$ rpki-client -vvf rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft File: DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft (raw, json) Hash identifier: NU+tNoTpx+B+Ek5q3Ox6lGsmwVRgbEuEBk6xjkwgBgo= Subject key identifier: 29:9C:30:D2:51:E2:8A:EE:68:57:BB:A7:B7:C8:AD:AA:12:A9:FB:16 Authority key identifier: DD:34:AC:E6:27:4D:2C:13:A1:B4:23:EC:1A:9C:D7:5E:ED:F1:8D:24 Certificate issuer: /CN=DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24 Certificate serial: 3BB3765484B9C77285DB84AF9E00C83A87179A7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:31:37 +0000 Manifest this update: Thu 23 Jul 2026 13:26:37 +0000 Manifest next update: Fri 24 Jul 2026 15:54:37 +0000 Files and hashes: 1: DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl (hash: oUldxjMXmOproReeK9ahrEbADQEV/NAmaYotqXgbKt8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b3:76:54:84:b9:c7:72:85:db:84:af:9e:00:c8:3a:87:17:9a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24 Validity Not Before: Jul 23 13:26:37 2026 GMT Not After : Jul 24 15:54:37 2026 GMT Subject: CN=299C30D251E28AEE6857BBA7B7C8ADAA12A9FB16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:db:5e:32:a2:83:21:15:6b:2c:7b:54:c5:43: c0:62:aa:0f:fd:13:00:4b:3a:c2:b5:b0:35:b5:dc: d0:88:57:7c:1d:bf:21:42:73:31:11:4b:2e:ff:83: b2:06:27:22:8f:76:d8:28:ad:a6:9c:3f:e6:b3:e7: c8:88:5b:8c:7c:8a:54:35:36:04:55:5b:a1:3c:49: f5:87:98:fe:21:ab:74:96:38:44:d2:f5:2d:0d:e6: 54:88:59:48:78:b9:e2:dc:1c:2f:0f:3d:68:24:bb: 80:c1:97:71:2e:46:71:9b:20:e9:93:0d:5c:04:f9: 4b:71:a1:18:90:6e:aa:86:60:b6:e2:c0:2f:fa:33: 27:47:0c:82:6e:95:90:66:cd:e0:5d:18:88:a6:5a: ed:c9:a6:85:cb:36:ae:27:47:5b:a4:fe:ca:8f:d0: 7d:5c:c2:be:ca:97:13:9f:2b:01:28:f1:9c:be:15: 95:85:df:d2:e7:a2:4d:d2:57:13:02:e8:9e:8e:77: 4c:85:3b:dd:7b:14:bd:13:07:10:32:11:8e:7a:f9: f5:5f:8e:66:0e:6d:12:56:a9:95:05:d4:b1:2a:43: 4d:45:c5:ec:a7:b3:15:02:38:92:a4:a2:a1:41:ad: 1a:84:62:a1:fa:9a:22:01:3e:b3:0f:d8:35:6a:fa: 12:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9C:30:D2:51:E2:8A:EE:68:57:BB:A7:B7:C8:AD:AA:12:A9:FB:16 X509v3 Authority Key Identifier: keyid:DD:34:AC:E6:27:4D:2C:13:A1:B4:23:EC:1A:9C:D7:5E:ED:F1:8D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:0f:3c:c4:2a:90:bc:cb:6b:89:0b:22:42:c7:d8:5c:c5:94: 23:a4:1d:ff:b7:1d:c1:42:a8:74:06:73:e7:b7:9f:ef:b4:3d: 55:0a:66:22:d7:c9:6f:ea:e5:57:04:a9:2b:4b:d2:aa:a9:05: a5:28:6e:03:10:a6:e6:89:ce:53:8a:89:bb:a3:08:21:5c:1c: ba:93:90:6d:85:de:95:c2:c9:2b:b6:92:a4:8e:2f:27:c6:11: d9:73:b9:99:93:61:87:c2:8f:c8:7f:05:d8:84:fb:46:d3:29: d4:50:1c:6f:b6:94:cb:17:c7:49:5a:90:92:ec:9c:8b:66:9b: e6:6b:1b:1d:1b:f3:fd:7e:2c:91:1b:9e:53:0d:63:6c:c7:43: ed:1b:15:0f:e6:a2:24:c2:1e:4e:49:8d:53:44:77:33:7e:9c: fb:ac:63:65:80:fb:a4:d4:3e:e5:c8:99:f2:7a:ef:04:be:39: 27:1c:e8:09:1b:1c:a7:ed:45:38:ee:da:a5:f3:1d:27:26:20: c0:8d:1d:92:cb:63:e1:5d:a3:89:8e:01:0d:0c:fa:c9:20:68: 52:b5:45:a1:e2:24:56:db:85:0d:80:c9:61:ac:6c:a4:77:2b: 9c:cb:8e:d6:8d:3b:7e:b5:d5:5c:0f:07:96:5f:a4:7a:38:18: a3:3c:73:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO7N2VIS5x3KF24SvngDIOocXmn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQzNEFDRTYyNzREMkMxM0ExQjQyM0VDMUE5Q0Q3NUVF REYxOEQyNDAeFw0yNjA3MjMxMzI2MzdaFw0yNjA3MjQxNTU0MzdaMDMxMTAvBgNV BAMTKDI5OUMzMEQyNTFFMjhBRUU2ODU3QkJBN0I3QzhBREFBMTJBOUZCMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf214yooMhFWsse1TFQ8Biqg/9 EwBLOsK1sDW13NCIV3wdvyFCczERSy7/g7IGJyKPdtgoraacP+az58iIW4x8ilQ1 NgRVW6E8SfWHmP4hq3SWOETS9S0N5lSIWUh4ueLcHC8PPWgku4DBl3EuRnGbIOmT DVwE+UtxoRiQbqqGYLbiwC/6MydHDIJulZBmzeBdGIimWu3JpoXLNq4nR1uk/sqP 0H1cwr7KlxOfKwEo8Zy+FZWF39Lnok3SVxMC6J6Od0yFO917FL0TBxAyEY56+fVf jmYObRJWqZUF1LEqQ01FxeynsxUCOJKkoqFBrRqEYqH6miIBPrMP2DVq+hIbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKZww0lHiiu5oV7unt8itqhKp+xYwHwYDVR0j BBgwFoAU3TSs5idNLBOhtCPsGpzXXu3xjSQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWZjYWYyN2QtNjRlOS00NzRiLWE3M2ItMzVhZGJlOWIyZjAxLzAvREQzNEFDRTYy NzREMkMxM0ExQjQyM0VDMUE5Q0Q3NUVFREYxOEQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDM0QUNFNjI3NEQyQzEzQTFCNDIzRUMxQTlDRDc1RUVERjE4 RDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvREQzNEFDRTYyNzREMkMxM0ExQjQyM0VDMUE5Q0Q3 NUVFREYxOEQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkPPMQqkLzLa4kLIkLH2FzFlCOkHf+3HcFC qHQGc+e3n++0PVUKZiLXyW/q5VcEqStL0qqpBaUobgMQpuaJzlOKibujCCFcHLqT kG2F3pXCySu2kqSOLyfGEdlzuZmTYYfCj8h/BdiE+0bTKdRQHG+2lMsXx0lakJLs nItmm+ZrGx0b8/1+LJEbnlMNY2zHQ+0bFQ/moiTCHk5JjVNEdzN+nPusY2WA+6TU PuXImfJ67wS+OScc6AkbHKftRTju2qXzHScmIMCNHZLLY+Fdo4mOAQ0M+skgaFK1 RaHiJFbbhQ2AyWGsbKR3K5zLjtaNO3611VwPB5ZfpHo4GKM8c7g= -----END CERTIFICATE-----Generated at Fri Jul 24 02:35:27 2026 by rpki-client