$ rpki-client -vvf rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft File: DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft (raw, json) Hash identifier: D9yB+3d/xe5c7cPfAa/N7KKGK0boBNTKpxAgXnHfqws= Subject key identifier: 03:A9:3C:DC:55:6C:91:2E:70:6E:03:8C:C7:48:4B:7C:83:F8:74:9C Authority key identifier: DD:DD:B3:9C:4F:26:5C:9D:4C:FC:C3:CB:FF:83:4B:12:F4:92:80:27 Certificate issuer: /CN=DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027 Certificate serial: 248A483746424B86946D7F8EE04F7DD13627511F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:18:31 +0000 Manifest this update: Tue 12 May 2026 18:13:31 +0000 Manifest next update: Wed 13 May 2026 21:22:31 +0000 Files and hashes: 1: 3130332e3230352e36322e302f32332d3234203d3e20313530393932.roa (hash: 7auAs3JZetQc2Zih3zy94WvlM7s/oo6N4QlMSA+A3AA=) 2: DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl (hash: +H9Q89OfxpmLWkTr6NxTTeT3Fg0RhzM5TmSaj//P+V0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8a:48:37:46:42:4b:86:94:6d:7f:8e:e0:4f:7d:d1:36:27:51:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027 Validity Not Before: May 12 18:13:31 2026 GMT Not After : May 13 21:22:31 2026 GMT Subject: CN=03A93CDC556C912E706E038CC7484B7C83F8749C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:5d:10:4b:93:e3:74:5e:79:bc:86:0d:5c:7a: 02:d0:d7:b5:98:27:35:8f:46:35:48:30:8b:cf:a4: a4:04:c2:31:26:72:58:74:88:64:f8:03:ff:e8:50: c6:27:12:74:3c:28:ee:eb:da:fd:bc:fd:06:8b:35: b3:18:52:ac:36:a9:e6:6b:78:91:4b:26:aa:65:af: b3:0e:e6:bc:8c:12:14:37:d1:99:47:cb:06:13:2a: 47:42:a6:08:e5:58:5b:f4:9d:9c:43:05:fb:cd:3f: 53:3a:f3:15:3c:41:96:df:e9:92:b4:9d:13:4e:5a: de:60:42:66:e8:97:67:90:43:e3:a8:f5:0c:40:a2: 00:74:bd:54:8b:64:fa:8a:87:65:8e:67:0f:41:58: 5d:d2:7c:ad:73:a1:a9:6d:1e:cc:04:34:cf:f6:5e: 76:6c:91:ff:60:d6:8a:ff:c8:eb:09:2c:f0:76:2f: cd:c9:6b:ae:bc:34:01:8f:2d:42:cc:c4:b0:f4:e0: 75:3a:ac:f1:79:df:66:e1:b0:f9:ad:63:6e:9f:b4: 2d:43:ce:32:21:85:db:fa:ae:45:10:a0:29:1b:df: a0:c3:27:0a:98:63:ff:54:16:77:fd:ea:61:83:14: ac:70:44:72:35:37:e4:e8:ed:46:3f:c1:30:af:1f: 41:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A9:3C:DC:55:6C:91:2E:70:6E:03:8C:C7:48:4B:7C:83:F8:74:9C X509v3 Authority Key Identifier: keyid:DD:DD:B3:9C:4F:26:5C:9D:4C:FC:C3:CB:FF:83:4B:12:F4:92:80:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:95:95:b8:e6:13:ee:16:b2:f1:f6:27:b3:79:44:8e:11:5f: 70:0b:9c:8a:e3:57:9b:63:bf:09:59:7f:6e:73:4d:ff:05:f2: 76:d1:c2:40:d6:78:5f:b5:46:35:dc:2b:63:6e:a7:5f:8f:41: df:0a:75:c2:21:23:17:f9:12:4a:f5:69:3c:5f:f7:61:8c:b9: be:7e:44:4d:cf:56:cb:3c:1c:03:40:17:58:e7:cc:52:16:5c: af:1b:6a:7a:59:19:3e:34:0e:0c:d5:08:82:54:02:4b:d7:f8: e4:c2:72:8d:21:a7:2d:bb:7e:44:80:26:12:23:6e:de:bb:f9: ac:f8:ce:4e:ec:7b:b6:d8:8d:c2:9d:80:0b:f6:26:bc:86:74: e4:50:04:4b:7c:55:b6:68:86:72:e1:b8:b7:7b:a6:15:ec:e7: d9:df:a4:7a:01:72:fc:42:38:0f:e6:d0:98:7f:07:bf:2f:ae: 32:0b:39:9f:3d:00:59:6e:59:02:af:11:08:af:53:77:7f:ae: cf:e6:2d:2b:15:05:7d:91:ba:76:7f:4e:04:5e:c0:c8:7e:cf: c6:2e:7b:73:b7:ad:23:a8:0e:5f:8e:b0:7b:94:08:1f:62:fa: 21:46:00:67:37:ee:20:cc:0d:32:6b:3c:26:77:b4:c4:0e:31: 6b:7e:cd:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJIpIN0ZCS4aUbX+O4E990TYnUR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREREREIzOUM0RjI2NUM5RDRDRkNDM0NCRkY4MzRCMTJG NDkyODAyNzAeFw0yNjA1MTIxODEzMzFaFw0yNjA1MTMyMTIyMzFaMDMxMTAvBgNV BAMTKDAzQTkzQ0RDNTU2QzkxMkU3MDZFMDM4Q0M3NDg0QjdDODNGODc0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzXRBLk+N0Xnm8hg1cegLQ17WY JzWPRjVIMIvPpKQEwjEmclh0iGT4A//oUMYnEnQ8KO7r2v28/QaLNbMYUqw2qeZr eJFLJqplr7MO5ryMEhQ30ZlHywYTKkdCpgjlWFv0nZxDBfvNP1M68xU8QZbf6ZK0 nRNOWt5gQmbol2eQQ+Oo9QxAogB0vVSLZPqKh2WOZw9BWF3SfK1zoaltHswENM/2 XnZskf9g1or/yOsJLPB2L83Ja668NAGPLULMxLD04HU6rPF532bhsPmtY26ftC1D zjIhhdv6rkUQoCkb36DDJwqYY/9UFnf96mGDFKxwRHI1N+To7UY/wTCvH0EbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA6k83FVskS5wbgOMx0hLfIP4dJwwHwYDVR0j BBgwFoAU3d2znE8mXJ1M/MPL/4NLEvSSgCcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQwNzliZWYtN2Y3ZC00M2NkLTkyN2YtZDVjZjU5YTBiMGZiLzAvREREREIzOUM0 RjI2NUM5RDRDRkNDM0NCRkY4MzRCMTJGNDkyODAyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREREQjM5QzRGMjY1QzlENENGQ0MzQ0JGRjgzNEIxMkY0OTI4 MDI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQwNzliZWYtN2Y3ZC00M2NkLTky N2YtZDVjZjU5YTBiMGZiLzAvREREREIzOUM0RjI2NUM5RDRDRkNDM0NCRkY4MzRC MTJGNDkyODAyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+VlbjmE+4WsvH2J7N5RI4RX3ALnIrjV5tj vwlZf25zTf8F8nbRwkDWeF+1RjXcK2Nup1+PQd8KdcIhIxf5Ekr1aTxf92GMub5+ RE3PVss8HANAF1jnzFIWXK8banpZGT40DgzVCIJUAkvX+OTCco0hpy27fkSAJhIj bt67+az4zk7se7bYjcKdgAv2JryGdORQBEt8VbZohnLhuLd7phXs59nfpHoBcvxC OA/m0Jh/B78vrjILOZ89AFluWQKvEQivU3d/rs/mLSsVBX2RunZ/TgRewMh+z8Yu e3O3rSOoDl+OsHuUCB9i+iFGAGc37iDMDTJrPCZ3tMQOMWt+zRg= -----END CERTIFICATE-----Generated at Tue May 12 22:45:58 2026 by rpki-client