$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft File: DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft (raw, json) Hash identifier: GA5d7tIfCBWFOzcGOuAoSyyK26JMRCOQqh201aFshGs= Subject key identifier: B3:39:13:B1:16:50:E0:A6:0E:AB:99:45:72:FA:74:23:53:D6:F2:BA Authority key identifier: DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 Certificate issuer: /CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Certificate serial: 240B4457E03343AC4F83DC95BF3E5A18C3A224C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:11:11 +0000 Manifest this update: Thu 23 Jul 2026 13:06:11 +0000 Manifest next update: Fri 24 Jul 2026 15:28:11 +0000 Files and hashes: 1: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: R2z9xaNaKZrL0Q1BTZoKmFOdkM+GucNCILqEsv6GHto=) 2: DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl (hash: 1lkdSMMDLkvi19J3wKNuuU1cj02A+UAMU7BBfbSorpg=) 3: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: 3vdIVahG9RTfTLGTYsntjI3pmo9GulTq1yl7EBwWw9o=) 4: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: dYhK+jkniChfhicgSum73AYH3pvJ3PQYc3HjtlYfQRE=) 5: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: /ucuML0e+8NVeub1h81o1HfhxHTujbKLgWAANxTlJqo=) 6: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: yIQlqFtzEyBabQj8ZV+fU4FgzaMPkBblM9AQE0hk6TU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:0b:44:57:e0:33:43:ac:4f:83:dc:95:bf:3e:5a:18:c3:a2:24:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Validity Not Before: Jul 23 13:06:11 2026 GMT Not After : Jul 24 15:28:11 2026 GMT Subject: CN=B33913B11650E0A60EAB994572FA742353D6F2BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:05:eb:b3:d5:da:42:34:a7:74:35:1f:ec: 5f:c5:9d:3f:a5:e7:39:db:06:62:f1:7b:58:a8:fe: ee:b7:57:7b:2c:39:67:b8:6a:30:ae:94:68:da:ea: ae:07:49:38:33:59:0e:e6:b7:cd:30:39:b0:68:8c: 07:b5:96:05:c7:37:29:20:eb:7e:51:0d:90:12:b6: 4f:a7:96:d0:47:b5:7e:8e:cc:d9:e6:66:9b:c4:94: f6:69:a8:fd:e9:f2:c4:98:02:1f:b8:f0:26:d0:95: fb:7f:aa:7d:f4:4c:24:3d:25:1d:30:24:f6:27:cc: 09:f5:82:cd:67:61:ea:13:2a:6a:ef:be:77:5b:ed: 22:a9:a6:01:b4:3f:05:30:5e:38:ab:e3:4e:8c:25: 29:df:bf:af:d1:a2:c2:4f:3b:27:a4:e6:4b:11:6a: fe:9d:82:d4:a8:f3:74:ea:f3:21:94:33:61:19:38: 71:0f:63:f2:b9:a1:72:98:83:08:ad:07:cc:fa:d5: de:24:9f:c3:cd:fa:f5:4e:1c:db:f1:6a:97:7c:10: be:b6:95:95:fd:df:24:8d:aa:70:5a:26:52:a2:a1: da:85:38:66:41:c4:a5:5c:52:a3:cb:26:d2:2d:8e: c4:29:85:57:01:3e:f0:4f:4a:b8:05:c2:70:8e:63: b6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:39:13:B1:16:50:E0:A6:0E:AB:99:45:72:FA:74:23:53:D6:F2:BA X509v3 Authority Key Identifier: keyid:DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7c:a6:af:85:4f:26:8e:03:a6:97:89:e1:18:6e:e4:8a:6c: b8:2b:66:27:71:3c:32:b5:61:6b:3a:a5:ab:72:f8:eb:77:a3: 35:ad:e1:d1:74:9f:ea:b2:eb:f2:b1:5b:bd:c9:9b:ba:3d:74: c1:0f:51:22:9c:d2:71:05:38:ce:3f:bb:b1:de:66:aa:8a:37: dc:b0:e9:a0:f5:14:47:49:3c:48:46:c1:d0:4a:4a:4e:46:bb: 13:3e:18:23:ea:45:75:44:e8:7a:fa:5e:59:a2:a4:ca:07:6c: c5:ad:4f:44:1a:e5:5a:dd:8a:7c:74:44:22:3c:fe:90:81:91: a6:f5:ca:90:3e:1d:0e:02:e2:6f:70:76:b4:24:75:4d:3a:4f: c0:57:fa:26:fb:54:1e:68:9a:2c:2e:8d:0d:71:59:80:3b:48: 3b:a8:02:16:fa:3b:6b:87:8a:6e:56:d8:14:64:ad:ec:af:eb: 73:76:06:04:67:f6:b6:9d:62:d4:6c:35:58:e0:e9:5b:0c:6e: 0a:a6:6c:48:65:fd:d9:f5:cb:c1:bd:dd:64:cd:33:4e:42:c2: 42:01:2f:0e:94:f6:cd:63:b3:c4:31:ed:0f:62:78:8b:ef:c4: 65:4e:d4:99:9f:b9:77:b1:a8:4d:ad:79:a2:8b:b1:50:e0:7c: 5e:d2:45:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJAtEV+AzQ6xPg9yVvz5aGMOiJMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCRTU4OUU2QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4 OUE4M0JGMDAeFw0yNjA3MjMxMzA2MTFaFw0yNjA3MjQxNTI4MTFaMDMxMTAvBgNV BAMTKEIzMzkxM0IxMTY1MEUwQTYwRUFCOTk0NTcyRkE3NDIzNTNENkYyQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQQXrs9XaQjSndDUf7F/FnT+l 5znbBmLxe1io/u63V3ssOWe4ajCulGja6q4HSTgzWQ7mt80wObBojAe1lgXHNykg 635RDZAStk+nltBHtX6OzNnmZpvElPZpqP3p8sSYAh+48CbQlft/qn30TCQ9JR0w JPYnzAn1gs1nYeoTKmrvvndb7SKppgG0PwUwXjir406MJSnfv6/RosJPOyek5ksR av6dgtSo83Tq8yGUM2EZOHEPY/K5oXKYgwitB8z61d4kn8PN+vVOHNvxapd8EL62 lZX93ySNqnBaJlKiodqFOGZBxKVcUqPLJtItjsQphVcBPvBPSrgFwnCOY7b3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUszkTsRZQ4KYOq5lFcvp0I1PW8rowHwYDVR0j BBgwFoAU3b5YnmoCty2DCGs/VpfatomoO/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmFlN2Q0NjEtMGUzMi00ZTY1LWJiODgtZDcyNDA1YjI0NDUxLzAvRERCRTU4OUU2 QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4OUE4M0JGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREJFNTg5RTZBMDJCNzJEODMwODZCM0Y1Njk3REFCNjg5QTgz QkYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvRERCRTU4OUU2QTAyQjcyRDgzMDg2QjNGNTY5N0RB QjY4OUE4M0JGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF58pq+FTyaOA6aXieEYbuSKbLgrZidxPDK1 YWs6paty+Ot3ozWt4dF0n+qy6/KxW73Jm7o9dMEPUSKc0nEFOM4/u7HeZqqKN9yw 6aD1FEdJPEhGwdBKSk5GuxM+GCPqRXVE6Hr6XlmipMoHbMWtT0Qa5Vrdinx0RCI8 /pCBkab1ypA+HQ4C4m9wdrQkdU06T8BX+ib7VB5omiwujQ1xWYA7SDuoAhb6O2uH im5W2BRkreyv63N2BgRn9radYtRsNVjg6VsMbgqmbEhl/dn1y8G93WTNM05CwkIB Lw6U9s1js8Qx7Q9ieIvvxGVO1JmfuXexqE2teaKLsVDgfF7SRVc= -----END CERTIFICATE-----Generated at Fri Jul 24 06:26:28 2026 by rpki-client