$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft File: DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft (raw, json) Hash identifier: uqF4U+Uol35rGU83VEZuKu7uSz4PRmdUdYmIhTD72gQ= Subject key identifier: 77:0E:4D:35:AC:DC:29:6A:12:62:62:90:FD:80:96:45:FC:A0:8F:DA Authority key identifier: DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 Certificate issuer: /CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Certificate serial: 750F22B8733E3284BCC036CCE0C66EF973761217 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:41:22 +0000 Manifest this update: Tue 12 May 2026 16:36:22 +0000 Manifest next update: Wed 13 May 2026 20:36:22 +0000 Files and hashes: 1: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: 3vdIVahG9RTfTLGTYsntjI3pmo9GulTq1yl7EBwWw9o=) 2: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: dYhK+jkniChfhicgSum73AYH3pvJ3PQYc3HjtlYfQRE=) 3: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: R2z9xaNaKZrL0Q1BTZoKmFOdkM+GucNCILqEsv6GHto=) 4: DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl (hash: tlVKGD7AOwaXND2+Saq3xkHPa+SedXwTIth6DB3xYeg=) 5: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: yIQlqFtzEyBabQj8ZV+fU4FgzaMPkBblM9AQE0hk6TU=) 6: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: /ucuML0e+8NVeub1h81o1HfhxHTujbKLgWAANxTlJqo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0f:22:b8:73:3e:32:84:bc:c0:36:cc:e0:c6:6e:f9:73:76:12:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Validity Not Before: May 12 16:36:22 2026 GMT Not After : May 13 20:36:22 2026 GMT Subject: CN=770E4D35ACDC296A12626290FD809645FCA08FDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:c1:a5:37:7e:66:e2:d0:1f:ad:4b:6d:13: 8c:38:c4:0d:6d:b3:30:ba:e2:f4:e3:a4:65:35:ab: ec:a7:74:c7:c0:1a:84:0a:cf:ff:8d:fe:68:bd:cd: a4:dc:b4:44:d4:12:fb:d2:70:dc:3b:a4:54:74:6a: 28:b3:d5:c4:29:2d:70:c9:36:99:c0:cb:09:27:e3: 3d:40:1e:79:fa:b4:99:9e:33:ab:16:cd:02:42:36: 22:0a:10:a1:fc:ee:16:c4:0e:f5:46:49:2d:45:e0: 6c:3d:a1:b8:a4:77:b0:2d:9a:50:82:d0:5e:aa:a2: 21:15:26:e8:29:e9:63:85:e4:20:a2:1a:bc:7b:69: 41:d1:23:60:21:b0:54:5c:6f:f0:cb:92:29:e4:4e: 16:61:49:97:83:76:be:cb:1f:f3:97:b1:41:66:3c: 6c:06:60:d2:6e:45:8c:f6:8f:7e:15:39:68:61:3c: 24:2b:6a:7c:7a:09:88:9f:c6:68:58:af:ab:7a:dd: af:0d:21:4f:f1:2e:bb:09:80:0f:ef:33:db:2d:0b: 11:5a:7d:2c:cc:c8:2c:a3:cc:27:5b:ba:15:64:4c: 81:1a:19:a4:6f:3d:ea:70:ad:b6:fa:da:0f:2c:89: 37:0c:39:6f:19:56:50:bc:d3:b8:7d:36:8d:f7:2b: 92:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0E:4D:35:AC:DC:29:6A:12:62:62:90:FD:80:96:45:FC:A0:8F:DA X509v3 Authority Key Identifier: keyid:DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:48:15:e7:8e:64:cb:0b:8c:3c:91:09:ac:eb:da:2f:55:4d: 67:a5:a6:ff:d4:70:6e:f5:da:a1:38:36:2d:21:90:cd:7d:1a: 27:7d:df:60:ea:62:89:9d:00:4e:f3:35:b0:f0:e7:58:8b:cc: 26:8b:3b:f8:c3:5f:b0:15:df:84:bc:e9:04:a7:b5:cc:23:0e: 2a:55:2e:76:d5:cb:5e:be:a6:24:2f:0f:d1:78:ee:f9:4d:c1: 04:91:fc:8f:ad:b0:26:86:29:cf:55:92:ad:e2:e8:5a:0c:6c: e5:77:7f:ef:28:ef:c3:04:ec:df:af:f8:a1:89:ba:ab:5a:8f: 73:6d:68:aa:5b:b1:74:eb:cf:c3:0d:0d:2c:5c:f9:07:2e:fe: 18:f7:c5:d0:8f:6a:12:13:81:d5:f3:9f:b4:69:c9:f8:b4:b2: c5:59:8c:0e:a7:bf:b0:1c:86:61:7d:99:d3:1c:a1:e1:29:6f: 93:16:64:33:be:0d:26:de:08:9e:ba:81:ea:1f:64:0b:fd:99: 4d:19:cf:cf:56:75:55:a6:1f:e7:b5:18:12:c5:75:e9:a0:1c: e8:b8:6d:74:bb:27:f6:c0:6f:fc:de:b8:3c:03:01:28:41:61: 82:5b:d3:8b:87:a7:0c:c0:30:e0:d4:bb:31:64:1e:44:6c:a7: be:88:fb:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQ8iuHM+MoS8wDbM4MZu+XN2EhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCRTU4OUU2QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4 OUE4M0JGMDAeFw0yNjA1MTIxNjM2MjJaFw0yNjA1MTMyMDM2MjJaMDMxMTAvBgNV BAMTKDc3MEU0RDM1QUNEQzI5NkExMjYyNjI5MEZEODA5NjQ1RkNBMDhGREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCSsGlN35m4tAfrUttE4w4xA1t szC64vTjpGU1q+yndMfAGoQKz/+N/mi9zaTctETUEvvScNw7pFR0aiiz1cQpLXDJ NpnAywkn4z1AHnn6tJmeM6sWzQJCNiIKEKH87hbEDvVGSS1F4Gw9obikd7AtmlCC 0F6qoiEVJugp6WOF5CCiGrx7aUHRI2AhsFRcb/DLkinkThZhSZeDdr7LH/OXsUFm PGwGYNJuRYz2j34VOWhhPCQranx6CYifxmhYr6t63a8NIU/xLrsJgA/vM9stCxFa fSzMyCyjzCdbuhVkTIEaGaRvPepwrbb62g8siTcMOW8ZVlC807h9No33K5LTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdw5NNazcKWoSYmKQ/YCWRfygj9owHwYDVR0j BBgwFoAU3b5YnmoCty2DCGs/VpfatomoO/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmFlN2Q0NjEtMGUzMi00ZTY1LWJiODgtZDcyNDA1YjI0NDUxLzAvRERCRTU4OUU2 QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4OUE4M0JGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREJFNTg5RTZBMDJCNzJEODMwODZCM0Y1Njk3REFCNjg5QTgz QkYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvRERCRTU4OUU2QTAyQjcyRDgzMDg2QjNGNTY5N0RB QjY4OUE4M0JGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABIFeeOZMsLjDyRCazr2i9VTWelpv/UcG71 2qE4Ni0hkM19Gid932DqYomdAE7zNbDw51iLzCaLO/jDX7AV34S86QSntcwjDipV LnbVy16+piQvD9F47vlNwQSR/I+tsCaGKc9Vkq3i6FoMbOV3f+8o78ME7N+v+KGJ uqtaj3NtaKpbsXTrz8MNDSxc+Qcu/hj3xdCPahITgdXzn7Rpyfi0ssVZjA6nv7Ac hmF9mdMcoeEpb5MWZDO+DSbeCJ66geofZAv9mU0Zz89WdVWmH+e1GBLFdemgHOi4 bXS7J/bAb/zeuDwDAShBYYJb04uHpwzAMODUuzFkHkRsp76I+xs= -----END CERTIFICATE-----Generated at Tue May 12 22:56:25 2026 by rpki-client