$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft File: DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft (raw, json) Hash identifier: ODGtuBctPCVs3d4917fA2lx/ixeCpt5QsX8Rm+ByrPY= Subject key identifier: F7:13:E3:A0:6D:7C:47:4E:95:94:C3:AD:B4:78:F6:CE:1D:2E:91:64 Authority key identifier: DD:4A:D6:DE:56:A2:26:7F:C5:F2:7E:4A:EA:ED:44:4B:28:71:57:22 Certificate issuer: /CN=DD4AD6DE56A2267FC5F27E4AEAED444B28715722 Certificate serial: 503E313F556D6BCAE7707D64ED2E305658E5331A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 20:09:40 +0000 Manifest this update: Thu 23 Jul 2026 20:04:40 +0000 Manifest next update: Fri 24 Jul 2026 21:11:40 +0000 Files and hashes: 1: DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl (hash: KpBK9xWfK8RgdI1iV3G9Q6CCKCYqBZkL3QvevafNZOs=) 2: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: tmRs1+AlBzBvmjJrjjc0kMDSK7a2kwnxBLvtC10ciHE=) 3: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: 2aIQ3QBHP7J+Ky6wBfEPSC4GdD2wiOq9JYf33DaTyyo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:3e:31:3f:55:6d:6b:ca:e7:70:7d:64:ed:2e:30:56:58:e5:33:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4AD6DE56A2267FC5F27E4AEAED444B28715722 Validity Not Before: Jul 23 20:04:40 2026 GMT Not After : Jul 24 21:11:40 2026 GMT Subject: CN=F713E3A06D7C474E9594C3ADB478F6CE1D2E9164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2a:12:cb:b2:64:79:29:39:36:87:16:fb:f8: 23:2e:cb:e5:6d:13:8b:e8:07:44:48:d0:2b:5d:b3: 12:0a:33:35:2e:18:52:4c:f9:60:de:3c:38:d2:18: fa:9d:84:dd:1a:d1:33:3b:dd:da:08:19:6d:4e:f3: 79:db:83:0a:27:8e:12:2e:bc:a6:d1:cc:65:f1:33: 04:fa:51:d2:8f:19:5f:1c:bb:c0:91:f0:a0:b1:5e: 22:22:cb:95:25:ce:b8:32:cc:e1:24:f9:1e:92:71: 92:eb:35:2b:e8:09:49:34:30:65:ef:be:93:c4:3f: 81:97:f3:4d:60:b5:2e:c7:b8:25:a1:f9:2e:25:43: ca:d2:bb:fa:5c:f8:1c:e8:5d:2f:19:17:e7:69:28: 08:0d:51:11:3a:32:b0:be:cb:62:8c:1c:f5:b0:6f: 30:52:07:01:9b:40:4f:6d:ec:31:de:b6:7e:d2:dd: c6:ae:11:a3:f4:08:76:30:19:07:58:eb:b7:53:3b: 1d:e6:a0:e7:89:bf:54:27:f0:46:ae:f5:8e:28:95: 44:f4:1e:df:62:c5:4d:59:81:a0:85:da:51:df:02: e2:75:38:a4:a9:e9:57:30:ef:4e:67:54:ae:a4:a5: 8b:c1:82:2c:0b:36:b7:5f:23:e0:81:78:59:7b:7e: 9d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:13:E3:A0:6D:7C:47:4E:95:94:C3:AD:B4:78:F6:CE:1D:2E:91:64 X509v3 Authority Key Identifier: keyid:DD:4A:D6:DE:56:A2:26:7F:C5:F2:7E:4A:EA:ED:44:4B:28:71:57:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:7b:a7:9d:9f:8c:78:85:8e:ea:c6:ec:b9:5f:00:d3:b5:25: d1:6d:81:f7:44:00:fe:99:74:d4:63:10:45:16:f5:48:e4:07: dc:6b:7d:42:57:4d:16:80:d9:d1:94:68:f0:56:5e:79:b5:ba: 4b:4c:8a:33:a4:7c:e3:63:9c:73:78:8d:b2:57:64:2f:00:4d: 3c:68:cb:55:d9:40:a3:b9:84:4e:e2:d8:9a:fe:53:7b:91:bf: 55:90:34:08:39:9d:42:ef:3b:ea:21:42:7d:e1:77:65:dd:9a: e6:d9:bd:75:a0:91:41:ce:d9:87:3e:7f:2d:78:32:d9:b6:eb: 51:ca:ee:6a:1e:b9:09:bb:ce:a7:61:67:5a:ae:7a:80:34:f3: f0:a2:fb:09:9f:97:e9:35:e3:1c:d7:6a:67:02:36:83:61:88: c5:27:e5:7b:73:f1:91:21:e5:d5:5c:ce:9b:b4:62:0c:94:23: bf:d2:8d:9f:23:5e:1b:fa:52:87:6a:c0:ba:07:47:b3:35:a7: 7d:c6:0e:bd:12:cf:08:f7:df:1c:0a:8b:5e:65:b2:22:44:e5: 9b:26:f4:86:d0:a9:25:5f:d6:ff:50:6f:69:b6:64:a1:e1:18: 79:d5:b6:b2:22:64:ac:f9:cc:63:41:25:8e:e1:b7:7f:a4:69: 22:35:8b:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUD4xP1Vta8rncH1k7S4wVljlMxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0QUQ2REU1NkEyMjY3RkM1RjI3RTRBRUFFRDQ0NEIy ODcxNTcyMjAeFw0yNjA3MjMyMDA0NDBaFw0yNjA3MjQyMTExNDBaMDMxMTAvBgNV BAMTKEY3MTNFM0EwNkQ3QzQ3NEU5NTk0QzNBREI0NzhGNkNFMUQyRTkxNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwKhLLsmR5KTk2hxb7+CMuy+Vt E4voB0RI0CtdsxIKMzUuGFJM+WDePDjSGPqdhN0a0TM73doIGW1O83nbgwonjhIu vKbRzGXxMwT6UdKPGV8cu8CR8KCxXiIiy5UlzrgyzOEk+R6ScZLrNSvoCUk0MGXv vpPEP4GX801gtS7HuCWh+S4lQ8rSu/pc+BzoXS8ZF+dpKAgNURE6MrC+y2KMHPWw bzBSBwGbQE9t7DHetn7S3cauEaP0CHYwGQdY67dTOx3moOeJv1Qn8Eau9Y4olUT0 Ht9ixU1ZgaCF2lHfAuJ1OKSp6Vcw705nVK6kpYvBgiwLNrdfI+CBeFl7fp0PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9xPjoG18R06VlMOttHj2zh0ukWQwHwYDVR0j BBgwFoAU3UrW3laiJn/F8n5K6u1ESyhxVyIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU4OWU4NTktM2MyYy00YTA5LWE0YTktMzczMjNlYTVkZTIyLzAvREQ0QUQ2REU1 NkEyMjY3RkM1RjI3RTRBRUFFRDQ0NEIyODcxNTcyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDRBRDZERTU2QTIyNjdGQzVGMjdFNEFFQUVENDQ0QjI4NzE1 NzIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU4OWU4NTktM2MyYy00YTA5LWE0 YTktMzczMjNlYTVkZTIyLzAvREQ0QUQ2REU1NkEyMjY3RkM1RjI3RTRBRUFFRDQ0 NEIyODcxNTcyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEN7p52fjHiFjurG7LlfANO1JdFtgfdEAP6Z dNRjEEUW9UjkB9xrfUJXTRaA2dGUaPBWXnm1uktMijOkfONjnHN4jbJXZC8ATTxo y1XZQKO5hE7i2Jr+U3uRv1WQNAg5nULvO+ohQn3hd2XdmubZvXWgkUHO2Yc+fy14 Mtm261HK7moeuQm7zqdhZ1queoA08/Ci+wmfl+k14xzXamcCNoNhiMUn5Xtz8ZEh 5dVczpu0YgyUI7/SjZ8jXhv6UodqwLoHR7M1p33GDr0Szwj33xwKi15lsiJE5Zsm 9IbQqSVf1v9Qb2m2ZKHhGHnVtrIiZKz5zGNBJY7ht3+kaSI1iyk= -----END CERTIFICATE-----Generated at Fri Jul 24 03:06:12 2026 by rpki-client