$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft File: DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft (raw, json) Hash identifier: PmVZizkFmL6FMkIX6DCqUqx8BWB/mviE5IIq94BDM08= Subject key identifier: 0F:69:CE:FA:DD:B8:89:1C:DD:94:3D:7C:10:FB:7C:DB:BB:4A:D0:BB Authority key identifier: DD:AF:8D:65:28:C4:2D:5B:45:31:AC:E7:7D:6A:1C:BE:1F:04:66:41 Certificate issuer: /CN=DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641 Certificate serial: 378C728E18136F82AD6DCE0A5EC839EAB4B5138D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:37:55 +0000 Manifest this update: Tue 12 May 2026 03:32:55 +0000 Manifest next update: Wed 13 May 2026 05:30:55 +0000 Files and hashes: 1: 3130332e33312e3130392e302f32342d3234203d3e20313333333630.roa (hash: ohVHX4YN8ERE5ZaanIq+FJ4sj6xtkTx6fZFuzW5hCso=) 2: DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl (hash: X5WaAghQUg8yRhJVf7/nurNVi8ArQ42uHd2AVBWOZf4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:8c:72:8e:18:13:6f:82:ad:6d:ce:0a:5e:c8:39:ea:b4:b5:13:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641 Validity Not Before: May 12 03:32:55 2026 GMT Not After : May 13 05:30:55 2026 GMT Subject: CN=0F69CEFADDB8891CDD943D7C10FB7CDBBB4AD0BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:24:d2:96:60:5c:91:6d:96:74:50:e8:42:6b: 40:4f:75:4c:3f:32:64:ff:23:40:f3:02:fe:16:3f: 7a:21:a5:47:d4:5e:6e:d2:82:dd:c5:a7:57:db:1f: 0e:e6:7a:92:8b:90:fe:6a:43:d6:d3:ef:19:bb:11: ad:0e:aa:3d:74:b6:32:03:a2:b1:80:f9:cc:2b:83: 81:a1:be:0f:cb:40:66:8b:56:21:fb:0c:5f:0a:3f: 88:11:c7:c7:74:e1:d0:aa:e4:8d:cd:69:d9:ff:51: 4e:cd:e4:99:f7:87:d6:0a:8b:46:10:85:ac:9a:b1: ad:f3:93:ee:c6:fd:53:25:9f:ed:ca:0d:02:c7:d3: 91:70:56:4b:41:d3:ac:c4:d3:bf:7e:2a:fd:84:80: b3:1c:f8:c6:6d:6f:5d:6a:bc:20:cf:4f:a5:6e:61: 4a:58:25:23:98:35:de:bf:ed:6f:3b:7f:0c:a6:8c: a2:da:2a:d7:11:c0:1e:fe:88:f7:0f:be:79:dd:88: 9d:1f:cd:20:b7:cd:73:4a:cd:99:b3:97:24:d6:b5: 69:0b:67:de:aa:dc:b2:c9:85:9b:4b:af:40:38:88: 69:f3:a1:d2:b3:80:a1:fc:10:bc:5b:5d:08:58:54: 59:cc:66:d0:4b:c0:d6:fa:e6:3d:cd:d7:c4:89:af: 40:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:69:CE:FA:DD:B8:89:1C:DD:94:3D:7C:10:FB:7C:DB:BB:4A:D0:BB X509v3 Authority Key Identifier: keyid:DD:AF:8D:65:28:C4:2D:5B:45:31:AC:E7:7D:6A:1C:BE:1F:04:66:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:93:9f:67:32:7a:ed:ba:e0:19:e9:58:b8:0d:7b:c5:ca:78: 53:f5:ee:b3:ff:63:7d:f7:44:82:3d:30:3d:7d:d4:7e:62:dd: a7:61:1d:ea:81:01:48:1c:00:69:fd:73:db:14:f0:30:ad:d9: 82:d2:53:ef:a3:67:b3:5a:02:10:ec:b8:4f:0d:4f:e8:98:94: 4f:e8:22:4d:63:67:3d:7c:8a:ae:bf:60:d8:c1:75:28:2d:08: 7f:7a:8e:70:67:55:66:30:71:78:e6:05:d7:d8:61:a8:ce:4f: fc:72:f8:5e:70:d5:ef:24:cd:f4:8e:4b:0f:69:d6:80:0d:ed: 67:bf:d5:be:90:f0:0e:14:90:47:33:59:2f:5b:3f:07:94:ae: 8c:ca:23:7a:7a:2c:1e:6b:0c:95:df:fe:5a:1e:47:7a:4e:ff: ff:73:9f:ac:be:0b:4a:63:5f:71:bd:38:9c:f2:b9:30:16:b4: b1:a0:1c:57:27:39:4e:7e:70:45:63:47:c2:a6:80:6d:ac:05: 8b:cf:38:b9:9c:9f:af:fd:ff:09:60:be:8a:c4:e8:12:92:47: e8:a3:df:33:e8:b1:92:fb:98:74:c2:67:01:72:c2:2b:f8:b4: 7d:69:1a:37:1e:1b:3f:dc:d8:ec:41:be:5e:d7:fe:5c:d3:91: b3:d2:db:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN4xyjhgTb4Ktbc4KXsg56rS1E40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjhENjUyOEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFDQkUx RjA0NjY0MTAeFw0yNjA1MTIwMzMyNTVaFw0yNjA1MTMwNTMwNTVaMDMxMTAvBgNV BAMTKDBGNjlDRUZBRERCODg5MUNERDk0M0Q3QzEwRkI3Q0RCQkI0QUQwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJNKWYFyRbZZ0UOhCa0BPdUw/ MmT/I0DzAv4WP3ohpUfUXm7Sgt3Fp1fbHw7mepKLkP5qQ9bT7xm7Ea0Oqj10tjID orGA+cwrg4Ghvg/LQGaLViH7DF8KP4gRx8d04dCq5I3Nadn/UU7N5Jn3h9YKi0YQ hayasa3zk+7G/VMln+3KDQLH05FwVktB06zE079+Kv2EgLMc+MZtb11qvCDPT6Vu YUpYJSOYNd6/7W87fwymjKLaKtcRwB7+iPcPvnndiJ0fzSC3zXNKzZmzlyTWtWkL Z96q3LLJhZtLr0A4iGnzodKzgKH8ELxbXQhYVFnMZtBLwNb65j3N18SJr0CRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD2nO+t24iRzdlD18EPt827tK0LswHwYDVR0j BBgwFoAU3a+NZSjELVtFMaznfWocvh8EZkEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY2YWEzMWEtZGQwZC00YzEwLWI1ZGQtYjFhODNmYTU3NzYzLzAvRERBRjhENjUy OEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFDQkUxRjA0NjY0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREFGOEQ2NTI4QzQyRDVCNDUzMUFDRTc3RDZBMUNCRTFGMDQ2 NjQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY2YWEzMWEtZGQwZC00YzEwLWI1 ZGQtYjFhODNmYTU3NzYzLzAvRERBRjhENjUyOEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFD QkUxRjA0NjY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyTn2cyeu264BnpWLgNe8XKeFP17rP/Y333 RII9MD191H5i3adhHeqBAUgcAGn9c9sU8DCt2YLSU++jZ7NaAhDsuE8NT+iYlE/o Ik1jZz18iq6/YNjBdSgtCH96jnBnVWYwcXjmBdfYYajOT/xy+F5w1e8kzfSOSw9p 1oAN7We/1b6Q8A4UkEczWS9bPweUrozKI3p6LB5rDJXf/loeR3pO//9zn6y+C0pj X3G9OJzyuTAWtLGgHFcnOU5+cEVjR8KmgG2sBYvPOLmcn6/9/wlgvorE6BKSR+ij 3zPosZL7mHTCZwFywiv4tH1pGjceGz/c2OxBvl7X/lzTkbPS21k= -----END CERTIFICATE-----Generated at Tue May 12 23:27:48 2026 by rpki-client