$ rpki-client -vvvf rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft File: DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft (raw, json) Hash identifier: Hf9WgzV7ZWdLxgZlaPJYFNtiXBiRWRH9rVEVtI3KQDE= Subject key identifier: 32:CC:18:9C:23:00:3C:FC:0F:03:3B:1C:09:B6:0A:F0:51:B4:FA:62 Authority key identifier: DD:34:AC:E6:27:4D:2C:13:A1:B4:23:EC:1A:9C:D7:5E:ED:F1:8D:24 Certificate issuer: /CN=DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24 Certificate serial: 16F866E4FCA2D0D1DD98179E8460303253B4BD27 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 13:43:08 +0000 Manifest this update: Wed 23 Sep 2026 13:38:08 +0000 Manifest next update: Thu 24 Sep 2026 16:01:08 +0000 Files and hashes: 1: DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl (hash: dRDa3xIzzBCjMIhXub4wUUlm2FwOYJRpdgP5x3ZzJBk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f8:66:e4:fc:a2:d0:d1:dd:98:17:9e:84:60:30:32:53:b4:bd:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24 Validity Not Before: Sep 23 13:38:08 2026 GMT Not After : Sep 24 16:01:08 2026 GMT Subject: CN=32CC189C23003CFC0F033B1C09B60AF051B4FA62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9e:a1:62:51:ed:b2:c3:b1:01:f6:b9:bd:00: 4d:b8:a7:50:ec:0e:a8:e5:fb:ec:fa:6a:f6:38:f0: f8:13:57:50:25:7f:06:0e:3f:d2:23:b3:22:58:a8: d6:b2:e2:d3:0b:b0:06:a7:0c:74:b2:68:b5:a4:dd: cb:cf:38:e4:d4:6c:dc:5d:15:ff:2e:a1:2f:c5:45: 01:6f:1f:c1:bf:75:4c:fe:21:de:17:4c:3a:d7:01: 92:4c:18:85:eb:4e:8d:ba:2f:ce:af:16:3e:5e:35: d6:ba:e3:4b:74:11:3a:01:21:d0:8e:59:6e:0c:09: 0f:50:94:ad:9a:0d:a6:84:36:95:f8:f9:89:76:b4: a0:4b:16:81:12:09:9e:8c:49:c3:d0:d7:85:0d:06: 2d:f2:5b:0d:89:fa:d7:d0:e1:f8:c7:57:7a:e9:e0: 42:d5:c5:c6:35:e6:d2:93:ba:16:48:70:27:94:4f: f4:78:b2:69:f6:8a:6c:79:3e:1f:93:57:86:62:dd: 6e:40:42:8d:e0:62:d3:b1:4e:75:da:cf:53:b3:17: b4:f6:73:7e:1d:f8:7a:9e:0e:25:cd:2c:6b:bc:74: ab:a2:9b:8b:4c:83:d7:e4:7f:b9:9c:0d:4c:20:cb: af:bb:17:37:3b:00:7e:8d:6a:8a:22:ab:ec:04:01: b3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CC:18:9C:23:00:3C:FC:0F:03:3B:1C:09:B6:0A:F0:51:B4:FA:62 X509v3 Authority Key Identifier: keyid:DD:34:AC:E6:27:4D:2C:13:A1:B4:23:EC:1A:9C:D7:5E:ED:F1:8D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9b:5d:11:02:5e:28:54:a2:6e:d5:c8:66:6c:05:0b:b6:9e: 10:26:20:15:fb:0b:03:39:f7:3b:c2:ef:df:fd:4f:26:05:ce: 42:9a:fa:15:a9:9c:20:12:06:e6:78:76:d4:f7:dd:8d:40:52: 03:8c:ab:5c:7c:85:b3:1a:c9:98:9a:57:b8:7d:54:e2:90:1b: 2f:bb:e7:1a:92:c3:26:d0:85:d3:b7:3e:55:16:f6:94:ba:59: db:f0:6c:e2:e9:53:a2:c9:10:03:b4:7c:54:eb:e7:d6:75:27: cc:65:b3:71:a2:44:ac:e8:be:c7:03:ef:dd:70:89:a2:85:d0: 91:dd:20:ec:77:4e:15:00:e9:54:d5:e8:00:ae:29:f1:91:3e: 99:36:a9:78:0e:e0:33:9c:3d:4e:32:27:98:a8:0b:38:7d:f2: 1d:05:59:50:14:01:a0:9f:af:e8:16:5a:67:9f:52:cd:83:36: 2a:2c:d1:55:1a:fe:5e:23:e7:c6:fd:a6:7a:99:a0:7a:bb:83: a4:c5:b8:4b:96:af:e7:a0:c5:1c:47:27:13:db:8b:bd:3f:f5: 87:fc:83:89:75:e4:dd:d9:fd:9d:0e:58:fa:dc:17:26:8d:ca: fc:9b:51:42:42:ec:8a:87:8f:2d:c5:4f:e7:7f:74:e9:9f:1f: c7:09:af:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFvhm5Pyi0NHdmBeehGAwMlO0vScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQzNEFDRTYyNzREMkMxM0ExQjQyM0VDMUE5Q0Q3NUVF REYxOEQyNDAeFw0yNjA5MjMxMzM4MDhaFw0yNjA5MjQxNjAxMDhaMDMxMTAvBgNV BAMTKDMyQ0MxODlDMjMwMDNDRkMwRjAzM0IxQzA5QjYwQUYwNTFCNEZBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClnqFiUe2yw7EB9rm9AE24p1Ds Dqjl++z6avY48PgTV1AlfwYOP9IjsyJYqNay4tMLsAanDHSyaLWk3cvPOOTUbNxd Ff8uoS/FRQFvH8G/dUz+Id4XTDrXAZJMGIXrTo26L86vFj5eNda640t0EToBIdCO WW4MCQ9QlK2aDaaENpX4+Yl2tKBLFoESCZ6MScPQ14UNBi3yWw2J+tfQ4fjHV3rp 4ELVxcY15tKTuhZIcCeUT/R4smn2imx5Ph+TV4Zi3W5AQo3gYtOxTnXaz1OzF7T2 c34d+HqeDiXNLGu8dKuim4tMg9fkf7mcDUwgy6+7Fzc7AH6Naooiq+wEAbPHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMswYnCMAPPwPAzscCbYK8FG0+mIwHwYDVR0j BBgwFoAU3TSs5idNLBOhtCPsGpzXXu3xjSQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWZjYWYyN2QtNjRlOS00NzRiLWE3M2ItMzVhZGJlOWIyZjAxLzAvREQzNEFDRTYy NzREMkMxM0ExQjQyM0VDMUE5Q0Q3NUVFREYxOEQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDM0QUNFNjI3NEQyQzEzQTFCNDIzRUMxQTlDRDc1RUVERjE4 RDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvREQzNEFDRTYyNzREMkMxM0ExQjQyM0VDMUE5Q0Q3 NUVFREYxOEQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2bXRECXihUom7VyGZsBQu2nhAmIBX7CwM5 9zvC79/9TyYFzkKa+hWpnCASBuZ4dtT33Y1AUgOMq1x8hbMayZiaV7h9VOKQGy+7 5xqSwybQhdO3PlUW9pS6WdvwbOLpU6LJEAO0fFTr59Z1J8xls3GiRKzovscD791w iaKF0JHdIOx3ThUA6VTV6ACuKfGRPpk2qXgO4DOcPU4yJ5ioCzh98h0FWVAUAaCf r+gWWmefUs2DNios0VUa/l4j58b9pnqZoHq7g6TFuEuWr+egxRxHJxPbi70/9Yf8 g4l15N3Z/Z0OWPrcFyaNyvybUUJC7IqHjy3FT+d/dOmfH8cJr5Q= -----END CERTIFICATE-----Generated at Thu Sep 24 04:57:33 2026 by rpki-client