$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft File: DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft (raw, json) Hash identifier: b7nX0qyBFCXFTpnznTTjZV3ssYN0F5XfcCN2rjvIXxE= Subject key identifier: 5D:1B:69:E8:AC:11:02:0A:25:E8:E8:EC:BA:0A:15:76:54:F1:C0:01 Authority key identifier: DD:AF:8D:65:28:C4:2D:5B:45:31:AC:E7:7D:6A:1C:BE:1F:04:66:41 Certificate issuer: /CN=DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641 Certificate serial: 3ADEEA8EF7A50F087789262841F517864EF9FD74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 08:31:47 +0000 Manifest this update: Wed 23 Sep 2026 08:26:47 +0000 Manifest next update: Thu 24 Sep 2026 10:18:47 +0000 Files and hashes: 1: 3130332e33312e3130392e302f32342d3234203d3e20313333333630.roa (hash: ohVHX4YN8ERE5ZaanIq+FJ4sj6xtkTx6fZFuzW5hCso=) 2: DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl (hash: DV3ToFDcAWhKgfVteAC86mnpPzF/fGM+5pkHlKvWwY0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:de:ea:8e:f7:a5:0f:08:77:89:26:28:41:f5:17:86:4e:f9:fd:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641 Validity Not Before: Sep 23 08:26:47 2026 GMT Not After : Sep 24 10:18:47 2026 GMT Subject: CN=5D1B69E8AC11020A25E8E8ECBA0A157654F1C001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6f:3e:49:24:28:d4:74:4e:72:18:ba:ef:02: 70:d3:e5:bf:ab:30:6d:14:fc:5b:c5:83:e7:96:63: e1:f7:25:64:70:20:ba:f1:05:26:c7:3a:f7:4b:ab: ff:42:a0:48:1f:9f:8d:6a:7e:d6:4d:16:ab:4b:6c: f1:00:65:e3:47:8a:10:e6:d9:c5:92:47:59:55:fb: c3:ef:f1:44:90:88:a1:4a:16:44:67:39:b6:58:ac: 8d:a9:16:b4:82:20:a8:a6:4b:9d:62:7e:17:06:c3: b4:eb:f7:b0:d9:77:ce:17:8c:ae:a7:f5:cc:2e:63: 20:50:06:d5:e2:dd:83:5c:88:24:28:6e:be:81:05: d9:c9:ca:0d:d4:4a:c9:fe:24:c1:5a:fa:b3:c9:6b: ca:a0:0d:f0:70:bf:9e:bd:f2:9b:da:e2:39:78:84: a8:fb:69:6b:d1:da:76:47:02:c0:08:39:a8:51:fe: c7:ad:83:19:8a:21:d1:bb:ec:16:f5:ca:33:8f:19: 48:e9:67:a8:69:50:f6:cb:31:d1:f2:f3:14:4f:12: e5:af:0b:08:0c:6e:f5:de:ba:59:dd:39:08:0c:24: 0c:5f:4c:54:1f:19:93:4d:21:3a:8f:1c:8e:6c:ca: 80:fa:b1:2c:72:31:4f:a3:a1:04:ad:42:2a:d4:fb: 36:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1B:69:E8:AC:11:02:0A:25:E8:E8:EC:BA:0A:15:76:54:F1:C0:01 X509v3 Authority Key Identifier: keyid:DD:AF:8D:65:28:C4:2D:5B:45:31:AC:E7:7D:6A:1C:BE:1F:04:66:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:59:56:ae:ea:7b:07:63:45:93:20:e3:71:0a:0b:d8:bb:ae: 47:a0:72:f1:af:51:9f:7b:eb:6c:72:cc:a2:18:7c:23:5b:aa: 89:37:00:f6:9f:89:aa:59:29:03:d1:41:12:df:bd:83:ec:90: 7f:e0:78:6a:4a:de:64:96:e1:de:1d:73:60:45:85:1c:42:fc: f3:04:3d:ad:ff:1d:0f:29:20:68:e4:63:f0:d2:7d:48:d7:62: fb:d8:93:20:f0:aa:d3:77:d1:ad:93:29:25:87:2e:bc:13:83: 99:77:d7:b0:ca:47:ee:fb:fa:47:57:75:15:6a:88:4e:6d:7e: a2:ae:50:f6:51:93:35:57:d3:6a:5b:72:13:df:12:1a:91:6b: 6b:57:89:cb:a4:0a:96:f0:84:0e:53:1a:da:d6:26:cd:25:a1: e5:b4:f8:b6:d6:f8:23:5a:dd:88:c3:d7:7b:e0:3e:57:b3:a0: ec:05:37:bc:f9:0e:a0:a2:f3:7e:d8:7f:a8:fe:a5:e8:02:f2: 8e:58:3a:0d:d7:75:a6:8a:e4:ed:2c:70:e6:8f:16:aa:e7:ca: 70:df:c2:25:11:8a:27:44:b7:cd:99:00:81:f2:13:78:16:23: 57:cc:dd:3c:61:fe:bc:e1:31:cc:72:e5:69:b5:90:a9:b9:02: 16:9c:27:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOt7qjvelDwh3iSYoQfUXhk75/XQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjhENjUyOEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFDQkUx RjA0NjY0MTAeFw0yNjA5MjMwODI2NDdaFw0yNjA5MjQxMDE4NDdaMDMxMTAvBgNV BAMTKDVEMUI2OUU4QUMxMTAyMEEyNUU4RThFQ0JBMEExNTc2NTRGMUMwMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYbz5JJCjUdE5yGLrvAnDT5b+r MG0U/FvFg+eWY+H3JWRwILrxBSbHOvdLq/9CoEgfn41qftZNFqtLbPEAZeNHihDm 2cWSR1lV+8Pv8USQiKFKFkRnObZYrI2pFrSCIKimS51ifhcGw7Tr97DZd84XjK6n 9cwuYyBQBtXi3YNciCQobr6BBdnJyg3USsn+JMFa+rPJa8qgDfBwv5698pva4jl4 hKj7aWvR2nZHAsAIOahR/setgxmKIdG77Bb1yjOPGUjpZ6hpUPbLMdHy8xRPEuWv CwgMbvXeulndOQgMJAxfTFQfGZNNITqPHI5syoD6sSxyMU+joQStQirU+zYZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXRtp6KwRAgol6OjsugoVdlTxwAEwHwYDVR0j BBgwFoAU3a+NZSjELVtFMaznfWocvh8EZkEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY2YWEzMWEtZGQwZC00YzEwLWI1ZGQtYjFhODNmYTU3NzYzLzAvRERBRjhENjUy OEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFDQkUxRjA0NjY0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREFGOEQ2NTI4QzQyRDVCNDUzMUFDRTc3RDZBMUNCRTFGMDQ2 NjQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY2YWEzMWEtZGQwZC00YzEwLWI1 ZGQtYjFhODNmYTU3NzYzLzAvRERBRjhENjUyOEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFD QkUxRjA0NjY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpZVq7qewdjRZMg43EKC9i7rkegcvGvUZ97 62xyzKIYfCNbqok3APafiapZKQPRQRLfvYPskH/geGpK3mSW4d4dc2BFhRxC/PME Pa3/HQ8pIGjkY/DSfUjXYvvYkyDwqtN30a2TKSWHLrwTg5l317DKR+77+kdXdRVq iE5tfqKuUPZRkzVX02pbchPfEhqRa2tXicukCpbwhA5TGtrWJs0loeW0+LbW+CNa 3YjD13vgPlezoOwFN7z5DqCi837Yf6j+pegC8o5YOg3XdaaK5O0scOaPFqrnynDf wiURiidEt82ZAIHyE3gWI1fM3Txh/rzhMcxy5Wm1kKm5AhacJ1U= -----END CERTIFICATE-----Generated at Thu Sep 24 01:59:45 2026 by rpki-client