$ rpki-client -vvvf rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft File: DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft (raw, json) Hash identifier: faMp9X2OAzTp+FKCv3Nak6JcoHoeth4N4Cf8f5j2gUc= Subject key identifier: 55:96:A3:DC:97:F4:20:46:59:A6:B2:E5:93:CB:6A:C0:C3:98:46:F8 Authority key identifier: DD:DD:B3:9C:4F:26:5C:9D:4C:FC:C3:CB:FF:83:4B:12:F4:92:80:27 Certificate issuer: /CN=DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027 Certificate serial: 58026B1ECA2E4F298CBE592178470D536AD07050 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:31:37 +0000 Manifest this update: Wed 23 Sep 2026 12:26:37 +0000 Manifest next update: Thu 24 Sep 2026 13:48:37 +0000 Files and hashes: 1: DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl (hash: J+1CEBRYT3vqNqYO40ojeH7hSP9NEvEBrPR4J6U76Gk=) 2: 3130332e3230352e36322e302f32332d3234203d3e20313530393932.roa (hash: 7auAs3JZetQc2Zih3zy94WvlM7s/oo6N4QlMSA+A3AA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:02:6b:1e:ca:2e:4f:29:8c:be:59:21:78:47:0d:53:6a:d0:70:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027 Validity Not Before: Sep 23 12:26:37 2026 GMT Not After : Sep 24 13:48:37 2026 GMT Subject: CN=5596A3DC97F4204659A6B2E593CB6AC0C39846F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fa:9a:fc:70:ac:24:2f:64:6c:69:48:64:5b: a1:2c:48:a4:7e:f8:08:eb:1b:2f:65:e6:19:27:36: 9d:df:70:cb:69:ba:b9:45:41:6c:b7:bf:5d:3d:f4: 39:e7:b4:46:f5:2b:7e:a2:26:3b:69:bd:48:56:ce: df:49:f9:57:45:96:b8:21:4c:1a:ae:ff:41:8e:a4: da:8b:9e:5e:be:ba:30:f1:46:59:f2:46:c0:39:09: 47:02:b9:67:00:e8:bf:db:aa:d2:a1:63:90:e1:ae: c5:f3:43:01:1d:17:b6:c7:a2:a0:a0:d7:27:ab:64: be:13:c7:e9:0a:21:76:be:b4:b4:45:f6:86:0d:c7: 02:d8:25:4c:66:e4:26:fb:a6:ef:98:ba:f5:1a:ad: 32:72:94:7a:79:c7:0d:c1:2f:a8:b5:9c:33:e1:37: 58:3e:f7:93:d8:a4:2a:2d:36:db:9c:ba:fa:3a:ac: 81:f3:8c:b1:77:a4:c9:2f:3e:7c:ff:91:07:39:5c: 45:49:44:72:a7:00:1b:83:44:83:2d:4e:c9:d8:e0: fe:51:26:89:27:6b:56:47:14:71:0a:a5:77:0a:ae: 46:37:98:42:bd:ae:6d:fe:31:21:60:e2:c4:22:e1: b0:c2:4e:90:3b:b6:84:e2:92:8b:f9:49:fd:b4:4a: 2a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:96:A3:DC:97:F4:20:46:59:A6:B2:E5:93:CB:6A:C0:C3:98:46:F8 X509v3 Authority Key Identifier: keyid:DD:DD:B3:9C:4F:26:5C:9D:4C:FC:C3:CB:FF:83:4B:12:F4:92:80:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:81:6f:ba:be:de:db:58:f0:ec:5b:c6:39:15:a6:ad:93:9c: e3:73:c9:fb:c6:7c:50:a4:df:f8:84:cb:4e:ba:60:b2:68:9d: ba:f0:51:7a:c3:d2:3c:81:12:d3:42:0b:61:90:06:de:94:97: 60:c3:18:fe:81:95:39:a1:77:43:37:04:2c:6e:f5:5e:2c:84: 76:d4:dc:55:06:e3:cf:6c:65:1a:8c:19:f4:49:56:dd:d0:97: 6c:6d:96:85:1b:d1:6a:0f:89:43:fb:a9:62:31:84:f1:fb:fd: 63:0d:48:a7:ce:ed:41:c8:e9:53:23:59:78:34:36:70:87:42: 94:eb:f9:ce:f8:88:bd:09:f2:af:0f:92:04:17:80:e8:68:d1: 61:e6:bf:cb:54:7a:05:e6:9c:53:e6:f1:1b:fa:1e:14:b0:34: e0:27:3c:a3:3e:42:a6:fe:fd:24:2a:76:1e:ae:af:da:02:36: 29:d8:e7:7d:33:33:8b:46:98:0a:fb:25:e9:bc:de:69:ea:14: 6d:9a:38:ad:02:5f:01:44:3a:ab:31:60:ff:49:f1:9f:2e:10: a6:2c:39:84:cd:34:25:df:95:b3:50:89:f1:97:68:89:e7:07: 95:83:ca:b7:16:ec:3a:20:98:69:fc:f5:47:7d:94:cf:31:de: e1:41:8c:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWAJrHsouTymMvlkheEcNU2rQcFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREREREIzOUM0RjI2NUM5RDRDRkNDM0NCRkY4MzRCMTJG NDkyODAyNzAeFw0yNjA5MjMxMjI2MzdaFw0yNjA5MjQxMzQ4MzdaMDMxMTAvBgNV BAMTKDU1OTZBM0RDOTdGNDIwNDY1OUE2QjJFNTkzQ0I2QUMwQzM5ODQ2RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+pr8cKwkL2RsaUhkW6EsSKR+ +AjrGy9l5hknNp3fcMtpurlFQWy3v1099DnntEb1K36iJjtpvUhWzt9J+VdFlrgh TBqu/0GOpNqLnl6+ujDxRlnyRsA5CUcCuWcA6L/bqtKhY5DhrsXzQwEdF7bHoqCg 1yerZL4Tx+kKIXa+tLRF9oYNxwLYJUxm5Cb7pu+YuvUarTJylHp5xw3BL6i1nDPh N1g+95PYpCotNtucuvo6rIHzjLF3pMkvPnz/kQc5XEVJRHKnABuDRIMtTsnY4P5R Jokna1ZHFHEKpXcKrkY3mEK9rm3+MSFg4sQi4bDCTpA7toTikov5Sf20SipNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVZaj3Jf0IEZZprLlk8tqwMOYRvgwHwYDVR0j BBgwFoAU3d2znE8mXJ1M/MPL/4NLEvSSgCcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQwNzliZWYtN2Y3ZC00M2NkLTkyN2YtZDVjZjU5YTBiMGZiLzAvREREREIzOUM0 RjI2NUM5RDRDRkNDM0NCRkY4MzRCMTJGNDkyODAyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREREQjM5QzRGMjY1QzlENENGQ0MzQ0JGRjgzNEIxMkY0OTI4 MDI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQwNzliZWYtN2Y3ZC00M2NkLTky N2YtZDVjZjU5YTBiMGZiLzAvREREREIzOUM0RjI2NUM5RDRDRkNDM0NCRkY4MzRC MTJGNDkyODAyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASBb7q+3ttY8OxbxjkVpq2TnONzyfvGfFCk 3/iEy066YLJonbrwUXrD0jyBEtNCC2GQBt6Ul2DDGP6BlTmhd0M3BCxu9V4shHbU 3FUG489sZRqMGfRJVt3Ql2xtloUb0WoPiUP7qWIxhPH7/WMNSKfO7UHI6VMjWXg0 NnCHQpTr+c74iL0J8q8PkgQXgOho0WHmv8tUegXmnFPm8Rv6HhSwNOAnPKM+Qqb+ /SQqdh6ur9oCNinY530zM4tGmAr7Jem83mnqFG2aOK0CXwFEOqsxYP9J8Z8uEKYs OYTNNCXflbNQifGXaInnB5WDyrcW7DogmGn89Ud9lM8x3uFBjPY= -----END CERTIFICATE-----Generated at Wed Sep 23 20:13:25 2026 by rpki-client