$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: LF7J05p/X+mQMAaHXfCHtC/po+o/NlzlDKXbMEQUiPY= Subject key identifier: 47:BF:34:38:95:6D:AE:CE:D4:C7:37:92:6A:CF:78:20:31:F7:6C:FA Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 7F22297063054BB5BECEE5E2EF0A3909619D090E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 0519 Signing time: Wed 25 Mar 2026 08:20:50 +0000 Manifest this update: Wed 25 Mar 2026 08:15:50 +0000 Manifest next update: Sat 28 Mar 2026 09:14:50 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: XORug6X1AYIxuYlIzRjPaLuLQiwOvha5xIJuvaI/3jU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:22:29:70:63:05:4b:b5:be:ce:e5:e2:ef:0a:39:09:61:9d:09:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: Mar 25 08:15:50 2026 GMT Not After : Mar 28 09:14:50 2026 GMT Subject: CN=47BF3438956DAECED4C737926ACF782031F76CFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d3:2e:b8:18:d1:9e:8f:51:bb:71:d3:35:2e: 98:4a:6f:38:9f:8c:22:3a:53:66:59:29:1d:32:c6: 18:96:b6:45:69:5e:4f:18:50:b8:69:4f:6b:12:3e: 8b:c6:14:8c:ea:a4:6a:97:6f:65:b3:87:a9:b4:39: 1e:50:cc:dd:b7:44:ca:c6:6c:b6:3a:0f:51:ab:65: d3:f4:d6:59:58:72:d8:4e:c0:51:e1:a3:ad:85:ff: ee:51:de:d6:4a:f2:82:b2:4b:f3:16:95:f5:95:30: a4:c8:0c:17:5d:4f:94:71:d4:65:b0:25:5d:a6:c7: 1f:f4:75:b4:56:b5:fd:e7:f7:3d:8f:b0:a9:2c:fa: b8:fd:01:04:2d:60:25:29:d0:ca:0f:4b:ae:d6:8f: 33:bd:85:f5:f1:e8:d9:1d:fc:58:e0:e4:02:dd:38: 5f:3c:e2:60:c6:f9:b4:e5:03:ee:25:47:56:e1:f5: df:40:73:39:68:00:bf:77:36:80:61:44:45:18:9b: 15:94:f1:6e:60:eb:31:30:44:9d:41:b6:54:e9:6b: f7:ae:5f:9d:e7:db:db:52:77:de:18:2f:63:bf:3f: fe:ce:d9:2a:61:41:0b:76:5c:d5:18:31:e9:1b:4d: d9:c7:18:c7:a7:7b:74:9c:33:78:2c:86:7d:3b:cd: 2a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BF:34:38:95:6D:AE:CE:D4:C7:37:92:6A:CF:78:20:31:F7:6C:FA X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:40:06:14:72:c8:c7:dd:1c:dc:2c:60:ef:a7:24:9f:95:a9: d7:1f:1f:e0:24:73:75:b4:a9:e3:e3:ef:f5:6b:d9:b0:6b:b0: ed:10:4b:a5:8b:94:b4:6d:e0:05:bf:11:20:90:20:12:42:d9: dc:ed:92:25:45:b2:f0:0a:5d:b2:ff:29:27:16:e9:79:d8:1b: fa:e6:18:18:fb:77:c1:18:ce:00:f2:21:db:9c:b7:91:8f:d7: 67:7e:87:b8:ac:02:3b:37:eb:44:a0:77:8f:39:32:4c:6d:cc: fd:bf:32:85:5b:61:72:81:b1:61:73:30:d1:95:ac:9d:88:47: 76:57:84:8b:dc:a2:92:fe:23:2b:45:e3:82:99:5c:b3:ac:d7: 7d:3e:db:73:ce:19:85:16:c0:78:9e:51:89:13:1c:d1:47:cf: 06:59:59:8b:d6:df:17:be:7f:70:08:b0:41:c4:25:f0:33:23: 94:23:93:12:c5:9c:26:3a:07:f2:d9:cb:d1:90:91:97:95:cc: 83:a3:9d:68:d8:4e:13:8e:b6:08:ea:43:51:00:8d:aa:d9:2c: 88:0c:9a:05:b7:1f:8d:2e:51:ec:0e:70:3f:54:93:94:c0:9d: f5:2c:0b:f3:3d:e5:03:82:53:c8:85:e5:94:af:5f:15:c9:e6: 06:4f:db:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfyIpcGMFS7W+zuXi7wo5CWGdCQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNjAzMjUwODE1NTBaFw0yNjAzMjgwOTE0NTBaMDMxMTAvBgNV BAMTKDQ3QkYzNDM4OTU2REFFQ0VENEM3Mzc5MjZBQ0Y3ODIwMzFGNzZDRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr0y64GNGej1G7cdM1LphKbzif jCI6U2ZZKR0yxhiWtkVpXk8YULhpT2sSPovGFIzqpGqXb2Wzh6m0OR5QzN23RMrG bLY6D1GrZdP01llYcthOwFHho62F/+5R3tZK8oKyS/MWlfWVMKTIDBddT5Rx1GWw JV2mxx/0dbRWtf3n9z2PsKks+rj9AQQtYCUp0MoPS67WjzO9hfXx6Nkd/Fjg5ALd OF884mDG+bTlA+4lR1bh9d9AczloAL93NoBhREUYmxWU8W5g6zEwRJ1BtlTpa/eu X53n29tSd94YL2O/P/7O2SphQQt2XNUYMekbTdnHGMene3ScM3gshn07zSobAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR780OJVtrs7UxzeSas94IDH3bPowHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJABhRyyMfdHNwsYO+nJJ+VqdcfH+Akc3W0 qePj7/Vr2bBrsO0QS6WLlLRt4AW/ESCQIBJC2dztkiVFsvAKXbL/KScW6XnYG/rm GBj7d8EYzgDyIduct5GP12d+h7isAjs360Sgd485MkxtzP2/MoVbYXKBsWFzMNGV rJ2IR3ZXhIvcopL+IytF44KZXLOs130+23POGYUWwHieUYkTHNFHzwZZWYvW3xe+ f3AIsEHEJfAzI5QjkxLFnCY6B/LZy9GQkZeVzIOjnWjYThOOtgjqQ1EAjarZLIgM mgW3H40uUewOcD9Uk5TAnfUsC/M95QOCU8iF5ZSvXxXJ5gZP23A= -----END CERTIFICATE-----Generated at Thu Mar 26 12:00:58 2026 by rpki-client