$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json) Hash identifier: FbAtACp/aOHtFv3E3ciJrqSs+t5K9GM9zyYvBqM2GoQ= Subject key identifier: E4:03:93:59:B4:00:A5:11:48:E1:BF:A5:EC:60:B4:3E:EF:D4:DC:BD Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 28997D306A10398936C223D28F6AD01BFAEAA6D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft Manifest number: 01D9 Signing time: Tue 24 Mar 2026 14:12:13 +0000 Manifest this update: Tue 24 Mar 2026 14:07:13 +0000 Manifest next update: Fri 27 Mar 2026 23:13:13 +0000 Files and hashes: 1: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: bCLCAt1JparlBgN6KfduSAYhRUqzES6YHE2LJBqPT8A=) 2: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: wRkfk5IE7FEjdZBVsYYZyObCxjMnIw//uI0JOTnfK0w=) 3: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: UFUV1/+yR0VUs891QJzA0faKiQcIk8IHhuxW1Cq8AbQ=) 4: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: FKKog+XQSDkvlhkDlh/3Ao41iJ0gN8My01/0TZX5i0E=) 5: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: sfj/xLZEElFZFm97ASqdb3Sh5i8unBwVhTxljUPKis0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:99:7d:30:6a:10:39:89:36:c2:23:d2:8f:6a:d0:1b:fa:ea:a6:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Mar 24 14:07:13 2026 GMT Not After : Mar 27 23:13:13 2026 GMT Subject: CN=E4039359B400A51148E1BFA5EC60B43EEFD4DCBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1c:99:39:e0:2d:d8:b9:16:a1:76:48:90:20: 3e:32:4c:f2:96:49:8d:c0:a8:37:02:29:39:16:d7: 63:66:06:d1:07:89:2a:0c:52:01:ef:1b:15:52:dc: a3:a9:9d:8c:35:f6:45:0a:2e:8e:c5:7a:dc:db:45: c8:65:95:24:02:d2:f0:a9:e4:a3:53:63:3b:d7:b5: 42:19:64:8c:99:ff:bd:f5:ee:72:fb:d3:74:4f:8f: 9a:1e:ba:ea:31:55:b8:19:41:d9:13:48:24:06:48: 82:72:bd:fc:7c:5d:fd:9a:74:e8:9a:a0:d0:95:52: 46:7a:bb:10:9c:a2:5d:f6:a7:17:f5:d6:bc:2f:f7: e0:f7:26:af:77:0f:e9:3a:66:eb:99:18:44:32:ff: 9b:30:7a:55:21:96:9a:f1:76:9d:1a:e7:e4:ae:af: 9a:7c:cb:23:59:2b:ab:ed:48:e0:54:e6:cd:f3:91: 97:ea:12:3e:b5:18:a8:63:06:ed:4b:ca:9d:42:0b: 35:45:54:e3:f6:86:91:a6:b3:ec:4f:a6:c2:bd:69: 9c:c7:42:e9:67:12:1d:91:5d:20:6e:e5:35:38:0e: 11:8f:c7:a3:8d:a2:6b:ac:45:3a:7a:94:5a:b2:d8: e8:cb:06:69:dc:33:ba:9f:f9:08:96:98:7c:3d:22: 4b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:03:93:59:B4:00:A5:11:48:E1:BF:A5:EC:60:B4:3E:EF:D4:DC:BD X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:6e:be:83:7a:46:62:10:85:ed:0f:e9:ad:08:2a:cb:4c:e0: f6:0a:f7:23:a9:8a:e9:3a:dc:ef:c0:30:79:24:00:c9:04:d3: 54:02:a2:f9:b7:52:39:3d:ff:3c:cf:a9:11:94:19:99:d1:59: d5:e5:89:f0:ac:82:ab:eb:78:26:39:ae:2f:fb:d5:e0:01:53: a5:b6:4b:da:e4:fe:5d:e2:4f:51:5a:f4:d2:33:3d:e9:bc:bd: 81:dd:90:d6:74:f5:78:ca:14:cf:fb:2b:04:9b:73:b5:8e:4c: 44:1f:3b:73:75:6c:95:5d:33:8c:ee:39:04:fe:5b:72:4a:de: 3a:40:f4:f8:df:93:f4:20:35:35:1d:f0:11:55:d1:c7:2d:b2: ac:a9:3d:4a:8f:e0:a7:6e:6f:75:3a:6c:5c:95:f2:d2:ff:56: cf:e9:00:e7:3c:63:ec:fe:4b:70:1e:1c:37:44:cb:81:2a:69: 35:88:3b:e1:73:8c:cc:ef:90:bc:43:0c:38:77:ed:39:7e:39: 23:de:45:b3:01:82:8a:75:7d:b5:fe:26:85:a1:f7:3c:d8:a4: 29:ae:17:e5:5d:42:02:30:10:07:df:63:a9:e2:cc:89:89:9e: 5d:43:07:0c:d6:a3:2b:84:66:7b:be:3f:c2:b0:dd:37:3f:ee: 72:9f:45:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJl9MGoQOYk2wiPSj2rQG/rqptgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNjAzMjQxNDA3MTNaFw0yNjAzMjcyMzEzMTNaMDMxMTAvBgNV BAMTKEU0MDM5MzU5QjQwMEE1MTE0OEUxQkZBNUVDNjBCNDNFRUZENERDQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSHJk54C3YuRahdkiQID4yTPKW SY3AqDcCKTkW12NmBtEHiSoMUgHvGxVS3KOpnYw19kUKLo7FetzbRchllSQC0vCp 5KNTYzvXtUIZZIyZ/7317nL703RPj5oeuuoxVbgZQdkTSCQGSIJyvfx8Xf2adOia oNCVUkZ6uxCcol32pxf11rwv9+D3Jq93D+k6ZuuZGEQy/5swelUhlprxdp0a5+Su r5p8yyNZK6vtSOBU5s3zkZfqEj61GKhjBu1Lyp1CCzVFVOP2hpGms+xPpsK9aZzH QulnEh2RXSBu5TU4DhGPx6ONomusRTp6lFqy2OjLBmncM7qf+QiWmHw9IktDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5AOTWbQApRFI4b+l7GC0Pu/U3L0wHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9uvoN6RmIQhe0P6a0IKstM4PYK9yOpiuk6 3O/AMHkkAMkE01QCovm3Ujk9/zzPqRGUGZnRWdXlifCsgqvreCY5ri/71eABU6W2 S9rk/l3iT1Fa9NIzPem8vYHdkNZ09XjKFM/7KwSbc7WOTEQfO3N1bJVdM4zuOQT+ W3JK3jpA9Pjfk/QgNTUd8BFV0cctsqypPUqP4Kdub3U6bFyV8tL/Vs/pAOc8Y+z+ S3AeHDdEy4EqaTWIO+FzjMzvkLxDDDh37Tl+OSPeRbMBgop1fbX+JoWh9zzYpCmu F+VdQgIwEAffY6nizImJnl1DBwzWoyuEZnu+P8Kw3Tc/7nKfRf0= -----END CERTIFICATE-----Generated at Thu Mar 26 05:55:24 2026 by rpki-client