$ rpki-client -vvf rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft File: DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft (raw, json) Hash identifier: On04tyIT0dMjQJ1rE6A22r24goItOLEARtAXFeJC+5c= Subject key identifier: 94:81:56:9C:6F:EF:3D:4A:7B:7C:AE:75:7C:F0:6D:92:6B:CA:49:22 Authority key identifier: DD:C8:46:A2:41:57:1E:1F:CF:5D:F5:39:AD:EE:44:F9:B1:68:48:AC Certificate issuer: /CN=DDC846A241571E1FCF5DF539ADEE44F9B16848AC Certificate serial: 0384098DE8425B817465CA9B4567EE0CD773FD09 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 10:38:02 +0000 Manifest this update: Thu 23 Jul 2026 10:33:02 +0000 Manifest next update: Fri 24 Jul 2026 12:54:02 +0000 Files and hashes: 1: DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl (hash: kilQQpQljiqlG+PC+gCRIK6qxfCMmZwf8qSllD+3IgU=) 2: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: a0hNIi6O+sVqt42fhC5LTpjPNLA3CmOlEpxa01bnEUs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:84:09:8d:e8:42:5b:81:74:65:ca:9b:45:67:ee:0c:d7:73:fd:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC846A241571E1FCF5DF539ADEE44F9B16848AC Validity Not Before: Jul 23 10:33:02 2026 GMT Not After : Jul 24 12:54:02 2026 GMT Subject: CN=9481569C6FEF3D4A7B7CAE757CF06D926BCA4922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bb:a4:e6:f2:a2:cc:9d:d1:bd:45:50:61:20: 2a:8b:6d:04:70:17:82:d2:ca:36:59:d6:34:3d:72: 36:36:33:d1:c3:a7:78:70:65:39:8b:7b:b7:99:2f: d9:3d:66:f9:75:05:b4:bb:dc:61:d1:5e:6e:fb:d1: 20:36:4c:dd:81:9f:e5:8d:54:96:c1:df:ea:3b:8a: d6:bc:e5:54:9a:96:9f:41:6f:1d:b9:ec:0e:1c:0a: 71:1f:2a:f7:53:33:a1:ab:57:1a:7c:b9:1b:dd:29: a5:ab:fd:fc:77:12:88:41:f7:50:68:2f:e0:64:7c: 21:75:cc:60:35:46:14:87:8b:5f:26:b0:8f:c9:26: 6a:cf:35:15:83:af:2e:62:dc:b5:09:4c:05:90:af: f7:39:48:67:8f:67:de:62:ba:aa:8c:6f:2f:d0:9f: b6:9d:3b:7e:26:56:9d:2b:d6:c6:cc:32:76:d1:8c: 29:0c:10:d9:cf:d8:83:d4:dd:57:1b:f3:86:ac:5e: 49:e1:d0:d3:e6:c0:47:7c:0a:6c:c8:73:fd:77:03: fb:14:7b:6f:7d:0a:c7:b2:a5:16:4f:5e:41:26:6e: b5:50:6a:b7:6c:49:65:ca:32:99:24:fd:93:0c:98: 3c:db:7e:df:1d:58:b4:c9:43:ad:47:c9:f1:fe:d8: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:81:56:9C:6F:EF:3D:4A:7B:7C:AE:75:7C:F0:6D:92:6B:CA:49:22 X509v3 Authority Key Identifier: keyid:DD:C8:46:A2:41:57:1E:1F:CF:5D:F5:39:AD:EE:44:F9:B1:68:48:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:1e:7b:db:2f:9c:76:10:f5:8b:3b:9e:1e:4f:39:82:89:d5: d6:45:3d:6c:70:e4:d2:78:4e:7d:5d:5e:f0:33:38:8a:8b:e3: f3:0b:34:c1:a2:6d:7a:82:ae:4e:13:db:79:67:03:d6:d2:8a: 3d:4c:e4:a3:a5:07:c1:e8:7a:54:3e:83:07:2a:4e:84:a7:21: 0e:31:dd:1a:7f:f8:7e:a2:b7:f5:6f:f6:2e:12:77:0a:35:35: 43:5d:03:60:88:f8:04:5e:a8:52:b7:27:08:83:30:c1:57:e1: 80:07:68:ed:8e:72:7b:8b:d3:cc:25:21:7c:73:c7:d5:1b:8e: 39:06:dc:74:78:2c:bd:67:9d:ce:7a:36:2a:64:f7:37:d6:c3: be:74:cc:14:3e:dc:18:5d:fc:d1:5d:6b:14:dd:5c:10:fb:46: 98:bb:de:2e:22:06:a6:a0:37:08:2e:88:0a:8e:6d:6f:27:9d: 7d:6d:c0:72:70:af:cf:44:9e:74:bc:4d:c4:d3:0e:19:bc:93: 88:83:c4:9a:5e:10:62:c4:81:73:3b:1c:63:ed:6a:9d:c2:75: e2:86:70:7e:fa:05:9f:45:f3:c7:c4:bd:fb:ef:ae:0f:22:4f: 76:48:d6:42:7e:53:04:ec:04:33:75:0e:e4:c0:16:4f:3e:98: ee:81:0b:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA4QJjehCW4F0ZcqbRWfuDNdz/QkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDODQ2QTI0MTU3MUUxRkNGNURGNTM5QURFRTQ0RjlC MTY4NDhBQzAeFw0yNjA3MjMxMDMzMDJaFw0yNjA3MjQxMjU0MDJaMDMxMTAvBgNV BAMTKDk0ODE1NjlDNkZFRjNENEE3QjdDQUU3NTdDRjA2RDkyNkJDQTQ5MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMu6Tm8qLMndG9RVBhICqLbQRw F4LSyjZZ1jQ9cjY2M9HDp3hwZTmLe7eZL9k9Zvl1BbS73GHRXm770SA2TN2Bn+WN VJbB3+o7ita85VSalp9Bbx257A4cCnEfKvdTM6GrVxp8uRvdKaWr/fx3EohB91Bo L+BkfCF1zGA1RhSHi18msI/JJmrPNRWDry5i3LUJTAWQr/c5SGePZ95iuqqMby/Q n7adO34mVp0r1sbMMnbRjCkMENnP2IPU3Vcb84asXknh0NPmwEd8CmzIc/13A/sU e299CseypRZPXkEmbrVQardsSWXKMpkk/ZMMmDzbft8dWLTJQ61HyfH+2C2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlIFWnG/vPUp7fK51fPBtkmvKSSIwHwYDVR0j BBgwFoAU3chGokFXHh/PXfU5re5E+bFoSKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYmRkYmYtZDExOS00YzgwLTg4MjctN2E4ODhhOTNjZTAzLzAvRERDODQ2QTI0 MTU3MUUxRkNGNURGNTM5QURFRTQ0RjlCMTY4NDhBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREM4NDZBMjQxNTcxRTFGQ0Y1REY1MzlBREVFNDRGOUIxNjg0 OEFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvRERDODQ2QTI0MTU3MUUxRkNGNURGNTM5QURFRTQ0 RjlCMTY4NDhBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYee9svnHYQ9Ys7nh5POYKJ1dZFPWxw5NJ4 Tn1dXvAzOIqL4/MLNMGibXqCrk4T23lnA9bSij1M5KOlB8HoelQ+gwcqToSnIQ4x 3Rp/+H6it/Vv9i4Sdwo1NUNdA2CI+AReqFK3JwiDMMFX4YAHaO2OcnuL08wlIXxz x9UbjjkG3HR4LL1nnc56Nipk9zfWw750zBQ+3Bhd/NFdaxTdXBD7Rpi73i4iBqag NwguiAqObW8nnX1twHJwr89EnnS8TcTTDhm8k4iDxJpeEGLEgXM7HGPtap3CdeKG cH76BZ9F88fEvfvvrg8iT3ZI1kJ+UwTsBDN1DuTAFk8+mO6BC0o= -----END CERTIFICATE-----Generated at Fri Jul 24 04:03:46 2026 by rpki-client