$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: Pc7ULjnrBHAvp+AOOQ7X5O9P8ik6af0HUjItE2p92r0= Subject key identifier: E1:63:0C:63:11:01:D0:8F:32:F5:10:34:E6:CE:8D:49:9A:CD:27:F3 Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 19E43012A13B9F5712E85A10226A1B812203B675 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 050E Signing time: Sun 01 Mar 2026 08:40:48 +0000 Manifest this update: Sun 01 Mar 2026 08:35:48 +0000 Manifest next update: Wed 04 Mar 2026 12:37:48 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: 8UF7bwTIVH8wVWFCWfYnaF6XuV1z+8Zj+ZitfsuFmHs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e4:30:12:a1:3b:9f:57:12:e8:5a:10:22:6a:1b:81:22:03:b6:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: Mar 1 08:35:48 2026 GMT Not After : Mar 4 12:37:48 2026 GMT Subject: CN=E1630C631101D08F32F51034E6CE8D499ACD27F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6c:98:fc:3d:73:ae:98:27:7e:62:90:18:07: 70:1d:b2:bb:03:fe:d1:a6:42:5e:fc:cf:d4:9f:08: ef:4d:de:15:af:6d:6c:76:08:35:1d:5f:e9:a9:7b: 31:79:63:d2:19:d4:b8:d8:90:f4:b8:bd:95:8d:96: 81:3d:f3:2a:04:24:c7:ff:08:c2:f0:b4:c0:05:ef: e8:5b:f0:7e:a7:f4:e1:80:94:43:49:c2:09:c0:cc: bc:99:12:94:df:2f:5b:7a:16:a2:a0:51:51:a3:1f: 24:27:cb:41:99:af:b5:f4:8d:e0:f6:42:79:df:d9: 80:33:15:8e:5b:c4:67:d1:9a:2c:96:85:c9:2f:df: d6:7b:48:45:56:fe:6f:5d:ac:eb:80:40:ac:42:99: 63:02:87:af:39:32:fa:9b:ce:53:02:da:14:db:8d: bf:1f:3c:94:d3:70:41:56:23:52:34:98:18:fc:06: 7a:b5:6e:83:d8:4f:af:47:6e:cc:59:4d:0b:5d:cc: 57:c0:5b:ce:96:c2:9d:49:4f:f7:85:24:7c:03:be: 2e:1b:d0:46:8a:4f:db:b4:08:26:7a:f1:84:1e:88: 1b:82:63:20:97:fe:7b:05:c8:a7:52:8a:fd:76:1f: 67:78:59:50:43:05:be:9d:1b:cd:ee:79:ab:73:f4: 2d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:63:0C:63:11:01:D0:8F:32:F5:10:34:E6:CE:8D:49:9A:CD:27:F3 X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:31:6e:a1:f5:b2:c4:7b:04:fb:2e:08:87:97:38:39:9c:7b: c7:a6:e2:4b:44:32:d5:64:11:11:0d:41:54:06:8b:e8:e2:f1: 6e:10:19:22:a4:8a:f3:e4:6e:ac:4e:b0:c8:11:92:94:81:32: 7c:79:fd:e8:28:1d:ec:fa:dc:6b:0a:5f:bb:f4:ab:c6:5d:0e: 3a:14:21:6f:cd:90:a2:0f:a7:27:61:a4:65:bb:12:c3:e0:04: 11:98:b8:97:46:08:79:86:91:f6:ed:3a:9c:cf:47:86:05:a1: e7:4a:f0:ff:06:c6:81:02:28:45:42:42:07:23:ab:bb:34:7a: 9c:23:87:34:3a:50:5f:cd:f0:05:f3:5a:ed:7d:43:9f:95:b2: 0a:d8:51:44:dc:17:3c:bd:be:c7:c5:45:1b:13:e1:96:a7:a0: 0d:06:ff:05:5d:1f:ba:4e:f8:7f:84:54:44:40:e1:ba:e9:96: 31:3a:29:4b:c0:4f:53:77:5d:58:71:bc:d0:7a:da:3b:01:c8: 95:19:f4:3d:e8:09:d1:9f:5b:36:bd:73:a9:30:5f:c7:db:08: b8:e8:a7:ea:a7:86:01:8a:39:48:d1:b6:d8:b3:a2:af:8c:ae: f1:38:15:78:b9:4e:d9:55:dc:67:59:f5:cd:5f:e5:de:8e:27: 02:df:e6:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGeQwEqE7n1cS6FoQImobgSIDtnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNjAzMDEwODM1NDhaFw0yNjAzMDQxMjM3NDhaMDMxMTAvBgNV BAMTKEUxNjMwQzYzMTEwMUQwOEYzMkY1MTAzNEU2Q0U4RDQ5OUFDRDI3RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIbJj8PXOumCd+YpAYB3AdsrsD /tGmQl78z9SfCO9N3hWvbWx2CDUdX+mpezF5Y9IZ1LjYkPS4vZWNloE98yoEJMf/ CMLwtMAF7+hb8H6n9OGAlENJwgnAzLyZEpTfL1t6FqKgUVGjHyQny0GZr7X0jeD2 Qnnf2YAzFY5bxGfRmiyWhckv39Z7SEVW/m9drOuAQKxCmWMCh685MvqbzlMC2hTb jb8fPJTTcEFWI1I0mBj8Bnq1boPYT69HbsxZTQtdzFfAW86Wwp1JT/eFJHwDvi4b 0EaKT9u0CCZ68YQeiBuCYyCX/nsFyKdSiv12H2d4WVBDBb6dG83ueatz9C1rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4WMMYxEB0I8y9RA05s6NSZrNJ/MwHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUxbqH1ssR7BPsuCIeXODmce8em4ktEMtVk ERENQVQGi+ji8W4QGSKkivPkbqxOsMgRkpSBMnx5/egoHez63GsKX7v0q8ZdDjoU IW/NkKIPpydhpGW7EsPgBBGYuJdGCHmGkfbtOpzPR4YFoedK8P8GxoECKEVCQgcj q7s0epwjhzQ6UF/N8AXzWu19Q5+VsgrYUUTcFzy9vsfFRRsT4ZanoA0G/wVdH7pO +H+EVERA4brpljE6KUvAT1N3XVhxvNB62jsByJUZ9D3oCdGfWza9c6kwX8fbCLjo p+qnhgGKOUjRttizoq+MrvE4FXi5TtlV3GdZ9c1f5d6OJwLf5mk= -----END CERTIFICATE-----Generated at Mon Mar 2 00:25:33 2026 by rpki-client