$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft File: 1DD4F8984667E142BB9C6F1133AA56899352286C.mft (raw, json) Hash identifier: qHGizxpTQpwS/3WivDAzz033om3o1ERXmSMUCQMJdmI= Subject key identifier: 29:DA:EE:5B:AE:45:0C:58:77:C3:4A:7C:41:0D:17:FD:DF:84:61:DC Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 5FEA554FF9AC9727BFFBD9D26D24C04111DF03F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft Manifest number: 0256 Signing time: Tue 24 Mar 2026 12:32:29 +0000 Manifest this update: Tue 24 Mar 2026 12:27:29 +0000 Manifest next update: Fri 27 Mar 2026 19:08:29 +0000 Files and hashes: 1: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: sc/9k5RxrPoUKjA1WeRmsmulQQW2CkQ+ijXNT0b/Zmg=) 2: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: wfLjY3p90gmlaNyyJgSUiHlnW1A0eYIofnmRcN5XLWg=) 3: 1DD4F8984667E142BB9C6F1133AA56899352286C.crl (hash: f/M/fa37TuUa2+3d/UZmzk0f6o/gfv3RaAA5DoteaTo=) 4: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: q8DwNNKz74IoWEZzT+iAC/h08ft27LvacBdr8MXv1MI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ea:55:4f:f9:ac:97:27:bf:fb:d9:d2:6d:24:c0:41:11:df:03:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Mar 24 12:27:29 2026 GMT Not After : Mar 27 19:08:29 2026 GMT Subject: CN=29DAEE5BAE450C5877C34A7C410D17FDDF8461DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1b:c7:fc:d3:1d:f6:42:aa:3b:bd:c7:59:f0: d1:dd:2e:bc:16:cb:df:04:b3:8b:4b:08:ba:d8:94: 15:8a:65:8e:29:0d:06:2c:83:5d:b2:89:b8:f4:97: c7:04:65:db:bd:a3:cf:8f:d5:21:50:4f:17:51:44: 52:23:65:c2:76:97:e5:ad:3a:26:b9:b8:10:7a:d9: 01:49:5b:37:f5:96:9d:99:56:ca:c9:02:ee:03:9a: 22:f8:bc:f0:e9:da:84:1a:94:7f:1e:ee:bb:cb:e3: ec:d4:ab:40:6f:cb:da:cc:19:f5:1e:09:68:90:e6: 03:47:4c:c5:e2:e1:50:c4:84:07:8f:5d:78:78:f3: aa:eb:6d:45:6b:54:15:5d:c1:2f:61:eb:d5:41:42: 79:47:58:45:f2:21:94:e3:35:97:22:92:47:c3:f9: 5c:87:ce:60:a9:94:f6:3c:80:21:4c:00:01:b5:98: 8a:ce:b5:fa:15:51:4c:33:c2:70:5e:7f:43:c2:75: 0a:ee:30:76:cd:21:c8:ff:d5:6f:08:e9:1c:c4:3a: 89:60:b1:b9:4c:21:c3:78:e2:01:6f:df:00:d8:5a: 25:28:1f:a2:7d:8c:e1:e5:43:d6:99:f0:b2:19:d7: b5:21:77:8c:0b:f0:47:4c:85:f1:cb:7d:6b:86:98: 6c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DA:EE:5B:AE:45:0C:58:77:C3:4A:7C:41:0D:17:FD:DF:84:61:DC X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:49:24:eb:a3:d3:d5:f7:ff:b4:a7:22:de:c6:85:e4:c9:22: 8a:09:90:c2:a6:14:3b:7d:49:6f:7c:04:ca:3c:be:1b:98:9b: 82:c5:ba:81:28:3c:53:2a:9c:fc:c6:b0:78:6a:6d:94:2d:03: 88:ab:bc:12:bf:6e:8d:af:d8:76:90:8c:34:62:98:78:c7:8c: 94:a9:cc:13:e7:38:2a:5e:e6:bd:1d:06:51:6d:25:5f:a6:45: f2:8a:2a:94:61:02:7e:24:34:c4:09:e5:6d:5b:6a:d9:ca:85: 2c:5d:06:ae:bf:44:05:ba:f8:71:e5:bc:5a:2e:4e:0b:ae:dd: 00:09:a5:9c:e1:f9:ad:11:24:36:06:a3:51:1b:1f:d4:18:1d: 89:c3:96:c5:59:d9:d0:a0:2a:86:8b:e1:cd:d1:de:4c:83:73: c8:90:2e:ef:9b:1b:04:62:f4:3c:cd:ed:73:6d:00:3d:00:ff: 6c:c0:75:f1:1e:da:02:cd:19:3d:55:30:fa:c2:1b:24:79:73: 2f:56:56:cd:ec:c6:7b:44:77:2d:2e:6d:fb:9e:f6:f8:5a:a3: ae:1d:21:3e:6b:29:bc:b7:28:90:fe:62:1f:42:53:9a:cb:90: 06:9a:56:e7:65:0b:5f:93:02:53:0b:23:1f:a7:24:a0:00:fc: 69:c9:c3:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX+pVT/mslye/+9nSbSTAQRHfA/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNjAzMjQxMjI3MjlaFw0yNjAzMjcxOTA4MjlaMDMxMTAvBgNV BAMTKDI5REFFRTVCQUU0NTBDNTg3N0MzNEE3QzQxMEQxN0ZEREY4NDYxREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVG8f80x32Qqo7vcdZ8NHdLrwW y98Es4tLCLrYlBWKZY4pDQYsg12yibj0l8cEZdu9o8+P1SFQTxdRRFIjZcJ2l+Wt Oia5uBB62QFJWzf1lp2ZVsrJAu4DmiL4vPDp2oQalH8e7rvL4+zUq0Bvy9rMGfUe CWiQ5gNHTMXi4VDEhAePXXh486rrbUVrVBVdwS9h69VBQnlHWEXyIZTjNZcikkfD +VyHzmCplPY8gCFMAAG1mIrOtfoVUUwzwnBef0PCdQruMHbNIcj/1W8I6RzEOolg sblMIcN44gFv3wDYWiUoH6J9jOHlQ9aZ8LIZ17Uhd4wL8EdMhfHLfWuGmGy1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKdruW65FDFh3w0p8QQ0X/d+EYdwwHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2 ODk5MzUyMjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElJJOuj09X3/7SnIt7GheTJIooJkMKmFDt9 SW98BMo8vhuYm4LFuoEoPFMqnPzGsHhqbZQtA4irvBK/bo2v2HaQjDRimHjHjJSp zBPnOCpe5r0dBlFtJV+mRfKKKpRhAn4kNMQJ5W1batnKhSxdBq6/RAW6+HHlvFou Tguu3QAJpZzh+a0RJDYGo1EbH9QYHYnDlsVZ2dCgKoaL4c3R3kyDc8iQLu+bGwRi 9DzN7XNtAD0A/2zAdfEe2gLNGT1VMPrCGyR5cy9WVs3sxntEdy0ubfue9vhao64d IT5rKby3KJD+Yh9CU5rLkAaaVudlC1+TAlMLIx+nJKAA/GnJwzs= -----END CERTIFICATE-----Generated at Thu Mar 26 16:26:25 2026 by rpki-client