$ rpki-client -vvf repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft File: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft (raw, json) Hash identifier: I7SoJdcPPZb+xQNM5UBByQQX4pGja7qU/qVrmTRUD84= Subject key identifier: 73:AC:06:97:AD:FB:27:8D:2E:BC:9B:34:96:95:C2:53:68:CB:BB:31 Authority key identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 Certificate issuer: /CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Certificate serial: 270EF021E4940B2D7B4A1CE74972E88CB72E4E4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft Manifest number: 0132 Signing time: Sun 01 Mar 2026 21:50:40 +0000 Manifest this update: Sun 01 Mar 2026 21:45:40 +0000 Manifest next update: Wed 04 Mar 2026 23:07:40 +0000 Files and hashes: 1: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: 21V3VhnP5vTGuoZJBlAnPnSOpi0hh8WGXahM4wGxnKo=) 2: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: C39+1H0Bi9PjQOJYBQUdIEuPft+etivv7dszlwc93Yw=) 3: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl (hash: msKldDU77NlwPpJfeymJSImpTZp3f5MCs2dwxn0c+d8=) 4: 323430343a653730303a3a2f33322d3438203d3e20313331373238.roa (hash: +/N3DsGhdJUZyRGC4N9f9R2ZbeB7qPD2DAQ97WyJYBk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:0e:f0:21:e4:94:0b:2d:7b:4a:1c:e7:49:72:e8:8c:b7:2e:4e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Validity Not Before: Mar 1 21:45:40 2026 GMT Not After : Mar 4 23:07:40 2026 GMT Subject: CN=73AC0697ADFB278D2EBC9B349695C25368CBBB31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:02:21:37:d4:22:a3:28:32:07:09:46:aa:1c: 3f:d4:23:0a:5d:c3:c5:23:24:4d:7a:d8:2f:30:f1: fe:00:bf:c4:92:52:72:4c:ab:71:a1:2c:ef:aa:93: 2b:cf:33:ab:06:f9:94:2e:2d:bf:ca:3f:3b:8e:a9: 44:a5:19:62:39:72:3d:90:e5:eb:a1:21:37:34:c5: 50:90:bb:eb:b5:2f:9d:22:65:3e:7d:76:a8:21:74: 7e:08:78:63:8a:06:78:73:aa:de:90:1d:e3:c3:ca: dd:8d:28:f1:0b:e7:89:a8:a2:ac:da:71:83:a2:01: 74:0e:30:89:5c:07:41:d6:26:0e:41:7c:9b:3c:50: e3:c5:79:2f:7c:30:ad:ad:36:40:16:19:58:a1:fe: 27:5a:31:9c:4c:6c:1f:7f:6b:9d:1b:f8:d6:1a:89: 98:5f:b3:a2:dc:5b:dd:9a:6a:ab:3f:86:ea:e3:66: d3:3f:39:3f:1e:d8:78:8a:27:4e:e7:be:07:83:1f: dc:a0:7a:79:16:5c:78:64:09:e7:80:40:3a:dc:15: ac:3f:9e:fe:ab:3f:02:a3:0b:bf:7d:e8:fb:86:d4: 2d:8f:64:78:47:c0:2b:97:e9:11:17:fb:b3:f3:db: f1:a5:83:53:6a:26:2f:71:ca:70:6e:57:82:6c:65: 31:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AC:06:97:AD:FB:27:8D:2E:BC:9B:34:96:95:C2:53:68:CB:BB:31 X509v3 Authority Key Identifier: keyid:DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ab:f3:24:a4:b8:57:87:15:12:11:b1:60:1b:4a:d9:f9:d0: ec:ac:d5:96:a0:d5:4b:6f:cf:56:bb:65:7d:78:85:9f:7c:0f: 44:a6:7c:4b:3d:db:82:60:ca:2a:bd:e6:f4:67:ca:0b:6a:a1: 8d:22:ef:e6:72:3a:98:07:4e:72:17:d6:54:b3:69:86:d3:45: 8b:d5:a9:4b:53:1d:f1:5c:33:c8:5a:e4:f9:4b:e0:a1:35:57: f5:d8:c5:d2:36:15:57:4f:15:b9:ba:da:30:97:64:14:e7:6a: 1a:6b:02:89:b9:9a:4c:7d:11:e7:23:6a:19:b0:0e:46:7b:dd: a3:aa:e9:70:9b:d9:a8:a4:32:6e:6d:6f:0a:bd:46:50:54:11: ac:65:9c:ee:44:43:9e:cc:a7:bb:6e:1c:c4:ac:54:5c:65:b7: ce:74:da:4a:40:bc:6c:57:6b:45:7d:47:d5:85:60:95:6a:d0: 00:5f:b6:61:54:15:74:3b:f9:1a:50:4d:e0:e8:1d:03:c5:c7: cc:5d:f4:9d:bf:7f:1c:5d:76:0d:e6:60:20:f1:02:12:1b:ad: 2f:fc:c4:fd:92:53:3f:5e:3d:ff:38:a6:e0:af:c8:88:db:6e: 09:a4:d2:bd:c0:53:bf:bf:19:c5:69:5c:c6:b8:12:2f:6a:8e: ca:b7:aa:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJw7wIeSUCy17ShznSXLojLcuTk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFC OTU4RTRDNDAeFw0yNjAzMDEyMTQ1NDBaFw0yNjAzMDQyMzA3NDBaMDMxMTAvBgNV BAMTKDczQUMwNjk3QURGQjI3OEQyRUJDOUIzNDk2OTVDMjUzNjhDQkJCMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbAiE31CKjKDIHCUaqHD/UIwpd w8UjJE162C8w8f4Av8SSUnJMq3GhLO+qkyvPM6sG+ZQuLb/KPzuOqUSlGWI5cj2Q 5euhITc0xVCQu+u1L50iZT59dqghdH4IeGOKBnhzqt6QHePDyt2NKPEL54mooqza cYOiAXQOMIlcB0HWJg5BfJs8UOPFeS98MK2tNkAWGVih/idaMZxMbB9/a50b+NYa iZhfs6LcW92aaqs/hurjZtM/OT8e2HiKJ07nvgeDH9ygenkWXHhkCeeAQDrcFaw/ nv6rPwKjC7996PuG1C2PZHhHwCuX6REX+7Pz2/Glg1NqJi9xynBuV4JsZTG/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc6wGl637J40uvJs0lpXCU2jLuzEwHwYDVR0j BBgwFoAU23JerC3R5it6AsVKYY16AblY5MQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDE1YTg1NS1iMjljLTQ1MDItYWY4MS1jYmI4YjRmN2YwZjcvMC9EQjcyNUVBQzJE RDFFNjJCN0EwMkM1NEE2MThEN0EwMUI5NThFNEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFCOTU4 RTRDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdB MDFCOTU4RTRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGr8ySkuFeHFRIRsWAbStn50Oys1Zag1Utv z1a7ZX14hZ98D0SmfEs924Jgyiq95vRnygtqoY0i7+ZyOpgHTnIX1lSzaYbTRYvV qUtTHfFcM8ha5PlL4KE1V/XYxdI2FVdPFbm62jCXZBTnahprAom5mkx9Eecjahmw DkZ73aOq6XCb2aikMm5tbwq9RlBUEaxlnO5EQ57Mp7tuHMSsVFxlt8502kpAvGxX a0V9R9WFYJVq0ABftmFUFXQ7+RpQTeDoHQPFx8xd9J2/fxxddg3mYCDxAhIbrS/8 xP2SUz9ePf84puCvyIjbbgmk0r3AU7+/GcVpXMa4Ei9qjsq3qvc= -----END CERTIFICATE-----Generated at Mon Mar 2 09:25:15 2026 by rpki-client