$ rpki-client -vvf rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft File: DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft (raw, json) Hash identifier: dxXCteXNwTvE5Cs6RAJFqVe907tRDHqkhRDpwWkLees= Subject key identifier: C5:35:E3:2A:15:F1:39:F4:E2:9B:22:88:2E:19:91:53:6C:93:BE:13 Authority key identifier: DD:C8:46:A2:41:57:1E:1F:CF:5D:F5:39:AD:EE:44:F9:B1:68:48:AC Certificate issuer: /CN=DDC846A241571E1FCF5DF539ADEE44F9B16848AC Certificate serial: 39C61317962514E26F21733E765997FDF3C69F5A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft Manifest number: 0E Signing time: Tue 12 May 2026 02:51:20 +0000 Manifest this update: Tue 12 May 2026 02:46:20 +0000 Manifest next update: Wed 13 May 2026 04:12:20 +0000 Files and hashes: 1: DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl (hash: dP8HkNJo9IeFf0m8+MFtXr6BU03/fc4zQiD5krbu2Ls=) 2: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: a0hNIi6O+sVqt42fhC5LTpjPNLA3CmOlEpxa01bnEUs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 04:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c6:13:17:96:25:14:e2:6f:21:73:3e:76:59:97:fd:f3:c6:9f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC846A241571E1FCF5DF539ADEE44F9B16848AC Validity Not Before: May 12 02:46:20 2026 GMT Not After : May 13 04:12:20 2026 GMT Subject: CN=C535E32A15F139F4E29B22882E1991536C93BE13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bf:b1:89:cf:ff:35:e3:2a:50:c7:c7:d4:7b: 4a:02:1f:eb:e5:42:6b:b1:3e:40:ac:ec:da:ee:53: 14:da:a7:de:8a:4a:7b:ba:43:0f:ac:bc:14:17:47: c2:6a:6a:b9:c9:b8:22:6c:f7:81:2a:58:2b:9a:ab: 1c:38:13:f7:a7:39:e8:ca:25:84:4f:99:af:a6:85: 69:e8:0a:68:72:2f:1d:79:de:6a:14:1e:a9:43:80: f9:08:58:60:1d:b7:f3:46:94:0e:3b:a7:cf:06:82: 64:3c:1e:b5:2a:e8:4f:8b:15:1e:fc:69:fa:07:c8: 0d:63:e7:56:47:a3:48:ee:ff:7c:ad:8c:3e:f4:74: 9d:1f:73:32:eb:9f:47:04:63:b9:45:cd:d7:b7:6b: 80:6c:38:f7:61:0e:ad:15:cc:2d:db:a6:1d:bf:2c: ff:06:ef:d8:66:72:ed:33:f3:57:91:3a:4c:02:8c: d6:d3:75:bf:d5:e8:48:98:ca:c0:af:b9:25:78:2c: bb:b3:ca:c2:59:24:39:50:d6:01:a4:03:a9:75:6f: 28:5e:4a:9a:a5:2f:89:c9:cb:8e:96:57:a6:6c:2e: 43:66:a6:87:ef:2b:df:f8:fc:1d:38:ff:1c:38:6b: 94:f4:16:79:e0:94:85:75:7b:7e:48:52:d6:ff:67: 9d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:35:E3:2A:15:F1:39:F4:E2:9B:22:88:2E:19:91:53:6C:93:BE:13 X509v3 Authority Key Identifier: keyid:DD:C8:46:A2:41:57:1E:1F:CF:5D:F5:39:AD:EE:44:F9:B1:68:48:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:64:c3:03:82:e3:38:a8:2b:bf:af:29:74:42:31:dc:84:a7: 5d:69:f8:69:90:bd:99:8f:1a:6a:82:c9:8c:0f:a7:f6:b1:fb: 13:45:fb:8b:fa:8e:13:dd:f8:a1:5a:44:2d:70:14:e0:4a:32: e6:6f:46:c0:f6:85:71:4d:bb:66:52:6b:9f:02:05:ae:0a:e4: 05:7d:d2:ef:f4:24:dc:cf:ad:8d:7e:9c:8b:73:47:53:c3:e8: fd:fa:d0:d7:5a:39:fd:90:af:7d:a6:73:b1:23:67:9b:17:b6: 1a:a8:08:b7:08:6a:37:9d:e8:ec:6e:11:a8:81:88:9c:7a:a5: e4:02:13:ab:05:07:5b:43:77:fc:ad:6c:5d:38:c8:5c:17:40: 15:7c:2b:28:9c:fa:2d:60:52:44:e2:0c:2f:df:e0:76:c7:03: 2e:9a:2b:5d:e7:be:64:79:30:71:f0:ea:ae:42:fc:ad:ca:9c: 96:43:27:64:f9:3a:54:83:47:26:66:b3:59:b4:69:51:cf:06: ce:9b:e8:44:1e:e7:57:18:a1:17:fc:01:f1:32:96:4f:10:82: 81:eb:53:23:c6:6b:95:48:f7:15:64:77:c9:e5:bf:36:d0:c2: 64:07:17:01:82:dd:35:60:ac:e1:1b:3f:21:76:60:b2:f5:83: 12:27:66:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOcYTF5YlFOJvIXM+dlmX/fPGn1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDODQ2QTI0MTU3MUUxRkNGNURGNTM5QURFRTQ0RjlC MTY4NDhBQzAeFw0yNjA1MTIwMjQ2MjBaFw0yNjA1MTMwNDEyMjBaMDMxMTAvBgNV BAMTKEM1MzVFMzJBMTVGMTM5RjRFMjlCMjI4ODJFMTk5MTUzNkM5M0JFMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiv7GJz/814ypQx8fUe0oCH+vl QmuxPkCs7NruUxTap96KSnu6Qw+svBQXR8JqarnJuCJs94EqWCuaqxw4E/enOejK JYRPma+mhWnoCmhyLx153moUHqlDgPkIWGAdt/NGlA47p88GgmQ8HrUq6E+LFR78 afoHyA1j51ZHo0ju/3ytjD70dJ0fczLrn0cEY7lFzde3a4BsOPdhDq0VzC3bph2/ LP8G79hmcu0z81eROkwCjNbTdb/V6EiYysCvuSV4LLuzysJZJDlQ1gGkA6l1byhe SpqlL4nJy46WV6ZsLkNmpofvK9/4/B04/xw4a5T0FnnglIV1e35IUtb/Z513AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxTXjKhXxOfTimyKILhmRU2yTvhMwHwYDVR0j BBgwFoAU3chGokFXHh/PXfU5re5E+bFoSKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYmRkYmYtZDExOS00YzgwLTg4MjctN2E4ODhhOTNjZTAzLzAvRERDODQ2QTI0 MTU3MUUxRkNGNURGNTM5QURFRTQ0RjlCMTY4NDhBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREM4NDZBMjQxNTcxRTFGQ0Y1REY1MzlBREVFNDRGOUIxNjg0 OEFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvRERDODQ2QTI0MTU3MUUxRkNGNURGNTM5QURFRTQ0 RjlCMTY4NDhBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNkwwOC4zioK7+vKXRCMdyEp11p+GmQvZmP GmqCyYwPp/ax+xNF+4v6jhPd+KFaRC1wFOBKMuZvRsD2hXFNu2ZSa58CBa4K5AV9 0u/0JNzPrY1+nItzR1PD6P360NdaOf2Qr32mc7EjZ5sXthqoCLcIajed6OxuEaiB iJx6peQCE6sFB1tDd/ytbF04yFwXQBV8Kyic+i1gUkTiDC/f4HbHAy6aK13nvmR5 MHHw6q5C/K3KnJZDJ2T5OlSDRyZms1m0aVHPBs6b6EQe51cYoRf8AfEylk8QgoHr UyPGa5VI9xVkd8nlvzbQwmQHFwGC3TVgrOEbPyF2YLL1gxInZoE= -----END CERTIFICATE-----Generated at Tue May 12 22:20:18 2026 by rpki-client