$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft File: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft (raw, json) Hash identifier: OlYq1aasyKG9JSfj3VOjhNh1FhplMEyl9Ggp8VQA5ZQ= Subject key identifier: 7D:EB:41:03:4E:ED:48:A7:C2:8B:1A:FF:A0:94:B2:8C:21:6F:D6:7E Authority key identifier: DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C Certificate issuer: /CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Certificate serial: 52CFA367F299BD1B0196DA8BA008770C5AF44D53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft Manifest number: DA Signing time: Thu 26 Mar 2026 02:31:51 +0000 Manifest this update: Thu 26 Mar 2026 02:26:51 +0000 Manifest next update: Sun 29 Mar 2026 13:23:51 +0000 Files and hashes: 1: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl (hash: T5bl152y7qa43MB66AcvQC5y8koxnrAuESa/cUD1T6k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 13:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:cf:a3:67:f2:99:bd:1b:01:96:da:8b:a0:08:77:0c:5a:f4:4d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Validity Not Before: Mar 26 02:26:51 2026 GMT Not After : Mar 29 13:23:51 2026 GMT Subject: CN=7DEB41034EED48A7C28B1AFFA094B28C216FD67E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fb:2d:0c:5d:94:75:c7:04:70:0a:08:c7:e8: 98:f4:0b:29:e3:4a:9a:25:2d:ea:a9:ac:a9:b2:e2: 7d:56:ac:9e:23:d1:5a:40:fa:77:0e:cf:5a:b2:2e: f8:3a:dc:a3:97:be:be:d7:a0:f2:2d:da:4a:89:ac: b5:52:7e:d5:13:01:34:3d:c8:34:33:46:5b:4e:1c: ea:87:bc:bd:e0:2e:64:c1:f5:c2:15:12:6e:05:45: 2c:4a:1a:4d:90:0f:5f:89:43:78:01:cd:ee:fa:e8: ed:aa:22:e8:03:bb:6a:a8:93:2e:34:6d:47:3e:84: 0c:98:af:d2:a8:51:fe:de:e5:ca:4a:b1:b0:2b:ea: 85:06:85:47:11:e5:f4:63:57:0d:23:92:99:16:05: c7:5b:ef:c9:56:5c:79:79:8d:a6:36:c4:f1:f4:9d: 10:65:3e:da:58:df:8d:0a:7c:86:29:42:d0:3f:14: ae:1b:26:d3:c8:3b:2a:ad:02:2f:06:48:94:8c:3f: 06:47:4a:f8:7e:e0:e6:a9:84:4b:06:b6:61:c4:0f: 35:a4:9d:cf:99:a7:c4:37:69:7f:bd:4e:39:f8:4c: a4:a0:99:e9:04:d8:a9:96:76:33:9f:b3:10:8a:47: dc:43:57:ab:3b:65:4b:dd:7f:35:10:30:fb:89:b8: 05:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EB:41:03:4E:ED:48:A7:C2:8B:1A:FF:A0:94:B2:8C:21:6F:D6:7E X509v3 Authority Key Identifier: keyid:DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8f:e2:71:98:95:c9:9a:25:5d:5d:54:81:0b:2f:7e:e6:d5: 50:1c:4b:d4:3f:2a:4f:a2:12:81:f2:45:ba:f7:67:8a:05:32: d7:8a:58:37:3d:db:cc:e5:92:c5:4b:fd:72:01:16:c8:2d:76: 03:aa:0a:9d:1e:f5:99:06:62:c6:cb:bf:e2:b8:c0:90:fb:42: 54:4b:d6:f3:20:88:4d:da:3e:43:c9:db:2f:9b:ce:9c:6f:b9: 62:41:bd:0d:52:af:fb:06:90:6b:ce:e6:84:02:ba:30:e9:07: cf:8f:5d:4b:fe:d6:e5:d6:d9:97:08:de:20:71:e0:b8:63:db: e7:24:ed:1a:8c:cb:dd:9b:cd:f4:c7:85:4f:e4:de:69:1d:27: cd:bb:f4:80:39:b5:25:15:bb:8a:13:5e:e4:f5:73:8b:62:6e: 7c:ee:36:c4:c5:91:75:aa:4d:0d:0e:83:3c:22:1a:45:b0:85: 4a:50:63:e2:c2:99:13:ac:8a:e0:a9:98:7c:86:8b:cb:e9:0a: 4d:80:0b:bc:4b:6e:6a:77:d2:d7:43:c0:74:64:a7:03:8e:40: ad:5c:7f:b5:d6:2d:c1:45:e8:27:df:48:33:8d:89:6e:5c:fd: 6d:2f:a7:27:94:06:bb:ac:4d:6a:f8:47:15:aa:13:1b:24:7b: e8:51:24:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUs+jZ/KZvRsBltqLoAh3DFr0TVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5 RDJFQ0Y3QzAeFw0yNjAzMjYwMjI2NTFaFw0yNjAzMjkxMzIzNTFaMDMxMTAvBgNV BAMTKDdERUI0MTAzNEVFRDQ4QTdDMjhCMUFGRkEwOTRCMjhDMjE2RkQ2N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3+y0MXZR1xwRwCgjH6Jj0Cynj SpolLeqprKmy4n1WrJ4j0VpA+ncOz1qyLvg63KOXvr7XoPIt2kqJrLVSftUTATQ9 yDQzRltOHOqHvL3gLmTB9cIVEm4FRSxKGk2QD1+JQ3gBze766O2qIugDu2qoky40 bUc+hAyYr9KoUf7e5cpKsbAr6oUGhUcR5fRjVw0jkpkWBcdb78lWXHl5jaY2xPH0 nRBlPtpY340KfIYpQtA/FK4bJtPIOyqtAi8GSJSMPwZHSvh+4OaphEsGtmHEDzWk nc+Zp8Q3aX+9Tjn4TKSgmekE2KmWdjOfsxCKR9xDV6s7ZUvdfzUQMPuJuAVBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfetBA07tSKfCixr/oJSyjCFv1n4wHwYDVR0j BBgwFoAU3eatEwl6W1pKRnOQjIT0yJ0uz3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMS9EREU2QUQxMzA5 N0E1QjVBNEE0NjczOTA4Qzg0RjRDODlEMkVDRjdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5RDJF Q0Y3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzEvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0 Qzg5RDJFQ0Y3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2P4nGYlcmaJV1dVIELL37m1VAcS9Q/Kk+i EoHyRbr3Z4oFMteKWDc928zlksVL/XIBFsgtdgOqCp0e9ZkGYsbLv+K4wJD7QlRL 1vMgiE3aPkPJ2y+bzpxvuWJBvQ1Sr/sGkGvO5oQCujDpB8+PXUv+1uXW2ZcI3iBx 4Lhj2+ck7RqMy92bzfTHhU/k3mkdJ8279IA5tSUVu4oTXuT1c4tibnzuNsTFkXWq TQ0OgzwiGkWwhUpQY+LCmROsiuCpmHyGi8vpCk2AC7xLbmp30tdDwHRkpwOOQK1c f7XWLcFF6CffSDONiW5c/W0vpyeUBrusTWr4RxWqExske+hRJEs= -----END CERTIFICATE-----Generated at Thu Mar 26 11:32:07 2026 by rpki-client