$ rpki-client -vvf repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft File: DD77382BD9E8634AEF9E93D763B0149D915502F5.mft (raw, json) Hash identifier: S3gq0hRyMBm+jDFNyjZnoWpInSibQZS8iuHbyY1q3Qo= Subject key identifier: B5:F0:4D:12:4E:6E:19:75:77:EC:A6:3F:C3:1D:F7:00:AC:61:1C:04 Authority key identifier: DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 Certificate issuer: /CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Certificate serial: 4EF361F52EE98913012DEAC0E0A9D4BCF625E4B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft Manifest number: 0441 Signing time: Fri 17 Apr 2026 11:53:14 +0000 Manifest this update: Fri 17 Apr 2026 11:48:14 +0000 Manifest next update: Mon 20 Apr 2026 20:51:14 +0000 Files and hashes: 1: DD77382BD9E8634AEF9E93D763B0149D915502F5.crl (hash: 5qIqQzD43pifY99T7Xm1MnGjW9MwzRXALSVWHe+tnO0=) 2: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: hsPYSfqnXcrLebXt6EBLTQfNTkLnhJb4Z1Vtv7TkCII=) 3: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: qxzoMqzV7R6VwY7lQGbublsoy4JkXAcRbir5LyE2mk4=) 4: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: HOwwdKR3O7c8/kyMjxVZJkAdz+1G7QmLEi+h8X1E5h4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f3:61:f5:2e:e9:89:13:01:2d:ea:c0:e0:a9:d4:bc:f6:25:e4:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Validity Not Before: Apr 17 11:48:14 2026 GMT Not After : Apr 20 20:51:14 2026 GMT Subject: CN=B5F04D124E6E197577ECA63FC31DF700AC611C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:75:4b:c3:ce:ff:e8:bc:89:65:13:37:fd: 07:3a:fb:bb:fd:10:e0:4c:9f:aa:75:93:d8:b2:3f: bc:4a:5d:3c:0a:9b:e0:11:af:31:10:68:5d:27:ed: 93:52:b5:26:c3:99:56:24:4b:2a:03:75:ec:3d:f8: 6b:61:ec:76:c4:b9:31:c8:ec:c6:a9:3e:ad:73:26: e7:7f:f9:65:90:d9:ec:01:22:9f:fb:54:e2:80:68: fd:1f:7c:d3:b4:6e:ee:24:07:dc:08:42:75:a3:70: 3d:12:c9:e6:16:68:19:6e:f3:fa:71:a7:74:30:c7: ed:3d:ae:b3:bf:b6:8e:9d:00:42:f8:b1:47:ed:27: 2d:ee:0f:0a:5b:12:ec:99:c7:74:13:5e:71:76:3d: d7:75:d5:5e:8b:e7:d3:a5:19:95:57:07:b4:7e:c3: 94:59:5a:73:b4:85:e5:ba:ad:3b:a0:44:8b:c2:16: ac:3b:f5:11:df:9c:c0:f4:19:ee:06:6b:6d:46:98: 8b:ff:fc:d9:50:4d:9b:e0:fe:01:a4:3f:d1:cf:3a: 45:6b:3f:f1:ee:25:cd:64:0c:e6:6f:3c:03:78:6e: d2:db:77:82:58:f0:89:a2:55:11:e2:47:7a:d8:52: bc:3b:93:a4:e7:b6:a1:c2:9e:0b:57:82:c6:8d:2a: 6a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F0:4D:12:4E:6E:19:75:77:EC:A6:3F:C3:1D:F7:00:AC:61:1C:04 X509v3 Authority Key Identifier: keyid:DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:26:5d:f1:31:01:66:e3:2a:93:8c:af:0d:5a:c8:08:e8:3e: 42:3a:2b:df:4f:9d:33:2f:68:2c:de:2a:2b:c8:4c:6b:b6:83: 49:7c:d4:e2:08:d6:35:e3:8c:87:26:f8:19:34:dd:eb:f1:eb: af:6d:0d:73:83:dd:a5:b8:0e:b2:e3:17:0a:f0:ae:cc:96:0d: 9c:f2:e1:a4:b3:52:49:49:b1:a1:bf:6f:8d:42:30:bd:84:a4: 72:2a:ba:6b:5d:61:ee:24:68:0d:ec:51:4e:ac:d7:20:ae:f8: a9:55:93:a7:12:8a:a9:66:74:e7:b4:37:6a:f2:fc:42:55:46: 23:58:f5:0c:a7:3a:2f:83:11:51:22:30:b4:65:3b:73:03:01: 15:7e:2e:f9:36:d2:9a:72:e4:88:11:c3:6c:f9:52:b1:b8:09: 33:48:23:33:3b:d8:dd:a3:c5:27:e8:58:cd:8f:6d:f2:5c:a5: fe:a8:38:87:9b:b1:a6:fd:a7:0f:a6:79:e2:fc:21:8c:92:86: 35:2e:99:c4:81:b4:a2:12:9b:a6:3e:d8:3f:7d:1f:38:48:08: 0f:8b:05:b1:31:8b:3e:d9:81:9d:0d:d0:e2:64:50:8e:bd:56: 4e:cb:69:22:8e:b8:15:01:ad:33:04:6d:6d:62:9a:3b:2b:9c: 5b:a2:3c:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTvNh9S7piRMBLerA4KnUvPYl5LcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5 MTU1MDJGNTAeFw0yNjA0MTcxMTQ4MTRaFw0yNjA0MjAyMDUxMTRaMDMxMTAvBgNV BAMTKEI1RjA0RDEyNEU2RTE5NzU3N0VDQTYzRkMzMURGNzAwQUM2MTFDMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNXVLw87/6LyJZRM3/Qc6+7v9 EOBMn6p1k9iyP7xKXTwKm+ARrzEQaF0n7ZNStSbDmVYkSyoDdew9+Gth7HbEuTHI 7MapPq1zJud/+WWQ2ewBIp/7VOKAaP0ffNO0bu4kB9wIQnWjcD0SyeYWaBlu8/px p3Qwx+09rrO/to6dAEL4sUftJy3uDwpbEuyZx3QTXnF2Pdd11V6L59OlGZVXB7R+ w5RZWnO0heW6rTugRIvCFqw79RHfnMD0Ge4Ga21GmIv//NlQTZvg/gGkP9HPOkVr P/HuJc1kDOZvPAN4btLbd4JY8ImiVRHiR3rYUrw7k6TntqHCngtXgsaNKmrdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtfBNEk5uGXV37KY/wx33AKxhHAQwHwYDVR0j BBgwFoAU3Xc4K9noY0rvnpPXY7AUnZFVAvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmY4ZjRhYi0xYWI4LTQ4OTQtYjc1OC1kOWJjZTM4MDNlNGMvMC9ERDc3MzgyQkQ5 RTg2MzRBRUY5RTkzRDc2M0IwMTQ5RDkxNTUwMkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5MTU1 MDJGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZmOGY0YWItMWFiOC00ODk0LWI3 NTgtZDliY2UzODAzZTRjLzAvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0 OUQ5MTU1MDJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQmXfExAWbjKpOMrw1ayAjoPkI6K99PnTMv aCzeKivITGu2g0l81OII1jXjjIcm+Bk03evx669tDXOD3aW4DrLjFwrwrsyWDZzy 4aSzUklJsaG/b41CML2EpHIqumtdYe4kaA3sUU6s1yCu+KlVk6cSiqlmdOe0N2ry /EJVRiNY9QynOi+DEVEiMLRlO3MDARV+Lvk20ppy5IgRw2z5UrG4CTNIIzM72N2j xSfoWM2PbfJcpf6oOIebsab9pw+meeL8IYyShjUumcSBtKISm6Y+2D99HzhICA+L BbExiz7ZgZ0N0OJkUI69Vk7LaSKOuBUBrTMEbW1imjsrnFuiPB4= -----END CERTIFICATE-----Generated at Fri Apr 17 23:50:38 2026 by rpki-client