$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json) Hash identifier: aHsX0U89nsroPdWYAo5d3d9YurinOi205gpGL71fPhM= Subject key identifier: C6:21:6E:A3:A5:5A:3C:FD:58:74:4E:2A:A1:95:38:38:EB:3B:22:71 Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 1843886E46E5188DEA4D43187F18CD0138E6C4AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft Manifest number: 01E3 Signing time: Wed 15 Apr 2026 12:12:16 +0000 Manifest this update: Wed 15 Apr 2026 12:07:16 +0000 Manifest next update: Sun 19 Apr 2026 00:07:16 +0000 Files and hashes: 1: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: UFUV1/+yR0VUs891QJzA0faKiQcIk8IHhuxW1Cq8AbQ=) 2: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: sfj/xLZEElFZFm97ASqdb3Sh5i8unBwVhTxljUPKis0=) 3: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: wRkfk5IE7FEjdZBVsYYZyObCxjMnIw//uI0JOTnfK0w=) 4: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: FKKog+XQSDkvlhkDlh/3Ao41iJ0gN8My01/0TZX5i0E=) 5: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: R+DmNBqhtkOuKahzYMnTotgoYbxKoFMnirF158Auuzw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 00:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:43:88:6e:46:e5:18:8d:ea:4d:43:18:7f:18:cd:01:38:e6:c4:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Apr 15 12:07:16 2026 GMT Not After : Apr 19 00:07:16 2026 GMT Subject: CN=C6216EA3A55A3CFD58744E2AA1953838EB3B2271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:24:52:3a:4f:b3:a3:3f:87:df:32:5c:7c:b2: 0e:3c:78:09:26:23:7e:ef:eb:49:5d:aa:d4:12:48: f8:31:3b:c0:d2:22:4f:65:fe:81:b2:e1:79:ef:aa: 99:75:0f:1f:4e:d5:2e:0e:78:db:8f:f1:9a:b4:b8: ca:2e:e8:47:a9:3e:13:cc:b9:bf:12:bc:33:d7:c8: 27:4b:55:14:94:60:3e:32:60:e5:03:88:61:00:1c: 32:cd:35:c3:cf:45:72:26:1a:2a:bc:a6:cd:3b:c3: 83:fa:91:ec:57:05:62:d1:72:eb:43:03:19:4a:2b: 1a:72:fb:65:d1:f4:4d:5a:b8:fa:1d:4e:30:3f:9a: 49:00:26:4e:f3:8a:f6:1b:d3:ad:88:e7:67:62:ca: a5:b9:6d:54:b1:66:28:23:07:3a:3d:a1:b1:a2:19: 71:b5:6f:e1:05:fe:a2:32:02:80:bf:89:01:bd:74: 4d:d7:f7:80:ff:16:65:39:92:96:8d:83:98:72:c6: c2:26:0e:d0:64:7c:36:04:61:42:42:57:bf:fb:a2: ac:05:27:10:59:3f:a6:9a:27:58:89:e5:e9:00:6a: 8c:33:ee:d0:79:0b:ad:04:02:e5:d3:e6:ad:5d:20: 03:aa:72:5e:46:bb:2c:b7:43:3d:c2:2d:01:43:7c: 30:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:21:6E:A3:A5:5A:3C:FD:58:74:4E:2A:A1:95:38:38:EB:3B:22:71 X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:59:02:b5:46:47:42:1a:42:7e:9c:8d:44:a1:e0:16:a2:71: d3:2c:cc:0a:c1:78:a0:40:27:08:72:f5:2a:90:2d:a0:cd:1a: ba:b9:a0:73:66:db:c6:d5:1d:a2:c7:7b:4d:b9:4a:cd:de:63: 9d:90:45:77:b8:27:c5:a0:fd:2e:1c:8a:2c:34:c8:48:7f:7d: 0c:b0:e3:f8:4d:51:ff:60:c0:48:d4:51:eb:20:8a:bf:e9:a0: 44:4b:12:eb:ab:58:55:2b:ea:d5:29:b2:05:9b:ea:d5:81:40: 51:ee:65:02:71:8e:d0:fc:6b:82:a2:35:14:8a:95:ac:ff:f5: cb:8f:eb:fd:43:93:e0:83:7b:48:c3:49:af:10:35:76:ca:45: 42:99:2d:df:fa:38:6f:14:11:3a:12:a4:52:fe:a6:7d:3c:5f: 81:73:89:72:6d:a6:98:6f:d4:af:ec:50:d6:38:9e:40:86:29: 89:5c:e5:f8:1a:e9:f5:9d:09:21:8b:bc:cc:fe:fc:59:7a:05: f5:0f:41:53:c5:d1:b6:08:53:74:a1:c1:29:56:d4:e6:a5:63: 74:54:9a:80:e9:6e:f8:70:1c:f1:a9:ed:ea:66:c9:b8:0c:5e: f4:c2:13:52:4f:10:ed:cb:d1:89:0d:cc:b7:ca:18:da:54:a3: 81:04:4f:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGEOIbkblGI3qTUMYfxjNATjmxK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNjA0MTUxMjA3MTZaFw0yNjA0MTkwMDA3MTZaMDMxMTAvBgNV BAMTKEM2MjE2RUEzQTU1QTNDRkQ1ODc0NEUyQUExOTUzODM4RUIzQjIyNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJFI6T7OjP4ffMlx8sg48eAkm I37v60ldqtQSSPgxO8DSIk9l/oGy4Xnvqpl1Dx9O1S4OeNuP8Zq0uMou6EepPhPM ub8SvDPXyCdLVRSUYD4yYOUDiGEAHDLNNcPPRXImGiq8ps07w4P6kexXBWLRcutD AxlKKxpy+2XR9E1auPodTjA/mkkAJk7zivYb062I52diyqW5bVSxZigjBzo9obGi GXG1b+EF/qIyAoC/iQG9dE3X94D/FmU5kpaNg5hyxsImDtBkfDYEYUJCV7/7oqwF JxBZP6aaJ1iJ5ekAaowz7tB5C60EAuXT5q1dIAOqcl5Guyy3Qz3CLQFDfDDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxiFuo6VaPP1YdE4qoZU4OOs7InEwHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZZArVGR0IaQn6cjUSh4BaicdMszArBeKBA Jwhy9SqQLaDNGrq5oHNm28bVHaLHe025Ss3eY52QRXe4J8Wg/S4ciiw0yEh/fQyw 4/hNUf9gwEjUUesgir/poERLEuurWFUr6tUpsgWb6tWBQFHuZQJxjtD8a4KiNRSK laz/9cuP6/1Dk+CDe0jDSa8QNXbKRUKZLd/6OG8UEToSpFL+pn08X4FziXJtpphv 1K/sUNY4nkCGKYlc5fga6fWdCSGLvMz+/Fl6BfUPQVPF0bYIU3ShwSlW1OalY3RU moDpbvhwHPGp7epmybgMXvTCE1JPEO3L0YkNzLfKGNpUo4EET5A= -----END CERTIFICATE-----Generated at Fri Apr 17 18:20:24 2026 by rpki-client