$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft File: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft (raw, json) Hash identifier: xBhqoMdV8g6B+NbdWKca5Fl5YWRy8yT7GRfmWdgDyEo= Subject key identifier: 4D:07:DF:E3:34:6A:A1:D4:07:DE:69:82:EA:22:B3:D4:5D:F3:AF:09 Authority key identifier: DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 Certificate issuer: /CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Certificate serial: 2A458243C2B953DFFC4097E5FD9B7202752D68BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 23:33:30 +0000 Manifest this update: Thu 23 Jul 2026 23:28:30 +0000 Manifest next update: Sat 25 Jul 2026 02:10:30 +0000 Files and hashes: 1: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl (hash: 460YmLC6ocODshzkjbO4ODjxXdXUmPKDUr8EPNyHDes=) 2: 3130332e3138392e3132322e302f32342d3234203d3e20313338383836.roa (hash: w/XB+eAcVCXSBvP5zeesaKGcdg6afVF0i1dOhvajHGI=) 3: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: qSXSAuCypxITbArcxADdWqHfhFT512uFXifXCq40Lkk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:45:82:43:c2:b9:53:df:fc:40:97:e5:fd:9b:72:02:75:2d:68:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Validity Not Before: Jul 23 23:28:30 2026 GMT Not After : Jul 25 02:10:30 2026 GMT Subject: CN=4D07DFE3346AA1D407DE6982EA22B3D45DF3AF09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:78:74:99:5d:e7:d5:e7:a8:4e:5c:a1:4b:7e: c7:5d:65:8f:47:0b:97:31:09:d1:26:14:90:b6:01: 1e:be:94:e8:bd:5e:d2:77:4e:c5:19:84:fb:46:a1: fb:9c:a5:08:26:01:e5:3b:87:6f:e8:cb:da:1a:c1: 1a:ec:d9:47:1f:d0:ef:13:ec:58:a1:bf:ba:08:9a: 26:ba:0d:57:64:7e:55:50:3f:99:03:63:59:08:11: b1:02:d3:98:33:60:b4:23:c1:7f:3d:44:bf:5a:47: a2:85:e7:2f:97:56:2a:ce:4d:a9:57:ef:e6:78:21: d1:3f:cf:e0:6b:16:54:e8:5b:d8:c6:0c:35:55:81: 52:51:6e:8d:39:7a:a6:98:59:ae:be:52:26:40:28: 7b:e7:64:71:76:b0:1a:98:ef:d6:64:c5:79:79:41: 1d:c6:f5:34:43:96:df:14:2e:f3:ed:48:f1:80:d1: 67:88:17:35:7e:e3:a7:4e:ec:7e:5e:02:f2:46:0d: 68:25:62:cd:8f:a7:58:cb:e3:39:6e:b3:80:e4:54: bf:8c:ed:57:cb:37:e2:cc:24:9f:3e:16:be:07:37: 9d:8e:11:cb:06:06:59:06:bb:f0:85:f7:0d:ab:a5: 6b:24:cc:bb:e6:24:25:f6:d1:f9:c1:16:63:3a:36: 7f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:07:DF:E3:34:6A:A1:D4:07:DE:69:82:EA:22:B3:D4:5D:F3:AF:09 X509v3 Authority Key Identifier: keyid:DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c2:55:96:a2:95:ab:f7:62:2a:8d:46:44:fc:27:32:96:5d: d1:55:17:23:29:ba:cf:e0:a5:87:a2:cd:ec:58:41:4b:59:cb: 46:5c:3b:8f:b1:d4:ed:f8:d9:ae:34:00:5b:4e:82:69:e7:cb: a2:4b:1d:3b:59:f0:ec:81:ba:50:f8:44:99:ee:3a:3c:f4:15: 70:da:ce:5f:2b:b3:12:25:78:77:8b:65:76:ed:2b:53:49:1b: 90:07:cf:7d:31:8d:a8:8a:0b:7b:b7:de:72:27:ff:32:6b:94: 42:f5:46:3c:fb:67:6a:58:e0:b2:da:af:5c:0b:97:c0:00:24: b4:95:17:50:88:74:0b:37:08:3b:58:b3:0c:39:66:60:95:2c: e5:b4:b6:9a:ca:e8:72:f6:23:19:8a:6c:c2:2c:91:b4:e1:25: 1e:e6:46:95:1c:f2:2d:65:b6:72:c8:a6:04:90:f3:78:a9:15: 7f:0b:d1:54:45:f2:4e:c1:53:40:26:15:06:50:f7:61:bf:d3: 43:b1:ba:5b:68:d5:36:70:68:0d:ea:66:4b:3f:d6:a0:d4:e8: 21:c5:2c:47:f6:01:da:27:19:a6:c7:a3:1e:c9:55:8c:d5:01: 7a:50:5f:22:08:e0:d3:91:c8:18:b8:1b:b7:4d:0d:03:46:a2: 28:51:2c:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKkWCQ8K5U9/8QJfl/ZtyAnUtaLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5 ODUxQTFCOTAeFw0yNjA3MjMyMzI4MzBaFw0yNjA3MjUwMjEwMzBaMDMxMTAvBgNV BAMTKDREMDdERkUzMzQ2QUExRDQwN0RFNjk4MkVBMjJCM0Q0NURGM0FGMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLeHSZXefV56hOXKFLfsddZY9H C5cxCdEmFJC2AR6+lOi9XtJ3TsUZhPtGofucpQgmAeU7h2/oy9oawRrs2Ucf0O8T 7Fihv7oImia6DVdkflVQP5kDY1kIEbEC05gzYLQjwX89RL9aR6KF5y+XVirOTalX 7+Z4IdE/z+BrFlToW9jGDDVVgVJRbo05eqaYWa6+UiZAKHvnZHF2sBqY79ZkxXl5 QR3G9TRDlt8ULvPtSPGA0WeIFzV+46dO7H5eAvJGDWglYs2Pp1jL4zlus4DkVL+M 7VfLN+LMJJ8+Fr4HN52OEcsGBlkGu/CF9w2rpWskzLvmJCX20fnBFmM6Nn/tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTQff4zRqodQH3mmC6iKz1F3zrwkwHwYDVR0j BBgwFoAU3U/+ysb7E8TxR2AvixgkQphRobkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJhMGI4ZjgtNGZjZi00YjliLTk3OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FD NkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5ODUxQTFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDRGRkVDQUM2RkIxM0M0RjE0NzYwMkY4QjE4MjQ0Mjk4NTFB MUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0 NDI5ODUxQTFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLCVZailav3YiqNRkT8JzKWXdFVFyMpus/g pYeizexYQUtZy0ZcO4+x1O342a40AFtOgmnny6JLHTtZ8OyBulD4RJnuOjz0FXDa zl8rsxIleHeLZXbtK1NJG5AHz30xjaiKC3u33nIn/zJrlEL1Rjz7Z2pY4LLar1wL l8AAJLSVF1CIdAs3CDtYsww5ZmCVLOW0tprK6HL2IxmKbMIskbThJR7mRpUc8i1l tnLIpgSQ83ipFX8L0VRF8k7BU0AmFQZQ92G/00Oxulto1TZwaA3qZks/1qDU6CHF LEf2AdonGabHox7JVYzVAXpQXyII4NORyBi4G7dNDQNGoihRLEg= -----END CERTIFICATE-----Generated at Fri Jul 24 02:36:53 2026 by rpki-client