$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft File: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft (raw, json) Hash identifier: d/ENwGprgTc4N/FMCDCRXGcBPBbvOXNTnMLGXaLSC6U= Subject key identifier: 85:A0:F3:00:37:E4:B1:FE:A0:C7:58:F6:25:BB:BC:28:42:7E:FE:99 Authority key identifier: D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED Certificate issuer: /CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Certificate serial: 3DDB8A6E9880F84230356007CA0BEDCFD57E04F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft Manifest number: E1 Signing time: Thu 26 Mar 2026 07:01:15 +0000 Manifest this update: Thu 26 Mar 2026 06:56:15 +0000 Manifest next update: Sun 29 Mar 2026 12:05:15 +0000 Files and hashes: 1: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: U1yBT1SPjwTm71wjsvPBRQ+2gxg77ajbPlJlD+suADk=) 2: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl (hash: oni6pRS1L17lDETHokyMdz+N44zKiLDKv4vQgu0f++U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:db:8a:6e:98:80:f8:42:30:35:60:07:ca:0b:ed:cf:d5:7e:04:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Validity Not Before: Mar 26 06:56:15 2026 GMT Not After : Mar 29 12:05:15 2026 GMT Subject: CN=85A0F30037E4B1FEA0C758F625BBBC28427EFE99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a7:bb:49:80:6b:93:16:3c:50:77:57:56:fa: 22:2a:32:7f:33:a9:28:c2:6e:14:b5:97:c0:9e:0a: 10:f5:0b:d7:9b:2a:a6:66:aa:a4:64:69:fe:74:e0: 5c:5f:93:79:0f:25:1f:9e:51:34:62:08:85:c8:3d: 4f:c4:fa:b9:68:11:ed:a8:0c:c6:a6:a9:da:cc:d3: 34:24:d1:3b:09:04:c4:f7:e0:df:a5:d5:df:3a:4b: 2d:62:a8:d2:9e:59:ed:3f:e6:b5:0d:b5:68:b1:9f: 93:7f:6c:b5:c3:c5:74:fa:ee:20:b9:df:cb:da:41: 33:c4:18:77:57:e9:d0:74:0c:21:b9:46:21:8d:ce: 00:b2:e7:70:16:74:67:fc:31:f8:5b:c7:de:45:ba: 57:20:d8:a5:a1:96:d3:6c:35:61:4c:8d:cd:5c:7b: 54:74:14:83:a7:69:8a:da:bf:a9:d0:5c:1c:0b:77: bf:f5:e6:fb:55:ab:e9:06:32:84:a4:c8:f3:7a:a7: 12:1e:a9:97:10:c4:f4:41:71:8a:81:fd:6a:6d:99: 0d:f4:9c:9d:40:f3:c8:ed:d8:13:02:af:72:c9:89: 06:dc:98:a3:e7:45:20:d2:d6:5d:31:88:3c:49:97: b4:7f:e0:13:bf:27:6e:aa:03:e0:49:ce:26:c8:12: fd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A0:F3:00:37:E4:B1:FE:A0:C7:58:F6:25:BB:BC:28:42:7E:FE:99 X509v3 Authority Key Identifier: keyid:D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:71:6b:3f:6e:b1:08:70:a9:00:e2:18:5d:2b:82:f7:01:d6: cd:9e:e3:90:3f:d8:ef:f7:ff:c8:f2:58:1a:44:9a:ff:af:c2: e4:f8:7e:de:a4:2a:c6:94:fa:7a:02:46:9f:f7:09:7e:00:51: 89:f5:c8:90:01:4b:30:61:95:56:cc:6d:0c:8e:92:f3:d5:2b: 98:07:c1:b1:3e:65:b5:29:18:46:e5:d0:86:15:ac:d5:33:02: 2a:d2:54:16:6d:30:54:39:2d:a3:b7:0c:cb:c0:8d:91:87:70: 2b:f1:53:de:b4:f3:51:35:b0:fb:6f:1a:ff:38:b7:3e:3b:c6: 47:19:31:2a:ef:16:78:95:a2:2f:36:14:02:44:64:2f:95:b3: 95:9b:1c:c2:36:2c:ab:93:26:0f:75:23:a3:c3:08:76:14:44: 4c:a3:f2:15:f8:d0:90:14:40:aa:08:77:0e:f2:ab:53:5c:5a: 3f:59:ed:82:10:df:b0:3b:20:75:04:63:08:43:ba:26:86:a6: b5:ff:01:84:1d:da:73:4f:58:74:3f:38:82:9d:76:cb:cd:70: 33:e1:45:e6:87:57:89:84:7d:55:5b:f2:10:cc:72:9a:0e:72: 53:97:bd:c1:e9:a4:41:67:25:45:37:6e:43:f9:e3:68:89:33: 18:8c:71:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPduKbpiA+EIwNWAHygvtz9V+BPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZG REY2RDBFRDAeFw0yNjAzMjYwNjU2MTVaFw0yNjAzMjkxMjA1MTVaMDMxMTAvBgNV BAMTKDg1QTBGMzAwMzdFNEIxRkVBMEM3NThGNjI1QkJCQzI4NDI3RUZFOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKp7tJgGuTFjxQd1dW+iIqMn8z qSjCbhS1l8CeChD1C9ebKqZmqqRkaf504Fxfk3kPJR+eUTRiCIXIPU/E+rloEe2o DMamqdrM0zQk0TsJBMT34N+l1d86Sy1iqNKeWe0/5rUNtWixn5N/bLXDxXT67iC5 38vaQTPEGHdX6dB0DCG5RiGNzgCy53AWdGf8Mfhbx95Fulcg2KWhltNsNWFMjc1c e1R0FIOnaYrav6nQXBwLd7/15vtVq+kGMoSkyPN6pxIeqZcQxPRBcYqB/WptmQ30 nJ1A88jt2BMCr3LJiQbcmKPnRSDS1l0xiDxJl7R/4BO/J26qA+BJzibIEv2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhaDzADfksf6gx1j2Jbu8KEJ+/pkwHwYDVR0j BBgwFoAU1VQkyRU948KF2isAhv927/320O0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9ENTU0MjRDOTE1 M0RFM0MyODVEQTJCMDA4NkZGNzZFRkZERjZEMEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZGREY2 RDBFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2 RUZGREY2RDBFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNxaz9usQhwqQDiGF0rgvcB1s2e45A/2O/3 /8jyWBpEmv+vwuT4ft6kKsaU+noCRp/3CX4AUYn1yJABSzBhlVbMbQyOkvPVK5gH wbE+ZbUpGEbl0IYVrNUzAirSVBZtMFQ5LaO3DMvAjZGHcCvxU96081E1sPtvGv84 tz47xkcZMSrvFniVoi82FAJEZC+Vs5WbHMI2LKuTJg91I6PDCHYUREyj8hX40JAU QKoIdw7yq1NcWj9Z7YIQ37A7IHUEYwhDuiaGprX/AYQd2nNPWHQ/OIKddsvNcDPh ReaHV4mEfVVb8hDMcpoOclOXvcHppEFnJUU3bkP542iJMxiMcZM= -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:07 2026 by rpki-client