$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft File: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft (raw, json) Hash identifier: bN8+l6uCLEE3HCsre7EJcsuKJXaAyDwCdPfdx6spM5g= Subject key identifier: 21:69:72:BF:C5:4E:05:38:56:D1:08:18:4B:90:72:E3:B0:CE:8E:EF Authority key identifier: DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C Certificate issuer: /CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Certificate serial: 354C8946D6F67AC8F8A1638E167CCB5C916E815D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft Manifest number: E4 Signing time: Fri 17 Apr 2026 16:31:51 +0000 Manifest this update: Fri 17 Apr 2026 16:26:51 +0000 Manifest next update: Tue 21 Apr 2026 02:41:51 +0000 Files and hashes: 1: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl (hash: 8aYDakCroRYmpwRjMv5YYOaNj8F/e35v+7pFmN88pgY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 02:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:4c:89:46:d6:f6:7a:c8:f8:a1:63:8e:16:7c:cb:5c:91:6e:81:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Validity Not Before: Apr 17 16:26:51 2026 GMT Not After : Apr 21 02:41:51 2026 GMT Subject: CN=216972BFC54E053856D108184B9072E3B0CE8EEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6e:85:b8:e8:11:e0:43:ea:32:3a:aa:13:1d: f4:0d:80:35:29:94:62:ce:39:cd:04:dd:20:cd:6d: bc:82:e3:78:89:19:ed:24:7c:8c:4b:27:84:1d:98: a3:2a:3b:00:87:0e:16:1e:90:4f:75:92:28:09:9f: d2:5a:77:83:8f:72:80:6a:9f:08:4e:ba:85:47:bf: 6b:b2:ff:cd:b4:d5:8b:6e:20:e7:c6:00:5c:14:b1: 6f:30:a6:bc:2c:d5:de:55:26:76:a3:13:bb:96:e5: 2c:68:30:e8:99:bb:a6:c1:84:17:07:42:c6:1e:f2: d8:88:bf:e2:2b:84:a3:f4:33:10:f7:f6:4d:93:98: f7:cc:61:f5:c3:88:03:21:9c:c9:ae:a0:1b:d9:26: 5b:08:ec:57:39:d8:92:78:93:82:22:f4:18:9e:9e: 39:a3:31:00:73:03:24:da:05:e7:bd:f4:82:b1:e9: 9b:d7:15:c8:9a:ee:3b:fc:c6:63:81:a2:a4:cf:db: 43:c3:7d:55:9b:06:65:a8:c9:e8:44:ed:74:be:44: c2:79:2e:84:4a:55:91:4a:03:9c:3f:9e:9e:ec:0d: 7e:8f:5f:ce:2c:a2:61:2d:b8:bf:91:9b:3e:5f:de: 27:1e:d9:98:ed:6d:12:19:e0:84:f7:15:8d:da:f5: f8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:69:72:BF:C5:4E:05:38:56:D1:08:18:4B:90:72:E3:B0:CE:8E:EF X509v3 Authority Key Identifier: keyid:DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:21:68:3b:13:01:12:11:38:32:e3:58:cf:81:52:45:ff:a7: 4d:f1:52:cc:8e:7c:41:2b:b8:dc:b6:3b:03:93:84:85:0f:9e: 97:9a:b3:87:9c:0a:ea:ee:8f:8e:ba:5a:b4:4c:ea:bd:56:1a: 82:5e:00:36:51:ca:f0:33:40:5d:9c:19:37:81:b8:ca:5d:55: 5c:d5:32:65:b3:34:d3:cd:73:86:eb:f0:46:f6:b5:12:36:c2: 30:8c:66:a8:a2:21:29:f0:26:c2:4d:82:18:24:9a:a4:4e:58: 7c:68:c4:ea:32:b0:92:d3:18:c2:1a:94:5c:60:26:4f:d3:c7: 09:e8:c7:6f:00:e6:cb:c4:03:ef:4e:cb:d9:0d:40:75:03:32: 89:46:54:28:53:77:08:68:6a:8c:e6:41:6f:a8:10:c1:49:96: a6:00:cf:c0:ec:6f:a6:8c:62:71:fb:34:58:a0:7d:60:fc:b9: 91:b7:37:4c:a7:ab:2c:6b:eb:6d:10:25:f7:b9:95:7c:80:0f: 13:6a:44:9b:fb:1a:02:92:62:4e:04:c0:c7:a5:7e:f2:81:2e: f0:40:7a:34:93:4e:28:e8:8c:44:0b:cd:3d:1e:e2:1d:5c:fa: 70:dc:63:7f:17:6f:ac:03:fa:92:52:e8:a6:b6:7e:7b:3a:83: 6d:29:65:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNUyJRtb2esj4oWOOFnzLXJFugV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5 RDJFQ0Y3QzAeFw0yNjA0MTcxNjI2NTFaFw0yNjA0MjEwMjQxNTFaMDMxMTAvBgNV BAMTKDIxNjk3MkJGQzU0RTA1Mzg1NkQxMDgxODRCOTA3MkUzQjBDRThFRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQboW46BHgQ+oyOqoTHfQNgDUp lGLOOc0E3SDNbbyC43iJGe0kfIxLJ4QdmKMqOwCHDhYekE91kigJn9Jad4OPcoBq nwhOuoVHv2uy/8201YtuIOfGAFwUsW8wprws1d5VJnajE7uW5SxoMOiZu6bBhBcH QsYe8tiIv+IrhKP0MxD39k2TmPfMYfXDiAMhnMmuoBvZJlsI7Fc52JJ4k4Ii9Bie njmjMQBzAyTaBee99IKx6ZvXFcia7jv8xmOBoqTP20PDfVWbBmWoyehE7XS+RMJ5 LoRKVZFKA5w/np7sDX6PX84somEtuL+Rmz5f3ice2ZjtbRIZ4IT3FY3a9fjpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIWlyv8VOBThW0QgYS5By47DOju8wHwYDVR0j BBgwFoAU3eatEwl6W1pKRnOQjIT0yJ0uz3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMS9EREU2QUQxMzA5 N0E1QjVBNEE0NjczOTA4Qzg0RjRDODlEMkVDRjdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5RDJF Q0Y3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzEvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0 Qzg5RDJFQ0Y3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUhaDsTARIRODLjWM+BUkX/p03xUsyOfEEr uNy2OwOThIUPnpeas4ecCuruj466WrRM6r1WGoJeADZRyvAzQF2cGTeBuMpdVVzV MmWzNNPNc4br8Eb2tRI2wjCMZqiiISnwJsJNghgkmqROWHxoxOoysJLTGMIalFxg Jk/Txwnox28A5svEA+9Oy9kNQHUDMolGVChTdwhoaozmQW+oEMFJlqYAz8Dsb6aM YnH7NFigfWD8uZG3N0ynqyxr620QJfe5lXyADxNqRJv7GgKSYk4EwMelfvKBLvBA ejSTTijojEQLzT0e4h1c+nDcY38Xb6wD+pJS6Ka2fns6g20pZVo= -----END CERTIFICATE-----Generated at Sun Apr 19 10:16:43 2026 by rpki-client