$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft File: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json) Hash identifier: 35kVBsP7jmIASqbSDr0QkWUosQ0NSqX8KCufoK9t8iw= Subject key identifier: 7C:64:DF:BA:E0:E6:21:A4:60:A0:A6:80:B0:9D:37:C0:79:69:7E:40 Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 Certificate issuer: /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Certificate serial: 0DB411792CA296D201088143A121DA80B676FDCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft Manifest number: 055F Signing time: Wed 25 Mar 2026 05:12:26 +0000 Manifest this update: Wed 25 Mar 2026 05:07:26 +0000 Manifest next update: Sat 28 Mar 2026 05:22:26 +0000 Files and hashes: 1: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: ljnKYF4WQqtb0yfOcUdymtJM6+GnXJyNyFLsK7GZ494=) 2: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: Y9NxdO2uUmExgp5HT4f9RxRPtt01n/EQdy4OmAOBACk=) 3: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: aJww/BODMNeno1T4Sk6+p4OKkL02kXk9J8vto6hlygQ=) 4: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: PuA0O7on+Tv+yi4m5sFC8JVnpsZv77062xaCNSQ10PY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b4:11:79:2c:a2:96:d2:01:08:81:43:a1:21:da:80:b6:76:fd:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Validity Not Before: Mar 25 05:07:26 2026 GMT Not After : Mar 28 05:22:26 2026 GMT Subject: CN=7C64DFBAE0E621A460A0A680B09D37C079697E40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b9:94:75:d8:b5:5a:ae:d9:2b:50:d2:1d:f0: 34:2a:86:41:0b:e9:e3:24:69:a6:67:4e:e7:3a:4a: f6:91:4b:19:90:99:c6:67:5c:82:d2:3a:72:36:a6: 1f:99:2f:40:75:0d:2f:b0:ef:a7:cf:00:55:aa:dd: f8:ef:9e:54:57:64:db:26:3c:81:03:27:59:ff:5c: f4:b9:e3:e5:9b:41:c0:23:2e:88:5b:9a:21:85:32: 02:67:c0:0c:ed:bb:20:9e:65:a6:80:4f:ab:d7:0b: 76:a5:96:15:7f:3e:36:76:d8:e2:05:92:71:f9:5d: d1:05:77:87:e5:4e:3d:ea:5b:c9:a8:1b:a5:97:15: a3:6e:fe:b5:98:89:2b:46:45:80:9c:ca:63:27:49: 8b:0c:f1:19:7d:97:33:0a:b7:6d:66:79:ec:75:80: f3:55:85:2c:25:c9:71:cb:5c:ca:5b:a7:79:c0:67: ff:2b:0a:ad:1c:69:de:3f:25:6d:e2:07:02:e3:83: c8:73:34:28:e7:a6:06:c5:b6:15:ac:ef:03:4d:6e: 71:33:d7:e9:d1:17:ad:44:c5:b4:56:ab:2d:28:7d: 84:9e:9d:72:da:ef:fa:cb:a6:8f:ed:d4:f8:ad:ba: aa:ac:11:83:9d:44:76:ea:c8:46:d3:24:10:04:66: 88:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:64:DF:BA:E0:E6:21:A4:60:A0:A6:80:B0:9D:37:C0:79:69:7E:40 X509v3 Authority Key Identifier: keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:dc:f4:26:4d:8d:56:ab:21:73:98:78:ef:f3:26:db:22:8d: e6:43:2b:82:23:3e:63:0c:ae:35:89:f5:5d:68:e9:b4:bc:c9: 02:53:35:06:a9:03:f8:64:cc:99:ec:9b:7b:09:b4:12:ef:22: 9d:89:ae:78:db:84:6d:05:4d:d2:de:bc:d1:2a:ed:3b:fa:05: 15:93:b4:88:ec:4e:48:d7:f6:b2:68:f0:e7:9d:46:d2:db:d9: f1:41:1d:68:83:87:3e:45:74:db:cc:6f:f9:00:30:9f:64:81: 66:81:a7:e2:c8:82:36:6a:51:db:11:0a:c3:f3:52:81:91:92: 0e:5f:40:30:58:90:f2:ac:6a:7a:3e:e4:27:a0:5c:bb:a1:96: 22:7c:82:ca:2a:ea:23:fd:84:f4:e9:68:e8:46:40:5a:98:22: 12:48:db:ef:18:c6:cd:66:08:a9:29:bd:0d:ce:9c:63:3b:ff: 36:42:ee:8f:38:b1:57:1e:96:93:19:53:f3:bb:dd:ec:bc:8a: 15:64:6b:6d:ea:1d:68:a8:0e:c4:05:18:7f:2f:04:52:73:79: 4f:df:02:df:86:34:32:46:ef:4d:27:35:31:b3:2a:fd:fd:50: 14:2f:c5:d4:bb:c1:1b:40:7b:21:57:94:dd:4f:a1:28:7a:75: 55:31:1c:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDbQReSyiltIBCIFDoSHagLZ2/cwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE MERDMTdGMjAeFw0yNjAzMjUwNTA3MjZaFw0yNjAzMjgwNTIyMjZaMDMxMTAvBgNV BAMTKDdDNjRERkJBRTBFNjIxQTQ2MEEwQTY4MEIwOUQzN0MwNzk2OTdFNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpuZR12LVartkrUNId8DQqhkEL 6eMkaaZnTuc6SvaRSxmQmcZnXILSOnI2ph+ZL0B1DS+w76fPAFWq3fjvnlRXZNsm PIEDJ1n/XPS54+WbQcAjLohbmiGFMgJnwAztuyCeZaaAT6vXC3allhV/PjZ22OIF knH5XdEFd4flTj3qW8moG6WXFaNu/rWYiStGRYCcymMnSYsM8Rl9lzMKt21meex1 gPNVhSwlyXHLXMpbp3nAZ/8rCq0cad4/JW3iBwLjg8hzNCjnpgbFthWs7wNNbnEz 1+nRF61ExbRWqy0ofYSenXLa7/rLpo/t1PituqqsEYOdRHbqyEbTJBAEZohPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfGTfuuDmIaRgoKaAsJ03wHlpfkAwHwYDVR0j BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD MTdGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0 YjgtNTIyNWM0NWI5NmExLzAvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBF MUREMERDMTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfc9CZNjVarIXOYeO/zJtsijeZDK4IjPmMM rjWJ9V1o6bS8yQJTNQapA/hkzJnsm3sJtBLvIp2JrnjbhG0FTdLevNEq7Tv6BRWT tIjsTkjX9rJo8OedRtLb2fFBHWiDhz5FdNvMb/kAMJ9kgWaBp+LIgjZqUdsRCsPz UoGRkg5fQDBYkPKsano+5CegXLuhliJ8gsoq6iP9hPTpaOhGQFqYIhJI2+8Yxs1m CKkpvQ3OnGM7/zZC7o84sVcelpMZU/O73ey8ihVka23qHWioDsQFGH8vBFJzeU/f At+GNDJG700nNTGzKv39UBQvxdS7wRtAeyFXlN1PoSh6dVUxHEs= -----END CERTIFICATE-----Generated at Thu Mar 26 07:16:53 2026 by rpki-client