$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft File: DD29F5E4CE561760A0212F0448987AFBE75263D7.mft (raw, json) Hash identifier: BcLVz/74BwWuYhd+wSais2EFmaGDDhsUQt3F6Op33Ls= Subject key identifier: 5E:C5:67:F5:56:3A:56:C1:EB:8E:96:AD:F7:B1:AF:36:E6:D1:F9:A5 Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Certificate serial: 04AACB0B47CD32A2B04E8A1218A9568B2B735FAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft Manifest number: 0371 Signing time: Sun 01 Mar 2026 16:52:42 +0000 Manifest this update: Sun 01 Mar 2026 16:47:42 +0000 Manifest next update: Thu 05 Mar 2026 04:09:42 +0000 Files and hashes: 1: 35382e3134372e3139312e302f32342d3234203d3e203234353334.roa (hash: 8qZ2PfVPSW4Gale+B6XAN2CyhRmIb70LvF4xop7XFFw=) 2: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (hash: X9EKF8Z1uFLJC9IzjlT1aPQkzE/clRuy5X9NkdqNVow=) 3: 323430343a393538303a33313a3a2f34382d3438203d3e203633353136.roa (hash: xAVHkwUJuceUhm1gZEhKbi4kqCLmB1DeBBYoJxsoYjY=) 4: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (hash: 0+6+N7y7+z5+GZ0LUn4in9mnEACESucH1zgQmC9xHAA=) 5: 323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (hash: 1Jp8cCDyjncp4Wpa0IwwHsbMLezQ3Rf5CCYJ9Uaw69A=) 6: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (hash: s32Asfb0Vk2AoqdXXpuFo/1b1Jpm9sVE9gF86xInAZ8=) 7: DD29F5E4CE561760A0212F0448987AFBE75263D7.crl (hash: EcSkrL+UJ5+5ibtp3EfSyElU6Cih/6tPPK6KGF6v0n4=) 8: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (hash: 47GvXgllqrS1MxJptUYHVOsa05orn3J0qbEjvOU+c+c=) 9: 35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (hash: x2jz47JNdTLcNfT8vbEKIJnVX3m/vRvrmqpmvqODREA=) 10: 3130332e34322e3132322e302f32342d3234203d3e203633353136.roa (hash: 5ScxcfML486iFVsWj/fUX6rjVFXkWRISgnQEhtwZ9No=) 11: 35382e3134372e3139302e302f32342d3234203d3e203234353334.roa (hash: hfJYX7IXK2yRsIkXzTXumWYWspYzmgD5u1H3fLVubkc=) 12: 323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa (hash: +h69YPXoiC31k13cSEzWyv6wTFkos1CLOZsQnIEiGv0=) 13: 35382e3134372e3138392e302f32342d3234203d3e203234353334.roa (hash: yHFhz7s9vTM+0GwcewjykllWnmywdIchHv+vwnUyUtQ=) 14: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (hash: wWYceKo3HVUOMgRcN2/P197TAtHkoSlPkbBqfdmOb58=) 15: 35382e3134372e3138372e302f32342d3234203d3e203234353334.roa (hash: R+HBHXL62WCqMu+S9XZ2lfDd7q3jJVRrizTgz3Qq4sM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 04:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:aa:cb:0b:47:cd:32:a2:b0:4e:8a:12:18:a9:56:8b:2b:73:5f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Validity Not Before: Mar 1 16:47:42 2026 GMT Not After : Mar 5 04:09:42 2026 GMT Subject: CN=5EC567F5563A56C1EB8E96ADF7B1AF36E6D1F9A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2c:2b:f5:38:b7:97:6f:f5:24:47:01:dd:9a: 95:24:53:ef:17:6e:7a:61:ac:ec:f9:4e:ee:19:5a: 83:2e:9b:bb:46:74:9c:31:50:c0:12:6f:5a:8b:1b: ea:64:11:a2:af:15:52:de:62:a1:a2:34:24:d9:71: 5e:af:84:cd:7e:15:1d:8b:1a:a7:7f:51:6b:e3:be: a1:fd:b7:c7:6f:ab:47:23:ad:66:cc:32:22:3b:bc: 06:85:9a:67:49:f7:c3:a9:66:43:9c:d5:b3:53:ad: 52:cb:4f:01:2e:c8:41:aa:ca:36:11:69:4e:93:4c: 77:e7:d9:96:a8:26:8a:95:de:28:27:a5:2b:34:21: 26:46:01:25:ab:0f:f3:1d:18:63:11:7d:9c:3d:32: d8:c4:87:cf:8d:92:7d:5d:2c:4c:e7:28:34:8f:ee: 6b:dd:ec:59:2e:e9:82:15:69:d3:61:f6:1d:20:b5: 1a:0a:d4:e4:ee:da:c3:6c:ae:ab:34:d3:7c:2d:25: 0d:8b:90:c5:87:8c:06:00:40:d5:c1:16:04:02:13: 3c:38:1c:34:18:f1:a1:2b:e0:c9:a0:43:24:52:04: a9:f3:64:63:b8:eb:d8:17:e6:8a:46:bb:0a:0f:40: 82:38:29:f2:23:4d:41:11:5f:e5:78:4f:58:da:95: 89:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C5:67:F5:56:3A:56:C1:EB:8E:96:AD:F7:B1:AF:36:E6:D1:F9:A5 X509v3 Authority Key Identifier: keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:58:75:ed:95:65:2c:42:a1:23:7e:e1:18:7b:cd:ee:cc:42: 8a:b0:d5:6d:ca:42:fa:1d:ff:36:a7:13:c3:b0:a7:c4:9a:85: 7b:f8:1c:32:7f:57:80:fa:a0:d2:f5:c8:e3:7c:30:42:e5:d4: 52:eb:a2:06:67:61:85:38:cb:e5:38:a4:92:75:aa:05:d5:ba: 47:16:08:c4:b7:da:36:c6:78:b3:ec:38:52:dc:43:05:cc:20: e0:da:19:0d:0f:2e:ac:13:ac:2c:af:cb:3d:00:2b:4e:4a:fc: df:4b:ae:30:34:62:67:db:3d:7e:1a:7a:9d:40:e5:d1:61:88: 2b:df:49:fa:e9:db:85:9d:4e:aa:65:ad:a9:9a:59:a4:30:ab: 07:f2:8f:59:f5:2e:20:88:4f:52:6c:c8:e5:cc:e1:af:ba:bd: 79:d7:f0:ed:9f:13:ea:04:0f:04:e9:18:42:de:cf:33:d6:f5: 8a:ec:91:c2:03:bd:14:03:34:ab:ad:07:c2:06:45:c5:1d:60: f1:a0:a2:7a:f1:49:a3:83:00:cf:34:86:9e:a0:66:91:cc:da: cc:f6:13:a1:17:97:ac:46:85:aa:23:8f:97:49:85:72:07:b0: ea:63:0c:8e:c0:fd:a9:f6:e1:54:3a:41:9b:36:e9:4f:a7:b2: c2:d7:54:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKrLC0fNMqKwTooSGKlWiytzX6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF NzUyNjNENzAeFw0yNjAzMDExNjQ3NDJaFw0yNjAzMDUwNDA5NDJaMDMxMTAvBgNV BAMTKDVFQzU2N0Y1NTYzQTU2QzFFQjhFOTZBREY3QjFBRjM2RTZEMUY5QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMLCv1OLeXb/UkRwHdmpUkU+8X bnphrOz5Tu4ZWoMum7tGdJwxUMASb1qLG+pkEaKvFVLeYqGiNCTZcV6vhM1+FR2L Gqd/UWvjvqH9t8dvq0cjrWbMMiI7vAaFmmdJ98OpZkOc1bNTrVLLTwEuyEGqyjYR aU6TTHfn2ZaoJoqV3ignpSs0ISZGASWrD/MdGGMRfZw9MtjEh8+Nkn1dLEznKDSP 7mvd7Fku6YIVadNh9h0gtRoK1OTu2sNsrqs003wtJQ2LkMWHjAYAQNXBFgQCEzw4 HDQY8aEr4MmgQyRSBKnzZGO469gX5opGuwoPQII4KfIjTUERX+V4T1jalYmdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXsVn9VY6VsHrjpat97GvNubR+aUwHwYDVR0j BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy NjNENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYyNDA1MmUtMjIwNS00OGYzLWEz Y2ItY2U4YjMyNmI4ZjcxLzAvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdB RkJFNzUyNjNENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRYde2VZSxCoSN+4Rh7ze7MQoqw1W3KQvod /zanE8Owp8SahXv4HDJ/V4D6oNL1yON8MELl1FLrogZnYYU4y+U4pJJ1qgXVukcW CMS32jbGeLPsOFLcQwXMIODaGQ0PLqwTrCyvyz0AK05K/N9LrjA0YmfbPX4aep1A 5dFhiCvfSfrp24WdTqplramaWaQwqwfyj1n1LiCIT1JsyOXM4a+6vXnX8O2fE+oE DwTpGELezzPW9YrskcIDvRQDNKutB8IGRcUdYPGgonrxSaODAM80hp6gZpHM2sz2 E6EXl6xGhaojj5dJhXIHsOpjDI7A/an24VQ6QZs26U+nssLXVOs= -----END CERTIFICATE-----Generated at Mon Mar 2 08:19:08 2026 by rpki-client