$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft File: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft (raw, json) Hash identifier: JEs5nmNieEKd+w/6pHS6vqlF5JrP2AWKyLvVoDsTyCE= Subject key identifier: BC:56:B5:3D:C8:34:32:A8:11:CC:E0:8F:BF:43:15:16:24:5A:3E:E4 Authority key identifier: DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C Certificate issuer: /CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Certificate serial: 1C4EC855F5FC4974393EE609D6BAE6A227D67CED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft Manifest number: CF Signing time: Sun 01 Mar 2026 04:02:58 +0000 Manifest this update: Sun 01 Mar 2026 03:57:58 +0000 Manifest next update: Wed 04 Mar 2026 13:14:58 +0000 Files and hashes: 1: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl (hash: uXiBEi7RMEzTt6qefDDhZ2HR9XH/b9AQM8hdohPmQcs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4e:c8:55:f5:fc:49:74:39:3e:e6:09:d6:ba:e6:a2:27:d6:7c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Validity Not Before: Mar 1 03:57:58 2026 GMT Not After : Mar 4 13:14:58 2026 GMT Subject: CN=BC56B53DC83432A811CCE08FBF431516245A3EE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d5:1d:3f:d0:6c:48:ae:90:6b:86:a9:64:47: 8a:19:d8:df:68:8d:83:c7:1c:3c:9a:bf:33:80:f6: 51:9d:ae:6d:be:65:7e:89:1d:ae:88:a9:3d:90:e9: b6:9d:bc:5f:4e:e2:5e:a2:4e:14:67:29:ce:3d:c3: 78:04:98:0d:94:6e:93:30:80:fe:9f:43:36:e8:79: e5:4a:a2:93:6f:00:c5:21:17:bf:32:60:dc:d8:db: 1d:36:fb:be:95:a2:e6:cc:19:98:db:d1:0c:49:c6: 12:f6:3a:6b:9b:82:6e:eb:28:82:ae:01:c7:81:29: 71:48:00:09:d8:72:e9:59:a7:d7:d2:fd:f6:59:6d: 23:bc:d8:07:82:6f:15:c9:20:cb:96:f7:05:5c:06: c0:c9:50:8e:6a:f9:f3:b9:49:29:db:00:b7:ec:de: 1d:a7:71:c7:13:2b:7f:4d:38:91:c2:3f:9e:0b:7f: ea:90:c9:61:b4:7d:db:cf:d0:c1:ce:16:04:7c:92: 75:c4:b1:57:8e:a1:e4:89:af:34:57:b7:d9:e4:a4: da:11:1f:7b:7f:95:49:b4:f6:b8:10:52:f9:47:2c: 0c:7c:07:86:93:b5:73:b3:02:e7:b0:02:79:eb:5b: 80:bf:11:23:f0:aa:fa:58:6d:20:fe:9c:6c:32:62: 47:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:56:B5:3D:C8:34:32:A8:11:CC:E0:8F:BF:43:15:16:24:5A:3E:E4 X509v3 Authority Key Identifier: keyid:DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c6:cd:69:a9:d7:15:e2:05:4a:79:39:df:45:15:ee:d7:ad: fb:c4:9e:fb:53:98:20:4f:9b:2d:6d:7b:c1:91:65:cd:ac:ac: a4:14:06:6c:53:2b:c7:b2:6c:c8:69:57:fa:b5:45:37:d7:53: 8a:d5:22:c2:c2:7c:eb:40:1a:69:81:60:73:61:09:46:08:0e: a1:63:86:56:f9:26:56:3b:90:db:0b:8f:88:14:61:dc:77:23: e6:a0:5c:9f:78:fa:14:1b:2a:5a:57:40:c5:ac:64:3a:85:08: 51:be:dd:97:e1:3d:03:9b:4e:1a:31:b4:97:b9:05:b4:e2:96: 11:39:9c:4b:a5:06:4c:11:98:e7:e1:4d:41:ad:fc:af:09:7f: a9:2f:9c:3f:ca:65:87:cd:ea:97:ae:f7:ba:ff:26:b5:c4:b8: 6b:a1:cb:ee:a4:9e:a5:0c:54:a6:71:43:fb:5c:fd:15:7a:c3: 89:65:45:e1:6e:0a:23:06:38:98:06:8e:22:2d:ec:ed:db:f1: c0:42:dd:b9:2b:36:e6:7d:ba:14:d3:33:4a:f9:dc:72:85:61: 9c:10:85:0f:f7:e0:55:ec:25:01:49:9f:22:85:85:39:5b:95: 13:bc:46:6b:1d:4a:e2:94:53:52:ba:ca:32:ba:05:33:8b:69: ec:8b:ee:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHE7IVfX8SXQ5PuYJ1rrmoifWfO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5 RDJFQ0Y3QzAeFw0yNjAzMDEwMzU3NThaFw0yNjAzMDQxMzE0NThaMDMxMTAvBgNV BAMTKEJDNTZCNTNEQzgzNDMyQTgxMUNDRTA4RkJGNDMxNTE2MjQ1QTNFRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1R0/0GxIrpBrhqlkR4oZ2N9o jYPHHDyavzOA9lGdrm2+ZX6JHa6IqT2Q6badvF9O4l6iThRnKc49w3gEmA2UbpMw gP6fQzboeeVKopNvAMUhF78yYNzY2x02+76VoubMGZjb0QxJxhL2Omubgm7rKIKu AceBKXFIAAnYculZp9fS/fZZbSO82AeCbxXJIMuW9wVcBsDJUI5q+fO5SSnbALfs 3h2ncccTK39NOJHCP54Lf+qQyWG0fdvP0MHOFgR8knXEsVeOoeSJrzRXt9nkpNoR H3t/lUm09rgQUvlHLAx8B4aTtXOzAuewAnnrW4C/ESPwqvpYbSD+nGwyYkd/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvFa1Pcg0MqgRzOCPv0MVFiRaPuQwHwYDVR0j BBgwFoAU3eatEwl6W1pKRnOQjIT0yJ0uz3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMS9EREU2QUQxMzA5 N0E1QjVBNEE0NjczOTA4Qzg0RjRDODlEMkVDRjdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5RDJF Q0Y3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzEvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0 Qzg5RDJFQ0Y3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3GzWmp1xXiBUp5Od9FFe7XrfvEnvtTmCBP my1te8GRZc2srKQUBmxTK8eybMhpV/q1RTfXU4rVIsLCfOtAGmmBYHNhCUYIDqFj hlb5JlY7kNsLj4gUYdx3I+agXJ94+hQbKlpXQMWsZDqFCFG+3ZfhPQObThoxtJe5 BbTilhE5nEulBkwRmOfhTUGt/K8Jf6kvnD/KZYfN6peu97r/JrXEuGuhy+6knqUM VKZxQ/tc/RV6w4llReFuCiMGOJgGjiIt7O3b8cBC3bkrNuZ9uhTTM0r53HKFYZwQ hQ/34FXsJQFJnyKFhTlblRO8RmsdSuKUU1K6yjK6BTOLaeyL7jc= -----END CERTIFICATE-----Generated at Mon Mar 2 00:26:52 2026 by rpki-client