$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json) Hash identifier: HfIkv4WnXWehE+9KCpSnH8mg3bsf5MFRK0VYTa5t7TQ= Subject key identifier: B4:C0:18:F0:27:AC:43:12:DB:9D:11:4C:19:B6:3E:CD:41:DA:35:38 Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Certificate serial: 0D40DEDC9C963648901945BDA7206D3DA9148405 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft Manifest number: 0555 Signing time: Sat 28 Feb 2026 07:31:49 +0000 Manifest this update: Sat 28 Feb 2026 07:26:49 +0000 Manifest next update: Tue 03 Mar 2026 16:02:49 +0000 Files and hashes: 1: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: yangIWxRfp5g4q3g5tzxpJf4/ZTvbChL+OGjEKq0xNw=) 2: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: iDwSin9srOGKT5atOmt0iLuShHzndQDwuU2x/RU2cYM=) 3: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 7MfETz0OOU0/EW0Af0KTT2gYnfzpkWj/UcRR+LXANfU=) 4: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: SgJaLekQ3Q9cVNBqu5Sas48wyzpxdaLZB6LIMnNqJ+c=) 5: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: YtHyJNu5EtfH9GZH8eR9+RMFzFWx7WBVgH/ATRAgXrE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:40:de:dc:9c:96:36:48:90:19:45:bd:a7:20:6d:3d:a9:14:84:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Validity Not Before: Feb 28 07:26:49 2026 GMT Not After : Mar 3 16:02:49 2026 GMT Subject: CN=B4C018F027AC4312DB9D114C19B63ECD41DA3538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:75:31:08:b2:a3:01:0c:44:28:77:f1:34:0e: 97:da:1e:e1:dd:48:bb:a5:64:26:90:73:b1:79:26: 4a:d9:cf:63:61:f3:3e:50:36:c3:3a:57:df:44:21: e7:35:5e:05:e2:b0:6b:2c:f2:cd:4f:b3:8c:3d:15: 3f:51:5b:82:49:30:d2:b9:1c:19:12:b9:03:c3:95: 7d:fe:c7:49:c3:a7:b1:0b:95:32:5d:bb:18:ee:1f: 0a:62:75:c8:c4:de:ab:39:f1:f2:c2:44:8e:f7:00: ac:b3:7d:09:37:03:fa:ea:04:b9:ff:d2:5a:4c:55: d6:0b:8d:90:c9:35:19:58:5c:77:8c:7e:c6:14:69: 56:ab:2e:e7:93:2e:8a:00:24:ba:4a:ba:2d:05:e3: 8c:b8:71:08:25:4f:25:1f:eb:3d:16:82:73:8e:03: 68:31:51:53:66:16:c6:68:26:55:bd:50:f2:93:10: 67:da:38:93:96:4a:d3:fb:eb:f5:76:48:25:68:b4: 44:45:21:b5:58:b0:a2:3f:16:d5:ac:6b:3d:e6:fd: 4c:3f:0b:14:cb:55:62:be:a0:3c:5d:ab:ac:ff:95: 8c:8e:99:8a:cd:ea:4c:9c:08:b0:1f:7b:9c:17:f1: 4c:e5:d3:5c:55:d7:33:db:b3:a0:74:6b:e6:85:31: f0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C0:18:F0:27:AC:43:12:DB:9D:11:4C:19:B6:3E:CD:41:DA:35:38 X509v3 Authority Key Identifier: keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1b:28:78:a4:7c:b5:86:6b:d1:5a:1e:bb:a9:1a:67:b1:48: bd:9a:1b:30:be:9f:da:cd:b2:0f:3f:3e:96:53:6b:99:de:dd: 0d:d4:3f:82:5d:8a:25:e8:4b:36:8c:c8:33:3b:b7:3d:40:6e: 0a:50:1f:2c:4b:2f:8c:01:ae:77:fa:05:37:c2:72:9d:59:7f: 44:3d:1b:5f:1c:ca:99:ab:d2:fb:5d:3d:ad:22:9b:ff:0f:c8: 15:54:cb:73:18:b9:2c:06:5e:69:b2:9b:78:28:2c:32:76:ee: aa:66:15:8c:31:15:4f:29:44:3b:9e:7f:89:45:0a:c7:3b:20: 36:12:59:f1:b8:a7:f1:14:52:22:f7:d6:e9:b5:3d:88:f5:7d: 3a:c5:8c:e9:e9:42:4b:05:f8:69:b6:b7:80:95:ad:ac:fe:fa: cc:31:2f:9f:e0:0e:9f:e6:5c:ce:09:a0:cd:e4:b8:84:45:57: fd:20:9f:f7:fb:d7:97:4c:9f:42:fd:2b:03:9e:78:09:51:0a: 53:2f:dd:18:0b:48:33:69:ee:16:e0:8f:84:3c:20:6c:2b:eb: 55:61:cb:23:17:4e:ff:23:78:8b:73:cd:78:e6:68:ce:59:a3: d1:1c:8c:ad:02:cd:bb:d0:17:09:35:75:2f:c9:68:f4:ac:62: e0:1d:4b:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDUDe3JyWNkiQGUW9pyBtPakUhAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy REMyRDdGMzAeFw0yNjAyMjgwNzI2NDlaFw0yNjAzMDMxNjAyNDlaMDMxMTAvBgNV BAMTKEI0QzAxOEYwMjdBQzQzMTJEQjlEMTE0QzE5QjYzRUNENDFEQTM1MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCudTEIsqMBDEQod/E0DpfaHuHd SLulZCaQc7F5JkrZz2Nh8z5QNsM6V99EIec1XgXisGss8s1Ps4w9FT9RW4JJMNK5 HBkSuQPDlX3+x0nDp7ELlTJduxjuHwpidcjE3qs58fLCRI73AKyzfQk3A/rqBLn/ 0lpMVdYLjZDJNRlYXHeMfsYUaVarLueTLooAJLpKui0F44y4cQglTyUf6z0WgnOO A2gxUVNmFsZoJlW9UPKTEGfaOJOWStP76/V2SCVotERFIbVYsKI/FtWsaz3m/Uw/ CxTLVWK+oDxdq6z/lYyOmYrN6kycCLAfe5wX8Uzl01xV1zPbs6B0a+aFMfDZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtMAY8CesQxLbnRFMGbY+zUHaNTgwHwYDVR0j BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy RDdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3 OUQyREMyRDdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4bKHikfLWGa9FaHrupGmexSL2aGzC+n9rN sg8/PpZTa5ne3Q3UP4JdiiXoSzaMyDM7tz1AbgpQHyxLL4wBrnf6BTfCcp1Zf0Q9 G18cypmr0vtdPa0im/8PyBVUy3MYuSwGXmmym3goLDJ27qpmFYwxFU8pRDuef4lF Csc7IDYSWfG4p/EUUiL31um1PYj1fTrFjOnpQksF+Gm2t4CVraz++swxL5/gDp/m XM4JoM3kuIRFV/0gn/f715dMn0L9KwOeeAlRClMv3RgLSDNp7hbgj4Q8IGwr61Vh yyMXTv8jeItzzXjmaM5Zo9EcjK0CzbvQFwk1dS/JaPSsYuAdS+I= -----END CERTIFICATE-----Generated at Mon Mar 2 14:27:02 2026 by rpki-client