$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft File: DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft (raw, json) Hash identifier: Bv+o7NqFqdTG95Fha3X+/cdXLSLeSrcGKYhijB+E+Z8= Subject key identifier: 93:FA:10:3F:58:65:FB:AD:93:4E:5F:DA:A1:A7:9E:53:B7:7F:36:2F Authority key identifier: DD:4A:D6:DE:56:A2:26:7F:C5:F2:7E:4A:EA:ED:44:4B:28:71:57:22 Certificate issuer: /CN=DD4AD6DE56A2267FC5F27E4AEAED444B28715722 Certificate serial: 4E8EF164F46C6A0439030F2229718F58DC5B21C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 05:11:50 +0000 Manifest this update: Fri 25 Sep 2026 05:06:50 +0000 Manifest next update: Sat 26 Sep 2026 08:16:50 +0000 Files and hashes: 1: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: tmRs1+AlBzBvmjJrjjc0kMDSK7a2kwnxBLvtC10ciHE=) 2: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: 2aIQ3QBHP7J+Ky6wBfEPSC4GdD2wiOq9JYf33DaTyyo=) 3: DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl (hash: 4jgl4wQIH/9LcqA3SVtPPwSTGBpr57LKcw1qziqa3wA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 08:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8e:f1:64:f4:6c:6a:04:39:03:0f:22:29:71:8f:58:dc:5b:21:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4AD6DE56A2267FC5F27E4AEAED444B28715722 Validity Not Before: Sep 25 05:06:50 2026 GMT Not After : Sep 26 08:16:50 2026 GMT Subject: CN=93FA103F5865FBAD934E5FDAA1A79E53B77F362F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:e9:d1:be:62:a4:19:16:93:43:97:f8:53: 57:85:f4:b6:fa:a0:14:58:30:49:be:76:57:3c:ba: c0:33:f9:25:82:9d:e8:a7:9f:b0:89:4e:9f:dc:e9: ae:0a:4d:65:c4:7a:a2:62:9f:32:6f:e2:ef:44:ca: 2c:fd:18:e9:6f:01:61:28:b9:91:95:48:93:b3:ba: f1:d1:b8:51:61:9c:42:d6:19:1e:3f:06:14:37:64: 0c:8e:cd:54:8e:1b:54:af:e5:4e:58:a4:4b:37:f7: d6:a9:56:af:d4:25:a9:bf:d7:0c:c6:3f:d9:af:d1: a3:7f:8d:e9:fe:ce:fd:0d:08:bd:7d:85:ee:b9:f6: 11:b1:c1:a9:df:47:98:54:2f:00:1a:2f:f1:32:8f: 20:cc:15:66:98:f2:5f:29:df:05:9a:23:77:1f:7d: 7c:20:68:e2:c3:54:53:07:6e:01:e5:e2:d8:d4:36: 1a:0b:e6:86:7b:69:66:9e:89:f1:f1:38:b4:fd:7f: 27:e3:3b:07:6a:da:79:ab:87:8c:c1:c0:9a:31:c0: 9c:38:b9:52:89:2c:47:2c:b7:45:f4:ce:b1:f7:a1: a5:b2:ce:87:91:7b:19:0c:48:1d:87:d5:28:2a:1f: af:1a:0b:27:a2:8d:63:4b:a4:d1:b6:06:6e:fd:cf: 4b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FA:10:3F:58:65:FB:AD:93:4E:5F:DA:A1:A7:9E:53:B7:7F:36:2F X509v3 Authority Key Identifier: keyid:DD:4A:D6:DE:56:A2:26:7F:C5:F2:7E:4A:EA:ED:44:4B:28:71:57:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f0:2a:01:b0:47:d2:df:c4:5b:9c:1d:0c:0a:b4:05:a7:d4: cb:b6:04:c4:b6:24:45:3b:e9:b9:e7:5b:f9:f6:8c:aa:f5:33: c3:f8:a9:01:42:4b:48:81:11:7e:47:58:ea:e1:ac:b7:0d:9e: 95:59:c7:f2:64:fb:09:a7:54:9c:00:87:22:12:6c:c5:89:55: ef:81:ea:86:ab:e8:f7:ed:60:2d:8c:7f:37:f3:c3:4b:c8:77: ab:4e:04:dc:11:e0:60:be:d6:4e:b6:da:c5:a3:70:43:1b:b4: e5:7b:e0:c5:7a:10:b8:d3:0a:f3:ba:43:58:4c:c8:a4:c4:d4: 59:db:52:ff:14:8d:bf:21:48:5d:c1:b4:47:c1:48:b8:95:66: c3:19:05:1a:0b:d9:9a:03:88:a4:cf:5c:c7:fa:2d:93:16:96: d3:53:b8:3c:c2:e0:33:a9:85:40:e7:dd:fb:18:72:fd:34:ac: 09:2d:36:d2:56:e1:0b:b1:ae:29:09:4d:5a:8b:08:f1:71:1a: a5:b9:6d:90:19:5b:1b:aa:5a:85:10:57:3a:90:12:0b:e1:d9: 5c:7b:cf:20:dd:eb:25:1f:5b:15:40:26:c6:a9:12:aa:9a:3e: d4:39:63:7f:ea:f0:05:2d:31:91:d9:86:17:b0:84:0f:9e:44: 68:8d:7b:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTo7xZPRsagQ5Aw8iKXGPWNxbIcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0QUQ2REU1NkEyMjY3RkM1RjI3RTRBRUFFRDQ0NEIy ODcxNTcyMjAeFw0yNjA5MjUwNTA2NTBaFw0yNjA5MjYwODE2NTBaMDMxMTAvBgNV BAMTKDkzRkExMDNGNTg2NUZCQUQ5MzRFNUZEQUExQTc5RTUzQjc3RjM2MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKenRvmKkGRaTQ5f4U1eF9Lb6 oBRYMEm+dlc8usAz+SWCneinn7CJTp/c6a4KTWXEeqJinzJv4u9Eyiz9GOlvAWEo uZGVSJOzuvHRuFFhnELWGR4/BhQ3ZAyOzVSOG1Sv5U5YpEs399apVq/UJam/1wzG P9mv0aN/jen+zv0NCL19he659hGxwanfR5hULwAaL/EyjyDMFWaY8l8p3wWaI3cf fXwgaOLDVFMHbgHl4tjUNhoL5oZ7aWaeifHxOLT9fyfjOwdq2nmrh4zBwJoxwJw4 uVKJLEcst0X0zrH3oaWyzoeRexkMSB2H1SgqH68aCyeijWNLpNG2Bm79z0tjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk/oQP1hl+62TTl/aoaeeU7d/Ni8wHwYDVR0j BBgwFoAU3UrW3laiJn/F8n5K6u1ESyhxVyIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU4OWU4NTktM2MyYy00YTA5LWE0YTktMzczMjNlYTVkZTIyLzAvREQ0QUQ2REU1 NkEyMjY3RkM1RjI3RTRBRUFFRDQ0NEIyODcxNTcyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDRBRDZERTU2QTIyNjdGQzVGMjdFNEFFQUVENDQ0QjI4NzE1 NzIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU4OWU4NTktM2MyYy00YTA5LWE0 YTktMzczMjNlYTVkZTIyLzAvREQ0QUQ2REU1NkEyMjY3RkM1RjI3RTRBRUFFRDQ0 NEIyODcxNTcyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7wKgGwR9LfxFucHQwKtAWn1Mu2BMS2JEU7 6bnnW/n2jKr1M8P4qQFCS0iBEX5HWOrhrLcNnpVZx/Jk+wmnVJwAhyISbMWJVe+B 6oar6PftYC2Mfzfzw0vId6tOBNwR4GC+1k622sWjcEMbtOV74MV6ELjTCvO6Q1hM yKTE1FnbUv8Ujb8hSF3BtEfBSLiVZsMZBRoL2ZoDiKTPXMf6LZMWltNTuDzC4DOp hUDn3fsYcv00rAktNtJW4QuxrikJTVqLCPFxGqW5bZAZWxuqWoUQVzqQEgvh2Vx7 zyDd6yUfWxVAJsapEqqaPtQ5Y3/q8AUtMZHZhhewhA+eRGiNexg= -----END CERTIFICATE-----Generated at Fri Sep 25 14:23:26 2026 by rpki-client