$ rpki-client -vvvf rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft File: DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft (raw, json) Hash identifier: V/b9m1v3ceyD7Y684K6Dsv/eYyLX5S7iTdXIWj+fUPY= Subject key identifier: BE:B5:72:D5:FD:7F:24:45:EE:44:A7:AF:79:2B:17:1E:E1:76:CF:84 Authority key identifier: DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B Certificate issuer: /CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B Certificate serial: 221209CC55787512741F13C594B89D6A2411CD59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 21:12:16 +0000 Manifest this update: Wed 23 Sep 2026 21:07:16 +0000 Manifest next update: Thu 24 Sep 2026 21:17:16 +0000 Files and hashes: 1: 3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (hash: DmsqerRTCfleWC17bgPmpGYVL2XXTPf5hE4dywrXO3g=) 2: 3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (hash: Je+1Z3JPlfN1SueLjZhyMHWstp3IWlu0F41bg1IrLNI=) 3: DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl (hash: JJZuKsbTZ52vlX1zoAanEr4YXFF1Y00KPcqz2Ady2Sk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:12:09:cc:55:78:75:12:74:1f:13:c5:94:b8:9d:6a:24:11:cd:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B Validity Not Before: Sep 23 21:07:16 2026 GMT Not After : Sep 24 21:17:16 2026 GMT Subject: CN=BEB572D5FD7F2445EE44A7AF792B171EE176CF84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:df:f8:55:58:2a:9d:df:31:63:9f:3f:69:bd: 7b:35:75:af:eb:6b:dc:af:1a:17:e6:6b:83:af:d8: aa:d6:78:17:49:5e:65:21:98:47:dd:14:50:d5:e6: 79:98:40:63:5a:3b:e4:4a:58:86:1b:45:da:b6:0b: 66:19:2a:bd:46:ee:47:cc:07:a5:ad:de:ef:2f:f1: a3:d1:d3:eb:65:b8:69:43:84:4b:b0:3d:23:f0:be: e9:d0:31:4b:30:1b:e6:b6:53:a9:5f:14:be:31:6f: 6a:4d:eb:85:fd:1b:7b:ff:83:cb:9d:42:7b:d1:31: e6:81:24:bb:63:cf:b8:25:67:a7:57:90:1c:cf:26: da:95:9f:17:e1:b8:16:5a:5e:2a:df:9e:0f:c7:7c: ef:85:05:68:b2:27:df:ab:d8:44:d8:f0:e0:be:97: 44:54:e3:fb:ad:54:92:48:d3:ac:39:0d:18:a1:98: e2:80:ee:00:06:88:7e:41:b2:aa:41:79:66:d0:db: 53:40:cf:a5:ab:46:7a:76:e4:d6:e1:e0:23:c2:ac: bd:64:74:88:00:5c:d6:02:6a:67:71:38:dc:2d:b7: 93:95:a4:8b:33:cf:9d:22:c3:12:be:1e:bd:17:34: c2:ca:8b:26:c7:39:3c:10:06:ea:aa:85:0a:e8:ee: 04:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B5:72:D5:FD:7F:24:45:EE:44:A7:AF:79:2B:17:1E:E1:76:CF:84 X509v3 Authority Key Identifier: keyid:DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:65:b8:78:b7:c3:19:4b:0a:fc:c4:47:00:f1:61:8e:5c:28: 09:55:d1:fe:69:03:84:60:cf:a9:4a:2f:bf:59:ef:dd:18:0a: f2:e5:a5:e6:6d:53:bd:01:43:be:4f:f3:dd:96:60:92:01:84: 05:50:fc:8a:e7:63:1e:6f:95:75:e5:ed:69:ec:b5:f2:9b:93: f2:66:3f:a3:f3:c7:96:d4:14:4b:ae:de:6a:20:fe:ba:cd:b9: 05:1e:6a:25:b8:89:1f:6e:a3:c6:70:fa:29:f8:d3:00:52:f2: 88:b1:be:8f:d3:1a:b0:c2:56:2a:e5:70:b3:dc:d8:37:b5:35: 4e:a8:46:2f:26:6a:61:6b:b5:89:f8:f7:8f:01:cc:f3:c1:cb: f2:8c:16:c3:30:9c:3a:7c:06:9f:c0:5f:a8:27:8e:12:30:4e: 50:f4:3d:8a:b5:27:0d:f7:67:58:e3:5e:4d:1d:47:d8:db:a8: 34:03:55:0b:a1:a2:b0:ad:74:bd:8f:c8:5a:e4:84:ab:b9:a9: 56:f0:38:e9:58:ee:fa:a8:49:bd:12:da:51:70:b7:1c:ed:10: eb:14:e8:6f:a1:87:b9:44:50:5f:75:d3:43:a9:0b:48:18:b7: 06:a1:33:bc:59:de:78:ee:d0:1e:b7:7f:63:5c:da:24:96:0d: ad:f6:e6:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIhIJzFV4dRJ0HxPFlLidaiQRzVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERENTQ4REE0RTJFRDY4ODAxOEMxNzhGRjZCMURCNkFC NDBBQUQ2QjAeFw0yNjA5MjMyMTA3MTZaFw0yNjA5MjQyMTE3MTZaMDMxMTAvBgNV BAMTKEJFQjU3MkQ1RkQ3RjI0NDVFRTQ0QTdBRjc5MkIxNzFFRTE3NkNGODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo3/hVWCqd3zFjnz9pvXs1da/r a9yvGhfma4Ov2KrWeBdJXmUhmEfdFFDV5nmYQGNaO+RKWIYbRdq2C2YZKr1G7kfM B6Wt3u8v8aPR0+tluGlDhEuwPSPwvunQMUswG+a2U6lfFL4xb2pN64X9G3v/g8ud QnvRMeaBJLtjz7glZ6dXkBzPJtqVnxfhuBZaXirfng/HfO+FBWiyJ9+r2ETY8OC+ l0RU4/utVJJI06w5DRihmOKA7gAGiH5BsqpBeWbQ21NAz6WrRnp25Nbh4CPCrL1k dIgAXNYCamdxONwtt5OVpIszz50iwxK+Hr0XNMLKiybHOTwQBuqqhQro7gSJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvrVy1f1/JEXuRKeveSsXHuF2z4QwHwYDVR0j BBgwFoAU3dVI2k4u1ogBjBeP9rHbarQKrWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI1ZTg4YmQtNzVlMi00NWRmLTg4NjctNDU0MDJmYzdjNGIxLzAvRERENTQ4REE0 RTJFRDY4ODAxOEMxNzhGRjZCMURCNkFCNDBBQUQ2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREQ1NDhEQTRFMkVENjg4MDE4QzE3OEZGNkIxREI2QUI0MEFB RDZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI1ZTg4YmQtNzVlMi00NWRmLTg4 NjctNDU0MDJmYzdjNGIxLzAvRERENTQ4REE0RTJFRDY4ODAxOEMxNzhGRjZCMURC NkFCNDBBQUQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZluHi3wxlLCvzERwDxYY5cKAlV0f5pA4Rg z6lKL79Z790YCvLlpeZtU70BQ75P892WYJIBhAVQ/IrnYx5vlXXl7WnstfKbk/Jm P6Pzx5bUFEuu3mog/rrNuQUeaiW4iR9uo8Zw+in40wBS8oixvo/TGrDCVirlcLPc 2De1NU6oRi8mamFrtYn4948BzPPBy/KMFsMwnDp8Bp/AX6gnjhIwTlD0PYq1Jw33 Z1jjXk0dR9jbqDQDVQuhorCtdL2PyFrkhKu5qVbwOOlY7vqoSb0S2lFwtxztEOsU 6G+hh7lEUF9100OpC0gYtwahM7xZ3nju0B63f2Nc2iSWDa325gc= -----END CERTIFICATE-----Generated at Thu Sep 24 05:58:01 2026 by rpki-client