$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft File: DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft (raw, json) Hash identifier: K0205QcPE1aHMoUZ1UVlf3PhypPtTLcN1V0MFSpK7cU= Subject key identifier: 1E:6B:A3:B5:C7:67:B0:72:D0:94:C4:5D:99:92:D3:07:E0:21:C8:D6 Authority key identifier: DD:AF:8D:65:28:C4:2D:5B:45:31:AC:E7:7D:6A:1C:BE:1F:04:66:41 Certificate issuer: /CN=DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641 Certificate serial: 41A7CB5B77C1C75A6D492EE00DA84EF420FF3689 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 10:53:21 +0000 Manifest this update: Thu 23 Jul 2026 10:48:21 +0000 Manifest next update: Fri 24 Jul 2026 14:20:21 +0000 Files and hashes: 1: 3130332e33312e3130392e302f32342d3234203d3e20313333333630.roa (hash: ohVHX4YN8ERE5ZaanIq+FJ4sj6xtkTx6fZFuzW5hCso=) 2: DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl (hash: G9gbpk18bhTkv9IK32SJFQg7cDhDbEQSR3MAnm+ca2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a7:cb:5b:77:c1:c7:5a:6d:49:2e:e0:0d:a8:4e:f4:20:ff:36:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641 Validity Not Before: Jul 23 10:48:21 2026 GMT Not After : Jul 24 14:20:21 2026 GMT Subject: CN=1E6BA3B5C767B072D094C45D9992D307E021C8D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:7d:7a:ec:7b:b3:c6:5b:eb:50:89:c8:8c: 9e:cc:ab:36:35:68:b7:ee:f9:cc:84:90:be:90:d0: 93:45:b5:13:eb:ec:a3:5b:c7:be:41:3b:d6:f8:3c: 5c:69:a9:f6:67:b2:ac:57:85:9f:50:e8:b9:4b:29: 10:e2:66:89:57:49:d0:0a:a6:1f:2f:24:43:46:e1: 1d:19:9c:9b:5f:42:f9:68:d4:81:fc:12:7c:53:0e: c0:5b:08:09:9e:8b:09:f5:b0:57:d2:16:6d:3b:5d: e7:9c:c6:4e:a9:1b:f5:01:b4:7b:28:bb:bb:b1:6c: 44:7c:97:3e:fd:19:5f:67:dd:7d:c9:68:88:ad:52: 1b:1f:ea:71:83:f9:8d:dc:e0:bc:d4:56:c8:2c:58: d0:a9:ae:af:bf:35:c8:a0:ee:1b:f0:00:1c:1c:1f: 83:ad:42:75:6b:27:39:02:07:39:77:73:65:76:c7: 8d:11:3a:34:4b:3c:e7:68:f9:bd:0f:73:0e:cf:e7: c6:6f:d1:c3:50:49:01:e5:c2:97:00:ad:d0:79:a5: 4a:bc:59:d6:61:41:b1:1e:4e:34:a6:c4:90:81:84: 76:0e:ed:0b:cc:39:f6:fd:9c:33:6a:c4:1a:fc:12: e0:dc:bd:f8:20:db:6c:48:4a:be:48:88:1e:65:85: 11:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6B:A3:B5:C7:67:B0:72:D0:94:C4:5D:99:92:D3:07:E0:21:C8:D6 X509v3 Authority Key Identifier: keyid:DD:AF:8D:65:28:C4:2D:5B:45:31:AC:E7:7D:6A:1C:BE:1F:04:66:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:6c:8d:0e:c9:3d:25:e0:3a:61:e2:e9:19:6d:f5:7b:c4:b2: 68:b4:26:86:57:37:6f:d6:d4:1a:4c:02:a0:06:48:e7:6e:fb: 30:a7:14:48:04:01:a7:22:65:35:84:58:2c:bf:23:79:b1:b5: 21:68:f0:06:16:ed:a7:6d:9f:a7:d2:54:fe:88:8d:0f:63:df: de:22:1f:c4:c4:ca:a3:d2:85:48:37:07:6e:1b:99:b1:49:1e: 6c:1c:ea:1c:68:42:36:eb:3b:7d:70:89:2a:c4:c1:c6:3f:b2: 9b:a8:87:f5:2b:a3:75:60:8b:6b:2d:8d:1d:be:05:31:44:17: 5d:8e:f9:88:52:59:ee:77:bc:83:1b:5f:7c:01:61:4f:6c:1b: 89:f3:b8:12:a5:5a:ee:86:37:18:22:36:ac:96:39:08:d1:27: 12:85:c2:3c:f6:10:a2:3b:60:c0:af:fe:f4:81:68:67:a0:90: f8:6f:f8:29:8e:80:a3:76:cc:58:bb:65:4c:4c:af:d0:3e:86: 1c:7a:c5:27:48:90:a9:68:db:10:5d:be:c3:4e:4c:14:60:b8: 41:e1:e5:25:82:12:97:aa:b6:19:76:33:57:b7:5e:db:54:ac: e5:95:45:fe:f0:bd:23:26:74:78:16:10:f7:2f:cb:9a:72:50: 4a:d7:53:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQafLW3fBx1ptSS7gDahO9CD/NokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjhENjUyOEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFDQkUx RjA0NjY0MTAeFw0yNjA3MjMxMDQ4MjFaFw0yNjA3MjQxNDIwMjFaMDMxMTAvBgNV BAMTKDFFNkJBM0I1Qzc2N0IwNzJEMDk0QzQ1RDk5OTJEMzA3RTAyMUM4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9n167HuzxlvrUInIjJ7MqzY1 aLfu+cyEkL6Q0JNFtRPr7KNbx75BO9b4PFxpqfZnsqxXhZ9Q6LlLKRDiZolXSdAK ph8vJENG4R0ZnJtfQvlo1IH8EnxTDsBbCAmeiwn1sFfSFm07Xeecxk6pG/UBtHso u7uxbER8lz79GV9n3X3JaIitUhsf6nGD+Y3c4LzUVsgsWNCprq+/Ncig7hvwABwc H4OtQnVrJzkCBzl3c2V2x40ROjRLPOdo+b0Pcw7P58Zv0cNQSQHlwpcArdB5pUq8 WdZhQbEeTjSmxJCBhHYO7QvMOfb9nDNqxBr8EuDcvfgg22xISr5IiB5lhRGzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHmujtcdnsHLQlMRdmZLTB+AhyNYwHwYDVR0j BBgwFoAU3a+NZSjELVtFMaznfWocvh8EZkEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY2YWEzMWEtZGQwZC00YzEwLWI1ZGQtYjFhODNmYTU3NzYzLzAvRERBRjhENjUy OEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFDQkUxRjA0NjY0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREFGOEQ2NTI4QzQyRDVCNDUzMUFDRTc3RDZBMUNCRTFGMDQ2 NjQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY2YWEzMWEtZGQwZC00YzEwLWI1 ZGQtYjFhODNmYTU3NzYzLzAvRERBRjhENjUyOEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFD QkUxRjA0NjY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtsjQ7JPSXgOmHi6Rlt9XvEsmi0JoZXN2/W 1BpMAqAGSOdu+zCnFEgEAaciZTWEWCy/I3mxtSFo8AYW7adtn6fSVP6IjQ9j394i H8TEyqPShUg3B24bmbFJHmwc6hxoQjbrO31wiSrEwcY/spuoh/Uro3Vgi2stjR2+ BTFEF12O+YhSWe53vIMbX3wBYU9sG4nzuBKlWu6GNxgiNqyWOQjRJxKFwjz2EKI7 YMCv/vSBaGegkPhv+CmOgKN2zFi7ZUxMr9A+hhx6xSdIkKlo2xBdvsNOTBRguEHh 5SWCEpeqthl2M1e3XttUrOWVRf7wvSMmdHgWEPcvy5pyUErXUzs= -----END CERTIFICATE-----Generated at Fri Jul 24 01:19:26 2026 by rpki-client