$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft File: DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft (raw, json) Hash identifier: Ttno2hI6Q8VqRucrayNYkcCd3KsJJIxYQMG3Ej4tRKM= Subject key identifier: B9:C3:C9:C8:6D:8A:87:03:61:3E:3F:29:1B:0C:FB:4F:7D:EE:74:16 Authority key identifier: DD:C8:46:A2:41:57:1E:1F:CF:5D:F5:39:AD:EE:44:F9:B1:68:48:AC Certificate issuer: /CN=DDC846A241571E1FCF5DF539ADEE44F9B16848AC Certificate serial: 4B84BAE7FBBB73765165C8DB51F3FB0E696560A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 04:20:59 +0000 Manifest this update: Thu 24 Sep 2026 04:15:59 +0000 Manifest next update: Fri 25 Sep 2026 04:33:59 +0000 Files and hashes: 1: DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl (hash: of7FW/3SLceoEhVadQnxnNOle1iQAVR+5ASxC1iVJjo=) 2: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: a0hNIi6O+sVqt42fhC5LTpjPNLA3CmOlEpxa01bnEUs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:84:ba:e7:fb:bb:73:76:51:65:c8:db:51:f3:fb:0e:69:65:60:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC846A241571E1FCF5DF539ADEE44F9B16848AC Validity Not Before: Sep 24 04:15:59 2026 GMT Not After : Sep 25 04:33:59 2026 GMT Subject: CN=B9C3C9C86D8A8703613E3F291B0CFB4F7DEE7416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b7:9e:0a:88:d7:6a:a5:95:5f:1e:f6:57:7f: f9:2b:a2:4d:2f:fa:6e:8a:c8:54:a8:96:3b:94:07: 05:c8:c2:0d:46:54:7f:11:87:62:d6:3d:2a:cd:00: cf:d2:5e:74:92:74:5d:a8:cb:a2:04:eb:fc:5c:4d: a7:dc:24:bc:6d:4e:a7:ed:4e:3e:2b:69:01:9c:38: 18:e4:12:c4:00:d0:fc:2c:d2:1a:a4:a9:a3:2b:ae: c3:e2:0c:68:fa:5c:dc:a7:2f:f5:a4:3b:16:e3:f5: 69:8e:b3:5f:10:f4:2c:57:ab:d3:9b:0b:f4:cb:86: 0a:fd:69:56:f4:e1:30:91:fd:e4:c9:26:21:d5:0f: aa:e0:77:d0:53:18:d7:d7:0a:4f:9d:5a:a5:87:84: 66:01:59:2d:5b:c6:02:ab:a3:2f:03:84:3c:90:a7: ad:a0:7b:7e:43:02:1c:f1:76:e6:8e:b8:91:a2:66: 3a:f4:eb:69:7b:0a:4a:a4:70:14:e4:b9:ed:4e:a8: 06:71:e8:c5:7c:be:38:a3:6f:34:6c:33:fa:dd:93: 67:6f:fa:1e:ee:38:6b:80:2d:b8:1f:5f:29:bf:b2: 8d:d5:43:64:39:20:17:ef:0c:ed:44:f8:53:08:8e: c9:8a:95:07:50:21:60:96:b0:65:23:ca:de:0b:3f: 9d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C3:C9:C8:6D:8A:87:03:61:3E:3F:29:1B:0C:FB:4F:7D:EE:74:16 X509v3 Authority Key Identifier: keyid:DD:C8:46:A2:41:57:1E:1F:CF:5D:F5:39:AD:EE:44:F9:B1:68:48:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f6:c4:9e:64:d4:c5:2c:a7:96:52:e5:64:03:90:ab:15:b6: 50:6d:77:4b:6f:81:86:3b:ca:1d:ac:c4:f2:05:dd:e8:86:21: 04:b0:a9:36:2c:7e:fa:3d:e8:76:ab:11:22:31:00:f3:c6:50: 54:43:ba:27:cd:65:ad:dc:c2:43:1b:09:ff:e9:d4:eb:db:1e: 83:49:2c:e1:ff:79:28:e1:77:bd:47:46:00:8f:2f:a3:96:d5: c2:fc:f1:b6:f6:67:d8:8b:8e:df:b4:d4:35:31:22:9b:04:f2: 89:0d:db:4f:32:da:9b:3c:d4:bb:5e:e0:d9:8e:fd:de:1e:23: c1:09:bc:3d:e7:98:e5:6f:56:7e:a2:f7:ed:e5:bf:35:1f:f2: 68:39:9b:30:82:1b:18:6a:d1:21:75:2d:3e:9a:56:22:c7:9e: d6:bb:a2:54:34:3e:19:9c:07:26:a5:94:f6:9e:5d:3c:61:1b: 6c:3e:48:af:e2:8d:c6:b8:97:21:e6:d5:f0:f2:26:e3:54:55: 49:87:4f:ad:88:0d:15:b8:91:8e:b3:75:ef:49:bb:62:07:c5: 04:9f:db:02:c6:8b:20:f0:65:9b:1d:39:41:a8:65:25:da:38: df:3d:13:70:82:8c:84:89:a3:8f:c1:4d:a3:13:99:75:b5:6f: f0:59:af:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS4S65/u7c3ZRZcjbUfP7DmllYKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDODQ2QTI0MTU3MUUxRkNGNURGNTM5QURFRTQ0RjlC MTY4NDhBQzAeFw0yNjA5MjQwNDE1NTlaFw0yNjA5MjUwNDMzNTlaMDMxMTAvBgNV BAMTKEI5QzNDOUM4NkQ4QTg3MDM2MTNFM0YyOTFCMENGQjRGN0RFRTc0MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYt54KiNdqpZVfHvZXf/krok0v +m6KyFSoljuUBwXIwg1GVH8Rh2LWPSrNAM/SXnSSdF2oy6IE6/xcTafcJLxtTqft Tj4raQGcOBjkEsQA0Pws0hqkqaMrrsPiDGj6XNynL/WkOxbj9WmOs18Q9CxXq9Ob C/TLhgr9aVb04TCR/eTJJiHVD6rgd9BTGNfXCk+dWqWHhGYBWS1bxgKroy8DhDyQ p62ge35DAhzxduaOuJGiZjr062l7CkqkcBTkue1OqAZx6MV8vjijbzRsM/rdk2dv +h7uOGuALbgfXym/so3VQ2Q5IBfvDO1E+FMIjsmKlQdQIWCWsGUjyt4LP50DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUucPJyG2KhwNhPj8pGwz7T33udBYwHwYDVR0j BBgwFoAU3chGokFXHh/PXfU5re5E+bFoSKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYmRkYmYtZDExOS00YzgwLTg4MjctN2E4ODhhOTNjZTAzLzAvRERDODQ2QTI0 MTU3MUUxRkNGNURGNTM5QURFRTQ0RjlCMTY4NDhBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREM4NDZBMjQxNTcxRTFGQ0Y1REY1MzlBREVFNDRGOUIxNjg0 OEFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvRERDODQ2QTI0MTU3MUUxRkNGNURGNTM5QURFRTQ0 RjlCMTY4NDhBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHz2xJ5k1MUsp5ZS5WQDkKsVtlBtd0tvgYY7 yh2sxPIF3eiGIQSwqTYsfvo96HarESIxAPPGUFRDuifNZa3cwkMbCf/p1OvbHoNJ LOH/eSjhd71HRgCPL6OW1cL88bb2Z9iLjt+01DUxIpsE8okN208y2ps81Lte4NmO /d4eI8EJvD3nmOVvVn6i9+3lvzUf8mg5mzCCGxhq0SF1LT6aViLHnta7olQ0Phmc ByallPaeXTxhG2w+SK/ijca4lyHm1fDyJuNUVUmHT62IDRW4kY6zde9Ju2IHxQSf 2wLGiyDwZZsdOUGoZSXaON89E3CCjISJo4/BTaMTmXW1b/BZrxk= -----END CERTIFICATE-----Generated at Thu Sep 24 10:54:40 2026 by rpki-client