$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json) Hash identifier: aZL76xWyBQ9dRDBwlgoaj8Ul9Oqw2AesG6E40rj2jwo= Subject key identifier: 87:A8:C8:24:E0:B1:37:7F:88:A7:DA:EB:BB:83:68:2B:BB:29:F3:E7 Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Certificate serial: 4C76CC32EA7107B95485AF8F09C79696AB69554B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft Manifest number: 056A Signing time: Thu 16 Apr 2026 05:41:53 +0000 Manifest this update: Thu 16 Apr 2026 05:36:53 +0000 Manifest next update: Sun 19 Apr 2026 16:30:53 +0000 Files and hashes: 1: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 7MfETz0OOU0/EW0Af0KTT2gYnfzpkWj/UcRR+LXANfU=) 2: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: SgJaLekQ3Q9cVNBqu5Sas48wyzpxdaLZB6LIMnNqJ+c=) 3: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: yangIWxRfp5g4q3g5tzxpJf4/ZTvbChL+OGjEKq0xNw=) 4: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: m8ulmLGMv8HZrO7rEBb85yrkegjETeKBOTpJ9RaWxyc=) 5: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: iDwSin9srOGKT5atOmt0iLuShHzndQDwuU2x/RU2cYM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 16:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:76:cc:32:ea:71:07:b9:54:85:af:8f:09:c7:96:96:ab:69:55:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Validity Not Before: Apr 16 05:36:53 2026 GMT Not After : Apr 19 16:30:53 2026 GMT Subject: CN=87A8C824E0B1377F88A7DAEBBB83682BBB29F3E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7c:c1:bc:e5:29:7c:e2:db:c5:a4:91:e0:14: e3:71:fc:4b:ee:61:03:6f:f7:af:49:f9:53:6a:34: b9:84:96:9e:04:18:6d:cb:4c:2f:65:7f:f0:f3:eb: eb:6a:fa:d9:92:49:b7:b0:df:ff:67:7f:01:91:1c: 53:c9:5f:ac:4a:9a:80:d2:aa:c3:5c:46:cb:04:88: a1:3f:5d:98:17:b7:ee:d6:69:f0:75:73:e8:e2:e5: 7f:1a:5f:fd:7a:09:ea:ca:a0:e0:0d:56:22:d7:16: c8:7c:c0:b8:7f:0b:44:29:da:8a:55:1d:96:56:d1: 31:79:b9:65:31:ef:77:f1:82:18:c5:f9:89:22:f1: 18:3f:c6:4b:73:34:a6:a4:79:6b:1e:4d:a0:89:58: 99:60:6c:31:3c:55:20:d0:bf:93:dc:49:6d:88:99: a0:47:b4:08:5e:a3:29:a1:12:7b:3c:b1:80:fb:a3: 30:db:75:cc:12:c9:46:72:d6:3d:d3:e4:ca:74:b2: d1:9f:62:4a:a3:3c:da:80:9f:fd:d4:fc:a4:19:ff: c8:52:ba:c7:4d:cd:ce:42:7d:7d:84:d0:18:f0:7d: 04:8d:c2:2c:f6:d9:9a:9b:b3:8c:7e:c2:a3:c2:db: 0a:c3:a4:eb:6b:93:2d:fb:8e:e3:16:de:ea:c6:37: 18:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A8:C8:24:E0:B1:37:7F:88:A7:DA:EB:BB:83:68:2B:BB:29:F3:E7 X509v3 Authority Key Identifier: keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:16:45:91:9f:89:ed:59:e7:bd:a5:05:22:87:2b:e1:02:4f: 54:31:b9:21:82:71:bf:aa:0e:6a:00:29:41:6f:d8:57:b3:3b: b6:df:76:61:ab:64:7a:2f:60:c2:13:e0:a0:b6:43:23:05:2d: 9d:bd:90:ea:f0:cb:84:28:05:5b:59:b2:b3:11:66:d1:53:2d: 4a:22:66:c8:47:1c:e2:e5:58:37:c6:ce:e3:12:31:02:6c:ed: 32:b9:df:a4:1f:6f:78:e6:64:03:b7:b4:a0:38:e4:8f:d6:77: 13:d9:db:2f:a9:43:f5:b5:fc:52:25:bf:5c:2a:7d:3a:9c:f6: 38:fd:f6:1b:45:3f:a0:19:c6:db:64:79:02:58:5e:6b:6e:e1: 76:42:d3:5c:12:cf:fe:d9:89:91:94:57:49:0c:33:7d:97:3e: 0e:dc:c9:86:15:e1:fb:1d:15:45:d8:33:a6:d2:7d:a3:65:0d: e2:ab:1b:52:c2:bc:90:95:e5:01:84:cb:d2:ec:42:7a:a4:9c: de:6d:ab:4a:bb:dc:04:54:86:ff:e6:b0:1a:fc:4e:fa:e6:80: 0c:a1:a4:3a:05:b5:c0:6f:a0:aa:5a:12:b6:a7:95:de:e1:0b: 78:aa:c9:9a:2b:a2:42:ae:62:dc:80:74:1a:9b:28:bd:dc:ec: 61:32:63:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTHbMMupxB7lUha+PCceWlqtpVUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy REMyRDdGMzAeFw0yNjA0MTYwNTM2NTNaFw0yNjA0MTkxNjMwNTNaMDMxMTAvBgNV BAMTKDg3QThDODI0RTBCMTM3N0Y4OEE3REFFQkJCODM2ODJCQkIyOUYzRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSfMG85Sl84tvFpJHgFONx/Evu YQNv969J+VNqNLmElp4EGG3LTC9lf/Dz6+tq+tmSSbew3/9nfwGRHFPJX6xKmoDS qsNcRssEiKE/XZgXt+7WafB1c+ji5X8aX/16CerKoOANViLXFsh8wLh/C0Qp2opV HZZW0TF5uWUx73fxghjF+Yki8Rg/xktzNKakeWseTaCJWJlgbDE8VSDQv5PcSW2I maBHtAheoymhEns8sYD7ozDbdcwSyUZy1j3T5Mp0stGfYkqjPNqAn/3U/KQZ/8hS usdNzc5CfX2E0BjwfQSNwiz22Zqbs4x+wqPC2wrDpOtrky37juMW3urGNxhBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh6jIJOCxN3+Ip9rru4NoK7sp8+cwHwYDVR0j BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy RDdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3 OUQyREMyRDdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIWRZGfie1Z572lBSKHK+ECT1QxuSGCcb+q DmoAKUFv2FezO7bfdmGrZHovYMIT4KC2QyMFLZ29kOrwy4QoBVtZsrMRZtFTLUoi ZshHHOLlWDfGzuMSMQJs7TK536Qfb3jmZAO3tKA45I/WdxPZ2y+pQ/W1/FIlv1wq fTqc9jj99htFP6AZxttkeQJYXmtu4XZC01wSz/7ZiZGUV0kMM32XPg7cyYYV4fsd FUXYM6bSfaNlDeKrG1LCvJCV5QGEy9LsQnqknN5tq0q73ARUhv/msBr8TvrmgAyh pDoFtcBvoKpaEranld7hC3iqyZorokKuYtyAdBqbKL3c7GEyY1w= -----END CERTIFICATE-----Generated at Fri Apr 17 23:38:18 2026 by rpki-client