$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft File: DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft (raw, json) Hash identifier: bbKqtgLp2OGOOC9RmulUiCETlKBhdrDq2oCr3rtHhdM= Subject key identifier: 19:39:B6:13:9D:57:BD:EB:FC:36:E0:DF:9A:61:1C:69:C9:2E:36:EF Authority key identifier: DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA Certificate issuer: /CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA Certificate serial: 03386F952014F18ADD6EBC63255885C036C87EFA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 03:35:06 +0000 Manifest this update: Thu 24 Sep 2026 03:30:06 +0000 Manifest next update: Fri 25 Sep 2026 05:00:06 +0000 Files and hashes: 1: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (hash: /I/1xW7rsK7gJcZw8w0G3A5/hDeO0oqDDXrZo6p7Qtc=) 2: DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl (hash: 7CD+z9bvfv6PRYhvbKs5j51g7DD6alLh55G1iA0GGTw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:38:6f:95:20:14:f1:8a:dd:6e:bc:63:25:58:85:c0:36:c8:7e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA Validity Not Before: Sep 24 03:30:06 2026 GMT Not After : Sep 25 05:00:06 2026 GMT Subject: CN=1939B6139D57BDEBFC36E0DF9A611C69C92E36EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:56:78:c3:aa:5d:a7:89:dd:b2:4c:61:cc:41: 90:a8:11:bf:85:c2:b7:b3:2a:4a:31:e9:98:87:0b: 63:2c:39:3e:42:59:e2:7a:c5:f3:ac:e5:8f:46:db: be:04:43:93:da:1e:3b:ab:c9:67:b3:f8:63:e6:ea: c6:8f:e7:dd:9c:45:1a:33:56:95:99:ce:c5:c5:fa: 99:ab:a1:0d:20:f7:53:60:56:3c:8c:ca:51:7e:e9: dd:8c:85:67:8f:cd:ff:a8:a3:b6:d4:2a:39:7f:09: 22:92:e0:ca:3d:f5:44:a2:7e:91:a7:ea:b2:e2:46: 74:73:f2:fb:15:f0:d4:cf:69:6e:f1:93:68:f3:75: bf:37:2a:98:9d:ef:53:90:e1:fb:81:6d:78:f2:4a: 70:ae:52:c1:76:40:04:00:1e:c3:70:cf:aa:b6:19: 01:33:da:a6:6f:5a:dd:c7:9c:ae:67:4a:09:34:06: 88:29:d2:f5:ba:32:ef:d3:86:95:bb:c1:79:12:14: ec:59:3f:5d:4b:a2:5a:df:6c:55:8b:38:d4:5b:17: 8f:4d:1f:00:f1:3c:ec:08:a6:2b:cd:43:c0:1e:41: e4:99:19:8a:6c:cf:29:52:2d:81:ae:2a:cf:8d:fc: 25:61:16:33:0f:58:cc:da:13:31:c1:8b:ad:8f:1e: 1c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:39:B6:13:9D:57:BD:EB:FC:36:E0:DF:9A:61:1C:69:C9:2E:36:EF X509v3 Authority Key Identifier: keyid:DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:37:04:c3:2e:ff:15:83:b2:95:9c:7f:5c:95:5a:a0:0c:1d: 41:33:9f:1c:45:52:5c:99:52:ae:4c:42:e2:16:ed:bf:fd:dd: 28:ac:37:37:25:1b:62:55:3a:8b:ae:19:63:69:5d:e8:5c:14: 51:8c:27:22:26:1d:91:11:38:1a:ac:73:32:31:8b:48:c6:70: 06:d2:b1:51:43:ce:36:f3:7a:e5:2e:3b:8f:80:7f:7a:9d:eb: 94:a5:cd:f3:b4:d3:da:12:3b:46:f4:70:02:47:8c:29:92:22: 73:31:65:bd:e5:94:c9:b0:72:a5:e3:5b:7f:8e:4a:fd:b4:b2: d2:0a:b8:68:ff:d6:b8:dd:79:53:0d:49:d7:60:7c:2d:dc:82: af:f2:d9:e6:b4:6a:f8:4f:59:57:0e:cb:84:22:ac:94:15:a3: d2:20:45:21:89:a5:67:18:ec:ed:3d:6d:f9:c5:d2:cb:47:67: 26:9d:50:ee:d7:bb:24:b0:7c:06:e6:13:1b:13:b6:59:8e:0e: e9:dd:a2:ea:4f:55:4e:52:6b:d7:cf:fc:3f:1d:68:39:aa:af: 7e:3c:18:23:c2:d7:03:a2:44:39:fb:2c:73:89:2b:35:16:04: a8:a0:72:82:e6:f6:4e:88:65:43:3e:6d:19:50:fc:09:1a:e8: 6b:e4:7f:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAzhvlSAU8YrdbrxjJViFwDbIfvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFQzA3MkE5Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYxRDkw NzkyQzRCQTAeFw0yNjA5MjQwMzMwMDZaFw0yNjA5MjUwNTAwMDZaMDMxMTAvBgNV BAMTKDE5MzlCNjEzOUQ1N0JERUJGQzM2RTBERjlBNjExQzY5QzkyRTM2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLVnjDql2nid2yTGHMQZCoEb+F wrezKkox6ZiHC2MsOT5CWeJ6xfOs5Y9G274EQ5PaHjuryWez+GPm6saP592cRRoz VpWZzsXF+pmroQ0g91NgVjyMylF+6d2MhWePzf+oo7bUKjl/CSKS4Mo99USifpGn 6rLiRnRz8vsV8NTPaW7xk2jzdb83Kpid71OQ4fuBbXjySnCuUsF2QAQAHsNwz6q2 GQEz2qZvWt3HnK5nSgk0Bogp0vW6Mu/ThpW7wXkSFOxZP11LolrfbFWLONRbF49N HwDxPOwIpivNQ8AeQeSZGYpszylSLYGuKs+N/CVhFjMPWMzaEzHBi62PHhxrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGTm2E51Xvev8NuDfmmEcackuNu8wHwYDVR0j BBgwFoAU3ewHKpJ3UdzItpRMpGDx2QeSxLowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY1ZmE1NGQtMjQ4ZS00MjNjLTllNDktZDZlNmJmYmJmNzhiLzAvRERFQzA3MkE5 Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYxRDkwNzkyQzRCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREVDMDcyQTkyNzc1MURDQzhCNjk0NENBNDYwRjFEOTA3OTJD NEJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY1ZmE1NGQtMjQ4ZS00MjNjLTll NDktZDZlNmJmYmJmNzhiLzAvRERFQzA3MkE5Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYx RDkwNzkyQzRCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFs3BMMu/xWDspWcf1yVWqAMHUEznxxFUlyZ Uq5MQuIW7b/93SisNzclG2JVOouuGWNpXehcFFGMJyImHZEROBqsczIxi0jGcAbS sVFDzjbzeuUuO4+Af3qd65SlzfO009oSO0b0cAJHjCmSInMxZb3llMmwcqXjW3+O Sv20stIKuGj/1rjdeVMNSddgfC3cgq/y2ea0avhPWVcOy4QirJQVo9IgRSGJpWcY 7O09bfnF0stHZyadUO7XuySwfAbmExsTtlmODundoupPVU5Sa9fP/D8daDmqr348 GCPC1wOiRDn7LHOJKzUWBKigcoLm9k6IZUM+bRlQ/Aka6Gvkf78= -----END CERTIFICATE-----Generated at Thu Sep 24 18:51:46 2026 by rpki-client