$ rpki-client -vvf rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft File: DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft (raw, json) Hash identifier: tEJvxPe+H5n1SXVqjXJmE97e2P92QXZPWGpVvCygXpk= Subject key identifier: B6:CD:4C:54:20:F2:C8:6F:E1:C9:DB:83:53:7F:DD:3E:FC:01:FE:E9 Authority key identifier: DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B Certificate issuer: /CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B Certificate serial: 36DEE340F4FB910C7C1721074159F557BA8DF27A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:20:44 +0000 Manifest this update: Tue 12 May 2026 09:15:44 +0000 Manifest next update: Wed 13 May 2026 10:10:44 +0000 Files and hashes: 1: 3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (hash: Je+1Z3JPlfN1SueLjZhyMHWstp3IWlu0F41bg1IrLNI=) 2: 3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (hash: DmsqerRTCfleWC17bgPmpGYVL2XXTPf5hE4dywrXO3g=) 3: DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl (hash: KE0KbX1ukE6FGs8zXxZLTRDlCShe4sYLdCOu9kbGEDk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:de:e3:40:f4:fb:91:0c:7c:17:21:07:41:59:f5:57:ba:8d:f2:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B Validity Not Before: May 12 09:15:44 2026 GMT Not After : May 13 10:10:44 2026 GMT Subject: CN=B6CD4C5420F2C86FE1C9DB83537FDD3EFC01FEE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:55:c0:92:20:6b:c6:02:81:58:36:6a:9d:2e: 6d:b8:af:d8:c6:81:b1:89:64:a6:9f:cd:fa:ff:11: 55:03:af:9a:71:8a:e4:31:37:ab:24:bf:21:5f:b7: 25:86:2f:da:09:d5:39:45:27:0e:9f:3d:9b:b6:08: 85:e1:b0:f0:ef:cb:89:f5:60:e7:54:38:ec:a7:d2: ee:99:91:3d:b6:8e:a3:59:69:89:11:64:58:d8:f4: 90:49:26:63:11:76:1d:e1:18:dc:1e:75:da:24:7e: 09:4c:96:50:5b:47:04:6b:4d:7d:d4:12:a5:2f:4a: 70:2a:b4:05:ca:36:76:b2:18:68:ba:4e:16:14:cc: 83:f5:ca:0a:32:0b:e9:96:90:ae:39:8c:4a:8e:d3: 75:24:83:90:76:6b:2f:d4:95:1a:32:97:52:6b:e9: 3d:3f:0e:2b:58:ee:f8:ef:68:c2:2d:95:68:4a:75: 9b:5a:21:e7:02:3f:c3:86:1c:7e:b6:09:30:c2:c4: a0:fb:4a:3a:f6:50:3a:1d:b7:c2:86:d4:f3:05:6f: d2:10:d5:f8:55:09:70:97:a7:c4:eb:32:70:bf:76: 5e:cb:f1:aa:59:42:44:75:7b:ce:36:af:ac:1a:10: 7b:e6:e4:70:05:03:5f:72:16:12:bb:c0:84:44:52: 33:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CD:4C:54:20:F2:C8:6F:E1:C9:DB:83:53:7F:DD:3E:FC:01:FE:E9 X509v3 Authority Key Identifier: keyid:DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:70:4c:35:9a:66:dc:60:4f:c2:e0:be:1f:0b:bd:47:f1:c0: b5:02:08:75:0e:8c:6c:e7:24:ef:cd:a1:65:bb:1c:e7:79:07: 1b:a2:ea:d0:29:25:10:92:e2:84:94:b7:8a:44:c8:73:b7:de: ef:09:23:9d:eb:86:d1:bd:ce:88:06:a8:71:58:f7:43:c9:f7: 89:50:7b:13:9e:b5:be:5b:fd:09:a9:0a:a8:c6:a0:22:00:12: 12:59:e6:3f:89:dd:58:db:ba:91:d9:51:98:4a:37:68:81:48: ea:b2:e3:89:3e:52:c7:89:fb:10:11:96:e8:1c:16:8d:32:88: 06:98:5c:a8:6e:1c:7b:cb:bc:9c:93:f7:97:8e:2e:34:e6:cf: 11:fe:09:69:7c:22:8b:1e:86:e5:6b:aa:ba:d5:6d:08:f4:2a: e6:75:bb:27:03:4c:f6:9c:d5:88:d0:bc:c7:01:70:aa:39:3a: 8a:28:62:93:f9:47:e4:92:c5:89:39:01:a7:e7:81:19:39:5e: d6:16:0b:44:3c:d3:ec:9a:0f:60:d4:2d:06:4c:58:08:3d:7c: c2:df:cb:5a:29:81:b0:3b:98:69:99:e5:0d:6d:b1:74:30:af: d7:99:88:ed:0b:cb:bd:fc:60:4c:1a:49:6a:03:96:da:2f:ad: cf:d7:50:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNt7jQPT7kQx8FyEHQVn1V7qN8nowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERENTQ4REE0RTJFRDY4ODAxOEMxNzhGRjZCMURCNkFC NDBBQUQ2QjAeFw0yNjA1MTIwOTE1NDRaFw0yNjA1MTMxMDEwNDRaMDMxMTAvBgNV BAMTKEI2Q0Q0QzU0MjBGMkM4NkZFMUM5REI4MzUzN0ZERDNFRkMwMUZFRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVVcCSIGvGAoFYNmqdLm24r9jG gbGJZKafzfr/EVUDr5pxiuQxN6skvyFftyWGL9oJ1TlFJw6fPZu2CIXhsPDvy4n1 YOdUOOyn0u6ZkT22jqNZaYkRZFjY9JBJJmMRdh3hGNweddokfglMllBbRwRrTX3U EqUvSnAqtAXKNnayGGi6ThYUzIP1ygoyC+mWkK45jEqO03Ukg5B2ay/UlRoyl1Jr 6T0/DitY7vjvaMItlWhKdZtaIecCP8OGHH62CTDCxKD7Sjr2UDodt8KG1PMFb9IQ 1fhVCXCXp8TrMnC/dl7L8apZQkR1e842r6waEHvm5HAFA19yFhK7wIREUjOZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUts1MVCDyyG/hyduDU3/dPvwB/ukwHwYDVR0j BBgwFoAU3dVI2k4u1ogBjBeP9rHbarQKrWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI1ZTg4YmQtNzVlMi00NWRmLTg4NjctNDU0MDJmYzdjNGIxLzAvRERENTQ4REE0 RTJFRDY4ODAxOEMxNzhGRjZCMURCNkFCNDBBQUQ2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREQ1NDhEQTRFMkVENjg4MDE4QzE3OEZGNkIxREI2QUI0MEFB RDZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI1ZTg4YmQtNzVlMi00NWRmLTg4 NjctNDU0MDJmYzdjNGIxLzAvRERENTQ4REE0RTJFRDY4ODAxOEMxNzhGRjZCMURC NkFCNDBBQUQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFwTDWaZtxgT8Lgvh8LvUfxwLUCCHUOjGzn JO/NoWW7HOd5Bxui6tApJRCS4oSUt4pEyHO33u8JI53rhtG9zogGqHFY90PJ94lQ exOetb5b/QmpCqjGoCIAEhJZ5j+J3VjbupHZUZhKN2iBSOqy44k+UseJ+xARlugc Fo0yiAaYXKhuHHvLvJyT95eOLjTmzxH+CWl8IosehuVrqrrVbQj0KuZ1uycDTPac 1YjQvMcBcKo5OoooYpP5R+SSxYk5AafngRk5XtYWC0Q80+yaD2DULQZMWAg9fMLf y1opgbA7mGmZ5Q1tsXQwr9eZiO0Ly738YEwaSWoDltovrc/XUEI= -----END CERTIFICATE-----Generated at Tue May 12 22:46:36 2026 by rpki-client