$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft File: DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft (raw, json) Hash identifier: LIoUQ9Y0T3bn/1f47SLjWBIylRiH3/rqycmplcR2WuA= Subject key identifier: 88:18:A3:48:B1:BB:A5:98:A9:49:84:CB:B3:C9:43:1B:CF:7B:FC:CF Authority key identifier: DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B Certificate issuer: /CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B Certificate serial: 69CF9EB92FD32168CE1A6F8D09ACD1106712A3E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 09:27:25 +0000 Manifest this update: Thu 24 Sep 2026 09:22:25 +0000 Manifest next update: Fri 25 Sep 2026 10:34:25 +0000 Files and hashes: 1: DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl (hash: AaXgjj4L5sW4K1bmP5cHHFSNHj3Otw5NiQg1fCGNews=) 2: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: 5L5io7waITJzSQf8m8FETlwgIknoTsA9vUH70jmgDog=) 3: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: UGzAJ2L7c0+3TG5jr3kCTMBiqyH8xnVKmBzm3Kbw5NI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:cf:9e:b9:2f:d3:21:68:ce:1a:6f:8d:09:ac:d1:10:67:12:a3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B Validity Not Before: Sep 24 09:22:25 2026 GMT Not After : Sep 25 10:34:25 2026 GMT Subject: CN=8818A348B1BBA598A94984CBB3C9431BCF7BFCCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:80:8e:b4:a5:cb:38:a6:b1:82:ba:1d:d4: 58:e7:fd:56:25:9a:8c:62:ba:a0:d0:00:67:74:41: 9d:f4:b8:80:d2:fd:93:b7:22:74:d3:b9:d6:2d:2a: 2b:59:07:3b:01:65:42:63:5b:df:51:c0:5d:84:da: a3:2f:bc:02:be:9b:cc:ef:e4:46:b1:45:48:2d:55: 46:1e:51:40:43:14:37:50:bc:49:b7:5a:15:b6:59: 3a:a2:82:02:12:0d:a1:1e:2a:e5:92:6f:f0:0a:b0: 9f:cb:d6:7c:eb:94:06:02:a2:ee:a9:e9:af:50:f1: 9e:7d:a1:e6:78:4f:60:e8:ad:a4:b1:6e:88:de:8b: 2c:cb:b4:d3:1a:92:03:ae:47:73:bb:1d:79:97:a7: 41:30:02:5e:0f:dc:29:1a:f6:ab:f3:5f:21:f5:15: c1:3b:45:7a:b4:c9:a5:bc:99:92:3d:84:75:f5:0c: 7b:bd:d5:52:4e:dc:4e:9a:96:c0:7b:38:9a:2b:59: fe:58:22:c6:ec:06:92:24:81:07:5d:c4:50:ae:6e: db:f8:a7:39:f4:6c:aa:32:7b:b7:bb:c4:a8:d8:9d: 14:cc:fb:a8:5d:66:fc:0d:df:c6:bd:3b:6d:a2:3c: 80:3c:cf:a4:af:d0:94:7e:d2:04:b0:1c:b1:dc:5c: 44:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:18:A3:48:B1:BB:A5:98:A9:49:84:CB:B3:C9:43:1B:CF:7B:FC:CF X509v3 Authority Key Identifier: keyid:DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:5d:e8:0f:7d:17:9f:2a:dc:ba:3c:5f:42:bf:fb:ee:ba:7c: d7:9e:2f:d2:db:08:1c:96:66:fb:db:21:3e:f2:f7:01:ac:19: 11:d8:e7:89:78:1c:3e:c8:6f:06:f4:83:0e:bd:59:4c:31:f4: 7e:1c:cb:df:0d:fe:22:d2:cc:ec:c8:22:f6:5c:33:f2:66:59: 26:b0:4a:cb:b6:93:e9:fc:a7:54:6e:8b:b1:7a:a2:92:9a:86: 6d:be:e7:ed:f8:91:32:c8:a8:3c:d0:d0:0f:b8:e9:17:35:43: f9:c9:32:73:39:95:21:34:1b:89:41:57:05:7e:0d:e1:b8:af: 5d:b7:fe:09:e1:dc:a0:cd:ea:ef:61:99:d8:4e:0e:66:c9:ba: 99:3e:de:be:d9:c7:9d:9d:3c:18:f2:c8:26:bb:9a:16:3e:b8: 61:82:ba:fd:c0:9f:93:97:e0:fd:36:76:fb:47:12:ca:27:b7: 2f:32:a9:95:d1:73:e0:f5:ca:1d:ea:cd:3a:23:93:dc:97:94: 8d:31:43:85:f6:75:a9:98:c5:c9:78:e5:b3:71:8d:6d:63:aa: c9:f9:2d:62:0d:db:44:c0:51:a5:94:96:23:4c:80:ba:f9:1b: f0:03:62:d1:53:11:99:ed:7b:88:b0:d2:4a:48:9f:b1:54:1c: 38:d6:15:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUac+euS/TIWjOGm+NCazREGcSo+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3RjAyQzI5OTA1NThFNTE0REMzQjFCN0E3RTJCQUUw MzFBM0Y1QjAeFw0yNjA5MjQwOTIyMjVaFw0yNjA5MjUxMDM0MjVaMDMxMTAvBgNV BAMTKDg4MThBMzQ4QjFCQkE1OThBOTQ5ODRDQkIzQzk0MzFCQ0Y3QkZDQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtC4COtKXLOKaxgrod1Fjn/VYl moxiuqDQAGd0QZ30uIDS/ZO3InTTudYtKitZBzsBZUJjW99RwF2E2qMvvAK+m8zv 5EaxRUgtVUYeUUBDFDdQvEm3WhW2WTqiggISDaEeKuWSb/AKsJ/L1nzrlAYCou6p 6a9Q8Z59oeZ4T2DoraSxbojeiyzLtNMakgOuR3O7HXmXp0EwAl4P3Cka9qvzXyH1 FcE7RXq0yaW8mZI9hHX1DHu91VJO3E6alsB7OJorWf5YIsbsBpIkgQddxFCubtv4 pzn0bKoye7e7xKjYnRTM+6hdZvwN38a9O22iPIA8z6Sv0JR+0gSwHLHcXERzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiBijSLG7pZipSYTLs8lDG897/M8wHwYDVR0j BBgwFoAU3X8CwpkFWOUU3Dsben4rrgMaP1swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWIzNzg0ZmUtZjlmZS00Y2JlLTg3NjgtMjYzYTc2OTg2YTNhLzAvREQ3RjAyQzI5 OTA1NThFNTE0REMzQjFCN0E3RTJCQUUwMzFBM0Y1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDdGMDJDMjk5MDU1OEU1MTREQzNCMUI3QTdFMkJBRTAzMUEz RjVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvREQ3RjAyQzI5OTA1NThFNTE0REMzQjFCN0E3RTJC QUUwMzFBM0Y1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADld6A99F58q3Lo8X0K/++66fNeeL9LbCByW ZvvbIT7y9wGsGRHY54l4HD7Ibwb0gw69WUwx9H4cy98N/iLSzOzIIvZcM/JmWSaw Ssu2k+n8p1Rui7F6opKahm2+5+34kTLIqDzQ0A+46Rc1Q/nJMnM5lSE0G4lBVwV+ DeG4r123/gnh3KDN6u9hmdhODmbJupk+3r7Zx52dPBjyyCa7mhY+uGGCuv3An5OX 4P02dvtHEsonty8yqZXRc+D1yh3qzTojk9yXlI0xQ4X2damYxcl45bNxjW1jqsn5 LWIN20TAUaWUliNMgLr5G/ADYtFTEZnte4iw0kpIn7FUHDjWFTI= -----END CERTIFICATE-----Generated at Thu Sep 24 12:28:12 2026 by rpki-client