$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft File: DDF88B435837261B13DE2248E2A856AB45CECC0B.mft (raw, json) Hash identifier: capjPyNm77lOZBmituTGTf7ow3ez8WAIi+C9Oz3zLq8= Subject key identifier: A0:D7:07:7E:02:72:48:12:DE:0C:78:EC:B3:A2:52:22:C7:84:A4:2C Authority key identifier: DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B Certificate issuer: /CN=DDF88B435837261B13DE2248E2A856AB45CECC0B Certificate serial: 1D3D592DFD34662E93CDFA662CC761C744D40CC0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 09:00:30 +0000 Manifest this update: Fri 24 Jul 2026 08:55:30 +0000 Manifest next update: Sat 25 Jul 2026 10:09:30 +0000 Files and hashes: 1: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: yfH9V+v7CqjVW6BwpLw/uKH0EvFG6umOPa6WyO7b7X0=) 2: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: fhnpPa+v9pVR6utlcEhHmU/vCyGDDmaJK9JqRPVVGlI=) 3: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: edm1TV/7umFF7e1kNKXURZcIakqU8CWQ1lkJU/ljN7I=) 4: DDF88B435837261B13DE2248E2A856AB45CECC0B.crl (hash: y7rIiBmubJSN4vS2o5WpxT1O139mCNVVAKd8rjiMMiQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:3d:59:2d:fd:34:66:2e:93:cd:fa:66:2c:c7:61:c7:44:d4:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDF88B435837261B13DE2248E2A856AB45CECC0B Validity Not Before: Jul 24 08:55:30 2026 GMT Not After : Jul 25 10:09:30 2026 GMT Subject: CN=A0D7077E02724812DE0C78ECB3A25222C784A42C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:41:4f:5f:0b:d4:5d:b2:43:81:30:e9:50:f4: 24:8f:8a:2e:8b:58:22:01:af:6f:49:9c:c3:ca:18: 73:28:2d:48:ad:b2:70:c1:9a:43:dd:58:1c:07:84: 64:d5:35:4f:2e:1c:d5:d1:1d:d0:b8:78:da:57:66: a1:aa:23:e5:a2:11:4d:a5:c1:50:f7:cb:02:99:c5: f2:8e:23:1f:66:ac:43:7d:41:6e:a9:9a:6d:c1:c5: db:eb:ab:2f:18:20:b8:e6:61:60:58:71:83:e7:a9: 47:01:4a:d7:05:fa:f8:c0:e6:32:4e:d5:ac:75:31: 7d:38:40:d5:06:8c:dd:cc:36:34:53:9b:9a:f0:22: 51:49:12:f8:f2:19:69:a5:73:87:d6:63:70:3a:ec: 65:1f:e1:d5:12:dc:a6:9a:61:02:a7:69:ca:f3:d0: e9:48:09:b6:72:da:2f:27:77:19:b6:e4:10:e0:ca: 45:a6:9f:3e:af:9b:fb:7e:3d:e0:58:d6:29:11:9d: ea:3e:ec:72:f5:a6:8d:34:f1:32:cd:1a:d4:ba:19: 60:5f:ef:dc:2f:e0:ba:88:da:f9:67:d6:7f:ee:84: a8:e0:10:68:2b:d8:5a:62:90:39:ab:f6:08:d2:17: 66:45:69:c3:8d:e3:77:fe:c4:4d:d8:0d:89:69:3f: 95:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D7:07:7E:02:72:48:12:DE:0C:78:EC:B3:A2:52:22:C7:84:A4:2C X509v3 Authority Key Identifier: keyid:DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:5a:77:94:8c:c3:8a:60:2a:5b:5d:53:cc:21:b4:77:13:f3: 7a:8e:77:70:cb:1a:f9:86:95:d0:18:74:54:65:27:89:e8:20: 79:28:e3:b8:b0:14:90:3c:d8:e3:27:29:34:f6:59:b9:e2:57: a8:88:f4:fb:be:80:cb:65:8c:ff:6a:0b:5c:10:64:99:b4:61: e8:85:9b:fb:37:7f:5c:79:0b:35:09:63:fb:0a:94:50:6f:35: f5:48:15:22:62:d5:95:3f:2f:50:bf:a9:68:f8:40:c2:df:84: cd:7b:27:02:44:db:7b:0d:14:be:02:d0:8c:fa:3b:5b:38:fe: c9:9d:cf:42:9f:00:eb:d1:90:ac:00:5e:3d:cb:1b:ec:ea:c4: ca:8e:bd:18:bb:b0:fb:83:04:68:b0:ef:77:d5:2d:90:59:75: b4:24:4d:1f:55:04:4d:29:b4:00:b9:81:5b:0f:3a:13:f1:92: 21:de:c1:29:ea:b0:80:5a:d3:1d:51:44:a2:03:46:57:9b:9c: 09:f6:ad:32:26:30:34:9e:ab:bf:ad:13:84:e3:73:ae:c1:56: de:e2:03:2e:5d:b6:56:1c:c2:64:05:b2:5c:f7:ac:cb:3b:6b: 0a:e2:a9:ad:81:0f:6c:f6:7a:a1:d0:fd:86:79:cb:fc:7d:f3: 6a:53:39:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHT1ZLf00Zi6TzfpmLMdhx0TUDMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGODhCNDM1ODM3MjYxQjEzREUyMjQ4RTJBODU2QUI0 NUNFQ0MwQjAeFw0yNjA3MjQwODU1MzBaFw0yNjA3MjUxMDA5MzBaMDMxMTAvBgNV BAMTKEEwRDcwNzdFMDI3MjQ4MTJERTBDNzhFQ0IzQTI1MjIyQzc4NEE0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnQU9fC9RdskOBMOlQ9CSPii6L WCIBr29JnMPKGHMoLUitsnDBmkPdWBwHhGTVNU8uHNXRHdC4eNpXZqGqI+WiEU2l wVD3ywKZxfKOIx9mrEN9QW6pmm3Bxdvrqy8YILjmYWBYcYPnqUcBStcF+vjA5jJO 1ax1MX04QNUGjN3MNjRTm5rwIlFJEvjyGWmlc4fWY3A67GUf4dUS3KaaYQKnacrz 0OlICbZy2i8ndxm25BDgykWmnz6vm/t+PeBY1ikRneo+7HL1po008TLNGtS6GWBf 79wv4LqI2vln1n/uhKjgEGgr2FpikDmr9gjSF2ZFacON43f+xE3YDYlpP5U9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoNcHfgJySBLeDHjss6JSIseEpCwwHwYDVR0j BBgwFoAU3fiLQ1g3JhsT3iJI4qhWq0XOzAswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUzNGQyZDgtMzRhZi00NzU3LThhZDktOTJkYTM1ZDkyMTY4LzAvRERGODhCNDM1 ODM3MjYxQjEzREUyMjQ4RTJBODU2QUI0NUNFQ0MwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREY4OEI0MzU4MzcyNjFCMTNERTIyNDhFMkE4NTZBQjQ1Q0VD QzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvRERGODhCNDM1ODM3MjYxQjEzREUyMjQ4RTJBODU2 QUI0NUNFQ0MwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1ad5SMw4pgKltdU8whtHcT83qOd3DLGvmG ldAYdFRlJ4noIHko47iwFJA82OMnKTT2WbniV6iI9Pu+gMtljP9qC1wQZJm0YeiF m/s3f1x5CzUJY/sKlFBvNfVIFSJi1ZU/L1C/qWj4QMLfhM17JwJE23sNFL4C0Iz6 O1s4/smdz0KfAOvRkKwAXj3LG+zqxMqOvRi7sPuDBGiw73fVLZBZdbQkTR9VBE0p tAC5gVsPOhPxkiHewSnqsIBa0x1RRKIDRlebnAn2rTImMDSeq7+tE4Tjc67BVt7i Ay5dtlYcwmQFslz3rMs7awriqa2BD2z2eqHQ/YZ5y/x982pTOVY= -----END CERTIFICATE-----Generated at Fri Jul 24 10:37:44 2026 by rpki-client