$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft File: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft (raw, json) Hash identifier: hfIHaxdg9IiH7Tsp60fcdynGUfYP71VTxQbkcxIhL90= Subject key identifier: A4:A1:7E:E2:43:D0:9A:CF:EB:32:36:F5:D3:F5:80:AE:CD:BC:B6:AA Authority key identifier: DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 Certificate issuer: /CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Certificate serial: 07FDA239C56A8944CDA6E7E6E7EDED2733755408 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 06:54:10 +0000 Manifest this update: Fri 25 Sep 2026 06:49:10 +0000 Manifest next update: Sat 26 Sep 2026 07:35:10 +0000 Files and hashes: 1: 3130332e3138392e3132322e302f32342d3234203d3e20313338383836.roa (hash: w/XB+eAcVCXSBvP5zeesaKGcdg6afVF0i1dOhvajHGI=) 2: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: qSXSAuCypxITbArcxADdWqHfhFT512uFXifXCq40Lkk=) 3: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl (hash: F5xkjxVkLAKL0yr4oGDrbl/n39SR9FCYY0fvaAcLPBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 05:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:fd:a2:39:c5:6a:89:44:cd:a6:e7:e6:e7:ed:ed:27:33:75:54:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Validity Not Before: Sep 25 06:49:10 2026 GMT Not After : Sep 26 07:35:10 2026 GMT Subject: CN=A4A17EE243D09ACFEB3236F5D3F580AECDBCB6AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f4:d0:a6:f4:ef:f3:75:86:02:4e:1d:4b:df: 91:a8:f8:59:e5:78:df:b0:65:40:03:bc:94:2a:0d: 53:20:7d:33:eb:0d:21:1e:a1:63:48:b0:e9:a6:71: eb:bf:08:53:af:7f:d5:a8:a7:4c:2c:a1:fe:5d:c3: 0e:79:42:7e:33:5f:45:81:34:d8:49:5a:aa:0e:a9: 55:7c:a1:5e:9d:29:15:7d:21:ed:3f:93:94:27:25: bc:5d:42:28:df:86:46:09:9f:c7:db:4b:89:07:eb: c1:72:7e:d1:76:89:26:f7:94:9f:90:61:45:8c:2c: 5e:b8:98:c3:ea:a4:2a:2f:49:3b:86:9c:16:c6:ac: b5:e0:35:bb:4d:fe:38:70:1a:d6:b4:25:9c:2e:69: 7c:ae:8d:23:b7:aa:1e:68:3f:d2:5f:d2:7f:b4:9a: fd:af:60:4c:7f:f6:c0:ed:50:98:2f:a1:f5:29:e2: fe:7c:1b:dd:aa:df:e8:0b:af:b4:e1:5b:f2:7e:fd: 62:ec:89:85:5e:d0:11:12:75:3e:a7:59:f7:c9:59: 97:b8:20:40:89:33:26:27:ae:82:3e:0e:2a:3a:86: 03:d7:4c:d5:48:4b:6e:a5:1e:62:01:52:26:73:d8: d4:26:12:a2:dd:a5:5f:a3:df:b3:bc:60:a7:31:7d: 9b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A1:7E:E2:43:D0:9A:CF:EB:32:36:F5:D3:F5:80:AE:CD:BC:B6:AA X509v3 Authority Key Identifier: keyid:DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ab:d8:d9:0e:e7:7b:8b:c5:dc:0b:fe:6c:40:dc:d9:da:0f: 06:2b:9d:79:84:78:f8:20:e7:cb:24:19:56:f0:66:a5:a9:3d: 0a:b0:16:27:83:5a:09:9a:27:95:44:8f:b7:1d:b1:9e:82:b7: ef:de:d1:b4:53:f3:be:45:d5:56:47:d9:98:c4:62:ad:4e:31: 41:6b:3f:8c:cc:01:71:d5:68:96:66:2e:2a:70:9b:5e:c9:57: ce:ab:f7:c7:c7:e9:88:1b:58:44:e2:63:84:5c:77:2c:b8:41: 1d:27:34:66:81:a2:21:da:5b:46:d9:af:2d:f0:27:8c:cb:a8: aa:eb:12:6b:a7:74:b4:7b:ae:40:c7:0f:0a:92:0e:de:0f:43: cf:da:de:c6:66:bb:3d:12:d1:ac:87:5a:0d:13:ff:45:3e:58: 40:46:23:7f:84:3a:3a:fd:49:18:3f:2c:51:0a:3d:d5:92:41: 25:01:82:ed:e5:50:cd:e6:2a:3b:6d:e6:89:41:f1:24:ff:e0: b6:f1:e2:f8:37:1c:c5:34:2f:4e:c5:30:c7:5a:0a:26:60:7e: 10:47:2a:ca:5c:fe:c6:0b:1f:be:3c:dd:8c:e1:eb:13:58:13: f6:1c:92:22:b4:42:00:bc:98:ba:d2:3d:98:77:4d:34:38:13: 20:bb:cd:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/2iOcVqiUTNpufm5+3tJzN1VAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5 ODUxQTFCOTAeFw0yNjA5MjUwNjQ5MTBaFw0yNjA5MjYwNzM1MTBaMDMxMTAvBgNV BAMTKEE0QTE3RUUyNDNEMDlBQ0ZFQjMyMzZGNUQzRjU4MEFFQ0RCQ0I2QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW9NCm9O/zdYYCTh1L35Go+Fnl eN+wZUADvJQqDVMgfTPrDSEeoWNIsOmmceu/CFOvf9Wop0wsof5dww55Qn4zX0WB NNhJWqoOqVV8oV6dKRV9Ie0/k5QnJbxdQijfhkYJn8fbS4kH68FyftF2iSb3lJ+Q YUWMLF64mMPqpCovSTuGnBbGrLXgNbtN/jhwGta0JZwuaXyujSO3qh5oP9Jf0n+0 mv2vYEx/9sDtUJgvofUp4v58G92q3+gLr7ThW/J+/WLsiYVe0BESdT6nWffJWZe4 IECJMyYnroI+Dio6hgPXTNVIS26lHmIBUiZz2NQmEqLdpV+j37O8YKcxfZtDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpKF+4kPQms/rMjb10/WArs28tqowHwYDVR0j BBgwFoAU3U/+ysb7E8TxR2AvixgkQphRobkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJhMGI4ZjgtNGZjZi00YjliLTk3OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FD NkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5ODUxQTFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDRGRkVDQUM2RkIxM0M0RjE0NzYwMkY4QjE4MjQ0Mjk4NTFB MUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0 NDI5ODUxQTFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHir2NkO53uLxdwL/mxA3NnaDwYrnXmEePgg 58skGVbwZqWpPQqwFieDWgmaJ5VEj7cdsZ6Ct+/e0bRT875F1VZH2ZjEYq1OMUFr P4zMAXHVaJZmLipwm17JV86r98fH6YgbWETiY4Rcdyy4QR0nNGaBoiHaW0bZry3w J4zLqKrrEmundLR7rkDHDwqSDt4PQ8/a3sZmuz0S0ayHWg0T/0U+WEBGI3+EOjr9 SRg/LFEKPdWSQSUBgu3lUM3mKjtt5olB8ST/4Lbx4vg3HMU0L07FMMdaCiZgfhBH Kspc/sYLH7483Yzh6xNYE/YckiK0QgC8mLrSPZh3TTQ4EyC7zbo= -----END CERTIFICATE-----Generated at Fri Sep 25 09:21:04 2026 by rpki-client