$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft File: DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft (raw, json) Hash identifier: 86kZVCliFREqgM4ffYdz/e0psscxrxOgDKLWN7z5jqQ= Subject key identifier: BB:6B:3F:ED:E8:7E:21:C0:77:41:D1:FA:94:57:AA:22:A8:A5:1E:83 Authority key identifier: DD:4A:D6:DE:56:A2:26:7F:C5:F2:7E:4A:EA:ED:44:4B:28:71:57:22 Certificate issuer: /CN=DD4AD6DE56A2267FC5F27E4AEAED444B28715722 Certificate serial: 1A276A17CFB7FE64979438206DFAA865659A86A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:15:04 +0000 Manifest this update: Tue 12 May 2026 19:10:04 +0000 Manifest next update: Wed 13 May 2026 22:32:04 +0000 Files and hashes: 1: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: 2aIQ3QBHP7J+Ky6wBfEPSC4GdD2wiOq9JYf33DaTyyo=) 2: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: tmRs1+AlBzBvmjJrjjc0kMDSK7a2kwnxBLvtC10ciHE=) 3: DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl (hash: Y183avhX/7ANYC9SyMepMRdpDq8uVbpJ0Nw/I5P+UL0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:27:6a:17:cf:b7:fe:64:97:94:38:20:6d:fa:a8:65:65:9a:86:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4AD6DE56A2267FC5F27E4AEAED444B28715722 Validity Not Before: May 12 19:10:04 2026 GMT Not After : May 13 22:32:04 2026 GMT Subject: CN=BB6B3FEDE87E21C07741D1FA9457AA22A8A51E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:22:ae:9d:be:aa:88:9a:9c:fb:ce:6c:ad: f9:f9:13:82:fc:44:76:72:5a:5e:6b:dd:88:75:a4: 65:27:9d:4d:e1:8e:91:07:f6:b7:f4:34:e8:4b:3a: 31:3e:56:a8:51:d1:28:60:a4:fb:0d:f9:5f:e5:2b: 5a:ed:36:62:56:55:21:ff:f9:f4:b2:f1:e5:e2:85: 42:c0:89:ee:aa:85:e2:0c:aa:80:c0:4d:9f:af:00: 7a:fd:45:08:9d:3a:01:e0:23:74:74:33:ba:26:09: 7c:45:64:f4:15:6a:f5:2d:23:cd:a9:2e:17:b2:b0: bc:90:76:0b:02:bf:36:a1:91:2c:05:01:4b:75:25: 2d:36:4a:8a:2e:f7:4f:86:a7:4e:ef:e0:d7:e7:04: cb:5e:bd:16:aa:b4:94:93:eb:90:33:1c:8b:af:34: 5e:d4:8d:2b:99:27:1b:23:87:c0:f4:73:57:fe:b6: 35:f5:6f:e0:34:ac:40:de:56:c2:e0:89:85:5c:bf: 9f:51:81:58:b9:76:52:8c:3d:09:7e:59:39:2d:20: 73:8e:f6:1d:c8:4f:46:30:8b:27:b1:45:4f:4f:07: 7b:8e:f2:77:59:31:97:a7:47:ee:ea:21:af:89:56: 90:b1:f6:88:b8:00:f7:5c:4e:28:5e:6b:19:85:99: 34:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6B:3F:ED:E8:7E:21:C0:77:41:D1:FA:94:57:AA:22:A8:A5:1E:83 X509v3 Authority Key Identifier: keyid:DD:4A:D6:DE:56:A2:26:7F:C5:F2:7E:4A:EA:ED:44:4B:28:71:57:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:f6:fd:e9:81:ec:5f:b5:ed:bd:3f:85:61:1d:4d:62:4f:4b: 1c:33:94:7d:16:6d:0b:47:c9:ce:dc:e1:ef:10:8d:03:f1:35: 98:f5:b3:1c:af:90:fe:1f:b5:f2:1a:97:33:9e:6b:7a:e0:62: 01:8a:7d:4a:d1:19:a0:c5:73:e7:70:4b:c1:df:ff:b3:fd:08: ae:10:a7:c2:76:33:bf:77:c7:41:56:35:25:4b:2c:ec:51:99: 9a:94:c0:0b:c9:42:5b:8f:22:e7:cb:e4:69:64:fb:e9:71:79: 92:3c:31:e0:c2:84:77:bf:1f:e5:3d:0b:bc:c2:dd:43:db:c3: 73:ed:c5:9f:11:14:08:2d:d4:97:cc:33:d9:bc:24:c5:b8:d4: fe:b4:e9:6d:ef:08:4d:a4:46:da:f8:b9:c1:41:c7:6c:b1:e3: f9:3d:a3:90:78:a9:8c:4e:4e:15:29:36:50:7a:ce:d3:1c:bf: 9a:f6:49:54:3a:b8:99:24:f7:f9:41:af:f7:e1:64:cc:77:fa: 3b:26:2a:8e:fa:01:08:53:a1:b4:da:27:98:70:99:10:1e:d2: 00:c4:9f:17:b8:26:f4:fe:20:b3:76:fe:de:14:53:f2:d4:6f: 29:f0:32:dd:1e:9e:73:b6:10:86:06:4f:53:23:27:38:c7:73: 8a:19:e5:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGidqF8+3/mSXlDggbfqoZWWahqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0QUQ2REU1NkEyMjY3RkM1RjI3RTRBRUFFRDQ0NEIy ODcxNTcyMjAeFw0yNjA1MTIxOTEwMDRaFw0yNjA1MTMyMjMyMDRaMDMxMTAvBgNV BAMTKEJCNkIzRkVERTg3RTIxQzA3NzQxRDFGQTk0NTdBQTIyQThBNTFFODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3QyKunb6qiJqc+85srfn5E4L8 RHZyWl5r3Yh1pGUnnU3hjpEH9rf0NOhLOjE+VqhR0ShgpPsN+V/lK1rtNmJWVSH/ +fSy8eXihULAie6qheIMqoDATZ+vAHr9RQidOgHgI3R0M7omCXxFZPQVavUtI82p LheysLyQdgsCvzahkSwFAUt1JS02Soou90+Gp07v4NfnBMtevRaqtJST65AzHIuv NF7UjSuZJxsjh8D0c1f+tjX1b+A0rEDeVsLgiYVcv59RgVi5dlKMPQl+WTktIHOO 9h3IT0YwiyexRU9PB3uO8ndZMZenR+7qIa+JVpCx9oi4APdcTiheaxmFmTRPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu2s/7eh+IcB3QdH6lFeqIqilHoMwHwYDVR0j BBgwFoAU3UrW3laiJn/F8n5K6u1ESyhxVyIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU4OWU4NTktM2MyYy00YTA5LWE0YTktMzczMjNlYTVkZTIyLzAvREQ0QUQ2REU1 NkEyMjY3RkM1RjI3RTRBRUFFRDQ0NEIyODcxNTcyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDRBRDZERTU2QTIyNjdGQzVGMjdFNEFFQUVENDQ0QjI4NzE1 NzIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU4OWU4NTktM2MyYy00YTA5LWE0 YTktMzczMjNlYTVkZTIyLzAvREQ0QUQ2REU1NkEyMjY3RkM1RjI3RTRBRUFFRDQ0 NEIyODcxNTcyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHP2/emB7F+17b0/hWEdTWJPSxwzlH0WbQtH yc7c4e8QjQPxNZj1sxyvkP4ftfIalzOea3rgYgGKfUrRGaDFc+dwS8Hf/7P9CK4Q p8J2M793x0FWNSVLLOxRmZqUwAvJQluPIufL5Glk++lxeZI8MeDChHe/H+U9C7zC 3UPbw3PtxZ8RFAgt1JfMM9m8JMW41P606W3vCE2kRtr4ucFBx2yx4/k9o5B4qYxO ThUpNlB6ztMcv5r2SVQ6uJkk9/lBr/fhZMx3+jsmKo76AQhTobTaJ5hwmRAe0gDE nxe4JvT+ILN2/t4UU/LUbynwMt0ennO2EIYGT1MjJzjHc4oZ5U0= -----END CERTIFICATE-----Generated at Wed May 13 02:49:21 2026 by rpki-client