$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft File: 1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft (raw, json) Hash identifier: O7ovki6QrKYfLENz+5s3R932lC3psmJ03z5oiTDGu3o= Subject key identifier: CB:A4:E8:E6:7D:48:16:CE:ED:CC:CD:C5:F9:7F:B5:89:8F:1D:E7:9E Authority key identifier: 1D:D0:DE:90:19:8F:9D:1A:28:E4:57:EE:57:88:E7:D1:35:47:CB:91 Certificate issuer: /CN=1DD0DE90198F9D1A28E457EE5788E7D13547CB91 Certificate serial: 4E044C0E1BD81DCADD29F290EA3373EB30B5962C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft Manifest number: CD Signing time: Sat 03 Oct 2026 23:03:52 +0000 Manifest this update: Sat 03 Oct 2026 22:58:52 +0000 Manifest next update: Sun 04 Oct 2026 23:50:52 +0000 Files and hashes: 1: 1DD0DE90198F9D1A28E457EE5788E7D13547CB91.crl (hash: NSk+1n3yJ1ALL+hqIV/KhlnkmwyKKGzHs9LBSFH5fmQ=) 2: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (hash: fsyTi1wKrYDgpsKCw76juglRx93+2YzZ5l6lzjCtU8E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.crl rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 23:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:04:4c:0e:1b:d8:1d:ca:dd:29:f2:90:ea:33:73:eb:30:b5:96:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD0DE90198F9D1A28E457EE5788E7D13547CB91 Validity Not Before: Oct 3 22:58:52 2026 GMT Not After : Oct 4 23:50:52 2026 GMT Subject: CN=CBA4E8E67D4816CEEDCCCDC5F97FB5898F1DE79E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7f:2a:6f:85:01:a5:a4:73:7e:54:75:09:0b: 08:5b:37:fc:d4:88:ab:e2:db:22:0f:8a:54:08:06: 7d:48:1e:e1:21:6c:3c:f6:08:12:23:72:6a:9d:53: f3:38:98:8f:d7:da:b9:a9:ff:b6:90:08:97:18:87: 6d:e7:88:09:13:2d:68:bc:32:0f:31:e0:09:62:11: d1:ad:2f:72:35:e6:c7:18:f4:d8:a9:d5:3c:b6:da: 08:c3:6a:45:d9:e1:11:2d:c1:53:14:e2:a7:0d:13: dd:bc:1f:63:b8:27:e9:15:2a:64:ec:3c:65:ad:53: b6:15:0e:bf:c8:d2:af:0d:f3:10:02:35:5d:8b:d8: 35:17:a9:2f:84:18:a4:79:cc:57:e8:db:f1:1c:07: ff:28:a1:48:08:08:0e:6a:fd:f7:b3:1b:7d:8b:de: c3:e6:09:47:89:5f:6d:38:95:d7:dc:75:91:aa:1b: a6:ae:14:77:fc:62:7b:83:3a:1d:ef:82:43:53:68: 81:82:3d:8f:57:27:89:a3:2a:10:38:a6:24:43:aa: 84:79:48:96:56:9c:2d:32:a1:25:78:3a:17:0d:ad: 6d:42:8a:02:04:6a:c9:3f:97:3f:c9:61:e8:c8:59: ed:97:d2:24:86:e2:70:b9:17:2c:11:3b:d2:97:60: 12:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A4:E8:E6:7D:48:16:CE:ED:CC:CD:C5:F9:7F:B5:89:8F:1D:E7:9E X509v3 Authority Key Identifier: keyid:1D:D0:DE:90:19:8F:9D:1A:28:E4:57:EE:57:88:E7:D1:35:47:CB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f0:fc:fc:d6:0c:05:92:3a:fe:18:06:e8:57:12:93:31:9c: d6:ba:2a:8d:d1:9d:df:cf:31:16:be:7c:93:fa:29:da:ae:14: 3e:e7:01:bf:2c:69:3f:b9:8a:1d:8c:83:36:21:fb:28:0c:d1: 23:8b:36:8d:22:14:a2:63:03:80:c5:28:dc:4e:96:a0:4e:c6: b5:38:9c:70:a3:eb:ec:ea:82:8d:ff:09:54:5d:cd:c4:78:01: f6:4b:f9:47:97:f8:4c:0d:4e:eb:2c:17:2c:f7:14:dd:30:42: 1b:eb:f6:9a:f2:15:95:e2:64:11:6f:b0:18:82:84:0b:1f:a6: 54:fb:c0:3d:e9:20:bd:e7:98:4c:2d:88:e6:d8:93:d7:62:8b: ed:41:61:63:8f:78:04:2c:1b:a9:ea:c6:37:39:00:cb:9c:5e: 29:df:26:55:39:76:ea:9e:63:9e:5f:d9:bb:c4:fb:3a:f8:6f: d1:34:f2:89:f7:7d:c0:da:26:da:3b:25:2c:cc:75:19:e2:f2: 5f:28:4b:fa:a7:ea:e4:39:53:41:95:80:ab:ee:02:7d:55:e5: 2b:66:ea:bd:6b:a1:4f:91:04:2a:77:34:5c:1f:1a:3d:22:4d: d4:33:35:51:d0:0a:ef:86:24:84:75:05:0a:98:c1:71:19:ad: 67:57:18:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTgRMDhvYHcrdKfKQ6jNz6zC1liwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUREMERFOTAxOThGOUQxQTI4RTQ1N0VFNTc4OEU3RDEz NTQ3Q0I5MTAeFw0yNjEwMDMyMjU4NTJaFw0yNjEwMDQyMzUwNTJaMDMxMTAvBgNV BAMTKENCQTRFOEU2N0Q0ODE2Q0VFRENDQ0RDNUY5N0ZCNTg5OEYxREU3OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHfypvhQGlpHN+VHUJCwhbN/zU iKvi2yIPilQIBn1IHuEhbDz2CBIjcmqdU/M4mI/X2rmp/7aQCJcYh23niAkTLWi8 Mg8x4AliEdGtL3I15scY9Nip1Ty22gjDakXZ4REtwVMU4qcNE928H2O4J+kVKmTs PGWtU7YVDr/I0q8N8xACNV2L2DUXqS+EGKR5zFfo2/EcB/8ooUgICA5q/fezG32L 3sPmCUeJX204ldfcdZGqG6auFHf8YnuDOh3vgkNTaIGCPY9XJ4mjKhA4piRDqoR5 SJZWnC0yoSV4OhcNrW1CigIEask/lz/JYejIWe2X0iSG4nC5FywRO9KXYBINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy6To5n1IFs7tzM3F+X+1iY8d554wHwYDVR0j BBgwFoAUHdDekBmPnRoo5FfuV4jn0TVHy5EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU4OGRmZjctNmE5Mi00MjkzLTg4MDAtYjUzZTJhOTE4YWNhLzEvMUREMERFOTAx OThGOUQxQTI4RTQ1N0VFNTc4OEU3RDEzNTQ3Q0I5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xREQwREU5MDE5OEY5RDFBMjhFNDU3RUU1Nzg4RTdEMTM1NDdD QjkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzEvMUREMERFOTAxOThGOUQxQTI4RTQ1N0VFNTc4OEU3 RDEzNTQ3Q0I5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzw/PzWDAWSOv4YBuhXEpMxnNa6Ko3Rnd/P MRa+fJP6KdquFD7nAb8saT+5ih2MgzYh+ygM0SOLNo0iFKJjA4DFKNxOlqBOxrU4 nHCj6+zqgo3/CVRdzcR4AfZL+UeX+EwNTussFyz3FN0wQhvr9pryFZXiZBFvsBiC hAsfplT7wD3pIL3nmEwtiObYk9dii+1BYWOPeAQsG6nqxjc5AMucXinfJlU5duqe Y55f2bvE+zr4b9E08on3fcDaJto7JSzMdRni8l8oS/qn6uQ5U0GVgKvuAn1V5Stm 6r1roU+RBCp3NFwfGj0iTdQzNVHQCu+GJIR1BQqYwXEZrWdXGH0= -----END CERTIFICATE-----Generated at Sun Oct 4 11:03:36 2026 by rpki-client