$ rpki-client -vvf repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft File: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft (raw, json) Hash identifier: Ql5yjsORBie/Xw3j8b68E6hAA2GWP5hO9GEVfAKzO3E= Subject key identifier: 43:D5:15:4E:18:38:78:1B:83:98:44:FD:9A:88:7E:F7:D7:AC:0D:6A Authority key identifier: 5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 Certificate issuer: /CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Certificate serial: 54175ECE928D239A82EF815463FFDEA3035B1781 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft Manifest number: 022B Signing time: Sat 18 Apr 2026 02:31:35 +0000 Manifest this update: Sat 18 Apr 2026 02:26:35 +0000 Manifest next update: Tue 21 Apr 2026 06:35:35 +0000 Files and hashes: 1: 34392e3135362e35362e302f32332d3233203d3e203535363637.roa (hash: Pm/YE5XlZI4a5R3H7gW8azydouGoRXTsVjZR6IqTpxU=) 2: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl (hash: 3M0jBLdG+Z/w1XFT+T/ywaK3VpfWbAXVO+tMBuxfIiw=) 3: 34392e3135362e36302e302f32342d3234203d3e203535363637.roa (hash: CLKzrlH5ZLBoCsg4iE8SZwFFCQ/Se+D5xuiONrmRN40=) 4: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (hash: PyngY50Jc6jfJpjhLI7AvXD7abuw+Cb9szwCdvvMqIM=) 5: 34392e3135362e35362e302f32342d3234203d3e203535363637.roa (hash: QTtjZwFvhIv1xSth/5URjOWWXMaKhYuFu5hw4Cr+XZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 06:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:17:5e:ce:92:8d:23:9a:82:ef:81:54:63:ff:de:a3:03:5b:17:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Validity Not Before: Apr 18 02:26:35 2026 GMT Not After : Apr 21 06:35:35 2026 GMT Subject: CN=43D5154E1838781B839844FD9A887EF7D7AC0D6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:8a:b3:30:bc:39:94:50:46:c6:73:86:56: f5:c9:37:1c:a6:88:59:6c:e8:9a:66:b4:0a:77:42: 5e:92:cf:3e:b4:12:2e:33:40:5a:a7:99:ea:b9:41: 07:c2:b2:82:56:e3:cb:e7:c0:34:6e:47:27:3f:d6: 61:9b:1b:8a:e0:9c:6c:b5:01:16:33:e0:7a:41:ac: c4:d1:00:8e:c6:e9:3d:7a:7e:47:50:da:c6:f9:2a: fe:79:a3:52:c4:aa:83:10:4e:19:2d:0b:09:bf:80: 9a:90:17:04:2d:d0:e4:33:0e:b3:93:c0:a3:37:b4: 4a:0d:5f:e6:b8:32:b7:ff:9b:4a:2d:9d:18:dc:24: da:22:6c:7c:52:d5:36:33:1e:e7:c0:f2:be:cb:ba: 30:62:e7:0d:e2:4a:51:24:45:2d:87:4c:74:13:72: 3b:25:d7:a0:73:35:72:f7:c6:2e:85:9c:22:a2:f4: bd:29:d0:78:ba:00:34:a1:f9:19:c0:97:c9:75:bb: e6:04:58:43:ce:e1:99:e6:9f:93:90:11:71:ce:10: ee:32:b1:31:0e:f9:b4:f9:02:cf:48:19:0a:25:e6: e1:40:af:13:0a:c0:41:df:e2:dd:5c:9f:e0:d3:fe: 32:34:31:6f:2c:2f:1c:32:81:a5:0a:e3:e3:23:b7: 2b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D5:15:4E:18:38:78:1B:83:98:44:FD:9A:88:7E:F7:D7:AC:0D:6A X509v3 Authority Key Identifier: keyid:5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:29:75:6a:83:79:b1:d9:db:f7:bf:1b:26:ec:2c:b7:b7:a0: 4f:4c:c3:23:2d:a0:fa:21:ba:54:48:99:69:fc:67:28:2f:4f: dc:77:3d:3b:5d:94:75:8c:20:9d:c4:84:fc:c5:ce:25:47:6c: eb:c3:a3:4c:06:0e:fd:09:bf:ec:76:8e:6c:6e:2b:ed:8c:97: a3:e0:c7:db:05:4b:4b:49:09:63:98:cf:2b:54:d5:c9:db:a6: 65:1b:90:a5:f8:e2:17:84:b5:3a:8e:d3:fc:00:be:9f:78:4f: 44:ad:18:14:c8:7e:1f:1a:b0:6f:dd:2e:f7:56:49:7a:b3:9c: 22:62:ec:af:74:99:e9:c9:b8:22:48:5f:2e:22:37:e6:7d:a4: c5:01:16:bc:15:91:84:92:37:e4:c7:23:72:59:e5:54:60:8f: 93:0c:d7:24:f6:a9:90:3c:f1:7c:d0:75:f5:a4:72:4f:3a:b4: 56:f9:85:e1:a7:c3:7a:8d:fc:16:1d:dd:34:03:fa:f5:1a:6b: fe:69:4c:d1:bf:fa:04:f8:a1:05:ec:9a:c5:09:0f:06:01:61: b0:b9:f7:87:37:95:ac:84:d2:28:3a:3a:72:90:15:77:08:44: a5:1e:d4:99:48:36:60:82:ba:86:94:34:bc:2f:c6:5d:09:f2: d1:af:2d:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVBdezpKNI5qC74FUY//eowNbF4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZB OTczQTA2MDAeFw0yNjA0MTgwMjI2MzVaFw0yNjA0MjEwNjM1MzVaMDMxMTAvBgNV BAMTKDQzRDUxNTRFMTgzODc4MUI4Mzk4NDRGRDlBODg3RUY3RDdBQzBENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCov4qzMLw5lFBGxnOGVvXJNxym iFls6JpmtAp3Ql6Szz60Ei4zQFqnmeq5QQfCsoJW48vnwDRuRyc/1mGbG4rgnGy1 ARYz4HpBrMTRAI7G6T16fkdQ2sb5Kv55o1LEqoMQThktCwm/gJqQFwQt0OQzDrOT wKM3tEoNX+a4Mrf/m0otnRjcJNoibHxS1TYzHufA8r7LujBi5w3iSlEkRS2HTHQT cjsl16BzNXL3xi6FnCKi9L0p0Hi6ADSh+RnAl8l1u+YEWEPO4Znmn5OQEXHOEO4y sTEO+bT5As9IGQol5uFArxMKwEHf4t1cn+DT/jI0MW8sLxwygaUK4+MjtysJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ9UVThg4eBuDmET9moh+99esDWowHwYDVR0j BBgwFoAUXd3M3zr8SS9sxIcdYHKlr6lzoGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjA2Y2Y1MC1hM2QxLTRjYzktOTI2MC05ODdiMmNhMGM5MjcvMC81REREQ0NERjNB RkM0OTJGNkNDNDg3MUQ2MDcyQTVBRkE5NzNBMDYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZBOTcz QTA2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIwNmNmNTAtYTNkMS00Y2M5LTky NjAtOTg3YjJjYTBjOTI3LzAvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1 QUZBOTczQTA2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8pdWqDebHZ2/e/GybsLLe3oE9MwyMtoPoh ulRImWn8ZygvT9x3PTtdlHWMIJ3EhPzFziVHbOvDo0wGDv0Jv+x2jmxuK+2Ml6Pg x9sFS0tJCWOYzytU1cnbpmUbkKX44heEtTqO0/wAvp94T0StGBTIfh8asG/dLvdW SXqznCJi7K90menJuCJIXy4iN+Z9pMUBFrwVkYSSN+THI3JZ5VRgj5MM1yT2qZA8 8XzQdfWkck86tFb5heGnw3qN/BYd3TQD+vUaa/5pTNG/+gT4oQXsmsUJDwYBYbC5 94c3layE0ig6OnKQFXcIRKUe1JlINmCCuoaUNLwvxl0J8tGvLcE= -----END CERTIFICATE-----Generated at Sun Apr 19 12:45:20 2026 by rpki-client