$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json) Hash identifier: RVeSn93qX+GfxgWILkl+0Q3+4bXO2jqbz6YKgLBfEM8= Subject key identifier: 9E:B2:92:98:7D:99:21:1B:22:32:04:EE:34:1A:21:02:06:15:13:B4 Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 085B6C86743307987F5599837DD118D43A1B9E84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft Manifest number: 012E Signing time: Thu 16 Apr 2026 16:32:14 +0000 Manifest this update: Thu 16 Apr 2026 16:27:14 +0000 Manifest next update: Sun 19 Apr 2026 17:36:14 +0000 Files and hashes: 1: 3130332e3136332e3234302e302f32342d3234203d3e20313431383837.roa (hash: +teKINZvaHmO1Q+Kg4FSm38760XvHDKTZ7byNyW4UzY=) 2: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: 6G3idymOQ7sZn3Pps6mR34zKp8t4354Iw8kVIzt4zdk=) 3: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (hash: 0mKtpX4YHjqhZYuwbm2O+wY91w1T7BNCRQPDyuS9qF8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 17:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:5b:6c:86:74:33:07:98:7f:55:99:83:7d:d1:18:d4:3a:1b:9e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: Apr 16 16:27:14 2026 GMT Not After : Apr 19 17:36:14 2026 GMT Subject: CN=9EB292987D99211B223204EE341A2102061513B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a7:d7:ea:01:53:4f:20:08:25:ae:31:45:a6: 50:a0:52:61:72:49:aa:95:25:fc:64:f4:3e:b7:7d: cb:ed:5e:08:51:4b:1f:cd:b9:60:05:c2:07:5f:4f: 17:af:54:2c:a6:1f:f3:ec:ed:b6:da:5a:85:db:62: d5:80:4d:b5:fa:40:62:80:9e:7f:05:71:e4:1d:85: 08:30:c9:77:7f:78:a9:3b:7c:18:37:95:80:53:53: 69:1e:56:c2:87:8a:23:3a:0f:c0:83:f7:bb:11:44: aa:c2:34:26:bb:2f:96:e7:7f:fd:fa:a3:31:4d:26: 99:c3:21:ed:44:ed:11:ff:f0:79:be:60:9a:64:49: 78:88:d7:5e:e5:7f:38:46:2d:41:2c:57:d3:08:02: 99:3d:36:1f:02:3d:58:28:81:18:ea:d5:1d:ab:54: 43:10:c9:f3:ae:6a:74:66:d8:8b:fe:07:4f:05:3d: 47:58:70:4b:e5:56:28:ea:8c:ef:de:37:21:97:d8: ef:78:d4:34:0e:2f:80:29:e2:e0:ce:b8:2d:11:4b: 1b:5b:f0:93:5d:af:7f:a1:67:e3:27:45:e1:2d:77: 65:d6:10:46:e6:1a:66:56:fe:77:68:be:bb:95:d5: 24:65:53:18:d9:be:b8:93:d7:bd:fc:5f:85:85:94: 2b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B2:92:98:7D:99:21:1B:22:32:04:EE:34:1A:21:02:06:15:13:B4 X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e3:4f:ad:22:a1:54:fb:03:19:c3:3a:31:59:d7:d9:d5:cb: 6b:34:8e:7d:57:5a:4f:b4:6f:c4:ba:7b:a0:9b:a8:09:07:e0: ec:56:82:8e:9c:0c:2b:30:65:4b:65:5d:74:00:6a:63:b9:63: b3:ba:0e:e5:eb:59:b5:ae:58:92:66:f8:00:16:a5:e2:fc:2e: 88:e2:2e:89:a7:0d:1f:c8:98:98:20:5d:de:fe:56:aa:f8:c4: bf:fa:9a:24:fd:b2:5c:a1:92:0f:2b:6b:8f:29:b1:0d:57:a5: 0f:9c:cb:45:47:5d:2d:f7:40:21:57:87:67:db:50:54:89:cf: 36:88:c9:94:45:e8:32:2c:92:7d:23:24:3f:f0:65:ab:a4:fc: 57:e0:19:81:88:81:0d:b5:a2:e4:0d:59:8a:0e:8c:2a:63:d5: 98:a2:b1:ca:1b:38:9f:ae:1a:05:f9:17:1b:6f:83:93:e1:4b: 07:dd:bd:6d:3f:00:de:03:69:47:b3:bf:33:fb:04:c9:08:db: 0b:86:1f:19:65:1d:c8:0f:54:e9:9d:59:c4:37:fa:0d:15:58: b4:62:7a:d7:5a:66:30:67:7d:0f:13:22:cb:1d:ef:d4:44:01: 63:0d:e2:71:5e:b5:d8:5c:5b:fa:7f:5a:0d:c7:c9:1a:7d:8e: 02:8e:ec:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFtshnQzB5h/VZmDfdEY1DobnoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNjA0MTYxNjI3MTRaFw0yNjA0MTkxNzM2MTRaMDMxMTAvBgNV BAMTKDlFQjI5Mjk4N0Q5OTIxMUIyMjMyMDRFRTM0MUEyMTAyMDYxNTEzQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCap9fqAVNPIAglrjFFplCgUmFy SaqVJfxk9D63fcvtXghRSx/NuWAFwgdfTxevVCymH/Ps7bbaWoXbYtWATbX6QGKA nn8FceQdhQgwyXd/eKk7fBg3lYBTU2keVsKHiiM6D8CD97sRRKrCNCa7L5bnf/36 ozFNJpnDIe1E7RH/8Hm+YJpkSXiI117lfzhGLUEsV9MIApk9Nh8CPVgogRjq1R2r VEMQyfOuanRm2Iv+B08FPUdYcEvlVijqjO/eNyGX2O941DQOL4Ap4uDOuC0RSxtb 8JNdr3+hZ+MnReEtd2XWEEbmGmZW/ndovruV1SRlUxjZvriT1738X4WFlCsRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnrKSmH2ZIRsiMgTuNBohAgYVE7QwHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcx QkQ4Njk5RkU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrjT60ioVT7AxnDOjFZ19nVy2s0jn1XWk+0 b8S6e6CbqAkH4OxWgo6cDCswZUtlXXQAamO5Y7O6DuXrWbWuWJJm+AAWpeL8Loji LomnDR/ImJggXd7+Vqr4xL/6miT9slyhkg8ra48psQ1XpQ+cy0VHXS33QCFXh2fb UFSJzzaIyZRF6DIskn0jJD/wZauk/FfgGYGIgQ21ouQNWYoOjCpj1ZiiscobOJ+u GgX5Fxtvg5PhSwfdvW0/AN4DaUezvzP7BMkI2wuGHxllHcgPVOmdWcQ3+g0VWLRi etdaZjBnfQ8TIssd79REAWMN4nFetdhcW/p/Wg3HyRp9jgKO7Aw= -----END CERTIFICATE-----Generated at Sat Apr 18 00:44:24 2026 by rpki-client