$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: 0BziAKvXsfNeMENY3vmhQvxyHLFvXJPpXukJW9K54Bw= Subject key identifier: 86:55:11:10:24:38:A0:9E:C6:46:3B:BE:09:C5:C4:9D:C3:A2:79:D6 Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 09624A0B7E72F95CADE58734593F1ACEC8870487 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 0524 Signing time: Sun 19 Apr 2026 06:10:49 +0000 Manifest this update: Sun 19 Apr 2026 06:05:49 +0000 Manifest next update: Wed 22 Apr 2026 10:21:49 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: j9U1OwlnMb6QK1Ljh6lfAcgIbfokI7uxdZ09lZEuZLs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 10:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:62:4a:0b:7e:72:f9:5c:ad:e5:87:34:59:3f:1a:ce:c8:87:04:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: Apr 19 06:05:49 2026 GMT Not After : Apr 22 10:21:49 2026 GMT Subject: CN=865511102438A09EC6463BBE09C5C49DC3A279D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ea:b6:05:9c:9a:6c:c3:c6:ea:7c:d3:50:f6: d4:0d:ae:2e:49:3e:f8:4b:e5:ef:e8:bc:8d:05:11: f8:5a:25:2d:f7:77:d4:2a:67:c7:1e:17:a3:6f:c0: 0a:be:75:31:7c:a3:60:f7:ba:9c:05:13:80:e2:46: 49:6d:71:25:f7:67:84:aa:8f:97:59:81:d5:e5:ea: b1:4d:a2:36:4e:f4:dd:35:84:08:b3:4a:fe:01:8c: e9:0f:b6:21:6f:12:0c:9f:40:99:a3:65:52:13:28: 4b:1d:99:6e:8c:13:fe:75:12:ae:36:0b:18:4b:e4: af:45:76:a1:2f:55:6f:82:ec:5e:64:e6:e1:9e:1e: 4e:83:94:db:d0:d3:f3:b6:17:db:07:5c:84:15:37: a1:8d:a3:90:9b:39:a1:f3:c8:a7:fe:91:21:28:cb: 75:86:bd:21:06:6a:82:28:32:07:52:12:14:e6:00: 60:25:43:a9:02:cc:32:56:75:65:5c:78:8c:e5:12: a1:68:33:10:1e:40:06:2b:26:0d:41:a9:9e:1e:f4: 75:59:e9:6d:75:eb:57:2d:8b:73:09:94:e2:c4:94: 35:7b:48:7d:02:f7:fb:bb:64:0e:4a:89:b2:65:ae: 6b:82:16:3d:64:b5:c8:98:e4:c1:83:c4:4b:e7:e3: b7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:55:11:10:24:38:A0:9E:C6:46:3B:BE:09:C5:C4:9D:C3:A2:79:D6 X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:32:ed:50:3b:95:24:57:fd:34:65:a7:bd:6d:57:28:10:da: 29:0d:92:fe:bb:50:0f:d3:6f:36:c2:b4:7a:0e:ef:f7:1a:a7: 3b:f3:54:dd:1c:50:e8:30:1e:bc:c5:f8:7d:08:be:1a:ea:f3: f5:a4:23:d4:2c:ad:21:4f:7a:de:e2:7f:13:7c:aa:4e:6f:f0: e1:46:10:28:9a:55:22:54:06:ed:9e:0b:5d:fe:26:69:69:34: 47:b8:53:d1:61:49:3a:54:e9:f5:9b:b3:e8:6f:02:b2:76:87: 67:51:09:a2:2b:c7:b1:cb:a5:36:91:45:aa:7f:6a:c8:87:d8: 17:ab:e4:00:f4:07:cf:47:dd:ce:8c:64:03:e9:49:44:b2:f8: 1d:a8:57:be:88:f9:81:54:ac:49:e2:6c:e9:b3:06:1c:32:c7: ee:a9:41:ac:3f:3c:42:72:c9:ba:e5:9a:d2:e6:36:e2:c8:fb: aa:7e:3f:c4:37:8c:3d:f9:08:86:24:d2:07:78:3c:92:a6:38: c0:6e:18:4e:ea:00:5f:34:d3:ea:6c:90:43:97:c5:8a:6b:43: 48:7c:bb:ec:07:f9:13:ee:59:74:07:fa:26:30:a3:a1:ae:76: c9:ab:c6:23:60:46:9a:62:a4:1c:21:24:2b:81:f2:ce:a6:5c: b3:41:41:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCWJKC35y+Vyt5Yc0WT8azsiHBIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNjA0MTkwNjA1NDlaFw0yNjA0MjIxMDIxNDlaMDMxMTAvBgNV BAMTKDg2NTUxMTEwMjQzOEEwOUVDNjQ2M0JCRTA5QzVDNDlEQzNBMjc5RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46rYFnJpsw8bqfNNQ9tQNri5J PvhL5e/ovI0FEfhaJS33d9QqZ8ceF6NvwAq+dTF8o2D3upwFE4DiRkltcSX3Z4Sq j5dZgdXl6rFNojZO9N01hAizSv4BjOkPtiFvEgyfQJmjZVITKEsdmW6ME/51Eq42 CxhL5K9FdqEvVW+C7F5k5uGeHk6DlNvQ0/O2F9sHXIQVN6GNo5CbOaHzyKf+kSEo y3WGvSEGaoIoMgdSEhTmAGAlQ6kCzDJWdWVceIzlEqFoMxAeQAYrJg1BqZ4e9HVZ 6W1161cti3MJlOLElDV7SH0C9/u7ZA5KibJlrmuCFj1ktciY5MGDxEvn47elAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhlURECQ4oJ7GRju+CcXEncOiedYwHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4y7VA7lSRX/TRlp71tVygQ2ikNkv67UA/T bzbCtHoO7/capzvzVN0cUOgwHrzF+H0Ivhrq8/WkI9QsrSFPet7ifxN8qk5v8OFG ECiaVSJUBu2eC13+JmlpNEe4U9FhSTpU6fWbs+hvArJ2h2dRCaIrx7HLpTaRRap/ asiH2Ber5AD0B89H3c6MZAPpSUSy+B2oV76I+YFUrEnibOmzBhwyx+6pQaw/PEJy ybrlmtLmNuLI+6p+P8Q3jD35CIYk0gd4PJKmOMBuGE7qAF800+pskEOXxYprQ0h8 u+wH+RPuWXQH+iYwo6GudsmrxiNgRppipBwhJCuB8s6mXLNBQcQ= -----END CERTIFICATE-----Generated at Sun Apr 19 14:13:31 2026 by rpki-client