$ rpki-client -vvf repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft File: DBF597EA29EF8A70656446AF75CF33F0618E8282.mft (raw, json) Hash identifier: 7H6oAZ9VKPd2myFFCqkMwj8fWtQ01576QboCiDBZ1G0= Subject key identifier: 49:E1:14:E0:27:AF:01:E9:07:B4:53:F3:88:CA:6E:D5:A4:F6:21:F9 Authority key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 Certificate issuer: /CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Certificate serial: 45348528B77AAFCECA4AB2BCEA252E1CF50E6C41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft Manifest number: 0554 Signing time: Sun 01 Mar 2026 12:12:29 +0000 Manifest this update: Sun 01 Mar 2026 12:07:29 +0000 Manifest next update: Wed 04 Mar 2026 20:20:29 +0000 Files and hashes: 1: 323430363a363230303a3a2f33322d3438203d3e203233373536.roa (hash: RDF8kXfxQQ2EWR27pMBSl3bUi8DuM2mKbwzECDZeSOA=) 2: 3130332e3234322e3230342e302f32322d3234203d3e203233373536.roa (hash: WzW/Sss6A/kpJfugXeZWPxd++ZE3y6mEfaDI33YMU+M=) 3: 3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (hash: TuGeKAZ5K1Zu0PRUHP6LxUEiVAWHwbRLn6V580rSqpM=) 4: 3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa (hash: fVRsxuz3woE7uahLGANS8nBiT+UdU+qUUJ2Y/SNoU9E=) 5: DBF597EA29EF8A70656446AF75CF33F0618E8282.crl (hash: lTG7vRkHP1OK4wpI/04KuQJG87Szf7xdndj7mYqItV8=) 6: 3230322e362e3232342e302f32302d3234203d3e203233373536.roa (hash: RLSgg2xBR0eY1oQJ2Fkz63ShTm+IebfyQIgkaUmONdM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:34:85:28:b7:7a:af:ce:ca:4a:b2:bc:ea:25:2e:1c:f5:0e:6c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Validity Not Before: Mar 1 12:07:29 2026 GMT Not After : Mar 4 20:20:29 2026 GMT Subject: CN=49E114E027AF01E907B453F388CA6ED5A4F621F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1c:97:12:42:ef:53:97:ce:61:f6:69:c5:8d: 5f:a4:dc:fb:b3:d9:96:8d:a9:1a:f2:aa:54:84:fd: 90:1c:03:3a:6f:84:2a:ba:39:00:7f:f4:2b:72:03: 25:d2:d3:f3:e9:60:85:90:57:44:ff:78:6c:3f:c6: 95:5c:c8:b3:29:5a:db:2b:96:c1:bd:b1:cd:8a:e9: 4e:0d:37:49:43:87:84:a7:2f:3b:2b:9a:c3:83:da: 48:89:ca:cc:7d:99:15:ed:f3:01:70:31:3a:41:94: 16:44:24:77:53:1d:28:9d:bd:93:8f:08:bc:40:b0: 13:7e:a0:7f:22:3a:a2:0b:74:8e:58:db:a4:c3:9f: f3:17:3b:1b:05:7c:73:59:c2:fa:cd:ec:2b:2a:c8: 39:8f:02:af:d7:aa:5c:b3:28:05:4e:c1:46:4e:fe: dc:4b:a0:41:33:dd:ad:99:b1:11:2c:3d:54:ef:d2: 1f:85:c0:78:bb:0e:34:e5:81:39:bd:3b:0a:5d:54: f1:88:15:29:b1:e6:79:3f:6d:d6:d0:06:af:1c:a4: a6:6a:2c:3b:f1:30:07:78:51:f9:40:28:1b:c2:9a: dc:1e:3c:98:73:9b:a1:2a:72:82:2e:a8:7d:b2:c9: bb:60:2a:b3:95:e9:76:d2:26:e1:0e:5e:46:8a:fe: 71:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E1:14:E0:27:AF:01:E9:07:B4:53:F3:88:CA:6E:D5:A4:F6:21:F9 X509v3 Authority Key Identifier: keyid:DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:75:0f:d7:e8:e0:92:4f:97:9e:c8:d7:ec:6c:56:1d:0b:88: b8:07:93:bd:c7:f7:27:68:e3:19:d5:9d:41:5a:b4:a5:92:a3: b5:a5:bd:bf:14:18:a2:64:49:62:91:81:71:f0:89:be:b6:bf: 95:eb:72:3b:be:c4:45:90:36:bb:ec:30:b5:e7:d4:b8:2a:92: 55:a1:91:f1:4f:b3:82:cf:b1:e7:9f:7b:0a:05:9b:10:a8:d9: 12:e5:5f:2b:78:3e:f5:02:36:59:d4:bf:81:56:54:1d:07:60: d9:c9:38:b6:3f:5c:83:df:44:1a:15:6b:db:2b:cb:57:2b:28: 3a:2e:02:b4:fa:a4:ac:7f:30:9b:9d:85:d7:fc:c5:d2:ba:af: c8:7f:e4:a6:0b:67:91:f4:27:1b:d9:8a:6c:a9:d4:5d:b9:3f: 14:33:f3:e7:95:9d:ff:d5:97:5d:a8:bc:b1:78:1d:33:0b:2e: 4a:2e:71:67:33:40:53:bd:a9:61:65:1b:84:33:70:2b:e8:3d: d0:4b:40:fb:04:a3:95:26:f3:74:92:5e:93:72:3a:f7:e7:b5: 89:88:8d:ba:04:a9:d7:62:f2:12:26:0d:21:1f:8c:73:50:56: 87:d5:0b:a2:35:b0:25:ab:9d:9f:5c:3c:0d:27:ee:d0:c5:2e: 0c:d7:de:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURTSFKLd6r87KSrK86iUuHPUObEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2 MThFODI4MjAeFw0yNjAzMDExMjA3MjlaFw0yNjAzMDQyMDIwMjlaMDMxMTAvBgNV BAMTKDQ5RTExNEUwMjdBRjAxRTkwN0I0NTNGMzg4Q0E2RUQ1QTRGNjIxRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYHJcSQu9Tl85h9mnFjV+k3Puz 2ZaNqRryqlSE/ZAcAzpvhCq6OQB/9CtyAyXS0/PpYIWQV0T/eGw/xpVcyLMpWtsr lsG9sc2K6U4NN0lDh4SnLzsrmsOD2kiJysx9mRXt8wFwMTpBlBZEJHdTHSidvZOP CLxAsBN+oH8iOqILdI5Y26TDn/MXOxsFfHNZwvrN7CsqyDmPAq/XqlyzKAVOwUZO /txLoEEz3a2ZsREsPVTv0h+FwHi7DjTlgTm9OwpdVPGIFSmx5nk/bdbQBq8cpKZq LDvxMAd4UflAKBvCmtwePJhzm6EqcoIuqH2yybtgKrOV6XbSJuEOXkaK/nFPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSeEU4CevAekHtFPziMpu1aT2IfkwHwYDVR0j BBgwFoAU2/WX6invinBlZEavdc8z8GGOgoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDBmMWE2ZS04M2I2LTQ1MzQtOTY3ZC1mOGRiM2MzNzExZjQvMC9EQkY1OTdFQTI5 RUY4QTcwNjU2NDQ2QUY3NUNGMzNGMDYxOEU4MjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2MThF ODI4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQwZjFhNmUtODNiNi00NTM0LTk2 N2QtZjhkYjNjMzcxMWY0LzAvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMz RjA2MThFODI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA91D9fo4JJPl57I1+xsVh0LiLgHk73H9ydo 4xnVnUFatKWSo7Wlvb8UGKJkSWKRgXHwib62v5Xrcju+xEWQNrvsMLXn1LgqklWh kfFPs4LPseefewoFmxCo2RLlXyt4PvUCNlnUv4FWVB0HYNnJOLY/XIPfRBoVa9sr y1crKDouArT6pKx/MJudhdf8xdK6r8h/5KYLZ5H0JxvZimyp1F25PxQz8+eVnf/V l12ovLF4HTMLLkoucWczQFO9qWFlG4QzcCvoPdBLQPsEo5Um83SSXpNyOvfntYmI jboEqddi8hImDSEfjHNQVofVC6I1sCWrnZ9cPA0n7tDFLgzX3jE= -----END CERTIFICATE-----Generated at Mon Mar 2 22:49:10 2026 by rpki-client