$ rpki-client -vvf repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft (raw, json) Hash identifier: DBplVL4KA98ljtFuE2+OAKfjuWpLSL9upIgRKfCq1Ic= Subject key identifier: DB:EE:22:1A:33:41:6E:93:6D:D6:90:57:06:AA:46:68:8A:ED:10:D8 Authority key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 Certificate issuer: /CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Certificate serial: 687D2FCA8B25D3C4312091735B155BE86B8DF0AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft Manifest number: 029B Signing time: Sat 18 Apr 2026 01:30:05 +0000 Manifest this update: Sat 18 Apr 2026 01:25:05 +0000 Manifest next update: Tue 21 Apr 2026 04:39:05 +0000 Files and hashes: 1: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl (hash: nohz6WoHecB8WKXbPqxt+sX6TCWpgvTsDu4DGwSbhRY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7d:2f:ca:8b:25:d3:c4:31:20:91:73:5b:15:5b:e8:6b:8d:f0:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Validity Not Before: Apr 18 01:25:05 2026 GMT Not After : Apr 21 04:39:05 2026 GMT Subject: CN=DBEE221A33416E936DD6905706AA46688AED10D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:97:70:e6:3e:18:31:c4:43:89:dd:17:b8:ed: 93:6c:81:a0:be:63:87:7e:3c:96:f5:9b:29:2f:9e: 2f:90:ed:e1:4c:a9:32:b8:c2:70:52:29:8d:a9:d3: bf:ae:00:0e:12:22:02:70:00:a8:ad:bf:7f:47:8c: 15:84:d3:0a:35:bc:4b:b8:87:ee:45:d4:df:8b:9a: 4f:af:9e:0b:80:93:a3:94:46:9e:ed:c7:dc:14:15: 48:85:fb:66:b1:db:b1:69:43:9c:3e:8a:fb:7c:cf: 7c:33:25:a7:b8:6f:18:21:1b:d0:90:e4:9c:a3:68: e0:98:52:83:50:02:6b:94:d7:c2:2e:33:c2:cf:27: 5e:2c:9d:ea:7c:72:18:a3:b7:0b:5d:b6:33:9c:fd: 8b:73:05:56:47:4d:10:2a:95:09:50:26:c9:83:a3: d7:4f:6f:a5:50:02:47:28:8a:2a:2b:f6:c3:60:df: c2:aa:17:50:02:4e:db:08:3a:95:d1:ee:af:c1:a0: 79:c6:00:54:27:b8:a5:34:f1:cd:ab:81:12:3d:9e: 2e:8d:32:b3:74:be:94:5c:3a:a1:8b:48:e4:6b:a4: af:e4:79:59:60:bc:08:91:fb:ac:22:88:fd:90:8c: 21:3f:4b:67:43:a9:33:0f:a9:4e:4c:1e:88:ea:72: 1e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EE:22:1A:33:41:6E:93:6D:D6:90:57:06:AA:46:68:8A:ED:10:D8 X509v3 Authority Key Identifier: keyid:2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:15:37:81:48:4f:b1:12:c8:c6:19:15:10:12:88:48:00:ff: 5c:68:f3:f2:32:12:7e:f1:2b:ed:ed:9f:90:a6:ba:fd:97:ab: 7d:62:81:42:f0:ca:ae:a7:e2:bc:f0:2b:d9:4d:2d:35:d0:54: 61:39:57:76:a8:e8:12:e4:71:8c:92:8b:91:17:a3:66:79:08: ba:76:7e:9f:ca:45:2e:d0:e3:2f:0f:fb:4f:77:7c:2a:1f:a1: ed:a7:eb:8f:3d:8a:7f:d7:68:2f:3a:ef:47:76:ff:1b:ec:c7: 92:fe:8d:4b:26:5b:b4:08:4a:7e:c7:76:65:35:0f:66:77:3d: 6e:6a:6a:e3:9b:fa:12:7c:51:81:88:49:ba:13:4d:12:d5:1f: 8e:19:67:b7:8c:da:80:c7:30:ab:1a:d4:90:f7:45:be:4d:10: c3:a7:be:5f:67:0a:a5:da:c3:6b:87:b5:24:be:85:e4:0b:9b: 20:eb:aa:a6:86:32:63:77:a8:8b:01:e2:85:e3:50:19:6c:43: 7e:0e:f8:43:63:15:e5:c8:67:99:6e:55:65:b8:0e:80:6b:a5: 78:4d:d5:87:48:87:b5:56:4a:d0:a2:ef:98:16:8c:20:57:e7: cb:43:d0:b2:c3:ce:1e:c7:93:23:dd:37:12:36:0a:e9:6b:22: a2:c3:be:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaH0vyosl08QxIJFzWxVb6GuN8K0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0 MTcxODAzMDAeFw0yNjA0MTgwMTI1MDVaFw0yNjA0MjEwNDM5MDVaMDMxMTAvBgNV BAMTKERCRUUyMjFBMzM0MTZFOTM2REQ2OTA1NzA2QUE0NjY4OEFFRDEwRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+l3DmPhgxxEOJ3Re47ZNsgaC+ Y4d+PJb1mykvni+Q7eFMqTK4wnBSKY2p07+uAA4SIgJwAKitv39HjBWE0wo1vEu4 h+5F1N+Lmk+vnguAk6OURp7tx9wUFUiF+2ax27FpQ5w+ivt8z3wzJae4bxghG9CQ 5JyjaOCYUoNQAmuU18IuM8LPJ14snep8chijtwtdtjOc/YtzBVZHTRAqlQlQJsmD o9dPb6VQAkcoiior9sNg38KqF1ACTtsIOpXR7q/BoHnGAFQnuKU08c2rgRI9ni6N MrN0vpRcOqGLSORrpK/keVlgvAiR+6wiiP2QjCE/S2dDqTMPqU5MHojqch7PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2+4iGjNBbpNt1pBXBqpGaIrtENgwHwYDVR0j BBgwFoAULdxT+r8v0TzSyRriuD5GYEFxgDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMC8yRERDNTNGQUJG MkZEMTNDRDJDOTFBRTJCODNFNDY2MDQxNzE4MDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0MTcx ODAzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw ODUtNTZiYzJkMTlkYWE4LzAvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2 NjA0MTcxODAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUVN4FIT7ESyMYZFRASiEgA/1xo8/IyEn7x K+3tn5Cmuv2Xq31igULwyq6n4rzwK9lNLTXQVGE5V3ao6BLkcYySi5EXo2Z5CLp2 fp/KRS7Q4y8P+093fCofoe2n6489in/XaC8670d2/xvsx5L+jUsmW7QISn7HdmU1 D2Z3PW5qauOb+hJ8UYGISboTTRLVH44ZZ7eM2oDHMKsa1JD3Rb5NEMOnvl9nCqXa w2uHtSS+heQLmyDrqqaGMmN3qIsB4oXjUBlsQ34O+ENjFeXIZ5luVWW4DoBrpXhN 1YdIh7VWStCi75gWjCBX58tD0LLDzh7HkyPdNxI2CulrIqLDvss= -----END CERTIFICATE-----Generated at Sun Apr 19 14:04:49 2026 by rpki-client