$ rpki-client -vvf repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft File: DD77382BD9E8634AEF9E93D763B0149D915502F5.mft (raw, json) Hash identifier: oAZ8De8y10sbtmzMrA67g28IVmkiZ0FudDmSdbz7Lto= Subject key identifier: 41:FF:34:FA:DB:BC:6C:39:7D:9B:86:EE:87:76:76:6A:0C:1E:13:26 Authority key identifier: DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 Certificate issuer: /CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Certificate serial: 34169A1CB8117C33A2C7F662236694DDA9BF16A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft Manifest number: 0437 Signing time: Wed 25 Mar 2026 17:41:30 +0000 Manifest this update: Wed 25 Mar 2026 17:36:30 +0000 Manifest next update: Sun 29 Mar 2026 00:22:30 +0000 Files and hashes: 1: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: hsPYSfqnXcrLebXt6EBLTQfNTkLnhJb4Z1Vtv7TkCII=) 2: DD77382BD9E8634AEF9E93D763B0149D915502F5.crl (hash: tAx3RhhLkmQ9zokaxsq5mcFssrd8LDBxImFGmz1rskU=) 3: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: HOwwdKR3O7c8/kyMjxVZJkAdz+1G7QmLEi+h8X1E5h4=) 4: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: qxzoMqzV7R6VwY7lQGbublsoy4JkXAcRbir5LyE2mk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:16:9a:1c:b8:11:7c:33:a2:c7:f6:62:23:66:94:dd:a9:bf:16:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Validity Not Before: Mar 25 17:36:30 2026 GMT Not After : Mar 29 00:22:30 2026 GMT Subject: CN=41FF34FADBBC6C397D9B86EE8776766A0C1E1326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6a:3f:26:74:c1:29:2e:fb:60:fa:63:eb:55: ff:a5:04:74:39:be:71:8b:17:16:fb:82:e3:1a:b5: 8b:a6:21:7b:25:9e:22:4e:94:e7:7d:cf:63:04:4d: 76:8d:eb:d7:39:40:4e:4d:e3:f5:71:49:1f:1d:ae: ba:27:25:35:6d:d2:73:1e:1a:75:c7:d9:b4:a3:06: 05:bf:9d:88:b9:24:99:02:17:d3:f1:46:56:3f:04: 5a:d9:f0:01:1d:70:58:47:a8:25:ad:23:4e:4a:e1: d8:9e:1d:0b:cd:0b:69:3f:e2:70:12:60:1d:6e:64: 76:da:c0:3e:f2:c3:da:16:83:97:2a:ff:1b:b7:f5: db:8f:98:ea:d1:a5:51:81:f2:07:b1:ec:2c:15:ab: ff:07:cd:80:b9:20:37:91:7b:e0:73:f2:bb:a5:c8: 95:81:a4:bd:e2:18:c1:fd:d6:17:89:0d:95:01:4e: ef:4b:65:0f:33:16:2d:33:dc:d4:89:dc:cf:ed:e5: 9a:4a:1f:be:fd:ad:d8:7f:72:3b:f9:ca:7e:88:da: 1c:05:16:2e:78:68:ba:d5:b5:17:e4:04:c5:4c:8d: 0b:49:79:9f:1f:27:80:45:90:11:c5:05:af:d8:7d: 11:57:10:18:12:b8:b3:ef:27:cd:e5:6c:82:70:fe: 14:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FF:34:FA:DB:BC:6C:39:7D:9B:86:EE:87:76:76:6A:0C:1E:13:26 X509v3 Authority Key Identifier: keyid:DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:46:31:55:aa:d4:ab:e8:72:99:b7:50:5d:48:bc:b0:72:55: a0:57:ab:af:11:fe:b2:ba:d7:2b:3c:ea:e1:41:2e:a4:49:d6: 19:1c:fa:37:25:33:f5:b1:20:f8:30:37:b3:b8:48:12:24:4b: 9b:fb:2a:d1:db:c0:74:c8:4f:e7:ab:c7:0f:d5:1b:52:f3:3e: 89:35:25:43:90:8a:5c:73:94:16:9f:c6:6b:22:e4:aa:68:1a: 8a:c6:c1:86:f7:e5:ab:a5:fa:cb:0b:6f:1d:5a:eb:a0:7c:b4: a2:10:27:73:4a:2b:e0:b4:9e:9b:53:c3:d5:e1:38:cd:af:81: 66:d5:8e:1a:5a:bd:9e:7d:16:c2:3c:c4:89:cf:d3:7e:76:86: 3c:8f:24:f0:2a:b8:63:b3:90:88:5a:00:53:fa:cb:b1:0f:fc: 9d:7d:14:f4:5b:ed:7b:b9:67:49:f4:bb:52:e6:c2:68:bc:55: fb:b9:dd:2e:6c:7e:05:fa:a0:8d:69:df:d1:42:c8:79:5d:bf: ec:6f:c5:3b:3f:57:93:92:3a:6f:24:d5:8d:58:ce:4d:3d:11: 43:eb:9a:12:4e:cd:3e:c0:64:75:ef:16:33:d0:53:49:18:fc: 07:5b:b8:91:f5:21:83:8d:95:24:97:60:11:11:db:a5:34:01: 03:67:76:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNBaaHLgRfDOix/ZiI2aU3am/FqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5 MTU1MDJGNTAeFw0yNjAzMjUxNzM2MzBaFw0yNjAzMjkwMDIyMzBaMDMxMTAvBgNV BAMTKDQxRkYzNEZBREJCQzZDMzk3RDlCODZFRTg3NzY3NjZBMEMxRTEzMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2aj8mdMEpLvtg+mPrVf+lBHQ5 vnGLFxb7guMatYumIXslniJOlOd9z2METXaN69c5QE5N4/VxSR8drronJTVt0nMe GnXH2bSjBgW/nYi5JJkCF9PxRlY/BFrZ8AEdcFhHqCWtI05K4dieHQvNC2k/4nAS YB1uZHbawD7yw9oWg5cq/xu39duPmOrRpVGB8gex7CwVq/8HzYC5IDeRe+Bz8rul yJWBpL3iGMH91heJDZUBTu9LZQ8zFi0z3NSJ3M/t5ZpKH779rdh/cjv5yn6I2hwF Fi54aLrVtRfkBMVMjQtJeZ8fJ4BFkBHFBa/YfRFXEBgSuLPvJ83lbIJw/hShAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQf80+tu8bDl9m4buh3Z2agweEyYwHwYDVR0j BBgwFoAU3Xc4K9noY0rvnpPXY7AUnZFVAvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmY4ZjRhYi0xYWI4LTQ4OTQtYjc1OC1kOWJjZTM4MDNlNGMvMC9ERDc3MzgyQkQ5 RTg2MzRBRUY5RTkzRDc2M0IwMTQ5RDkxNTUwMkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5MTU1 MDJGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZmOGY0YWItMWFiOC00ODk0LWI3 NTgtZDliY2UzODAzZTRjLzAvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0 OUQ5MTU1MDJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJGMVWq1Kvocpm3UF1IvLByVaBXq68R/rK6 1ys86uFBLqRJ1hkc+jclM/WxIPgwN7O4SBIkS5v7KtHbwHTIT+erxw/VG1LzPok1 JUOQilxzlBafxmsi5KpoGorGwYb35aul+ssLbx1a66B8tKIQJ3NKK+C0nptTw9Xh OM2vgWbVjhpavZ59FsI8xInP0352hjyPJPAquGOzkIhaAFP6y7EP/J19FPRb7Xu5 Z0n0u1Lmwmi8Vfu53S5sfgX6oI1p39FCyHldv+xvxTs/V5OSOm8k1Y1Yzk09EUPr mhJOzT7AZHXvFjPQU0kY/AdbuJH1IYONlSSXYBER26U0AQNndl0= -----END CERTIFICATE-----Generated at Thu Mar 26 20:13:55 2026 by rpki-client