
$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft
File: DD29F5E4CE561760A0212F0448987AFBE75263D7.mft (raw, json)
Hash identifier: kMK6EdJ4XGNv/AEcSM68Be7MNb5wflXnDZPA4ClPdGc=
Subject key identifier: 20:20:F0:51:AB:57:64:7F:E0:EF:14:18:D0:F0:84:2C:57:EA:EB:99
Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Certificate serial: 214D7F5C2BA435E420965BD6146CE8B05F503838
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft
Manifest number: 0386
Signing time: Sat 18 Apr 2026 15:32:25 +0000
Manifest this update: Sat 18 Apr 2026 15:27:25 +0000
Manifest next update: Wed 22 Apr 2026 00:39:25 +0000
Files and hashes: 1: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (hash: 0+6+N7y7+z5+GZ0LUn4in9mnEACESucH1zgQmC9xHAA=)
2: 35382e3134372e3138372e302f32342d3234203d3e203234353334.roa (hash: R+HBHXL62WCqMu+S9XZ2lfDd7q3jJVRrizTgz3Qq4sM=)
3: 323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa (hash: +h69YPXoiC31k13cSEzWyv6wTFkos1CLOZsQnIEiGv0=)
4: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (hash: wWYceKo3HVUOMgRcN2/P197TAtHkoSlPkbBqfdmOb58=)
5: DD29F5E4CE561760A0212F0448987AFBE75263D7.crl (hash: +HJkFJVhdVidyK6IsBih+1DWCdaCgxlKCt6JA7CRuag=)
6: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (hash: s32Asfb0Vk2AoqdXXpuFo/1b1Jpm9sVE9gF86xInAZ8=)
7: 323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (hash: 1Jp8cCDyjncp4Wpa0IwwHsbMLezQ3Rf5CCYJ9Uaw69A=)
8: 3130332e34322e3132322e302f32342d3234203d3e203633353136.roa (hash: 5ScxcfML486iFVsWj/fUX6rjVFXkWRISgnQEhtwZ9No=)
9: 323430343a393538303a33313a3a2f34382d3438203d3e203633353136.roa (hash: xAVHkwUJuceUhm1gZEhKbi4kqCLmB1DeBBYoJxsoYjY=)
10: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (hash: X9EKF8Z1uFLJC9IzjlT1aPQkzE/clRuy5X9NkdqNVow=)
11: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (hash: 47GvXgllqrS1MxJptUYHVOsa05orn3J0qbEjvOU+c+c=)
12: 35382e3134372e3139302e302f32342d3234203d3e203234353334.roa (hash: hfJYX7IXK2yRsIkXzTXumWYWspYzmgD5u1H3fLVubkc=)
13: 35382e3134372e3138392e302f32342d3234203d3e203234353334.roa (hash: yHFhz7s9vTM+0GwcewjykllWnmywdIchHv+vwnUyUtQ=)
14: 35382e3134372e3139312e302f32342d3234203d3e203234353334.roa (hash: 8qZ2PfVPSW4Gale+B6XAN2CyhRmIb70LvF4xop7XFFw=)
15: 35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (hash: x2jz47JNdTLcNfT8vbEKIJnVX3m/vRvrmqpmvqODREA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl
rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 00:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:4d:7f:5c:2b:a4:35:e4:20:96:5b:d6:14:6c:e8:b0:5f:50:38:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Validity
Not Before: Apr 18 15:27:25 2026 GMT
Not After : Apr 22 00:39:25 2026 GMT
Subject: CN=2020F051AB57647FE0EF1418D0F0842C57EAEB99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:f5:a4:85:e9:9f:da:87:19:eb:e6:53:2a:
c5:d7:fc:bb:02:ca:9e:5d:09:51:56:00:cb:d6:61:
42:59:94:30:65:9e:d4:6d:d1:36:0f:ef:55:b2:18:
98:f7:69:8c:fe:66:6a:d8:a2:10:fe:a1:c3:e0:16:
c5:e5:c5:c0:f2:b5:52:36:3c:7e:66:36:67:29:43:
1e:9a:24:f8:ef:fc:42:7e:c9:f4:cc:cd:1e:e2:b5:
f9:18:4a:fa:6a:20:6d:00:43:54:19:d3:4a:21:29:
ad:a1:85:ad:76:ae:6e:29:45:ff:b8:31:f3:46:b1:
ee:46:7e:e6:a8:99:ab:0d:57:c0:d9:19:cf:92:8e:
cd:ce:d2:aa:39:37:ad:52:07:aa:ed:40:c0:e5:b3:
c4:08:60:96:3c:98:a2:0b:39:d5:52:2c:8c:3a:87:
b5:78:43:3f:59:1c:9a:9c:13:e7:28:9e:05:45:f0:
8e:ee:b0:72:29:0c:65:1c:83:9b:69:71:24:60:0e:
cf:f8:ab:22:02:90:31:f4:21:44:c4:51:57:74:8a:
34:03:ee:b6:18:a0:d4:82:88:88:c7:86:3c:bb:82:
68:a5:94:4f:67:3d:b8:fa:af:de:b1:6f:f2:d4:26:
63:a7:07:f3:74:52:c4:27:9e:53:63:cd:e0:e2:87:
8a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:20:F0:51:AB:57:64:7F:E0:EF:14:18:D0:F0:84:2C:57:EA:EB:99
X509v3 Authority Key Identifier:
keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a0:66:12:f1:1f:49:e8:5b:08:2e:0f:47:a9:ae:ec:72:53:
14:e4:50:bd:48:04:c9:99:f3:8b:84:43:73:b7:ad:1b:27:10:
57:79:9f:01:6c:9d:4b:a0:62:d1:04:cf:8f:6e:89:c1:b6:c4:
17:cd:6b:91:04:8a:6a:78:88:66:11:66:42:f4:f2:cb:30:8f:
fa:8f:67:78:26:64:2c:e9:d1:89:ea:3a:4c:52:d5:0c:4b:83:
ad:5f:36:7f:5e:ee:73:aa:5f:3f:e9:b9:3c:d9:b3:c8:05:75:
a1:60:d3:ec:04:19:9a:42:ba:ba:b6:8b:0d:f3:ea:66:fd:94:
4d:c1:a5:fb:98:8a:be:d1:2c:6b:39:a3:a3:19:88:3f:54:38:
3f:0f:10:51:12:a6:5f:54:55:06:de:86:a7:d9:c1:b6:17:ee:
02:c6:5d:f4:8e:2c:49:f8:02:11:bb:01:86:15:89:0c:6b:9e:
f2:5f:91:ec:01:bc:0e:4a:a1:1a:a2:34:a3:82:1d:81:28:8b:
20:40:c7:48:b6:51:3e:b9:e4:d7:a6:4e:1f:e5:c4:cb:98:9d:
8b:6a:48:78:90:1d:e9:16:3e:5b:42:e2:70:33:a7:fc:5e:02:
3c:f8:24:cd:87:27:93:65:d5:86:6b:0f:d0:c9:54:b1:1d:a5:
d0:03:69:cd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIU1/XCukNeQgllvWFGzosF9QODgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF
NzUyNjNENzAeFw0yNjA0MTgxNTI3MjVaFw0yNjA0MjIwMDM5MjVaMDMxMTAvBgNV
BAMTKDIwMjBGMDUxQUI1NzY0N0ZFMEVGMTQxOEQwRjA4NDJDNTdFQUVCOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF7vWkhemf2ocZ6+ZTKsXX/LsC
yp5dCVFWAMvWYUJZlDBlntRt0TYP71WyGJj3aYz+ZmrYohD+ocPgFsXlxcDytVI2
PH5mNmcpQx6aJPjv/EJ+yfTMzR7itfkYSvpqIG0AQ1QZ00ohKa2hha12rm4pRf+4
MfNGse5GfuaomasNV8DZGc+Sjs3O0qo5N61SB6rtQMDls8QIYJY8mKILOdVSLIw6
h7V4Qz9ZHJqcE+congVF8I7usHIpDGUcg5tpcSRgDs/4qyICkDH0IUTEUVd0ijQD
7rYYoNSCiIjHhjy7gmillE9nPbj6r96xb/LUJmOnB/N0UsQnnlNjzeDih4odAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUICDwUatXZH/g7xQY0PCELFfq65kwHwYDVR0j
BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF
NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy
NjNENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYyNDA1MmUtMjIwNS00OGYzLWEz
Y2ItY2U4YjMyNmI4ZjcxLzAvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdB
RkJFNzUyNjNENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHmgZhLxH0noWwguD0epruxyUxTkUL1IBMmZ
84uEQ3O3rRsnEFd5nwFsnUugYtEEz49uicG2xBfNa5EEimp4iGYRZkL08sswj/qP
Z3gmZCzp0YnqOkxS1QxLg61fNn9e7nOqXz/puTzZs8gFdaFg0+wEGZpCurq2iw3z
6mb9lE3BpfuYir7RLGs5o6MZiD9UOD8PEFESpl9UVQbehqfZwbYX7gLGXfSOLEn4
AhG7AYYViQxrnvJfkewBvA5KoRqiNKOCHYEoiyBAx0i2UT655NemTh/lxMuYnYtq
SHiQHekWPltC4nAzp/xeAjz4JM2HJ5Nl1YZrD9DJVLEdpdADac0=
-----END CERTIFICATE-----
Generated at Mon Apr 20 23:35:05 2026 by rpki-client