$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft File: DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft (raw, json) Hash identifier: DkvyOLNpHpyEeYOM6ya98xvrV2DkimxwUo2XrBuTMlU= Subject key identifier: 6F:8A:D0:78:55:E1:6E:3C:F9:8C:79:96:19:9C:08:BB:2C:21:24:9E Authority key identifier: DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 Certificate issuer: /CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Certificate serial: 2B5D9ED2206C6826502325621DEBB18CD164B01A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:26:32 +0000 Manifest this update: Wed 23 Sep 2026 12:21:32 +0000 Manifest next update: Thu 24 Sep 2026 12:32:32 +0000 Files and hashes: 1: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: 3vdIVahG9RTfTLGTYsntjI3pmo9GulTq1yl7EBwWw9o=) 2: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: dYhK+jkniChfhicgSum73AYH3pvJ3PQYc3HjtlYfQRE=) 3: DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl (hash: EuZf2gkHfz4AP096GuNnCJpPYyj8zwR3k3IB1scV5cA=) 4: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: yIQlqFtzEyBabQj8ZV+fU4FgzaMPkBblM9AQE0hk6TU=) 5: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: R2z9xaNaKZrL0Q1BTZoKmFOdkM+GucNCILqEsv6GHto=) 6: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: /ucuML0e+8NVeub1h81o1HfhxHTujbKLgWAANxTlJqo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:5d:9e:d2:20:6c:68:26:50:23:25:62:1d:eb:b1:8c:d1:64:b0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Validity Not Before: Sep 23 12:21:32 2026 GMT Not After : Sep 24 12:32:32 2026 GMT Subject: CN=6F8AD07855E16E3CF98C7996199C08BB2C21249E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:aa:cc:8b:55:69:e2:6e:86:9e:81:48:30:45: e2:94:b0:9e:71:b7:63:05:4d:46:84:b2:1b:c0:01: 8e:8d:99:76:01:88:48:ed:ea:a9:be:3b:1b:4c:0c: 39:1d:8a:6c:76:f7:50:1e:b8:3f:0f:0d:a2:6b:90: 84:75:2e:41:60:bb:ce:10:b8:c9:3e:fc:30:bf:43: 03:99:4b:84:8c:1f:4c:97:6f:6c:58:25:26:62:e2: 66:de:e2:eb:b3:64:35:ae:cc:c2:f4:f6:cf:24:18: 4e:a9:42:84:77:12:29:73:0e:40:3f:9f:ea:4f:22: 2e:85:85:00:df:71:5e:b3:30:92:4c:ef:fa:f8:b2: 8e:90:85:65:91:ac:20:04:ca:b4:d8:89:b2:1b:de: 8d:10:74:48:f9:e1:41:06:8a:3f:bf:d3:7d:43:f0: ef:60:7a:a3:78:93:6e:ae:49:61:01:0e:58:d0:44: c6:3e:c1:d7:2b:36:a2:b8:18:3a:6d:f8:e2:9e:a9: 56:36:66:ef:e5:14:1b:4a:34:39:fb:eb:fa:fa:c7: 5c:cc:97:83:40:54:1d:4e:c9:87:a6:5c:8e:8a:bf: 79:aa:a8:fa:8e:1a:d3:45:b6:5e:1a:ab:ef:ad:09: 9c:fe:7e:23:07:23:e9:1e:f0:c3:41:71:45:45:72: df:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8A:D0:78:55:E1:6E:3C:F9:8C:79:96:19:9C:08:BB:2C:21:24:9E X509v3 Authority Key Identifier: keyid:DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ef:0a:12:49:ab:f6:da:74:cb:62:4e:a8:ee:79:4d:5f:5d: 4f:0c:a3:07:96:85:51:5c:1f:80:76:41:95:44:ae:1c:8a:9b: 8c:62:69:87:8b:df:7e:0b:f1:a1:76:62:3e:01:5c:b8:d7:0a: f5:0e:88:d4:c7:8e:00:6a:0c:42:c8:00:2f:f7:99:76:90:e0: d5:68:d7:55:31:7d:6a:50:0d:db:66:db:9a:92:09:3a:49:36: 87:61:31:b8:09:33:2f:63:54:5d:cd:44:bb:8f:23:6a:6f:0f: 71:d7:b2:19:03:f4:08:da:f3:79:dc:5a:76:37:99:83:95:3d: 33:5f:5a:66:3d:4c:91:c0:21:36:29:47:1d:18:c2:91:d1:f8: 77:9a:5c:d8:92:59:3e:b0:73:65:4c:22:8e:b7:f4:da:b5:41: 0d:2e:2d:05:bb:39:75:39:5b:1e:55:ba:88:44:8a:be:f7:36: a6:7e:30:4c:ae:9e:12:e8:33:a9:40:2b:ce:a0:c7:c7:2b:cb: 8d:98:5d:ef:ff:b0:ad:01:e7:17:ec:32:7e:99:7c:fb:0f:7e: b5:e9:56:6c:ce:c4:df:32:10:27:7c:f4:ae:ba:33:cd:ba:61: e4:99:fe:83:bf:d9:07:eb:ea:41:06:0a:35:59:c0:3f:48:e8: 76:41:47:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK12e0iBsaCZQIyViHeuxjNFksBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCRTU4OUU2QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4 OUE4M0JGMDAeFw0yNjA5MjMxMjIxMzJaFw0yNjA5MjQxMjMyMzJaMDMxMTAvBgNV BAMTKDZGOEFEMDc4NTVFMTZFM0NGOThDNzk5NjE5OUMwOEJCMkMyMTI0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFqsyLVWniboaegUgwReKUsJ5x t2MFTUaEshvAAY6NmXYBiEjt6qm+OxtMDDkdimx291AeuD8PDaJrkIR1LkFgu84Q uMk+/DC/QwOZS4SMH0yXb2xYJSZi4mbe4uuzZDWuzML09s8kGE6pQoR3EilzDkA/ n+pPIi6FhQDfcV6zMJJM7/r4so6QhWWRrCAEyrTYibIb3o0QdEj54UEGij+/031D 8O9geqN4k26uSWEBDljQRMY+wdcrNqK4GDpt+OKeqVY2Zu/lFBtKNDn76/r6x1zM l4NAVB1OyYemXI6Kv3mqqPqOGtNFtl4aq++tCZz+fiMHI+ke8MNBcUVFct+zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb4rQeFXhbjz5jHmWGZwIuywhJJ4wHwYDVR0j BBgwFoAU3b5YnmoCty2DCGs/VpfatomoO/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmFlN2Q0NjEtMGUzMi00ZTY1LWJiODgtZDcyNDA1YjI0NDUxLzAvRERCRTU4OUU2 QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4OUE4M0JGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREJFNTg5RTZBMDJCNzJEODMwODZCM0Y1Njk3REFCNjg5QTgz QkYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvRERCRTU4OUU2QTAyQjcyRDgzMDg2QjNGNTY5N0RB QjY4OUE4M0JGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfvChJJq/badMtiTqjueU1fXU8MoweWhVFc H4B2QZVErhyKm4xiaYeL334L8aF2Yj4BXLjXCvUOiNTHjgBqDELIAC/3mXaQ4NVo 11UxfWpQDdtm25qSCTpJNodhMbgJMy9jVF3NRLuPI2pvD3HXshkD9Aja83ncWnY3 mYOVPTNfWmY9TJHAITYpRx0YwpHR+HeaXNiSWT6wc2VMIo639Nq1QQ0uLQW7OXU5 Wx5VuohEir73NqZ+MEyunhLoM6lAK86gx8cry42YXe//sK0B5xfsMn6ZfPsPfrXp VmzOxN8yECd89K66M826YeSZ/oO/2Qfr6kEGCjVZwD9I6HZBR8Y= -----END CERTIFICATE-----Generated at Thu Sep 24 05:57:55 2026 by rpki-client