$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft File: DDF88B435837261B13DE2248E2A856AB45CECC0B.mft (raw, json) Hash identifier: A9kB5R1ZmWfbZN3pKNJLonkORMOD4HPClVCN37IbWXg= Subject key identifier: 48:E6:06:09:54:BD:AD:F5:43:F7:72:2C:3D:2E:7E:FE:AE:0F:5E:69 Authority key identifier: DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B Certificate issuer: /CN=DDF88B435837261B13DE2248E2A856AB45CECC0B Certificate serial: 74F919E5379B96FF9F7A9798031F677F3AD99B15 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:58:18 +0000 Manifest this update: Tue 12 May 2026 20:53:18 +0000 Manifest next update: Thu 14 May 2026 00:31:18 +0000 Files and hashes: 1: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: yfH9V+v7CqjVW6BwpLw/uKH0EvFG6umOPa6WyO7b7X0=) 2: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: fhnpPa+v9pVR6utlcEhHmU/vCyGDDmaJK9JqRPVVGlI=) 3: DDF88B435837261B13DE2248E2A856AB45CECC0B.crl (hash: 4iCldheywlcWDQTIBBnpsgcygoAlXF4u7ZhBdL4ndd8=) 4: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: edm1TV/7umFF7e1kNKXURZcIakqU8CWQ1lkJU/ljN7I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f9:19:e5:37:9b:96:ff:9f:7a:97:98:03:1f:67:7f:3a:d9:9b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDF88B435837261B13DE2248E2A856AB45CECC0B Validity Not Before: May 12 20:53:18 2026 GMT Not After : May 14 00:31:18 2026 GMT Subject: CN=48E6060954BDADF543F7722C3D2E7EFEAE0F5E69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:20:3c:88:fc:4b:86:b1:51:d8:9b:46:c0:c1: 1e:d0:86:73:bb:f6:48:53:b5:a5:08:e6:c8:15:51: 44:3f:f3:62:7b:89:a0:55:fa:a7:60:23:93:3b:de: 46:f3:e5:fa:8c:69:06:6e:b6:cf:c5:57:70:fc:1c: 5b:c5:84:b5:6a:8f:82:b0:a9:c0:43:98:b2:79:23: 4a:6d:16:fb:3d:cd:cb:c0:40:2a:6f:eb:7e:35:51: 90:0b:7d:5a:41:d0:ff:82:1b:bf:60:7d:ca:88:2b: 01:43:72:6b:e7:0a:4a:e9:84:6f:9f:24:35:7f:f4: 09:7f:36:a6:92:16:55:6b:4e:6a:2c:92:e4:e7:50: 36:be:77:8a:6d:53:e0:6f:a1:d0:92:b2:be:e8:05: 8a:db:fd:54:8a:dd:6d:af:30:12:4f:96:10:17:62: a6:68:48:6c:16:54:ec:8d:ca:dd:af:0a:b2:ba:16: 72:9a:6d:83:6a:f2:39:07:0c:47:2e:c0:20:7d:99: ae:5e:73:bb:6e:b2:a4:02:8a:be:b5:1f:56:b8:5f: 10:66:8e:ae:8b:ef:7b:e3:b8:d0:37:b5:66:eb:1d: 73:cd:af:d6:0d:34:a8:ef:fa:ff:38:45:e5:28:d5: a8:b3:da:d7:91:e7:c6:c8:ba:ed:03:6b:7f:53:63: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E6:06:09:54:BD:AD:F5:43:F7:72:2C:3D:2E:7E:FE:AE:0F:5E:69 X509v3 Authority Key Identifier: keyid:DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5d:e3:f5:ee:32:5b:d8:07:16:1e:e7:9c:50:41:8c:5e:84: 62:c3:f3:6b:3c:ad:fe:fe:14:63:e4:9c:ee:e4:33:22:01:9d: 4e:ad:8b:06:ee:d7:81:f9:f9:68:55:f0:16:42:04:ba:35:78: 2c:f8:ca:05:c5:ec:55:ee:83:ff:dc:07:d0:12:7c:86:84:35: 1d:e4:16:d7:e7:19:7d:f4:ce:f8:e3:15:8b:43:9a:0a:1d:97: 04:a7:0b:5e:d5:38:fd:db:d4:88:0e:d5:f6:30:32:ad:3a:1b: 01:54:75:1c:10:f7:2d:0d:35:1e:78:ba:3c:b7:6d:5c:89:56: 7b:05:d9:ad:e7:19:3a:3a:d1:e2:26:09:3a:09:57:37:da:12: 16:4b:33:26:a2:81:9e:13:52:64:53:c5:8f:21:e8:f3:82:58: c7:c1:fd:4c:90:18:ac:4b:d2:0d:43:e5:87:30:9d:d1:8e:4b: b2:0c:1b:e9:1d:0f:c0:e2:1e:83:c6:bf:c3:7d:7f:d2:0c:c0: e7:c6:92:77:ef:a5:a3:19:94:e2:a2:78:1c:32:2d:14:11:f5: 79:9a:f5:6e:c6:cd:27:00:40:46:91:fe:b9:63:e5:3c:1c:dc: d4:7e:02:c9:4e:10:72:96:9e:db:3f:6f:9d:69:1a:8b:81:c8: 6b:1c:09:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdPkZ5Teblv+fepeYAx9nfzrZmxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGODhCNDM1ODM3MjYxQjEzREUyMjQ4RTJBODU2QUI0 NUNFQ0MwQjAeFw0yNjA1MTIyMDUzMThaFw0yNjA1MTQwMDMxMThaMDMxMTAvBgNV BAMTKDQ4RTYwNjA5NTRCREFERjU0M0Y3NzIyQzNEMkU3RUZFQUUwRjVFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPIDyI/EuGsVHYm0bAwR7QhnO7 9khTtaUI5sgVUUQ/82J7iaBV+qdgI5M73kbz5fqMaQZuts/FV3D8HFvFhLVqj4Kw qcBDmLJ5I0ptFvs9zcvAQCpv6341UZALfVpB0P+CG79gfcqIKwFDcmvnCkrphG+f JDV/9Al/NqaSFlVrTmoskuTnUDa+d4ptU+BvodCSsr7oBYrb/VSK3W2vMBJPlhAX YqZoSGwWVOyNyt2vCrK6FnKabYNq8jkHDEcuwCB9ma5ec7tusqQCir61H1a4XxBm jq6L73vjuNA3tWbrHXPNr9YNNKjv+v84ReUo1aiz2teR58bIuu0Da39TY/sdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSOYGCVS9rfVD93IsPS5+/q4PXmkwHwYDVR0j BBgwFoAU3fiLQ1g3JhsT3iJI4qhWq0XOzAswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUzNGQyZDgtMzRhZi00NzU3LThhZDktOTJkYTM1ZDkyMTY4LzAvRERGODhCNDM1 ODM3MjYxQjEzREUyMjQ4RTJBODU2QUI0NUNFQ0MwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREY4OEI0MzU4MzcyNjFCMTNERTIyNDhFMkE4NTZBQjQ1Q0VD QzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvRERGODhCNDM1ODM3MjYxQjEzREUyMjQ4RTJBODU2 QUI0NUNFQ0MwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5d4/XuMlvYBxYe55xQQYxehGLD82s8rf7+ FGPknO7kMyIBnU6tiwbu14H5+WhV8BZCBLo1eCz4ygXF7FXug//cB9ASfIaENR3k FtfnGX30zvjjFYtDmgodlwSnC17VOP3b1IgO1fYwMq06GwFUdRwQ9y0NNR54ujy3 bVyJVnsF2a3nGTo60eImCToJVzfaEhZLMyaigZ4TUmRTxY8h6POCWMfB/UyQGKxL 0g1D5YcwndGOS7IMG+kdD8DiHoPGv8N9f9IMwOfGknfvpaMZlOKieBwyLRQR9Xma 9W7GzScAQEaR/rlj5Twc3NR+AslOEHKWnts/b51pGouByGscCdA= -----END CERTIFICATE-----Generated at Wed May 13 02:19:26 2026 by rpki-client