$ rpki-client -vvf repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft File: DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft (raw, json) Hash identifier: zmSwpapjCGaVowL40jfxGN75SSrD7o7+tQ/iGF0lpO0= Subject key identifier: 85:7F:DF:B5:E0:A6:41:E7:EA:1E:7E:86:C5:81:5D:91:EC:38:54:AA Authority key identifier: DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F Certificate issuer: /CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F Certificate serial: 5E6708CBF6C1E0895D40199595FD49D734BF0633 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft Manifest number: 0108 Signing time: Sun 01 Mar 2026 20:30:56 +0000 Manifest this update: Sun 01 Mar 2026 20:25:56 +0000 Manifest next update: Thu 05 Mar 2026 06:59:56 +0000 Files and hashes: 1: 3130332e35322e3231332e302f32342d3234203d3e20313333383136.roa (hash: ddnEDu4ujzH2U+wrCuFYzTTZ0z5ZKNzjOcLkosVrgEM=) 2: DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl (hash: QyhAtjoZ2tSB/9nr7I478V+b0rvHPbk4b7FnVYefMv8=) 3: 3130332e3138352e3139362e302f32342d3234203d3e20313333383136.roa (hash: OBAMIR6o88w8OfvjKc+CvsxLTJpjUECRIBtfHRF/vnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:67:08:cb:f6:c1:e0:89:5d:40:19:95:95:fd:49:d7:34:bf:06:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F Validity Not Before: Mar 1 20:25:56 2026 GMT Not After : Mar 5 06:59:56 2026 GMT Subject: CN=857FDFB5E0A641E7EA1E7E86C5815D91EC3854AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:69:8d:01:6d:1f:98:c2:70:d9:eb:d6:8e:65: a4:15:ce:0c:df:e3:d9:4f:56:e4:ef:50:ec:12:0b: 0c:60:a8:ff:02:95:f2:6e:a6:86:57:7e:96:48:ca: 81:82:c6:b3:78:be:5d:f6:eb:6d:b4:44:df:06:0f: ef:d0:2f:a9:c2:12:12:f6:52:d5:91:3f:a7:26:d9: cd:79:c3:15:31:25:64:ea:a9:4d:f3:ff:f9:bd:cc: fb:03:d8:44:25:8e:6f:f5:c5:1b:a0:f0:25:0c:20: 5f:7d:a1:bf:bb:cd:57:04:38:80:6e:f0:65:50:f9: 16:5b:d7:40:a8:72:4f:a4:20:c5:e6:7f:d3:19:8f: 45:99:d8:d4:7a:04:c7:96:ee:f7:9e:b3:f5:5d:22: 57:98:05:df:5e:9f:f4:1c:6f:3c:31:48:bf:c2:ff: 56:b3:92:e6:9f:0f:96:95:b4:e3:c9:60:43:28:1e: c8:f2:b9:4f:ff:85:ee:af:cd:78:30:96:fe:f8:81: 30:66:0f:f0:d7:72:d4:67:97:52:0d:32:55:a4:1c: 7f:72:b5:17:c2:60:ed:ca:78:9c:b8:78:09:3e:ee: ca:d6:ea:98:90:e7:a5:d7:2f:00:80:d4:ea:4b:6d: 46:22:94:bd:59:70:2e:88:23:6c:e6:9d:e9:cc:d9: d2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7F:DF:B5:E0:A6:41:E7:EA:1E:7E:86:C5:81:5D:91:EC:38:54:AA X509v3 Authority Key Identifier: keyid:DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4b:56:a4:7f:a2:37:89:10:dc:30:67:23:9d:bc:43:d3:45: 30:36:ed:c3:cf:9b:b1:35:34:4a:84:ca:41:dc:cd:00:1b:f4: c3:c4:b6:81:53:7d:40:2e:0c:56:9c:fa:96:ef:14:cb:0b:9f: b8:52:da:1d:25:54:c8:46:d8:12:71:0d:84:f1:f6:97:8d:10: 7b:44:4e:2c:90:30:1b:c0:a8:f7:97:37:eb:0a:4f:08:8a:92: c1:1e:f2:6a:6e:fd:78:c3:a8:b3:e6:3e:47:a3:32:52:71:df: 5a:ba:82:0a:f4:a2:a9:45:b2:45:6b:94:a2:b6:b4:a8:ac:39: 84:8a:22:97:61:91:f8:2b:74:7d:b7:cf:e9:17:ee:dc:a1:22: a0:aa:75:20:73:44:c6:ca:6b:64:c0:71:4f:92:65:27:cb:40: 51:79:3d:9c:1f:37:a9:86:a9:81:68:bb:dc:aa:4e:86:3b:b7: 7e:c7:87:5e:21:65:7b:16:28:38:d5:fc:a8:e5:ba:55:b1:20: 01:fa:60:96:25:a6:a6:12:e6:72:f0:af:d1:2c:dd:fb:3a:b9: 66:41:85:1e:ca:5b:c3:66:2d:a9:82:03:84:0c:9d:f1:32:4b: 48:fc:b8:39:e6:9d:84:ac:bb:c3:87:53:c9:c6:0a:b3:87:df: 71:ee:1e:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmcIy/bB4IldQBmVlf1J1zS/BjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZCMzk5 MkQ1REY2RjAeFw0yNjAzMDEyMDI1NTZaFw0yNjAzMDUwNjU5NTZaMDMxMTAvBgNV BAMTKDg1N0ZERkI1RTBBNjQxRTdFQTFFN0U4NkM1ODE1RDkxRUMzODU0QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSaY0BbR+YwnDZ69aOZaQVzgzf 49lPVuTvUOwSCwxgqP8ClfJupoZXfpZIyoGCxrN4vl326220RN8GD+/QL6nCEhL2 UtWRP6cm2c15wxUxJWTqqU3z//m9zPsD2EQljm/1xRug8CUMIF99ob+7zVcEOIBu 8GVQ+RZb10Cock+kIMXmf9MZj0WZ2NR6BMeW7vees/VdIleYBd9en/QcbzwxSL/C /1azkuafD5aVtOPJYEMoHsjyuU//he6vzXgwlv74gTBmD/DXctRnl1INMlWkHH9y tRfCYO3KeJy4eAk+7srW6piQ56XXLwCA1OpLbUYilL1ZcC6II2zmnenM2dJxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhX/fteCmQefqHn6GxYFdkew4VKowHwYDVR0j BBgwFoAU25tNEnnmxksM3fWT+wBrOZLV328wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTlhYmIxYS1kNmMwLTQ1NGYtODcwYS04YmVlZGQ4MWZjZDIvMC9EQjlCNEQxMjc5 RTZDNjRCMENEREY1OTNGQjAwNkIzOTkyRDVERjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZCMzk5MkQ1 REY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGU5YWJiMWEtZDZjMC00NTRmLTg3 MGEtOGJlZWRkODFmY2QyLzAvREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZC Mzk5MkQ1REY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1LVqR/ojeJENwwZyOdvEPTRTA27cPPm7E1 NEqEykHczQAb9MPEtoFTfUAuDFac+pbvFMsLn7hS2h0lVMhG2BJxDYTx9peNEHtE TiyQMBvAqPeXN+sKTwiKksEe8mpu/XjDqLPmPkejMlJx31q6ggr0oqlFskVrlKK2 tKisOYSKIpdhkfgrdH23z+kX7tyhIqCqdSBzRMbKa2TAcU+SZSfLQFF5PZwfN6mG qYFou9yqToY7t37Hh14hZXsWKDjV/KjlulWxIAH6YJYlpqYS5nLwr9Es3fs6uWZB hR7KW8NmLamCA4QMnfEyS0j8uDnmnYSsu8OHU8nGCrOH33HuHk0= -----END CERTIFICATE-----Generated at Sun Mar 1 23:58:12 2026 by rpki-client