$ rpki-client -vvf repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft File: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft (raw, json) Hash identifier: JP01cqVaGQUolXCdg50W4BGwvux8SN7XAV7lgG+AiH8= Subject key identifier: A7:C3:88:3F:E9:7E:CD:24:B9:C1:C8:A2:76:54:B9:D8:16:DF:2F:37 Authority key identifier: DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C Certificate issuer: /CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Certificate serial: 6FEAB32237DA2001C92F22895FFCF458194D3B80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft Manifest number: 0233 Signing time: Fri 17 Apr 2026 17:31:51 +0000 Manifest this update: Fri 17 Apr 2026 17:26:51 +0000 Manifest next update: Tue 21 Apr 2026 03:30:51 +0000 Files and hashes: 1: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl (hash: PeNuVArrkZ9WjrcPPnDPI/ldpsklA30eiCBv+ZhX+pI=) 2: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: 2Vms/JsMQPaw+vYfPtEtlm+57xmqH/10AEwVvJR2JV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 03:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ea:b3:22:37:da:20:01:c9:2f:22:89:5f:fc:f4:58:19:4d:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Validity Not Before: Apr 17 17:26:51 2026 GMT Not After : Apr 21 03:30:51 2026 GMT Subject: CN=A7C3883FE97ECD24B9C1C8A27654B9D816DF2F37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6e:ed:df:88:5f:70:5e:d4:2c:a8:eb:0a:82: 8e:ce:5a:19:b3:f2:ce:08:0e:4a:2d:0c:de:56:ce: b6:7e:cb:aa:9f:25:f9:95:e1:87:37:ff:13:50:de: 35:20:4d:27:46:91:ca:3a:8e:e3:9d:e2:9a:bc:5d: d0:00:9d:d5:4c:7e:b0:71:0b:23:96:38:77:68:e1: 0d:fa:fc:8a:68:26:96:0d:f0:be:d3:f5:fd:12:d3: ad:b3:c3:ef:26:72:42:9e:be:1f:1a:a1:cf:05:67: 41:32:fe:1d:b0:7d:6f:f0:34:bb:cd:7b:d8:8e:cb: 15:7f:39:d8:f4:93:4e:45:4c:ca:3c:cd:a7:c2:9a: 08:66:13:9d:e0:2a:74:3f:26:d6:91:e9:d0:58:bb: 0c:d0:99:28:b1:a5:68:15:b4:ad:07:8f:36:11:45: ee:73:aa:1b:95:87:7f:5b:74:c4:62:3b:c6:e3:7b: 9a:c1:cd:01:6e:cf:5b:7b:a9:73:5c:15:8e:53:08: 9c:e4:a7:ab:20:26:19:a3:9f:bb:17:48:87:9c:28: 01:fa:4c:1e:2a:e7:31:01:d7:0d:76:15:29:5b:40: af:84:62:51:11:a6:fe:c5:fe:99:46:25:0b:3a:1e: e1:05:8c:41:c4:ed:87:db:f7:6c:8c:d2:3a:a4:18: fe:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C3:88:3F:E9:7E:CD:24:B9:C1:C8:A2:76:54:B9:D8:16:DF:2F:37 X509v3 Authority Key Identifier: keyid:DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5d:58:ae:de:c9:d1:6b:50:c5:6a:cb:cf:4a:3a:1d:79:a8: c6:41:03:75:e9:e1:88:91:15:6c:d7:74:97:07:d7:cf:88:ca: db:27:5a:45:a8:91:cd:f7:a6:6c:e5:b6:18:74:11:f8:25:54: 23:66:53:92:5e:60:90:38:21:f3:81:b6:dd:f4:d2:ab:52:1d: 42:93:d5:62:59:30:7c:1a:3b:bb:0c:bb:bf:23:24:d3:73:45: 9c:07:c3:26:53:f0:a4:24:12:af:90:a9:76:6c:cd:e6:dd:27: c7:57:b3:e7:64:31:86:c8:a8:24:97:96:9e:3c:0a:e4:94:28: bd:04:d0:25:66:b4:fd:a9:1f:42:38:de:97:fb:91:57:73:04: 8b:5d:32:86:52:92:e8:9b:7f:19:33:66:b4:56:09:40:a5:3f: 9b:a5:bd:23:d3:f3:76:07:5c:97:16:f9:a4:0d:aa:24:eb:31: d4:1a:fa:37:1e:82:6e:82:40:af:c5:64:a7:97:b0:85:87:d1: 5f:08:93:2f:9d:5a:83:92:95:ea:6f:61:6d:74:66:53:da:73: c2:84:02:e8:99:34:57:9b:74:97:df:cc:37:8d:a6:2e:6a:60: 17:b7:ba:cd:34:80:c7:9a:3c:24:af:b4:0b:99:e2:03:cf:3b: d6:2f:f6:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb+qzIjfaIAHJLyKJX/z0WBlNO4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBF NDkzNUEzQzAeFw0yNjA0MTcxNzI2NTFaFw0yNjA0MjEwMzMwNTFaMDMxMTAvBgNV BAMTKEE3QzM4ODNGRTk3RUNEMjRCOUMxQzhBMjc2NTRCOUQ4MTZERjJGMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbu3fiF9wXtQsqOsKgo7OWhmz 8s4IDkotDN5WzrZ+y6qfJfmV4Yc3/xNQ3jUgTSdGkco6juOd4pq8XdAAndVMfrBx CyOWOHdo4Q36/IpoJpYN8L7T9f0S062zw+8mckKevh8aoc8FZ0Ey/h2wfW/wNLvN e9iOyxV/Odj0k05FTMo8zafCmghmE53gKnQ/JtaR6dBYuwzQmSixpWgVtK0HjzYR Re5zqhuVh39bdMRiO8bje5rBzQFuz1t7qXNcFY5TCJzkp6sgJhmjn7sXSIecKAH6 TB4q5zEB1w12FSlbQK+EYlERpv7F/plGJQs6HuEFjEHE7Yfb92yM0jqkGP4ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp8OIP+l+zSS5wciidlS52BbfLzcwHwYDVR0j BBgwFoAU2xvXhR/RpIewEoP2rktG4OSTWjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2IyZWU3NC04YzNjLTRiYzMtYjZmYi1mMzViMjAwYTIwZWIvMC9EQjFCRDc4NTFG RDFBNDg3QjAxMjgzRjZBRTRCNDZFMEU0OTM1QTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBFNDkz NUEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2 RTBFNDkzNUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpdWK7eydFrUMVqy89KOh15qMZBA3Xp4YiR FWzXdJcH18+IytsnWkWokc33pmzlthh0EfglVCNmU5JeYJA4IfOBtt300qtSHUKT 1WJZMHwaO7sMu78jJNNzRZwHwyZT8KQkEq+QqXZszebdJ8dXs+dkMYbIqCSXlp48 CuSUKL0E0CVmtP2pH0I43pf7kVdzBItdMoZSkuibfxkzZrRWCUClP5ulvSPT83YH XJcW+aQNqiTrMdQa+jcegm6CQK/FZKeXsIWH0V8Iky+dWoOSlepvYW10ZlPac8KE AuiZNFebdJffzDeNpi5qYBe3us00gMeaPCSvtAuZ4gPPO9Yv9n4= -----END CERTIFICATE-----Generated at Fri Apr 17 22:00:53 2026 by rpki-client