$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft File: DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft (raw, json) Hash identifier: PYocZZzuHIRjRKu8WX09p+Fn6mzOn7w9zd6rEGHT0Ig= Subject key identifier: 03:EF:C9:88:56:5A:6E:11:15:B0:16:77:47:30:E8:D7:23:D5:C7:A7 Authority key identifier: DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B Certificate issuer: /CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B Certificate serial: 02F67AF69BEAA65E07DF82C12A63AD86D8F85CDA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:22:10 +0000 Manifest this update: Tue 12 May 2026 17:17:10 +0000 Manifest next update: Wed 13 May 2026 18:59:10 +0000 Files and hashes: 1: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: UGzAJ2L7c0+3TG5jr3kCTMBiqyH8xnVKmBzm3Kbw5NI=) 2: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: 5L5io7waITJzSQf8m8FETlwgIknoTsA9vUH70jmgDog=) 3: DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl (hash: lSO5lvP4sU/mdXZImnRvzBJwmSP9GHiJhdcPk0tjXDU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f6:7a:f6:9b:ea:a6:5e:07:df:82:c1:2a:63:ad:86:d8:f8:5c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B Validity Not Before: May 12 17:17:10 2026 GMT Not After : May 13 18:59:10 2026 GMT Subject: CN=03EFC988565A6E1115B016774730E8D723D5C7A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bf:44:44:e7:35:49:ed:c9:a6:ae:bf:f6:73: cc:9a:d4:67:3e:20:11:5e:83:dc:8e:18:01:1b:4d: 64:6d:2d:56:75:ca:fb:ea:23:b6:92:c5:24:3a:bd: 33:6a:64:e0:4c:d3:fd:67:53:41:64:c0:b8:65:15: 71:5b:f3:31:90:df:64:48:dd:22:57:75:c4:fb:12: c4:b9:30:b3:86:ae:04:ea:bd:8b:dd:7f:b5:24:77: 33:00:51:bd:27:7a:53:a4:65:a2:b0:42:e8:09:11: c5:a8:d1:e3:45:62:f5:c3:fa:c7:5b:ee:f0:55:c5: ec:9a:26:77:46:7e:d4:37:72:bc:04:3e:84:92:21: f7:e1:79:4d:66:48:24:02:35:2c:c3:4b:3e:af:9e: ff:86:b7:49:d3:63:65:f5:0a:c3:3a:79:01:63:d5: 32:84:5d:bf:42:2e:19:27:43:e5:2b:79:fd:96:5d: 57:48:2a:fb:4b:b0:2e:36:7a:ec:3b:ed:b7:b5:fa: 2a:20:52:4a:8d:ac:45:00:1b:40:82:40:96:82:59: 16:26:4c:71:41:5d:c8:cb:30:7a:8a:24:d8:9c:50: eb:4f:86:d8:0b:d3:31:3e:b3:9a:ba:86:e3:c7:52: 78:bd:25:fe:40:0f:6d:ba:7f:d3:5f:b4:bf:3e:07: ad:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EF:C9:88:56:5A:6E:11:15:B0:16:77:47:30:E8:D7:23:D5:C7:A7 X509v3 Authority Key Identifier: keyid:DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:7b:59:50:c4:d9:b0:c3:de:a7:22:b0:8a:aa:6c:8e:06:4b: be:ef:f8:2a:a1:8b:8e:94:2b:7e:37:e9:62:1d:01:b5:7d:9c: d0:d0:77:53:5b:3d:06:c2:65:c8:75:45:27:fe:38:f4:8a:c1: a0:d5:20:be:3b:15:7a:bd:73:75:d7:f1:1d:5e:58:0f:ce:b8: c1:45:66:66:7b:06:fe:85:a9:8b:aa:56:bb:37:f0:2e:30:30: 5c:e6:95:9f:e7:21:06:ab:6b:b9:7e:58:14:b2:5e:65:e2:ed: 7c:cd:18:a2:9c:79:9e:e0:3c:2d:b8:c5:ba:c6:4c:51:8a:96: 7e:a3:b2:6b:bc:6f:89:d6:e8:ee:0f:13:97:4a:6e:56:0c:30: ce:10:46:42:d0:e4:4e:fb:e0:95:25:2a:18:9e:17:42:be:93: 2c:fe:ae:42:9e:e4:85:a2:e4:fb:ec:79:99:07:ee:07:82:59: 4b:4f:f4:58:a4:d9:22:a6:f4:b7:44:05:c0:d5:b6:48:22:10: ba:10:ad:cb:bd:34:00:98:be:08:72:df:93:45:dd:01:df:5c: 86:47:48:b2:4e:31:c5:09:93:62:f9:45:e0:d9:a5:79:d9:46: 36:14:4d:20:0a:00:6c:50:dc:b7:dd:f6:4c:76:31:56:18:a1: a7:04:c8:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAvZ69pvqpl4H34LBKmOthtj4XNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3RjAyQzI5OTA1NThFNTE0REMzQjFCN0E3RTJCQUUw MzFBM0Y1QjAeFw0yNjA1MTIxNzE3MTBaFw0yNjA1MTMxODU5MTBaMDMxMTAvBgNV BAMTKDAzRUZDOTg4NTY1QTZFMTExNUIwMTY3NzQ3MzBFOEQ3MjNENUM3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTv0RE5zVJ7cmmrr/2c8ya1Gc+ IBFeg9yOGAEbTWRtLVZ1yvvqI7aSxSQ6vTNqZOBM0/1nU0FkwLhlFXFb8zGQ32RI 3SJXdcT7EsS5MLOGrgTqvYvdf7UkdzMAUb0nelOkZaKwQugJEcWo0eNFYvXD+sdb 7vBVxeyaJndGftQ3crwEPoSSIffheU1mSCQCNSzDSz6vnv+Gt0nTY2X1CsM6eQFj 1TKEXb9CLhknQ+Uref2WXVdIKvtLsC42euw77be1+iogUkqNrEUAG0CCQJaCWRYm THFBXcjLMHqKJNicUOtPhtgL0zE+s5q6huPHUni9Jf5AD226f9NftL8+B63JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA+/JiFZabhEVsBZ3RzDo1yPVx6cwHwYDVR0j BBgwFoAU3X8CwpkFWOUU3Dsben4rrgMaP1swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWIzNzg0ZmUtZjlmZS00Y2JlLTg3NjgtMjYzYTc2OTg2YTNhLzAvREQ3RjAyQzI5 OTA1NThFNTE0REMzQjFCN0E3RTJCQUUwMzFBM0Y1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDdGMDJDMjk5MDU1OEU1MTREQzNCMUI3QTdFMkJBRTAzMUEz RjVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvREQ3RjAyQzI5OTA1NThFNTE0REMzQjFCN0E3RTJC QUUwMzFBM0Y1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGV7WVDE2bDD3qcisIqqbI4GS77v+Cqhi46U K3436WIdAbV9nNDQd1NbPQbCZch1RSf+OPSKwaDVIL47FXq9c3XX8R1eWA/OuMFF ZmZ7Bv6FqYuqVrs38C4wMFzmlZ/nIQara7l+WBSyXmXi7XzNGKKceZ7gPC24xbrG TFGKln6jsmu8b4nW6O4PE5dKblYMMM4QRkLQ5E774JUlKhieF0K+kyz+rkKe5IWi 5PvseZkH7geCWUtP9Fik2SKm9LdEBcDVtkgiELoQrcu9NACYvghy35NF3QHfXIZH SLJOMcUJk2L5ReDZpXnZRjYUTSAKAGxQ3Lfd9kx2MVYYoacEyDM= -----END CERTIFICATE-----Generated at Wed May 13 02:59:43 2026 by rpki-client