$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft File: DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft (raw, json) Hash identifier: ETZkt18e+G1jJb/1f6hEInN+bMsjnY60qHjomlTfdu0= Subject key identifier: C5:A7:E2:BA:2E:49:07:C9:76:31:06:A2:8D:8E:7F:7B:AC:52:4C:A6 Authority key identifier: DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B Certificate issuer: /CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B Certificate serial: 430D010DEC5B161B6319E527417143067707809A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:24:38 +0000 Manifest this update: Fri 24 Jul 2026 00:19:38 +0000 Manifest next update: Sat 25 Jul 2026 01:46:38 +0000 Files and hashes: 1: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: 5L5io7waITJzSQf8m8FETlwgIknoTsA9vUH70jmgDog=) 2: DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl (hash: BWeuMm3qxBnwXfA71FscEQ73lOM4XT6b1OU9Z02+YpE=) 3: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: UGzAJ2L7c0+3TG5jr3kCTMBiqyH8xnVKmBzm3Kbw5NI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:0d:01:0d:ec:5b:16:1b:63:19:e5:27:41:71:43:06:77:07:80:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B Validity Not Before: Jul 24 00:19:38 2026 GMT Not After : Jul 25 01:46:38 2026 GMT Subject: CN=C5A7E2BA2E4907C9763106A28D8E7F7BAC524CA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f2:1a:88:a9:08:89:74:da:79:37:01:32:86: 25:7c:fe:03:89:11:84:cf:73:2d:74:9f:a9:eb:b7: 67:76:96:2f:b7:3b:eb:19:b2:17:55:a2:b8:58:d1: 15:f4:9b:3a:91:f7:16:ae:45:23:c9:6f:98:12:50: fe:1a:92:9d:61:d7:f3:40:45:3c:db:b5:91:ad:7a: 0a:c4:46:f3:ca:bd:3d:4a:62:00:4e:6c:85:fe:69: 10:04:c2:40:bc:63:35:13:8f:6e:06:f0:25:b5:7e: 47:c6:bc:1e:dc:43:8b:16:36:4e:38:a3:fb:33:0a: e7:06:99:1a:9b:40:33:0c:51:c8:e3:4c:f5:a2:1c: 4f:95:8f:92:47:9c:f1:de:38:4e:ed:ec:ea:b6:96: 5e:b0:f7:89:70:d3:a2:7c:c4:dc:29:c1:0a:6d:35: 35:ee:52:ff:0a:57:8e:54:bf:f9:9f:d3:4e:89:0d: 5b:c9:c9:37:ea:2b:4b:b8:12:68:51:06:ba:eb:7d: c7:84:1b:28:b4:cf:ea:80:d5:c4:10:31:9f:70:cd: d8:58:e5:1a:85:54:53:01:e0:7b:7a:31:7d:4e:82: 47:11:03:20:a3:73:2c:7d:9b:c1:d7:01:e8:2b:f6: ad:13:13:cf:bd:a9:b0:e0:dd:c0:f5:28:da:75:32: 8a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A7:E2:BA:2E:49:07:C9:76:31:06:A2:8D:8E:7F:7B:AC:52:4C:A6 X509v3 Authority Key Identifier: keyid:DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:72:87:ae:71:70:99:11:fa:7a:3a:83:73:26:be:c8:7d:8e: e2:77:41:84:33:7c:2f:c7:86:5b:ab:66:0c:58:b0:8f:42:85: c4:93:68:cc:ad:7d:5c:bb:e9:e6:7a:04:62:21:63:58:83:29: 6b:9c:a0:43:92:75:8c:a7:1c:e3:41:7d:e5:2f:1c:89:bf:3c: 28:c5:bc:d6:83:48:3a:c3:80:f5:c0:ba:be:39:e1:57:9a:29: 70:9f:3e:10:00:97:9f:3e:bf:f1:8e:5a:95:07:73:ed:1b:60: a9:e3:54:e0:c2:65:f0:6c:dc:c8:8a:ef:05:63:23:6f:1a:51: 92:f9:a7:ef:37:d9:4b:a8:cf:22:52:ee:1a:05:ae:be:16:0d: a3:b1:4f:7e:9b:57:18:0d:c9:4f:bc:de:37:c7:36:4f:cc:fc: e8:3d:d3:2c:b6:81:3b:c4:aa:ce:96:0a:20:e6:3e:b1:15:cd: 10:0a:cf:ea:a9:68:64:89:2d:94:2f:bc:95:c6:9e:e3:44:fe: a7:9e:c4:0d:83:d9:bf:4f:14:6d:f6:e1:6f:b6:20:21:76:a3: f8:50:bf:d6:ee:1e:78:ae:c7:aa:b3:3c:1f:23:eb:d5:b4:98: 2e:40:ab:8b:38:e8:86:1b:c6:be:bf:25:1a:e3:d5:d9:df:6f: b7:99:b6:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQw0BDexbFhtjGeUnQXFDBncHgJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3RjAyQzI5OTA1NThFNTE0REMzQjFCN0E3RTJCQUUw MzFBM0Y1QjAeFw0yNjA3MjQwMDE5MzhaFw0yNjA3MjUwMTQ2MzhaMDMxMTAvBgNV BAMTKEM1QTdFMkJBMkU0OTA3Qzk3NjMxMDZBMjhEOEU3RjdCQUM1MjRDQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd8hqIqQiJdNp5NwEyhiV8/gOJ EYTPcy10n6nrt2d2li+3O+sZshdVorhY0RX0mzqR9xauRSPJb5gSUP4akp1h1/NA RTzbtZGtegrERvPKvT1KYgBObIX+aRAEwkC8YzUTj24G8CW1fkfGvB7cQ4sWNk44 o/szCucGmRqbQDMMUcjjTPWiHE+Vj5JHnPHeOE7t7Oq2ll6w94lw06J8xNwpwQpt NTXuUv8KV45Uv/mf006JDVvJyTfqK0u4EmhRBrrrfceEGyi0z+qA1cQQMZ9wzdhY 5RqFVFMB4Ht6MX1OgkcRAyCjcyx9m8HXAegr9q0TE8+9qbDg3cD1KNp1MorvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxafiui5JB8l2MQaijY5/e6xSTKYwHwYDVR0j BBgwFoAU3X8CwpkFWOUU3Dsben4rrgMaP1swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWIzNzg0ZmUtZjlmZS00Y2JlLTg3NjgtMjYzYTc2OTg2YTNhLzAvREQ3RjAyQzI5 OTA1NThFNTE0REMzQjFCN0E3RTJCQUUwMzFBM0Y1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDdGMDJDMjk5MDU1OEU1MTREQzNCMUI3QTdFMkJBRTAzMUEz RjVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvREQ3RjAyQzI5OTA1NThFNTE0REMzQjFCN0E3RTJC QUUwMzFBM0Y1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5yh65xcJkR+no6g3Mmvsh9juJ3QYQzfC/H hlurZgxYsI9ChcSTaMytfVy76eZ6BGIhY1iDKWucoEOSdYynHONBfeUvHIm/PCjF vNaDSDrDgPXAur454VeaKXCfPhAAl58+v/GOWpUHc+0bYKnjVODCZfBs3MiK7wVj I28aUZL5p+832UuozyJS7hoFrr4WDaOxT36bVxgNyU+83jfHNk/M/Og90yy2gTvE qs6WCiDmPrEVzRAKz+qpaGSJLZQvvJXGnuNE/qeexA2D2b9PFG324W+2ICF2o/hQ v9buHniux6qzPB8j69W0mC5Aq4s46IYbxr6/JRrj1dnfb7eZtis= -----END CERTIFICATE-----Generated at Fri Jul 24 06:25:46 2026 by rpki-client