$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json) Hash identifier: UuT/10AQLpvP1tmsyQlswsXKoR9wdSmcWLyMBf0B7yA= Subject key identifier: 9E:5E:69:1B:A6:EC:64:F8:1F:1E:AF:D4:09:03:FC:FC:CC:53:A9:4E Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 3A44242554533B8EE2A70CEF76C1B7442BAA445C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft Manifest number: 0119 Signing time: Sun 01 Mar 2026 08:42:11 +0000 Manifest this update: Sun 01 Mar 2026 08:37:11 +0000 Manifest next update: Wed 04 Mar 2026 09:23:11 +0000 Files and hashes: 1: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: X350gNrcYivYPAdzyNlnIvrAS3cNy+/Me/YAO7oqKSI=) 2: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (hash: 0mKtpX4YHjqhZYuwbm2O+wY91w1T7BNCRQPDyuS9qF8=) 3: 3130332e3136332e3234302e302f32342d3234203d3e20313431383837.roa (hash: +teKINZvaHmO1Q+Kg4FSm38760XvHDKTZ7byNyW4UzY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:44:24:25:54:53:3b:8e:e2:a7:0c:ef:76:c1:b7:44:2b:aa:44:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: Mar 1 08:37:11 2026 GMT Not After : Mar 4 09:23:11 2026 GMT Subject: CN=9E5E691BA6EC64F81F1EAFD40903FCFCCC53A94E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:21:e5:1e:dd:09:5c:3a:03:90:08:85:4d:fa: b0:9f:cb:3f:a9:27:d5:7c:5c:eb:b6:38:5a:74:96: 17:0c:63:0d:27:e1:ac:ad:68:52:91:61:9f:a6:7a: 06:3a:19:24:42:e6:30:e9:76:44:61:a7:08:08:cf: 95:85:f3:9c:03:01:17:f0:c9:16:a3:69:ea:9d:e8: 1c:d6:07:f6:4e:a9:f6:81:6d:95:ee:ba:90:ce:e7: 01:fe:33:d4:1f:39:14:ed:2e:44:d4:ae:9a:d6:da: 96:1e:a8:39:17:c3:a7:ac:72:98:70:a6:6d:e4:95: af:f6:ac:99:3c:01:80:0d:4f:d6:de:da:0e:52:7a: 4f:53:fb:12:e7:e7:71:9a:79:9d:db:8c:3a:aa:a8: fe:fe:42:c0:4d:63:ff:6c:81:2e:0d:5a:23:97:d3: 72:17:2c:2d:43:d9:5f:fa:58:ca:d0:1f:8c:e9:8e: 3c:8c:f2:98:91:a4:c1:16:26:8c:15:7c:d6:b2:17: d6:f6:d6:16:56:2b:af:7f:a5:be:5e:30:48:80:f1: 9f:45:88:bd:1f:c8:80:1e:3e:fd:31:30:64:96:05: 34:63:4f:c9:9b:60:80:54:c4:d7:9d:09:8a:20:32: a7:ed:ab:48:3d:cc:7f:67:0d:a4:00:ff:ca:d9:1e: 9b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5E:69:1B:A6:EC:64:F8:1F:1E:AF:D4:09:03:FC:FC:CC:53:A9:4E X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c9:87:29:b9:02:41:d7:69:84:91:8d:0f:91:ea:01:91:40: f6:7b:86:d4:db:f8:be:76:b7:7c:80:83:5c:dc:b4:5d:ed:0d: 00:ce:03:e3:78:f8:65:44:e6:7e:b0:6b:33:87:01:73:fc:4c: a2:a9:0c:ea:b3:06:c4:bb:26:92:05:23:ea:e0:54:d4:b6:42: cf:db:e1:8b:11:a9:dc:81:11:41:7c:55:e2:27:37:68:da:18: 91:51:ef:c1:ad:8b:87:db:79:70:3d:2c:3e:58:01:09:b6:a2: ee:43:a6:1e:7e:4c:30:3e:7b:e0:17:72:8b:74:5c:95:aa:fc: 71:50:1b:b8:58:35:f0:af:86:40:78:97:fe:64:a9:ab:b4:09: d3:a0:fd:01:c8:3d:ce:bc:00:8e:c1:68:11:50:11:ac:93:9c: 6b:d1:ab:95:24:a3:31:11:a8:34:5d:65:9e:19:9a:51:9c:e4: 44:f7:7a:34:bf:b8:00:cd:ed:80:15:d4:02:00:b6:d3:44:0d: 63:37:5c:26:14:fa:64:f6:13:d2:0c:76:13:fa:f9:0d:0e:e8: d4:fa:f4:15:5a:b9:ef:e6:5a:8a:0f:73:b1:9a:34:e2:7f:cd: cb:7c:6f:5c:88:82:cb:7b:94:7f:bb:07:68:54:a1:ca:41:c9: fa:44:ab:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOkQkJVRTO47ipwzvdsG3RCuqRFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNjAzMDEwODM3MTFaFw0yNjAzMDQwOTIzMTFaMDMxMTAvBgNV BAMTKDlFNUU2OTFCQTZFQzY0RjgxRjFFQUZENDA5MDNGQ0ZDQ0M1M0E5NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcIeUe3QlcOgOQCIVN+rCfyz+p J9V8XOu2OFp0lhcMYw0n4aytaFKRYZ+megY6GSRC5jDpdkRhpwgIz5WF85wDARfw yRajaeqd6BzWB/ZOqfaBbZXuupDO5wH+M9QfORTtLkTUrprW2pYeqDkXw6escphw pm3kla/2rJk8AYANT9be2g5Sek9T+xLn53GaeZ3bjDqqqP7+QsBNY/9sgS4NWiOX 03IXLC1D2V/6WMrQH4zpjjyM8piRpMEWJowVfNayF9b21hZWK69/pb5eMEiA8Z9F iL0fyIAePv0xMGSWBTRjT8mbYIBUxNedCYogMqftq0g9zH9nDaQA/8rZHpu5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnl5pG6bsZPgfHq/UCQP8/MxTqU4wHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcx QkQ4Njk5RkU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXJhym5AkHXaYSRjQ+R6gGRQPZ7htTb+L52 t3yAg1zctF3tDQDOA+N4+GVE5n6wazOHAXP8TKKpDOqzBsS7JpIFI+rgVNS2Qs/b 4YsRqdyBEUF8VeInN2jaGJFR78Gti4fbeXA9LD5YAQm2ou5Dph5+TDA+e+AXcot0 XJWq/HFQG7hYNfCvhkB4l/5kqau0CdOg/QHIPc68AI7BaBFQEayTnGvRq5UkozER qDRdZZ4ZmlGc5ET3ejS/uADN7YAV1AIAttNEDWM3XCYU+mT2E9IMdhP6+Q0O6NT6 9BVaue/mWooPc7GaNOJ/zct8b1yIgst7lH+7B2hUocpByfpEq1E= -----END CERTIFICATE-----Generated at Mon Mar 2 21:29:57 2026 by rpki-client