bs=) 2: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: 2Vms/JsMQPaw+vYfPtEtlm+57xmqH/10AEwVvJR2JV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 23:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:6d:97:f6:37:f9:b1:a7:29:c5:56:3e:89:3e:eb:b5:c4:a5:80:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Validity Not Before: Feb 28 16:16:47 2026 GMT Not After : Mar 3 23:45:47 2026 GMT Subject: CN=071E63D47936B6F123B37EDD92B0F48F9765326C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a8:8b:96:b0:12:85:50:24:a8:76:23:cd:b8: e0:96:00:38:0d:c0:9f:1e:70:1d:51:29:ae:97:b1: b1:6c:db:ff:6f:26:f6:3b:3a:54:8c:21:fc:3a:80: 5c:44:a5:3d:cc:f5:bc:fb:74:96:6e:75:c9:1a:87: 30:3e:31:0d:77:23:71:8b:74:39:43:1b:4c:38:96: 6b:be:0a:bc:c2:de:a8:4f:65:84:0b:d5:0d:a9:c7: a0:ad:62:be:95:4e:a6:cc:f1:fe:5d:4f:67:68:20: 8b:c3:95:fe:24:1a:88:ed:75:9a:7c:16:3a:2e:73: cb:c7:43:88:ca:cc:92:13:15:43:cc:f9:cd:90:79: 28:f2:9e:a0:00:d9:7e:db:64:9a:63:2b:f0:b3:25: 1c:3f:a7:f8:3c:d8:99:7f:ab:e7:b8:63:45:e5:70: 6c:8e:c8:9c:4a:cb:53:58:81:ff:cc:53:68:28:f3: 48:7a:e5:31:08:a4:3f:ed:62:0a:b3:45:e4:18:54: 9d:f1:65:35:13:3c:e2:13:e0:4c:77:6f:bf:96:bd: 4c:cc:f8:74:17:8d:3a:6d:a3:2f:50:3e:be:a8:cd: 0f:19:ce:27:21:60:91:66:c2:1e:3d:d1:95:2d:db: ad:a7:8a:ae:7f:56:20:9d:87:fb:76:62:18:4d:06: c3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1E:63:D4:79:36:B6:F1:23:B3:7E:DD:92:B0:F4:8F:97:65:32:6C X509v3 Authority Key Identifier: keyid:DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:2e:f2:ac:20:bf:e1:dd:ff:ad:dd:e7:a7:9b:bf:e6:54:99: b5:35:32:55:9e:4d:d4:81:80:70:6c:90:e2:22:ec:f5:37:b6: 01:44:ad:a4:58:36:45:20:a1:03:1e:75:b9:6a:70:8d:67:29: 75:07:e3:95:04:00:a0:de:4c:93:6e:a3:26:aa:b7:3e:98:64: 78:03:04:94:6b:f8:73:13:37:a6:24:67:79:6f:b3:44:f7:7b: 16:83:49:57:35:af:9a:75:fa:0b:1e:8b:63:7b:dd:30:f2:29: 9b:90:e0:eb:ed:ca:c5:d6:9d:b4:21:66:ba:11:12:55:ae:8e: 28:3a:2b:fc:68:84:93:53:25:c0:4d:41:13:4b:40:1b:aa:e5: 78:74:a4:83:0c:bb:e3:25:95:ae:4e:58:08:ab:36:83:82:30: 8b:08:a4:41:55:ef:87:52:ae:d0:55:64:58:3a:4a:b0:ab:b7: f3:c1:fb:fd:85:c6:17:20:c9:b7:03:27:df:02:1e:8b:47:a3: cb:6a:21:af:4d:f9:3f:52:7d:26:9b:74:d9:44:f3:50:4e:e4: b9:26:83:a9:d0:cd:4d:3b:88:91:8e:67:47:b4:88:ea:8c:7f: 80:39:fe:79:36:d2:89:c1:96:38:cb:21:7b:6e:8c:98:8c:9e: 3f:fe:91:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcm2X9jf5sacpxVY+iT7rtcSlgKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBF NDkzNUEzQzAeFw0yNjAyMjgxNjE2NDdaFw0yNjAzMDMyMzQ1NDdaMDMxMTAvBgNV BAMTKDA3MUU2M0Q0NzkzNkI2RjEyM0IzN0VERDkyQjBGNDhGOTc2NTMyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qIuWsBKFUCSodiPNuOCWADgN wJ8ecB1RKa6XsbFs2/9vJvY7OlSMIfw6gFxEpT3M9bz7dJZudckahzA+MQ13I3GL dDlDG0w4lmu+CrzC3qhPZYQL1Q2px6CtYr6VTqbM8f5dT2doIIvDlf4kGojtdZp8 Fjouc8vHQ4jKzJITFUPM+c2QeSjynqAA2X7bZJpjK/CzJRw/p/g82Jl/q+e4Y0Xl cGyOyJxKy1NYgf/MU2go80h65TEIpD/tYgqzReQYVJ3xZTUTPOIT4Ex3b7+WvUzM +HQXjTptoy9QPr6ozQ8ZzichYJFmwh490ZUt262niq5/ViCdh/t2YhhNBsMFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBx5j1Hk2tvEjs37dkrD0j5dlMmwwHwYDVR0j BBgwFoAU2xvXhR/RpIewEoP2rktG4OSTWjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2IyZWU3NC04YzNjLTRiYzMtYjZmYi1mMzViMjAwYTIwZWIvMC9EQjFCRDc4NTFG RDFBNDg3QjAxMjgzRjZBRTRCNDZFMEU0OTM1QTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBFNDkz NUEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2 RTBFNDkzNUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4u8qwgv+Hd/63d56ebv+ZUmbU1MlWeTdSB gHBskOIi7PU3tgFEraRYNkUgoQMedblqcI1nKXUH45UEAKDeTJNuoyaqtz6YZHgD BJRr+HMTN6YkZ3lvs0T3exaDSVc1r5p1+gsei2N73TDyKZuQ4OvtysXWnbQhZroR ElWujig6K/xohJNTJcBNQRNLQBuq5Xh0pIMMu+Mlla5OWAirNoOCMIsIpEFV74dS rtBVZFg6SrCrt/PB+/2FxhcgybcDJ98CHotHo8tqIa9N+T9SfSabdNlE81BO5Lkm g6nQzU07iJGOZ0e0iOqMf4A5/nk20onBljjLIXtujJiMnj/+kVA= -----END CERTIFICATE-----Generated at Mon Mar 2 15:15:54 2026 by rpki-client