$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft File: DDF88B435837261B13DE2248E2A856AB45CECC0B.mft (raw, json) Hash identifier: DC12bPJng5uAKb0QdoPdz0glLYCYfkcZirgvNDwYKW0= Subject key identifier: 3D:A1:06:F8:24:FE:A7:FA:B7:45:93:DF:4D:A1:08:D9:D5:93:06:F2 Authority key identifier: DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B Certificate issuer: /CN=DDF88B435837261B13DE2248E2A856AB45CECC0B Certificate serial: 1D98D6836D26340F44BE7C940E64F32CB259AC18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 14:37:51 +0000 Manifest this update: Thu 23 Jul 2026 14:32:51 +0000 Manifest next update: Fri 24 Jul 2026 16:57:51 +0000 Files and hashes: 1: DDF88B435837261B13DE2248E2A856AB45CECC0B.crl (hash: PT7vOKOxy0fw2ouE3LP0IzXJUWAamMkf8wK8iaGfT3s=) 2: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: edm1TV/7umFF7e1kNKXURZcIakqU8CWQ1lkJU/ljN7I=) 3: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: fhnpPa+v9pVR6utlcEhHmU/vCyGDDmaJK9JqRPVVGlI=) 4: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: yfH9V+v7CqjVW6BwpLw/uKH0EvFG6umOPa6WyO7b7X0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:98:d6:83:6d:26:34:0f:44:be:7c:94:0e:64:f3:2c:b2:59:ac:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDF88B435837261B13DE2248E2A856AB45CECC0B Validity Not Before: Jul 23 14:32:51 2026 GMT Not After : Jul 24 16:57:51 2026 GMT Subject: CN=3DA106F824FEA7FAB74593DF4DA108D9D59306F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:a4:1f:3b:6d:cb:39:54:b9:48:7d:05:16: 65:bb:22:d1:e9:5e:64:d0:f1:f4:89:e5:2f:37:8f: 32:1d:24:3c:9f:6a:15:30:f5:27:5f:f7:31:51:4e: 90:bb:e5:fc:81:18:45:8c:3e:2b:df:f7:8d:2e:35: ff:39:37:7f:78:39:c8:7c:d8:53:b5:56:b5:33:8a: e6:65:24:e9:5a:cc:96:8a:df:c2:86:6b:b6:a1:aa: 75:4b:6e:97:e3:e1:e7:4e:19:92:53:4b:48:e5:97: dd:c6:50:e0:fd:ff:6f:31:52:5a:f9:26:e9:77:fb: 26:01:64:f3:68:49:95:1f:1a:cf:bf:8c:45:9d:ce: 81:f3:3d:05:20:b4:90:45:ab:3f:4e:0f:18:d5:52: 1f:f4:34:c5:e0:0e:20:88:fc:08:61:44:3c:bc:01: ee:2b:ac:75:39:29:eb:6a:cf:70:80:d9:40:5c:b9: 69:39:1d:2d:44:32:52:c2:d6:0c:f0:39:fa:1e:1f: 10:0b:6b:28:6e:d4:59:1f:0d:dd:e0:8a:3a:44:96: 5a:ab:7b:c7:d6:1b:7d:b0:b2:de:2a:42:39:a7:8f: 7d:64:91:08:bb:93:37:cc:8e:77:8f:57:38:91:52: c9:7f:3d:0f:40:3b:28:61:12:ad:87:1f:cd:ee:97: 97:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A1:06:F8:24:FE:A7:FA:B7:45:93:DF:4D:A1:08:D9:D5:93:06:F2 X509v3 Authority Key Identifier: keyid:DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3d:1a:12:09:31:30:74:63:d3:d2:5b:0a:aa:04:d6:55:d6: 91:94:4a:42:37:c1:da:5d:ff:44:b4:e0:43:75:e8:13:70:6e: 48:cf:60:e7:b9:33:ae:10:08:e8:0d:86:e9:17:3b:64:54:40: fa:be:07:85:63:49:97:53:25:4c:6b:dc:ef:4d:c1:ad:82:57: 37:da:b1:fa:80:ca:e4:a0:54:8a:cf:b5:aa:c3:97:60:e8:0a: 8e:39:f7:65:6b:dd:2a:55:11:a0:74:52:a5:37:74:6c:94:17: dd:e1:71:da:85:a6:0a:0d:b8:84:a0:52:db:ae:12:8c:dd:a0: 0b:9f:b0:d4:4c:41:e5:c3:7e:c5:47:02:21:7a:81:62:26:1c: 48:85:10:54:ba:3a:71:06:a5:6a:97:2c:68:a5:29:d2:91:e8: 4f:11:f6:78:a6:db:8d:22:6a:fc:24:72:09:73:7d:84:64:9e: 2f:04:dc:1b:06:6f:a2:af:40:ac:af:f4:e8:e6:fa:8b:45:be: 18:49:39:2d:60:69:d4:22:86:81:03:52:3b:a9:ae:20:9c:c6: 09:cd:3a:86:83:59:90:07:0c:3d:66:71:a2:2a:57:48:a6:78: c7:2b:d7:e2:7c:3c:01:38:2b:91:2e:44:d9:c9:60:75:39:4b: bb:0a:b7:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHZjWg20mNA9EvnyUDmTzLLJZrBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGODhCNDM1ODM3MjYxQjEzREUyMjQ4RTJBODU2QUI0 NUNFQ0MwQjAeFw0yNjA3MjMxNDMyNTFaFw0yNjA3MjQxNjU3NTFaMDMxMTAvBgNV BAMTKDNEQTEwNkY4MjRGRUE3RkFCNzQ1OTNERjREQTEwOEQ5RDU5MzA2RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGH6QfO23LOVS5SH0FFmW7ItHp XmTQ8fSJ5S83jzIdJDyfahUw9Sdf9zFRTpC75fyBGEWMPivf940uNf85N394Och8 2FO1VrUziuZlJOlazJaK38KGa7ahqnVLbpfj4edOGZJTS0jll93GUOD9/28xUlr5 Jul3+yYBZPNoSZUfGs+/jEWdzoHzPQUgtJBFqz9ODxjVUh/0NMXgDiCI/AhhRDy8 Ae4rrHU5Ketqz3CA2UBcuWk5HS1EMlLC1gzwOfoeHxALayhu1FkfDd3gijpEllqr e8fWG32wst4qQjmnj31kkQi7kzfMjnePVziRUsl/PQ9AOyhhEq2HH83ul5ffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPaEG+CT+p/q3RZPfTaEI2dWTBvIwHwYDVR0j BBgwFoAU3fiLQ1g3JhsT3iJI4qhWq0XOzAswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUzNGQyZDgtMzRhZi00NzU3LThhZDktOTJkYTM1ZDkyMTY4LzAvRERGODhCNDM1 ODM3MjYxQjEzREUyMjQ4RTJBODU2QUI0NUNFQ0MwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREY4OEI0MzU4MzcyNjFCMTNERTIyNDhFMkE4NTZBQjQ1Q0VD QzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvRERGODhCNDM1ODM3MjYxQjEzREUyMjQ4RTJBODU2 QUI0NUNFQ0MwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADI9GhIJMTB0Y9PSWwqqBNZV1pGUSkI3wdpd /0S04EN16BNwbkjPYOe5M64QCOgNhukXO2RUQPq+B4VjSZdTJUxr3O9Nwa2CVzfa sfqAyuSgVIrPtarDl2DoCo4592Vr3SpVEaB0UqU3dGyUF93hcdqFpgoNuISgUtuu EozdoAufsNRMQeXDfsVHAiF6gWImHEiFEFS6OnEGpWqXLGilKdKR6E8R9nim240i avwkcglzfYRkni8E3BsGb6KvQKyv9Ojm+otFvhhJOS1gadQihoEDUjupriCcxgnN OoaDWZAHDD1mcaIqV0imeMcr1+J8PAE4K5EuRNnJYHU5S7sKt/s= -----END CERTIFICATE-----Generated at Fri Jul 24 06:30:47 2026 by rpki-client