$ rpki-client -vvf rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft File: DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft (raw, json) Hash identifier: Q2en07a0PnfFuIi75x2gtyETAl5QlNmuq2pwtHdfcfo= Subject key identifier: D2:91:A9:6D:BD:7B:08:F4:0F:E9:B5:3B:90:1B:CF:68:7E:D8:F9:4C Authority key identifier: DD:34:AC:E6:27:4D:2C:13:A1:B4:23:EC:1A:9C:D7:5E:ED:F1:8D:24 Certificate issuer: /CN=DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24 Certificate serial: 2904B41CD5F3FA023EF03F7C50BC020DBCE00A9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft Manifest number: 0D Signing time: Tue 12 May 2026 05:46:20 +0000 Manifest this update: Tue 12 May 2026 05:41:20 +0000 Manifest next update: Wed 13 May 2026 08:47:20 +0000 Files and hashes: 1: DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl (hash: lPkrAwv1cIEmYN/DALOv539MhvfB9RomUq/6+Zq6s1A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:04:b4:1c:d5:f3:fa:02:3e:f0:3f:7c:50:bc:02:0d:bc:e0:0a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24 Validity Not Before: May 12 05:41:20 2026 GMT Not After : May 13 08:47:20 2026 GMT Subject: CN=D291A96DBD7B08F40FE9B53B901BCF687ED8F94C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9b:9d:d8:de:86:d7:31:bc:e5:f5:c6:56:37: 6e:c8:31:c7:2d:c4:2c:59:35:e6:b1:91:84:52:ec: 9a:3c:fc:aa:51:8f:22:50:b5:79:4a:e4:0c:3d:08: ee:d5:d2:48:80:b8:ce:fd:dd:93:86:ea:9b:60:80: 98:88:c3:4b:6f:a9:46:9b:a9:9b:ec:29:7a:d4:56: 51:09:b3:7c:89:dc:5e:96:2e:00:8c:79:af:32:e1: 1f:d1:de:a5:c4:95:42:b9:f1:8a:3a:e3:d0:22:56: 34:9d:a9:73:4b:e4:f2:aa:35:25:e8:22:e0:61:e5: 1e:76:2d:bb:4a:5d:aa:f1:5a:38:62:80:35:b7:a9: d9:d3:4b:c7:c9:61:5c:a3:86:4e:a1:d0:f1:83:be: 27:ca:78:89:c9:94:f9:57:53:8d:a0:85:69:70:c9: 55:81:af:40:d9:d9:dc:e4:a5:f8:8a:f5:07:f7:56: c7:77:9b:15:45:dc:f6:94:3c:5c:6a:33:98:78:68: c9:5d:e4:d4:0b:7a:7a:6e:bd:a9:70:c6:d7:4b:e2: a4:c5:29:24:db:dc:bc:66:aa:26:97:9c:ce:12:93: 71:2c:07:d2:8b:cf:48:01:42:2b:5c:62:c0:a8:19: 58:20:af:31:c9:a2:97:92:74:05:ec:98:e2:40:b3: 68:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:91:A9:6D:BD:7B:08:F4:0F:E9:B5:3B:90:1B:CF:68:7E:D8:F9:4C X509v3 Authority Key Identifier: keyid:DD:34:AC:E6:27:4D:2C:13:A1:B4:23:EC:1A:9C:D7:5E:ED:F1:8D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:84:7a:de:a2:a9:1a:e5:da:b9:43:16:ff:7f:51:87:a4:dd: 99:19:3e:da:08:30:48:24:13:69:44:91:47:0a:34:4f:b1:2e: 41:2c:75:f5:56:79:e4:61:24:ac:7f:49:27:80:26:7b:f7:da: d4:3f:cb:8d:cb:38:c1:9a:80:4d:c5:bc:8f:f1:3d:a3:dd:29: b6:4d:d6:eb:86:35:cd:35:6c:9a:8f:e3:f0:95:3e:0e:68:44: b3:53:6b:80:82:8d:51:b0:13:3d:e1:2e:f0:c4:a3:31:39:f7: 2f:18:2e:fc:3e:4d:92:56:8a:38:bd:72:42:31:af:61:9f:be: b6:3f:7f:e7:0f:90:25:0d:05:3d:b3:d3:c0:43:0c:fd:e5:2a: c4:1f:fb:fd:bd:73:4b:8a:3d:f5:e2:ed:2a:ab:43:34:aa:c5: 0c:d9:de:64:aa:4b:d2:e7:5a:14:9b:b6:f5:c3:fe:53:e3:c1: 14:37:cd:1e:81:e0:0e:30:93:21:d0:01:50:1f:36:8c:24:ef: 98:83:b7:7b:98:94:c0:a7:e0:4c:c1:d5:f9:d5:fc:52:f3:75: 73:cd:13:f0:89:a8:c8:c0:3f:6f:ee:11:28:b8:c1:8c:a8:c7: 29:b5:ef:a7:8a:e4:cd:88:d2:cb:d7:69:95:ba:7c:98:fc:e1: 4a:09:c9:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKQS0HNXz+gI+8D98ULwCDbzgCp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQzNEFDRTYyNzREMkMxM0ExQjQyM0VDMUE5Q0Q3NUVF REYxOEQyNDAeFw0yNjA1MTIwNTQxMjBaFw0yNjA1MTMwODQ3MjBaMDMxMTAvBgNV BAMTKEQyOTFBOTZEQkQ3QjA4RjQwRkU5QjUzQjkwMUJDRjY4N0VEOEY5NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/m53Y3obXMbzl9cZWN27IMcct xCxZNeaxkYRS7Jo8/KpRjyJQtXlK5Aw9CO7V0kiAuM793ZOG6ptggJiIw0tvqUab qZvsKXrUVlEJs3yJ3F6WLgCMea8y4R/R3qXElUK58Yo649AiVjSdqXNL5PKqNSXo IuBh5R52LbtKXarxWjhigDW3qdnTS8fJYVyjhk6h0PGDvifKeInJlPlXU42ghWlw yVWBr0DZ2dzkpfiK9Qf3Vsd3mxVF3PaUPFxqM5h4aMld5NQLenpuvalwxtdL4qTF KSTb3LxmqiaXnM4Sk3EsB9KLz0gBQitcYsCoGVggrzHJopeSdAXsmOJAs2jtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0pGpbb17CPQP6bU7kBvPaH7Y+UwwHwYDVR0j BBgwFoAU3TSs5idNLBOhtCPsGpzXXu3xjSQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWZjYWYyN2QtNjRlOS00NzRiLWE3M2ItMzVhZGJlOWIyZjAxLzAvREQzNEFDRTYy NzREMkMxM0ExQjQyM0VDMUE5Q0Q3NUVFREYxOEQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDM0QUNFNjI3NEQyQzEzQTFCNDIzRUMxQTlDRDc1RUVERjE4 RDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvREQzNEFDRTYyNzREMkMxM0ExQjQyM0VDMUE5Q0Q3 NUVFREYxOEQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6Eet6iqRrl2rlDFv9/UYek3ZkZPtoIMEgk E2lEkUcKNE+xLkEsdfVWeeRhJKx/SSeAJnv32tQ/y43LOMGagE3FvI/xPaPdKbZN 1uuGNc01bJqP4/CVPg5oRLNTa4CCjVGwEz3hLvDEozE59y8YLvw+TZJWiji9ckIx r2GfvrY/f+cPkCUNBT2z08BDDP3lKsQf+/29c0uKPfXi7SqrQzSqxQzZ3mSqS9Ln WhSbtvXD/lPjwRQ3zR6B4A4wkyHQAVAfNowk75iDt3uYlMCn4EzB1fnV/FLzdXPN E/CJqMjAP2/uESi4wYyoxym176eK5M2I0svXaZW6fJj84UoJyYg= -----END CERTIFICATE-----Generated at Tue May 12 22:47:11 2026 by rpki-client