$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft File: DD29F5E4CE561760A0212F0448987AFBE75263D7.mft (raw, json) Hash identifier: gL8y0twl2V94H1vTQV2sNoocV9x22lu7YJyQzM+kfZw= Subject key identifier: EB:CA:8A:58:64:16:0A:4C:4C:82:9B:0C:A0:01:A0:31:9B:88:50:B1 Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Certificate serial: 28B47102637E578817D8CB9C052A23D88550C52F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft Manifest number: 037B Signing time: Tue 24 Mar 2026 18:32:22 +0000 Manifest this update: Tue 24 Mar 2026 18:27:22 +0000 Manifest next update: Fri 27 Mar 2026 22:03:22 +0000 Files and hashes: 1: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (hash: 47GvXgllqrS1MxJptUYHVOsa05orn3J0qbEjvOU+c+c=) 2: 35382e3134372e3138392e302f32342d3234203d3e203234353334.roa (hash: yHFhz7s9vTM+0GwcewjykllWnmywdIchHv+vwnUyUtQ=) 3: 35382e3134372e3139302e302f32342d3234203d3e203234353334.roa (hash: hfJYX7IXK2yRsIkXzTXumWYWspYzmgD5u1H3fLVubkc=) 4: 3130332e34322e3132322e302f32342d3234203d3e203633353136.roa (hash: 5ScxcfML486iFVsWj/fUX6rjVFXkWRISgnQEhtwZ9No=) 5: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (hash: s32Asfb0Vk2AoqdXXpuFo/1b1Jpm9sVE9gF86xInAZ8=) 6: 323430343a393538303a33313a3a2f34382d3438203d3e203633353136.roa (hash: xAVHkwUJuceUhm1gZEhKbi4kqCLmB1DeBBYoJxsoYjY=) 7: 323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa (hash: +h69YPXoiC31k13cSEzWyv6wTFkos1CLOZsQnIEiGv0=) 8: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (hash: X9EKF8Z1uFLJC9IzjlT1aPQkzE/clRuy5X9NkdqNVow=) 9: 323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (hash: 1Jp8cCDyjncp4Wpa0IwwHsbMLezQ3Rf5CCYJ9Uaw69A=) 10: DD29F5E4CE561760A0212F0448987AFBE75263D7.crl (hash: sKg2yVuWinO7bATqf9d3wDqwMHDCHEiDw967t2rv+Nc=) 11: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (hash: 0+6+N7y7+z5+GZ0LUn4in9mnEACESucH1zgQmC9xHAA=) 12: 35382e3134372e3138372e302f32342d3234203d3e203234353334.roa (hash: R+HBHXL62WCqMu+S9XZ2lfDd7q3jJVRrizTgz3Qq4sM=) 13: 35382e3134372e3139312e302f32342d3234203d3e203234353334.roa (hash: 8qZ2PfVPSW4Gale+B6XAN2CyhRmIb70LvF4xop7XFFw=) 14: 35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (hash: x2jz47JNdTLcNfT8vbEKIJnVX3m/vRvrmqpmvqODREA=) 15: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (hash: wWYceKo3HVUOMgRcN2/P197TAtHkoSlPkbBqfdmOb58=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b4:71:02:63:7e:57:88:17:d8:cb:9c:05:2a:23:d8:85:50:c5:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Validity Not Before: Mar 24 18:27:22 2026 GMT Not After : Mar 27 22:03:22 2026 GMT Subject: CN=EBCA8A5864160A4C4C829B0CA001A0319B8850B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:86:1d:f5:81:18:63:cc:66:4b:19:8c:f9: 79:57:e5:70:f4:18:8d:fd:ad:49:2e:c5:30:4c:6c: e6:da:1d:30:bc:d4:62:f4:7a:e0:ac:af:c9:d9:8c: 63:cb:e3:27:a2:8b:b6:24:6b:c5:1f:8d:8c:a3:65: c0:d2:5d:ae:72:36:3a:7c:31:de:ed:c8:2c:1a:32: 47:99:d2:f9:00:e5:f8:49:57:96:05:30:bb:40:bf: 01:53:79:0d:04:41:9c:89:e2:bb:00:05:26:bb:3a: 0e:7a:ef:17:6a:0e:98:ac:47:e0:93:e4:f8:a5:8c: ab:39:94:99:cd:08:59:0d:cb:29:cb:a8:d3:61:13: 00:de:a6:1a:25:10:4e:26:26:20:08:0b:2f:1f:84: f0:26:5d:4e:34:e1:fd:3c:1c:15:63:78:a5:11:45: 13:d3:ff:ed:72:b0:62:6d:f4:bb:0c:2f:31:6d:b3: 2e:3f:e4:a0:4e:b6:6b:94:d9:6c:05:7c:7b:f0:27: c1:5d:d2:7a:4e:f7:90:f5:b5:ec:45:8c:65:ff:97: a9:a9:40:b4:5b:8c:e8:09:7d:cb:b5:6e:6a:32:5d: ad:8c:43:33:d4:88:9f:6a:a7:23:26:36:34:fa:64: 17:68:56:06:f0:ae:6e:e0:ee:90:52:e6:16:bc:f0: 46:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CA:8A:58:64:16:0A:4C:4C:82:9B:0C:A0:01:A0:31:9B:88:50:B1 X509v3 Authority Key Identifier: keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:5a:c8:eb:b5:24:a1:aa:31:4f:c7:a1:3c:99:cd:0e:e5:d1: 93:01:c0:25:f7:0a:b8:f0:0a:52:fb:db:b3:42:03:89:7f:ba: 2f:15:eb:2e:77:8c:40:4a:13:28:81:e8:99:71:ef:2e:2b:6c: da:bb:a9:29:78:02:5a:06:34:62:8d:85:2d:03:8e:6b:e5:77: ee:6e:9d:a6:3c:b1:27:b0:40:ff:72:2d:3d:a3:cd:41:01:00: 84:a6:86:0e:5b:8e:44:70:89:7a:fc:cf:a0:8e:23:48:7a:09: 85:76:9d:51:54:11:d2:ee:a5:8a:a5:7f:ad:9b:ca:a6:ec:eb: e6:1d:92:51:25:d3:c3:26:cd:9d:ee:8a:c5:4f:49:6a:70:9d: 8e:aa:c0:83:74:cc:69:ad:4b:48:99:87:b4:da:c9:c0:f4:8e: d1:17:05:b6:a3:2a:8e:b3:3b:9e:a8:6b:20:8f:48:81:34:c2: 44:70:e1:55:99:78:2e:b3:8b:5d:9d:d4:c2:fc:7a:ec:f1:75: da:c9:ce:b3:9a:76:e2:ab:6b:59:25:30:43:e0:4f:cd:d1:7c: 88:a8:86:57:13:95:26:58:37:09:ad:3d:93:9f:b0:34:ee:7e: 8b:5c:ba:fd:fa:e7:2d:35:a8:69:b5:72:ac:d8:58:ec:04:30: d1:94:ff:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKLRxAmN+V4gX2MucBSoj2IVQxS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF NzUyNjNENzAeFw0yNjAzMjQxODI3MjJaFw0yNjAzMjcyMjAzMjJaMDMxMTAvBgNV BAMTKEVCQ0E4QTU4NjQxNjBBNEM0QzgyOUIwQ0EwMDFBMDMxOUI4ODUwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3oIYd9YEYY8xmSxmM+XlX5XD0 GI39rUkuxTBMbObaHTC81GL0euCsr8nZjGPL4yeii7Yka8UfjYyjZcDSXa5yNjp8 Md7tyCwaMkeZ0vkA5fhJV5YFMLtAvwFTeQ0EQZyJ4rsABSa7Og567xdqDpisR+CT 5PiljKs5lJnNCFkNyynLqNNhEwDepholEE4mJiAICy8fhPAmXU404f08HBVjeKUR RRPT/+1ysGJt9LsMLzFtsy4/5KBOtmuU2WwFfHvwJ8Fd0npO95D1texFjGX/l6mp QLRbjOgJfcu1bmoyXa2MQzPUiJ9qpyMmNjT6ZBdoVgbwrm7g7pBS5ha88EYrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU68qKWGQWCkxMgpsMoAGgMZuIULEwHwYDVR0j BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy NjNENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYyNDA1MmUtMjIwNS00OGYzLWEz Y2ItY2U4YjMyNmI4ZjcxLzAvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdB RkJFNzUyNjNENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhayOu1JKGqMU/HoTyZzQ7l0ZMBwCX3Crjw ClL727NCA4l/ui8V6y53jEBKEyiB6Jlx7y4rbNq7qSl4AloGNGKNhS0Djmvld+5u naY8sSewQP9yLT2jzUEBAISmhg5bjkRwiXr8z6COI0h6CYV2nVFUEdLupYqlf62b yqbs6+YdklEl08MmzZ3uisVPSWpwnY6qwIN0zGmtS0iZh7TaycD0jtEXBbajKo6z O56oayCPSIE0wkRw4VWZeC6zi12d1ML8euzxddrJzrOaduKra1klMEPgT83RfIio hlcTlSZYNwmtPZOfsDTufotcuv365y01qGm1cqzYWOwEMNGU/3E= -----END CERTIFICATE-----Generated at Thu Mar 26 16:43:19 2026 by rpki-client