$ rpki-client -vvf repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft File: DD8ADB0CD599281204D387EB652787650920B6C5.mft (raw, json) Hash identifier: Ck21Va3BrjSFGR2uLmaI3LcJHTHArK2ZVuDYUiKNlM8= Subject key identifier: 96:FE:96:EB:00:F5:92:45:EE:B1:E7:E8:A3:74:5F:D2:D6:1B:F0:B5 Authority key identifier: DD:8A:DB:0C:D5:99:28:12:04:D3:87:EB:65:27:87:65:09:20:B6:C5 Certificate issuer: /CN=DD8ADB0CD599281204D387EB652787650920B6C5 Certificate serial: 027352B4281F024F813F573296B2EAA1C779FC47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft Manifest number: 0185 Signing time: Thu 16 Apr 2026 23:50:45 +0000 Manifest this update: Thu 16 Apr 2026 23:45:45 +0000 Manifest next update: Mon 20 Apr 2026 06:55:45 +0000 Files and hashes: 1: 34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa (hash: vsLIgIdtrTNWl7Rz7Ctudnow9DnVKuYX5ZMk8sfL1S4=) 2: DD8ADB0CD599281204D387EB652787650920B6C5.crl (hash: oTdA3c6XDiuVHy3XLSczRMwT7EuTh693oZduQ9vk3r4=) 3: 34352e3131372e3133322e302f32332d3234203d3e20313432333135.roa (hash: fLXdX7zNaxQkd0Q8cy8I+8hSaxOk9xH8R3KSPtmEdIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.crl rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 06:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:73:52:b4:28:1f:02:4f:81:3f:57:32:96:b2:ea:a1:c7:79:fc:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8ADB0CD599281204D387EB652787650920B6C5 Validity Not Before: Apr 16 23:45:45 2026 GMT Not After : Apr 20 06:55:45 2026 GMT Subject: CN=96FE96EB00F59245EEB1E7E8A3745FD2D61BF0B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:67:00:e2:0c:a0:30:90:24:5b:0d:59:b9: 8a:96:21:f4:06:e8:b3:36:bf:b3:26:6e:a5:ec:46: d0:0a:18:5b:a8:fe:63:1a:f0:25:4f:00:5e:08:76: db:86:d6:9e:ac:ff:10:08:92:61:82:4c:ef:81:bc: a6:c3:1f:6b:95:32:bb:72:4d:75:29:7b:21:94:33: 40:0a:f1:77:20:4b:90:bd:a4:8d:61:44:1a:79:c0: 0d:e2:38:bf:7d:7e:75:97:57:51:bc:86:26:2e:0e: 4b:b8:32:07:6d:ca:bf:45:e2:b8:35:8d:55:59:4a: fb:02:28:8d:c0:1f:56:f4:be:7d:c2:a9:eb:5c:d2: 9d:e0:77:d4:50:2a:5a:9e:04:c5:c1:07:bc:e8:57: 21:45:8b:99:a3:11:ce:7b:17:50:16:23:33:a6:a8: 3e:20:84:af:b6:6a:1e:fe:4c:e7:30:e9:bb:1a:85: 80:57:b1:81:50:67:24:cc:2e:47:89:76:8b:97:4a: 89:4a:e0:21:ec:bf:59:56:24:a1:09:20:24:05:e2: 45:05:e1:b5:10:2d:b7:99:b4:e7:f6:65:ac:50:7b: 24:08:4a:bb:cb:d8:6a:27:f2:01:82:27:f1:d2:ec: fb:44:8d:85:e9:13:56:87:41:b7:7a:8e:19:75:97: fa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FE:96:EB:00:F5:92:45:EE:B1:E7:E8:A3:74:5F:D2:D6:1B:F0:B5 X509v3 Authority Key Identifier: keyid:DD:8A:DB:0C:D5:99:28:12:04:D3:87:EB:65:27:87:65:09:20:B6:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:6a:1c:b3:99:af:50:be:7a:55:48:43:52:6d:9c:1b:ee:80: 7d:4b:f9:53:c0:be:74:cd:b9:d9:7e:f3:12:ad:75:5c:ab:d3: 6f:64:21:7f:86:72:b1:38:6b:bf:49:27:00:af:71:fa:a5:e8: c7:69:5f:97:50:6d:cd:d5:0e:a6:8d:a2:99:90:85:46:02:a2: 9a:2f:e3:4c:bc:29:64:be:bf:c7:b5:da:19:db:43:5b:dd:71: 3f:d1:b6:71:c3:fb:ee:b3:c6:e8:48:b0:1f:63:47:f0:e8:09: e2:a2:24:3c:d8:40:82:03:fe:87:0a:5b:b1:d7:e4:e5:24:1b: f5:55:ab:86:ac:0f:ba:ff:4c:86:83:4f:e4:f3:75:29:79:a4: 8e:f7:85:62:6d:51:a6:4f:8b:db:a9:0a:3b:46:49:ce:70:50: ba:be:b9:d5:50:e1:8d:56:e7:39:38:ea:5f:f5:2e:29:bb:62: eb:29:38:d1:52:a5:f4:31:36:83:62:41:7c:77:2d:2f:89:c8: 62:52:aa:65:ae:17:08:72:c1:61:0f:32:da:f9:d6:45:b2:d1: 6f:dd:52:db:bf:03:2b:40:c9:45:c8:ea:10:e4:78:75:fa:3e: 6a:2f:39:71:ee:a5:23:52:bd:b3:34:90:a9:3b:c5:1d:49:fe: 6a:2d:ef:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAnNStCgfAk+BP1cylrLqocd5/EcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3NjUw OTIwQjZDNTAeFw0yNjA0MTYyMzQ1NDVaFw0yNjA0MjAwNjU1NDVaMDMxMTAvBgNV BAMTKDk2RkU5NkVCMDBGNTkyNDVFRUIxRTdFOEEzNzQ1RkQyRDYxQkYwQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1MmcA4gygMJAkWw1ZuYqWIfQG 6LM2v7MmbqXsRtAKGFuo/mMa8CVPAF4IdtuG1p6s/xAIkmGCTO+BvKbDH2uVMrty TXUpeyGUM0AK8XcgS5C9pI1hRBp5wA3iOL99fnWXV1G8hiYuDku4Mgdtyr9F4rg1 jVVZSvsCKI3AH1b0vn3Cqetc0p3gd9RQKlqeBMXBB7zoVyFFi5mjEc57F1AWIzOm qD4ghK+2ah7+TOcw6bsahYBXsYFQZyTMLkeJdouXSolK4CHsv1lWJKEJICQF4kUF 4bUQLbeZtOf2ZaxQeyQISrvL2Gon8gGCJ/HS7PtEjYXpE1aHQbd6jhl1l/oVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlv6W6wD1kkXusefoo3Rf0tYb8LUwHwYDVR0j BBgwFoAU3YrbDNWZKBIE04frZSeHZQkgtsUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmU2NGIwZC02NDZjLTRjZWMtOTQxZi03NDNiMmQxYmNlNGUvMC9ERDhBREIwQ0Q1 OTkyODEyMDREMzg3RUI2NTI3ODc2NTA5MjBCNkM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3NjUwOTIw QjZDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJlNjRiMGQtNjQ2Yy00Y2VjLTk0 MWYtNzQzYjJkMWJjZTRlLzAvREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3 NjUwOTIwQjZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFqHLOZr1C+elVIQ1JtnBvugH1L+VPAvnTN udl+8xKtdVyr029kIX+GcrE4a79JJwCvcfql6MdpX5dQbc3VDqaNopmQhUYCopov 40y8KWS+v8e12hnbQ1vdcT/RtnHD++6zxuhIsB9jR/DoCeKiJDzYQIID/ocKW7HX 5OUkG/VVq4asD7r/TIaDT+TzdSl5pI73hWJtUaZPi9upCjtGSc5wULq+udVQ4Y1W 5zk46l/1Lim7YuspONFSpfQxNoNiQXx3LS+JyGJSqmWuFwhywWEPMtr51kWy0W/d Utu/AytAyUXI6hDkeHX6PmovOXHupSNSvbM0kKk7xR1J/mot7yk= -----END CERTIFICATE-----Generated at Fri Apr 17 23:59:45 2026 by rpki-client