$ rpki-client -vvf repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft File: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft (raw, json) Hash identifier: tLh7RxQWEaaKOC480VeNLFQ+VH0wTH00WJn/hnblSwU= Subject key identifier: 85:05:50:21:F2:38:F6:09:D1:2F:28:84:39:50:8E:C9:03:8A:47:49 Authority key identifier: 5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 Certificate issuer: /CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Certificate serial: 540C26DF72555AAA5806931CF53A449F01407CE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft Manifest number: 0215 Signing time: Sat 28 Feb 2026 07:31:35 +0000 Manifest this update: Sat 28 Feb 2026 07:26:35 +0000 Manifest next update: Tue 03 Mar 2026 09:38:35 +0000 Files and hashes: 1: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl (hash: hydBs7dlYx38pLrCBNf/HTY++IgpTlcHBZAORgNkhxc=) 2: 34392e3135362e36302e302f32342d3234203d3e203535363637.roa (hash: CLKzrlH5ZLBoCsg4iE8SZwFFCQ/Se+D5xuiONrmRN40=) 3: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (hash: PyngY50Jc6jfJpjhLI7AvXD7abuw+Cb9szwCdvvMqIM=) 4: 34392e3135362e35362e302f32342d3234203d3e203535363637.roa (hash: QTtjZwFvhIv1xSth/5URjOWWXMaKhYuFu5hw4Cr+XZk=) 5: 34392e3135362e35362e302f32332d3233203d3e203535363637.roa (hash: Pm/YE5XlZI4a5R3H7gW8azydouGoRXTsVjZR6IqTpxU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 09:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:0c:26:df:72:55:5a:aa:58:06:93:1c:f5:3a:44:9f:01:40:7c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Validity Not Before: Feb 28 07:26:35 2026 GMT Not After : Mar 3 09:38:35 2026 GMT Subject: CN=85055021F238F609D12F288439508EC9038A4749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d1:fc:1c:21:e9:51:1e:d6:8e:5f:6d:f0:2d: 19:29:85:d3:d8:b0:2e:50:14:da:53:59:69:73:a0: 7f:e8:21:02:c6:c6:ab:81:1a:d5:33:07:bc:5c:ed: 37:fd:a9:4d:03:6c:09:ef:d9:3e:14:f8:6a:14:17: 84:79:55:bb:65:e0:b0:00:72:71:d2:ef:6d:90:e9: 44:05:a6:ac:f8:58:98:72:df:60:e2:66:56:4f:1b: 10:22:b5:4d:6b:9c:3a:fa:a6:17:6e:ff:f6:12:13: 06:04:68:af:36:84:55:50:11:e3:a8:bf:89:ec:00: ac:99:af:d8:3c:92:bd:62:43:02:a6:e7:80:45:06: 24:c4:dc:7e:d3:df:63:9b:66:c3:ce:d5:70:3e:ee: 8e:8a:d1:25:6f:5f:fc:0d:9e:2c:ee:88:77:ab:45: 88:aa:32:11:22:7c:39:74:ea:bc:44:d9:1c:b2:25: cd:01:27:35:84:a8:98:42:3a:ad:94:7b:61:7b:c8: 7a:e4:cf:bf:9a:5b:5e:da:84:c0:85:ab:af:e8:1f: e6:9e:e3:90:0f:1d:36:eb:7e:49:6e:7b:7e:9a:61: b0:f6:44:1b:05:47:1e:77:b1:cd:1e:71:1a:52:3b: db:6d:64:5e:9d:ca:92:58:8c:73:87:9d:e5:91:36: 57:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:05:50:21:F2:38:F6:09:D1:2F:28:84:39:50:8E:C9:03:8A:47:49 X509v3 Authority Key Identifier: keyid:5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ab:a9:86:10:88:76:3f:89:51:38:b4:eb:25:b5:94:d6:74: 21:b8:13:a6:ba:dd:50:5e:d6:32:3c:c6:9a:91:e5:b0:aa:25: 67:69:bb:5a:1d:d3:78:ee:fa:fb:d9:b0:b3:de:13:88:12:16: b3:e0:5b:c9:f3:bb:78:f5:e7:fc:7d:99:b2:1b:5a:08:5b:fe: f4:c1:fe:0c:3a:8c:9d:46:e4:07:03:1e:ff:25:a4:ab:c2:de: 4e:4b:f4:ed:25:46:3f:06:c1:9c:f5:8d:8c:23:17:d8:9d:3a: 8e:57:f2:66:89:18:ae:da:d7:a9:29:d3:12:68:19:bd:f7:03: 44:b9:90:bf:f1:bd:2c:3b:24:5d:2e:d0:f7:eb:ec:55:26:2e: d5:a9:ae:80:0e:a9:d0:8a:98:27:be:28:57:91:c3:a9:a6:5f: 14:2a:23:8d:e9:99:86:7a:19:26:5e:af:8a:e0:a9:9e:c6:7e: b3:d3:23:f1:f4:a8:3e:98:a7:4b:c9:1c:90:39:df:1a:16:68: 3f:a9:fe:2e:79:87:89:a2:2d:73:f7:ae:1f:28:50:56:df:78: 7e:cb:d3:0e:35:43:b2:0e:32:46:8c:c3:b3:7b:84:5f:c4:1e: ae:5b:c0:49:da:d5:d7:61:49:e8:1e:b2:76:5a:97:47:e2:e3: f6:6d:e6:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVAwm33JVWqpYBpMc9TpEnwFAfOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZB OTczQTA2MDAeFw0yNjAyMjgwNzI2MzVaFw0yNjAzMDMwOTM4MzVaMDMxMTAvBgNV BAMTKDg1MDU1MDIxRjIzOEY2MDlEMTJGMjg4NDM5NTA4RUM5MDM4QTQ3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI0fwcIelRHtaOX23wLRkphdPY sC5QFNpTWWlzoH/oIQLGxquBGtUzB7xc7Tf9qU0DbAnv2T4U+GoUF4R5Vbtl4LAA cnHS722Q6UQFpqz4WJhy32DiZlZPGxAitU1rnDr6phdu//YSEwYEaK82hFVQEeOo v4nsAKyZr9g8kr1iQwKm54BFBiTE3H7T32ObZsPO1XA+7o6K0SVvX/wNnizuiHer RYiqMhEifDl06rxE2RyyJc0BJzWEqJhCOq2Ue2F7yHrkz7+aW17ahMCFq6/oH+ae 45APHTbrfklue36aYbD2RBsFRx53sc0ecRpSO9ttZF6dypJYjHOHneWRNlcDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhQVQIfI49gnRLyiEOVCOyQOKR0kwHwYDVR0j BBgwFoAUXd3M3zr8SS9sxIcdYHKlr6lzoGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjA2Y2Y1MC1hM2QxLTRjYzktOTI2MC05ODdiMmNhMGM5MjcvMC81REREQ0NERjNB RkM0OTJGNkNDNDg3MUQ2MDcyQTVBRkE5NzNBMDYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZBOTcz QTA2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIwNmNmNTAtYTNkMS00Y2M5LTky NjAtOTg3YjJjYTBjOTI3LzAvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1 QUZBOTczQTA2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+rqYYQiHY/iVE4tOsltZTWdCG4E6a63VBe 1jI8xpqR5bCqJWdpu1od03ju+vvZsLPeE4gSFrPgW8nzu3j15/x9mbIbWghb/vTB /gw6jJ1G5AcDHv8lpKvC3k5L9O0lRj8GwZz1jYwjF9idOo5X8maJGK7a16kp0xJo Gb33A0S5kL/xvSw7JF0u0Pfr7FUmLtWproAOqdCKmCe+KFeRw6mmXxQqI43pmYZ6 GSZer4rgqZ7GfrPTI/H0qD6Yp0vJHJA53xoWaD+p/i55h4miLXP3rh8oUFbfeH7L 0w41Q7IOMkaMw7N7hF/EHq5bwEna1ddhSegesnZal0fi4/Zt5rw= -----END CERTIFICATE-----Generated at Mon Mar 2 09:19:12 2026 by rpki-client