$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json) Hash identifier: zZqOyWIcukjpehaIINLDBcDLtVdc1S8Q50ZUMq1f9AY= Subject key identifier: E5:1A:84:1C:6B:5C:3C:25:5B:9F:9C:63:67:7C:61:73:B1:34:7F:72 Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 42D50F538C2F53558A577039AC9DCDE43D309C54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft Manifest number: 01CE Signing time: Sat 28 Feb 2026 21:22:16 +0000 Manifest this update: Sat 28 Feb 2026 21:17:16 +0000 Manifest next update: Tue 03 Mar 2026 22:38:16 +0000 Files and hashes: 1: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: wRkfk5IE7FEjdZBVsYYZyObCxjMnIw//uI0JOTnfK0w=) 2: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: BVIKsaZm6p26FDvSRpeBS7k7ePLgBlmFV1XMZ9TTfOA=) 3: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: UFUV1/+yR0VUs891QJzA0faKiQcIk8IHhuxW1Cq8AbQ=) 4: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: FKKog+XQSDkvlhkDlh/3Ao41iJ0gN8My01/0TZX5i0E=) 5: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: sfj/xLZEElFZFm97ASqdb3Sh5i8unBwVhTxljUPKis0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d5:0f:53:8c:2f:53:55:8a:57:70:39:ac:9d:cd:e4:3d:30:9c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Feb 28 21:17:16 2026 GMT Not After : Mar 3 22:38:16 2026 GMT Subject: CN=E51A841C6B5C3C255B9F9C63677C6173B1347F72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4d:05:bc:7f:5e:04:ab:6b:39:12:0c:61:1d: e4:9c:50:16:4c:0c:89:bd:4a:b1:ff:d3:9b:6f:55: 8c:be:ca:15:45:5a:ef:0e:5f:67:82:f1:44:c0:e9: 8d:02:ae:fc:79:12:60:1c:2c:89:4b:8f:6f:9f:56: 91:ff:2a:3e:22:df:07:e8:fa:b2:81:e5:4d:a3:85: 57:8a:ab:e3:7f:cd:ce:69:d6:a8:48:27:89:5f:e1: 5f:42:26:cb:1e:18:6b:73:99:69:a2:ba:65:9c:ee: 66:a7:d7:31:fd:71:55:6f:4b:7e:17:63:5d:ca:c1: b7:94:b1:0f:87:6f:cd:3e:10:cc:26:0b:5c:f6:95: f1:9b:12:39:5d:2d:3f:09:9a:50:30:49:ec:4c:4b: 2e:62:46:2e:75:64:43:34:26:85:74:3b:0e:4f:97: 51:f9:b7:16:f7:20:63:c5:07:78:7c:60:25:7b:6b: 82:f0:b8:4e:d4:97:ca:ae:2a:b0:11:32:ce:80:bf: 9f:f9:f8:ca:00:75:fa:d6:a0:2b:f5:b1:b1:47:88: 64:7b:e5:e3:d6:83:21:a6:65:80:43:98:db:28:aa: b6:40:f0:b6:e5:f5:e4:88:60:ec:97:cf:ed:c5:ef: 04:90:9c:b2:25:25:fc:c4:4f:ea:02:64:59:92:e1: 3b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1A:84:1C:6B:5C:3C:25:5B:9F:9C:63:67:7C:61:73:B1:34:7F:72 X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:1f:59:79:43:ad:14:83:20:46:89:21:82:1d:58:b4:70:d6: 13:3d:4f:9d:72:78:88:8e:32:08:9d:de:3b:5e:a1:85:c9:00: f1:ba:8f:9a:5a:fb:ed:12:f3:3f:00:6f:5c:5e:74:4f:94:57: ab:2f:3c:88:eb:23:90:18:2f:a2:35:0d:06:d4:97:03:8a:db: 6f:b2:bb:96:68:f3:da:b6:6c:c7:69:77:3a:d4:b9:af:c7:d1: 88:b4:47:12:96:95:1c:1e:1f:da:4b:48:b2:c7:8a:6a:da:00: 88:ad:fd:64:ab:0b:82:02:87:c2:ff:f4:30:84:ba:45:4f:ed: e5:15:ac:1e:16:25:a4:3d:64:2f:4d:27:a5:94:f4:47:95:70: 49:97:f6:84:21:c7:12:67:70:9a:11:8f:81:ee:5a:15:4e:4f: 24:80:2f:c1:c7:fe:e0:0b:41:b8:ea:2c:90:f9:49:9c:20:3f: 2a:f6:c1:0d:f2:73:83:4c:3d:b3:a4:3c:7d:4d:d7:56:3d:a0: c3:56:b5:8e:78:8a:1e:74:01:ee:79:f9:25:d0:fa:75:7e:67: 1c:90:db:f9:81:af:90:c2:3b:91:2b:fd:24:c6:d7:8f:00:4e: 60:c3:a7:18:6e:7c:bd:02:d9:37:90:d9:71:b2:dc:ec:fc:df: 18:19:75:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQtUPU4wvU1WKV3A5rJ3N5D0wnFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNjAyMjgyMTE3MTZaFw0yNjAzMDMyMjM4MTZaMDMxMTAvBgNV BAMTKEU1MUE4NDFDNkI1QzNDMjU1QjlGOUM2MzY3N0M2MTczQjEzNDdGNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRTQW8f14Eq2s5EgxhHeScUBZM DIm9SrH/05tvVYy+yhVFWu8OX2eC8UTA6Y0Crvx5EmAcLIlLj2+fVpH/Kj4i3wfo +rKB5U2jhVeKq+N/zc5p1qhIJ4lf4V9CJsseGGtzmWmiumWc7man1zH9cVVvS34X Y13KwbeUsQ+Hb80+EMwmC1z2lfGbEjldLT8JmlAwSexMSy5iRi51ZEM0JoV0Ow5P l1H5txb3IGPFB3h8YCV7a4LwuE7Ul8quKrARMs6Av5/5+MoAdfrWoCv1sbFHiGR7 5ePWgyGmZYBDmNsoqrZA8Lbl9eSIYOyXz+3F7wSQnLIlJfzET+oCZFmS4TvpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5RqEHGtcPCVbn5xjZ3xhc7E0f3IwHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMQfWXlDrRSDIEaJIYIdWLRw1hM9T51yeIiO Mgid3jteoYXJAPG6j5pa++0S8z8Ab1xedE+UV6svPIjrI5AYL6I1DQbUlwOK22+y u5Zo89q2bMdpdzrUua/H0Yi0RxKWlRweH9pLSLLHimraAIit/WSrC4ICh8L/9DCE ukVP7eUVrB4WJaQ9ZC9NJ6WU9EeVcEmX9oQhxxJncJoRj4HuWhVOTySAL8HH/uAL QbjqLJD5SZwgPyr2wQ3yc4NMPbOkPH1N11Y9oMNWtY54ih50Ae55+SXQ+nV+ZxyQ 2/mBr5DCO5Er/STG148ATmDDpxhufL0C2TeQ2XGy3Oz83xgZdak= -----END CERTIFICATE-----Generated at Mon Mar 2 06:05:24 2026 by rpki-client