$ rpki-client -vvf repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft File: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft (raw, json) Hash identifier: v1SFGbR9/RniTnjDqj6v8kjcP/AHKL5IcXgA7Zwzvec= Subject key identifier: 09:89:11:5F:82:8B:0E:F9:9B:49:80:87:6C:D4:8F:A8:1A:94:1C:9A Authority key identifier: 5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 Certificate issuer: /CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Certificate serial: 6E15842B55843DC2F174FDA0E983A290BEAAA673 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft Manifest number: 0220 Signing time: Wed 25 Mar 2026 05:41:44 +0000 Manifest this update: Wed 25 Mar 2026 05:36:44 +0000 Manifest next update: Sat 28 Mar 2026 07:42:44 +0000 Files and hashes: 1: 34392e3135362e35362e302f32332d3233203d3e203535363637.roa (hash: Pm/YE5XlZI4a5R3H7gW8azydouGoRXTsVjZR6IqTpxU=) 2: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (hash: PyngY50Jc6jfJpjhLI7AvXD7abuw+Cb9szwCdvvMqIM=) 3: 34392e3135362e35362e302f32342d3234203d3e203535363637.roa (hash: QTtjZwFvhIv1xSth/5URjOWWXMaKhYuFu5hw4Cr+XZk=) 4: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl (hash: SpLIMSQW2/NRy7+d56qjTsyJh7SYFipFEE9bxi/awYU=) 5: 34392e3135362e36302e302f32342d3234203d3e203535363637.roa (hash: CLKzrlH5ZLBoCsg4iE8SZwFFCQ/Se+D5xuiONrmRN40=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:15:84:2b:55:84:3d:c2:f1:74:fd:a0:e9:83:a2:90:be:aa:a6:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Validity Not Before: Mar 25 05:36:44 2026 GMT Not After : Mar 28 07:42:44 2026 GMT Subject: CN=0989115F828B0EF99B4980876CD48FA81A941C9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b2:e8:35:60:44:84:fd:a8:30:c1:00:73:e6: 7c:67:76:29:a6:76:06:e0:f7:c4:38:7e:44:ad:71: 65:c3:62:8f:dd:e7:87:ab:23:9f:6a:30:78:3e:f9: 5e:7b:c4:75:19:0d:f0:b4:bb:e1:0d:04:98:1f:2b: 72:8a:33:d5:23:00:82:7b:23:81:2a:5c:f9:a3:17: a9:b7:7f:20:2f:15:45:fa:35:0e:44:a9:17:ce:53: ef:c0:9a:17:12:c2:cc:c5:23:3c:6f:a1:31:ce:89: 18:94:41:4b:ee:61:7c:98:93:5c:a3:2e:71:9b:11: 1d:63:63:96:97:d1:7a:2e:e4:23:20:39:1a:84:f1: 06:05:2d:b6:bd:c2:6c:f4:51:e2:29:19:79:70:3e: 3c:96:67:bc:0f:84:6d:5a:b9:f6:89:41:0b:3e:d0: 44:0e:19:a3:66:fb:85:a8:53:04:52:ba:0b:f5:77: 7c:42:13:c7:9a:b9:10:d9:93:97:5d:4e:71:e5:19: a5:65:27:7a:75:ef:4f:92:6c:16:80:89:8b:9d:44: 85:c3:3e:5f:7e:30:00:0c:f8:d6:0f:f8:64:49:eb: 46:66:a4:4b:a9:4c:80:f1:59:f3:a0:57:38:f4:96: 30:a8:f7:56:ae:82:19:a8:ad:89:34:1d:92:6a:77: 13:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:89:11:5F:82:8B:0E:F9:9B:49:80:87:6C:D4:8F:A8:1A:94:1C:9A X509v3 Authority Key Identifier: keyid:5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6b:d5:94:c3:46:9e:f2:4b:58:ab:f0:95:23:7c:ba:2a:c3: 6d:34:d7:d1:b8:9a:24:fb:8e:de:1a:5b:db:e2:97:93:ab:cf: f6:4d:5f:05:30:f5:b9:2d:97:59:c1:da:27:6c:04:bc:24:eb: c9:0a:ed:f3:d2:f3:60:31:d7:68:a5:ac:83:da:a8:91:ea:78: de:d1:36:79:a8:c0:6c:e2:a7:7c:15:5d:a7:35:12:e3:35:3f: 7f:a5:4f:c7:e1:dc:d9:bc:b3:8c:78:f3:95:31:fc:c7:f9:4b: 29:de:16:13:f2:c1:10:6f:a9:a5:09:10:53:15:2a:2e:fe:1f: d7:76:ca:19:c4:2f:5e:f9:06:42:8b:d3:7c:6d:76:8f:e2:c2: 48:bc:6e:96:ac:19:0c:ea:3a:2d:eb:f5:b3:4e:49:e5:38:b3: 60:49:1a:61:3f:e5:e9:1d:53:52:8c:0f:0d:24:cd:b8:bb:92: b4:08:73:8b:4f:db:2f:96:1a:a8:ef:07:e3:cf:e7:48:70:df: d0:b1:0f:e5:3d:d7:6e:59:fe:0e:a2:7a:8f:9a:b0:5a:db:60: e0:45:8f:5c:dc:b1:1f:81:8d:5a:ab:c5:9f:32:2f:15:97:d3: 74:6d:56:dd:6a:ce:f5:29:66:89:41:1a:76:01:12:70:24:df: 89:cf:f2:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbhWEK1WEPcLxdP2g6YOikL6qpnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZB OTczQTA2MDAeFw0yNjAzMjUwNTM2NDRaFw0yNjAzMjgwNzQyNDRaMDMxMTAvBgNV BAMTKDA5ODkxMTVGODI4QjBFRjk5QjQ5ODA4NzZDRDQ4RkE4MUE5NDFDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/sug1YESE/agwwQBz5nxndimm dgbg98Q4fkStcWXDYo/d54erI59qMHg++V57xHUZDfC0u+ENBJgfK3KKM9UjAIJ7 I4EqXPmjF6m3fyAvFUX6NQ5EqRfOU+/AmhcSwszFIzxvoTHOiRiUQUvuYXyYk1yj LnGbER1jY5aX0Xou5CMgORqE8QYFLba9wmz0UeIpGXlwPjyWZ7wPhG1aufaJQQs+ 0EQOGaNm+4WoUwRSugv1d3xCE8eauRDZk5ddTnHlGaVlJ3p170+SbBaAiYudRIXD Pl9+MAAM+NYP+GRJ60ZmpEupTIDxWfOgVzj0ljCo91aughmorYk0HZJqdxPbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCYkRX4KLDvmbSYCHbNSPqBqUHJowHwYDVR0j BBgwFoAUXd3M3zr8SS9sxIcdYHKlr6lzoGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjA2Y2Y1MC1hM2QxLTRjYzktOTI2MC05ODdiMmNhMGM5MjcvMC81REREQ0NERjNB RkM0OTJGNkNDNDg3MUQ2MDcyQTVBRkE5NzNBMDYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZBOTcz QTA2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIwNmNmNTAtYTNkMS00Y2M5LTky NjAtOTg3YjJjYTBjOTI3LzAvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1 QUZBOTczQTA2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9r1ZTDRp7yS1ir8JUjfLoqw20019G4miT7 jt4aW9vil5Orz/ZNXwUw9bktl1nB2idsBLwk68kK7fPS82Ax12ilrIPaqJHqeN7R NnmowGzip3wVXac1EuM1P3+lT8fh3Nm8s4x485Ux/Mf5SyneFhPywRBvqaUJEFMV Ki7+H9d2yhnEL175BkKL03xtdo/iwki8bpasGQzqOi3r9bNOSeU4s2BJGmE/5ekd U1KMDw0kzbi7krQIc4tP2y+WGqjvB+PP50hw39CxD+U9125Z/g6ieo+asFrbYOBF j1zcsR+BjVqrxZ8yLxWX03RtVt1qzvUpZolBGnYBEnAk34nP8n0= -----END CERTIFICATE-----Generated at Thu Mar 26 07:21:58 2026 by rpki-client