$ rpki-client -vvf repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft (raw, json) Hash identifier: XNInJC2sBcILrpdOrXqe4AseaKmbp5E7U7Q62SOQA98= Subject key identifier: 38:23:89:2B:3C:84:35:41:0E:F6:0E:E4:C6:A4:30:E4:51:25:CA:EF Authority key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 Certificate issuer: /CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Certificate serial: 208B58D6B0541C7312E34BEBA9D5CB3D00A0B2DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft Manifest number: 0290 Signing time: Tue 24 Mar 2026 11:30:25 +0000 Manifest this update: Tue 24 Mar 2026 11:25:25 +0000 Manifest next update: Fri 27 Mar 2026 18:31:25 +0000 Files and hashes: 1: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl (hash: HVMlw2klyxeVZnvLSkDhDfvSiMk1+YshjfOCwpC36h0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:8b:58:d6:b0:54:1c:73:12:e3:4b:eb:a9:d5:cb:3d:00:a0:b2:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Validity Not Before: Mar 24 11:25:25 2026 GMT Not After : Mar 27 18:31:25 2026 GMT Subject: CN=3823892B3C8435410EF60EE4C6A430E45125CAEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:72:9e:c0:b4:d4:72:d2:18:96:b8:8d:75:6a: a9:bf:27:b7:c8:ce:d7:8c:b6:9d:a4:4d:aa:9d:71: ca:0f:57:64:0b:26:5b:48:63:a3:4c:e4:e2:ff:33: d9:90:1f:aa:d6:8c:a0:dd:bb:3b:d9:e0:5f:f3:01: c7:12:98:33:7e:54:8c:d1:74:42:9e:46:0e:be:a3: c3:6a:ff:67:14:67:c2:75:90:cf:00:48:de:00:54: 5f:bf:4b:e2:cf:81:39:8d:51:a4:3a:d6:1e:f5:ae: 66:f5:92:fe:23:d8:82:fb:13:55:04:9e:46:08:80: 50:96:8a:6f:95:b8:b5:b7:23:ed:c7:3e:75:b8:a5: d7:34:6b:27:3b:f3:da:11:5c:01:67:00:1b:85:52: 54:15:fe:57:67:be:3c:04:0e:75:c1:b0:18:b6:9b: db:a9:e1:82:bc:98:ad:47:7a:f0:d7:20:50:a5:92: 8c:52:bd:a4:83:b1:b7:ed:19:ed:0e:fe:88:14:e6: 49:10:15:dc:5a:f4:b2:42:65:ea:60:55:4c:e8:fc: 6b:6f:be:d1:67:8f:ca:73:56:82:d6:3e:74:f8:f6: 30:77:4c:29:aa:f8:95:78:cc:26:61:4b:a2:61:4a: 91:69:38:03:83:69:27:d1:38:1f:22:1f:59:82:28: b8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:23:89:2B:3C:84:35:41:0E:F6:0E:E4:C6:A4:30:E4:51:25:CA:EF X509v3 Authority Key Identifier: keyid:2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c8:04:2e:67:cb:83:ed:c9:d4:b1:20:25:5c:a0:f9:dc:f6: fb:95:fb:80:37:23:7d:8f:cd:18:51:83:61:fe:80:83:c2:d4: b6:cb:db:f1:07:d8:28:68:98:42:46:09:ba:e6:56:90:1a:0a: 07:e3:ca:2f:55:90:f8:54:5a:c5:0b:87:4d:64:1a:0a:3c:7d: 91:0f:92:d0:b7:70:f0:d8:45:0c:39:7f:39:b2:cf:d4:62:b6: 36:35:48:04:8a:76:03:89:1e:b9:92:3e:48:c5:1e:47:ee:dc: 40:ba:ab:3d:55:ce:46:00:2b:70:c0:05:87:cf:14:38:26:62: a6:0c:c5:2f:79:9c:57:be:e7:e8:b8:7b:7a:4b:1b:47:cc:3c: fb:be:12:f0:b8:f4:33:69:88:b9:8f:63:85:46:f4:7d:87:a1: b8:e4:7f:f9:7c:20:c4:1d:00:58:65:4f:13:f1:4a:d2:15:d2: a9:05:de:54:64:ee:69:0c:22:40:90:ac:82:f2:75:02:17:6d: af:11:7b:86:24:d3:13:cb:b1:de:11:4c:69:21:30:e4:80:52: 7a:c6:d4:74:52:21:10:a5:6d:03:8f:34:57:a4:38:f3:9b:04: 8c:50:9e:30:28:d0:d9:4b:17:db:96:22:05:19:c1:c9:19:6d: 34:e8:27:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIItY1rBUHHMS40vrqdXLPQCgstwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0 MTcxODAzMDAeFw0yNjAzMjQxMTI1MjVaFw0yNjAzMjcxODMxMjVaMDMxMTAvBgNV BAMTKDM4MjM4OTJCM0M4NDM1NDEwRUY2MEVFNEM2QTQzMEU0NTEyNUNBRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgcp7AtNRy0hiWuI11aqm/J7fI zteMtp2kTaqdccoPV2QLJltIY6NM5OL/M9mQH6rWjKDduzvZ4F/zAccSmDN+VIzR dEKeRg6+o8Nq/2cUZ8J1kM8ASN4AVF+/S+LPgTmNUaQ61h71rmb1kv4j2IL7E1UE nkYIgFCWim+VuLW3I+3HPnW4pdc0ayc789oRXAFnABuFUlQV/ldnvjwEDnXBsBi2 m9up4YK8mK1HevDXIFClkoxSvaSDsbftGe0O/ogU5kkQFdxa9LJCZepgVUzo/Gtv vtFnj8pzVoLWPnT49jB3TCmq+JV4zCZhS6JhSpFpOAODaSfROB8iH1mCKLhpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOCOJKzyENUEO9g7kxqQw5FElyu8wHwYDVR0j BBgwFoAULdxT+r8v0TzSyRriuD5GYEFxgDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMC8yRERDNTNGQUJG MkZEMTNDRDJDOTFBRTJCODNFNDY2MDQxNzE4MDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0MTcx ODAzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw ODUtNTZiYzJkMTlkYWE4LzAvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2 NjA0MTcxODAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvIBC5ny4PtydSxICVcoPnc9vuV+4A3I32P zRhRg2H+gIPC1LbL2/EH2ChomEJGCbrmVpAaCgfjyi9VkPhUWsULh01kGgo8fZEP ktC3cPDYRQw5fzmyz9RitjY1SASKdgOJHrmSPkjFHkfu3EC6qz1VzkYAK3DABYfP FDgmYqYMxS95nFe+5+i4e3pLG0fMPPu+EvC49DNpiLmPY4VG9H2Hobjkf/l8IMQd AFhlTxPxStIV0qkF3lRk7mkMIkCQrILydQIXba8Re4Yk0xPLsd4RTGkhMOSAUnrG 1HRSIRClbQOPNFekOPObBIxQnjAo0NlLF9uWIgUZwckZbTToJ4o= -----END CERTIFICATE-----Generated at Thu Mar 26 17:19:52 2026 by rpki-client