$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft File: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft (raw, json) Hash identifier: iBZl9rMp2dDAu3spXqnZTFMEm1LRSmUIWv1XPyeO8LY= Subject key identifier: 89:F9:E8:47:22:5C:A1:72:71:50:24:7E:63:3A:CE:7B:ED:39:04:13 Authority key identifier: DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 Certificate issuer: /CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Certificate serial: 3D03A073945909E10C3707A080B7051FBFFBA786 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:19:00 +0000 Manifest this update: Tue 12 May 2026 04:14:00 +0000 Manifest next update: Wed 13 May 2026 05:03:00 +0000 Files and hashes: 1: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl (hash: KXN0Wv22G+DcVwrmDAebBr0fsb/l7drkPOSXVFuBo0c=) 2: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: qSXSAuCypxITbArcxADdWqHfhFT512uFXifXCq40Lkk=) 3: 3130332e3138392e3132322e302f32342d3234203d3e20313338383836.roa (hash: w/XB+eAcVCXSBvP5zeesaKGcdg6afVF0i1dOhvajHGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:03:a0:73:94:59:09:e1:0c:37:07:a0:80:b7:05:1f:bf:fb:a7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Validity Not Before: May 12 04:14:00 2026 GMT Not After : May 13 05:03:00 2026 GMT Subject: CN=89F9E847225CA1727150247E633ACE7BED390413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:b2:c4:3c:2a:1a:c6:7d:e7:a9:2b:c1:b3: a3:fd:b1:8d:05:11:52:b7:e3:d8:70:9f:4b:83:7b: 63:e9:a9:3c:12:b8:fe:08:ed:62:28:a8:78:8d:37: 5d:17:1b:ac:f0:9c:12:fd:c3:d8:68:be:a5:9a:fd: 7c:5d:f3:c8:39:39:06:69:1b:9e:c2:fb:15:07:71: d3:1d:cf:2d:1d:b5:0f:99:26:92:47:bf:59:da:50: 30:47:bd:90:9b:d6:37:10:ce:73:0e:e2:cf:d7:26: 01:a0:42:62:7d:c4:ea:3c:b0:57:96:ab:86:a1:a9: fb:ab:db:d8:0a:3a:5d:7f:7b:23:79:a1:32:4a:4f: dc:e7:9f:f4:35:2b:1e:b1:0d:ee:30:16:65:20:08: 58:09:a8:da:a7:72:29:77:60:43:15:9a:32:5b:3d: 84:a6:90:b0:52:3c:fb:d9:d8:49:34:d3:98:c2:e0: 18:d6:85:7b:5b:f4:6f:63:05:25:44:cd:e5:a2:29: 6e:2a:b2:b5:63:4c:85:0e:2b:12:f5:2f:5d:d8:15: 8c:fb:d7:12:56:60:22:40:ff:1c:02:56:a4:4f:2c: db:a1:2b:04:e8:64:b4:90:04:a5:9c:94:01:48:a0: e7:16:a4:c3:b8:05:4f:a5:69:8c:a0:1b:09:12:92: a0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F9:E8:47:22:5C:A1:72:71:50:24:7E:63:3A:CE:7B:ED:39:04:13 X509v3 Authority Key Identifier: keyid:DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:ad:4f:68:75:9e:04:ab:42:3a:53:4c:64:38:13:c8:95:72: c0:1e:63:93:37:51:37:7a:db:67:a0:55:42:ef:6b:f8:2d:2c: f6:41:c3:8a:29:c5:68:a5:50:a3:ba:bc:cd:8b:3b:5c:9f:8e: 23:bf:4c:f2:e2:64:3d:f2:5e:6d:5c:e3:30:3c:29:84:92:14: 3f:d8:08:0f:18:5d:5a:85:a2:a6:59:e5:f7:ea:51:1a:44:9e: 23:c0:a7:c5:31:d7:32:67:22:95:7d:6e:07:1c:a9:d8:09:ce: ec:f2:06:e4:35:76:78:a8:fd:48:d7:4a:f7:0a:0d:d5:34:95: 00:59:56:4d:49:8b:a5:b2:c5:80:d2:60:d3:b2:b0:e5:aa:b4: 36:9f:b1:9c:8a:5d:c4:0a:eb:4f:97:91:e0:10:98:a7:0a:74: a8:4c:f0:0b:b3:61:06:01:76:5d:58:89:e3:d9:c5:e9:7e:2d: c6:9e:4d:68:da:ff:15:1f:72:e9:e0:80:8f:2a:ab:4d:e5:d8: 0a:aa:40:54:e6:fc:56:c5:37:35:3a:cb:cc:01:77:d4:4a:59: d3:98:5e:df:cf:61:e3:cd:9b:34:85:48:83:b5:a4:1f:0e:e7: 0c:b9:cf:1b:5b:65:24:1b:8c:39:5c:a7:2c:b0:b1:07:8f:bf: 95:38:4e:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQOgc5RZCeEMNweggLcFH7/7p4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5 ODUxQTFCOTAeFw0yNjA1MTIwNDE0MDBaFw0yNjA1MTMwNTAzMDBaMDMxMTAvBgNV BAMTKDg5RjlFODQ3MjI1Q0ExNzI3MTUwMjQ3RTYzM0FDRTdCRUQzOTA0MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtH7LEPCoaxn3nqSvBs6P9sY0F EVK349hwn0uDe2PpqTwSuP4I7WIoqHiNN10XG6zwnBL9w9hovqWa/Xxd88g5OQZp G57C+xUHcdMdzy0dtQ+ZJpJHv1naUDBHvZCb1jcQznMO4s/XJgGgQmJ9xOo8sFeW q4ahqfur29gKOl1/eyN5oTJKT9znn/Q1Kx6xDe4wFmUgCFgJqNqncil3YEMVmjJb PYSmkLBSPPvZ2Ek005jC4BjWhXtb9G9jBSVEzeWiKW4qsrVjTIUOKxL1L13YFYz7 1xJWYCJA/xwCVqRPLNuhKwToZLSQBKWclAFIoOcWpMO4BU+laYygGwkSkqCTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUifnoRyJcoXJxUCR+YzrOe+05BBMwHwYDVR0j BBgwFoAU3U/+ysb7E8TxR2AvixgkQphRobkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJhMGI4ZjgtNGZjZi00YjliLTk3OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FD NkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5ODUxQTFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDRGRkVDQUM2RkIxM0M0RjE0NzYwMkY4QjE4MjQ0Mjk4NTFB MUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0 NDI5ODUxQTFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL6tT2h1ngSrQjpTTGQ4E8iVcsAeY5M3UTd6 22egVULva/gtLPZBw4opxWilUKO6vM2LO1yfjiO/TPLiZD3yXm1c4zA8KYSSFD/Y CA8YXVqFoqZZ5ffqURpEniPAp8Ux1zJnIpV9bgccqdgJzuzyBuQ1dnio/UjXSvcK DdU0lQBZVk1Ji6WyxYDSYNOysOWqtDafsZyKXcQK60+XkeAQmKcKdKhM8AuzYQYB dl1YiePZxel+LcaeTWja/xUfcunggI8qq03l2AqqQFTm/FbFNzU6y8wBd9RKWdOY Xt/PYePNmzSFSIO1pB8O5wy5zxtbZSQbjDlcpyywsQePv5U4Tmo= -----END CERTIFICATE-----Generated at Tue May 12 22:13:24 2026 by rpki-client