$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft File: 1DD4F8984667E142BB9C6F1133AA56899352286C.mft (raw, json) Hash identifier: YvwvBHIzhYK/Thu5Q1FpN4ZXh9BJ9f2rmfJ4rjtS/8o= Subject key identifier: 45:25:E6:DA:F2:06:99:70:9C:5B:FF:AB:DB:B0:04:09:76:BD:D8:05 Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 256A24E48E1BB78C659A0FFEE68A5A31AE4C7746 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft Manifest number: 0262 Signing time: Fri 17 Apr 2026 13:01:28 +0000 Manifest this update: Fri 17 Apr 2026 12:56:28 +0000 Manifest next update: Mon 20 Apr 2026 18:00:28 +0000 Files and hashes: 1: 1DD4F8984667E142BB9C6F1133AA56899352286C.crl (hash: W6ujNkJNBj+AwTUek+1lTbc4fkE8xGAbkz4zctgkMOY=) 2: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: GuEYcKomyfwrOeHZZh1kmfChePipQ8Um6pnOFE1mCGU=) 3: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: iPif/z7qJ4Vb/XGaHBG7VpZKR6W6QOq/zCq1aa/ifyk=) 4: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: W+lLs4/k6241uH88gZbInuh3EL7X/7q/VzO2IOSYfhk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:6a:24:e4:8e:1b:b7:8c:65:9a:0f:fe:e6:8a:5a:31:ae:4c:77:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Apr 17 12:56:28 2026 GMT Not After : Apr 20 18:00:28 2026 GMT Subject: CN=4525E6DAF20699709C5BFFABDBB0040976BDD805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ee:aa:cf:60:f2:34:35:57:a6:aa:19:1d:71: 7b:e9:f3:7d:6e:75:0b:30:94:f6:22:41:4d:82:56: dd:b2:05:c3:15:a6:ec:7a:83:dd:00:03:56:08:a2: e2:17:70:5d:fb:69:fc:3e:5c:d5:70:e5:81:31:b8: cd:66:d0:eb:14:02:34:10:dd:ef:ec:56:e6:cc:2f: b2:f3:95:aa:eb:8c:b0:25:38:35:01:85:0b:59:f7: 9e:eb:63:74:8d:aa:2e:4d:98:86:ce:1e:e4:b2:1d: 4c:cc:15:9c:50:d6:78:4f:9f:19:5b:42:11:3c:b7: db:9b:bb:48:df:45:2a:cf:d5:54:66:c4:f5:f0:0c: a5:5e:85:03:0e:6a:00:4c:60:68:bd:96:29:98:02: 78:fb:72:33:19:d6:29:4e:40:1e:9f:d3:b5:6d:cc: b0:85:1d:cb:63:0f:fc:14:6a:a8:fe:58:08:c9:cf: fb:4d:02:3c:ed:00:12:08:2b:d7:fe:fa:88:08:4c: 08:fc:bb:33:fd:ea:de:df:a8:75:a1:ac:1f:4d:22: 08:ad:64:9e:f0:24:53:69:ff:a6:9f:40:25:40:a5: ec:ed:31:e6:26:f8:28:cb:dd:af:e2:6a:a6:87:3e: ab:7a:e4:d6:55:1c:f9:eb:14:d3:5c:38:98:32:64: 8b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:25:E6:DA:F2:06:99:70:9C:5B:FF:AB:DB:B0:04:09:76:BD:D8:05 X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:7e:21:18:77:81:55:4f:7d:a6:db:d3:b0:39:80:31:5d:68: 18:b0:49:58:66:86:43:38:67:68:bd:61:3a:55:94:3a:13:92: eb:e8:80:67:e1:32:3a:48:e2:6f:a4:10:37:e7:ae:74:b0:3c: cf:5b:bd:5f:ca:82:db:08:01:14:12:a1:ec:b2:23:52:06:ee: dd:17:b1:1f:15:8e:52:69:02:be:2b:de:55:54:86:44:e7:78: 74:a0:71:3a:07:34:f3:9b:f7:0b:90:d7:78:ed:cd:d9:5f:dc: 9a:01:be:04:8f:7f:e4:2a:64:5d:23:6d:a7:dd:71:f5:f0:d1: da:1a:c1:12:4d:f9:c6:d5:d0:25:ba:da:1c:aa:0b:00:a3:bf: 16:c1:85:e5:c6:cc:b7:2c:fb:f0:75:11:6b:2a:46:68:60:06: 42:2e:0d:b2:c7:4d:e8:d7:36:dc:19:ab:2c:da:aa:84:4c:56: 53:41:c6:37:25:c5:2a:60:da:70:73:59:0d:eb:f0:3a:5a:14: bb:2c:83:9e:3b:05:e3:ec:ba:73:a6:3a:fb:76:05:2b:71:2a: 58:f9:07:ab:dc:0f:84:c9:37:01:01:e6:7f:8b:2c:d3:78:ab: 37:60:5a:bb:34:9e:c4:c5:4e:e1:07:fe:b0:b7:1b:ec:06:44: ef:08:1a:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJWok5I4bt4xlmg/+5opaMa5Md0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNjA0MTcxMjU2MjhaFw0yNjA0MjAxODAwMjhaMDMxMTAvBgNV BAMTKDQ1MjVFNkRBRjIwNjk5NzA5QzVCRkZBQkRCQjAwNDA5NzZCREQ4MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB7qrPYPI0NVemqhkdcXvp831u dQswlPYiQU2CVt2yBcMVpux6g90AA1YIouIXcF37afw+XNVw5YExuM1m0OsUAjQQ 3e/sVubML7LzlarrjLAlODUBhQtZ957rY3SNqi5NmIbOHuSyHUzMFZxQ1nhPnxlb QhE8t9ubu0jfRSrP1VRmxPXwDKVehQMOagBMYGi9limYAnj7cjMZ1ilOQB6f07Vt zLCFHctjD/wUaqj+WAjJz/tNAjztABIIK9f++ogITAj8uzP96t7fqHWhrB9NIgit ZJ7wJFNp/6afQCVApeztMeYm+CjL3a/iaqaHPqt65NZVHPnrFNNcOJgyZIu3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURSXm2vIGmXCcW/+r27AECXa92AUwHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2 ODk5MzUyMjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKB+IRh3gVVPfabb07A5gDFdaBiwSVhmhkM4 Z2i9YTpVlDoTkuvogGfhMjpI4m+kEDfnrnSwPM9bvV/KgtsIARQSoeyyI1IG7t0X sR8VjlJpAr4r3lVUhkTneHSgcToHNPOb9wuQ13jtzdlf3JoBvgSPf+QqZF0jbafd cfXw0doawRJN+cbV0CW62hyqCwCjvxbBheXGzLcs+/B1EWsqRmhgBkIuDbLHTejX NtwZqyzaqoRMVlNBxjclxSpg2nBzWQ3r8DpaFLssg547BePsunOmOvt2BStxKlj5 B6vcD4TJNwEB5n+LLNN4qzdgWrs0nsTFTuEH/rC3G+wGRO8IGrI= -----END CERTIFICATE-----Generated at Fri Apr 17 21:28:10 2026 by rpki-client