$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft File: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json) Hash identifier: 59LnMtN227HaHeKeDK0Eq6rRfhva108BhZCNz5VMwTs= Subject key identifier: 2D:C5:85:7A:93:69:90:4C:D6:DE:29:7A:02:5B:A6:7F:EF:7E:52:BF Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 Certificate issuer: /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Certificate serial: C80FF115ACDA0B172ECF66D1662014D2F88847 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft Manifest number: 055E Signing time: Sun 22 Mar 2026 18:51:17 +0000 Manifest this update: Sun 22 Mar 2026 18:46:17 +0000 Manifest next update: Thu 26 Mar 2026 05:08:17 +0000 Files and hashes: 1: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: ljnKYF4WQqtb0yfOcUdymtJM6+GnXJyNyFLsK7GZ494=) 2: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: NUWf5yYksovmW1NwBJUckw88sJUSg/xOh/Wxr4c0ZcQ=) 3: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: Y9NxdO2uUmExgp5HT4f9RxRPtt01n/EQdy4OmAOBACk=) 4: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: PuA0O7on+Tv+yi4m5sFC8JVnpsZv77062xaCNSQ10PY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 05:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c8:0f:f1:15:ac:da:0b:17:2e:cf:66:d1:66:20:14:d2:f8:88:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Validity Not Before: Mar 22 18:46:17 2026 GMT Not After : Mar 26 05:08:17 2026 GMT Subject: CN=2DC5857A9369904CD6DE297A025BA67FEF7E52BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:90:50:b1:7e:b2:ae:a4:df:ca:03:f2:8d:27: de:0e:95:ae:b2:fc:25:0c:56:24:2d:87:68:2b:9e: b0:25:9c:12:51:16:bc:29:3c:7a:38:94:98:93:d3: c0:00:06:de:49:64:24:10:96:d5:39:82:0b:48:59: 07:d8:0b:22:15:3d:17:c7:4e:6c:e0:04:e9:f0:2f: a5:57:9f:92:e2:82:ac:19:33:95:0c:ab:4d:1f:9e: 74:f5:d8:f5:9e:2c:45:77:84:0d:dd:31:7a:c1:d4: 31:df:e9:00:58:67:c1:d9:aa:af:07:8d:ef:15:7c: eb:65:05:05:85:84:d4:1c:ce:da:3a:83:41:89:17: 11:4a:aa:c9:d9:ad:27:17:b5:25:83:ec:9d:8e:e0: 42:1f:05:c1:17:0f:c4:f9:c8:1b:5a:c3:a2:6a:25: f7:68:28:4e:8c:a2:5a:bd:f6:1d:4e:14:38:00:91: 4e:e8:f5:bd:2a:68:f3:16:f8:ef:70:15:a4:10:6e: 23:f0:96:f6:46:1a:a1:8f:b6:a4:48:99:2f:e7:d6: e1:9c:82:d4:3b:ec:5c:9c:e5:1a:62:55:18:0e:e1: f6:23:1c:fb:93:94:4e:1f:e9:12:1f:de:94:5b:90: 3f:09:bc:f5:47:25:8e:c2:78:7c:ac:de:ab:8d:23: 6e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C5:85:7A:93:69:90:4C:D6:DE:29:7A:02:5B:A6:7F:EF:7E:52:BF X509v3 Authority Key Identifier: keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:96:6d:6d:2b:18:09:e4:27:0b:01:d8:4e:0a:43:6a:74:5e: 40:c3:bb:93:36:74:e4:f2:0e:59:b3:9f:07:9f:ac:da:b5:3f: 3a:e0:a8:67:1a:96:3d:57:c4:6a:7e:c9:65:8a:31:14:d6:ba: 58:a3:56:6f:d6:dc:f7:82:84:68:79:ec:c6:0e:8b:18:2a:6c: 78:3c:db:fe:93:54:b7:55:dd:ec:a3:26:fe:fe:9f:6c:2a:b1: e4:89:a9:c1:0e:4d:41:54:fc:80:08:72:e0:bf:f9:38:63:76: a5:38:86:d0:b2:1c:20:50:a9:b1:14:03:b8:26:f2:15:48:26: c5:c1:71:9f:ac:07:d0:3a:fd:9d:0d:13:93:38:77:97:91:23: bd:d2:24:5a:43:12:3d:04:03:5c:8a:28:68:a6:6a:24:85:be: b1:63:62:6b:5f:6d:f5:ab:1f:3f:55:ce:13:f9:3f:a7:f3:4d: 24:a3:6d:8b:db:cb:f8:b2:66:df:4c:07:1c:4e:75:5f:25:43: 6c:6d:49:52:b4:05:1a:68:bd:4a:b3:a7:14:0a:85:19:32:e4: 14:0e:e6:5d:6a:fb:17:b7:77:66:80:64:ef:87:b7:39:73:28: 61:91:4a:6e:21:ee:74:d3:01:67:8c:a7:74:fd:7c:15:33:c6: c1:eb:9c:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAMgP8RWs2gsXLs9m0WYgFNL4iEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE MERDMTdGMjAeFw0yNjAzMjIxODQ2MTdaFw0yNjAzMjYwNTA4MTdaMDMxMTAvBgNV BAMTKDJEQzU4NTdBOTM2OTkwNENENkRFMjk3QTAyNUJBNjdGRUY3RTUyQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCskFCxfrKupN/KA/KNJ94Ola6y /CUMViQth2grnrAlnBJRFrwpPHo4lJiT08AABt5JZCQQltU5ggtIWQfYCyIVPRfH TmzgBOnwL6VXn5LigqwZM5UMq00fnnT12PWeLEV3hA3dMXrB1DHf6QBYZ8HZqq8H je8VfOtlBQWFhNQczto6g0GJFxFKqsnZrScXtSWD7J2O4EIfBcEXD8T5yBtaw6Jq JfdoKE6Molq99h1OFDgAkU7o9b0qaPMW+O9wFaQQbiPwlvZGGqGPtqRImS/n1uGc gtQ77Fyc5RpiVRgO4fYjHPuTlE4f6RIf3pRbkD8JvPVHJY7CeHys3quNI24LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULcWFepNpkEzW3il6Alumf+9+Ur8wHwYDVR0j BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD MTdGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0 YjgtNTIyNWM0NWI5NmExLzAvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBF MUREMERDMTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOWbW0rGAnkJwsB2E4KQ2p0XkDDu5M2dOTy DlmznwefrNq1PzrgqGcalj1XxGp+yWWKMRTWulijVm/W3PeChGh57MYOixgqbHg8 2/6TVLdV3eyjJv7+n2wqseSJqcEOTUFU/IAIcuC/+ThjdqU4htCyHCBQqbEUA7gm 8hVIJsXBcZ+sB9A6/Z0NE5M4d5eRI73SJFpDEj0EA1yKKGimaiSFvrFjYmtfbfWr Hz9VzhP5P6fzTSSjbYvby/iyZt9MBxxOdV8lQ2xtSVK0BRpovUqzpxQKhRky5BQO 5l1q+xe3d2aAZO+HtzlzKGGRSm4h7nTTAWeMp3T9fBUzxsHrnK8= -----END CERTIFICATE-----Generated at Tue Mar 24 12:26:39 2026 by rpki-client