$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft File: 1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft (raw, json) Hash identifier: S2tyeI/bqcV2Xo6OsPKDjSXERNNhvCRSVA8bfr+sTtA= Subject key identifier: 2C:8D:BE:F9:3E:CF:1D:02:32:1A:51:8B:FA:01:A3:64:72:F4:B9:6D Authority key identifier: 1D:D0:DE:90:19:8F:9D:1A:28:E4:57:EE:57:88:E7:D1:35:47:CB:91 Certificate issuer: /CN=1DD0DE90198F9D1A28E457EE5788E7D13547CB91 Certificate serial: 44470AADA23B7843435C3FF8F00FC566D22E0A6A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft Manifest number: D3 Signing time: Thu 08 Oct 2026 06:41:31 +0000 Manifest this update: Thu 08 Oct 2026 06:36:31 +0000 Manifest next update: Fri 09 Oct 2026 07:42:31 +0000 Files and hashes: 1: 1DD0DE90198F9D1A28E457EE5788E7D13547CB91.crl (hash: ZsustuA6GBTsbetVGi0AnEVe/La9ZPLVzyvZWevAQ3Y=) 2: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (hash: fsyTi1wKrYDgpsKCw76juglRx93+2YzZ5l6lzjCtU8E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.crl rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 07:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:47:0a:ad:a2:3b:78:43:43:5c:3f:f8:f0:0f:c5:66:d2:2e:0a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD0DE90198F9D1A28E457EE5788E7D13547CB91 Validity Not Before: Oct 8 06:36:31 2026 GMT Not After : Oct 9 07:42:31 2026 GMT Subject: CN=2C8DBEF93ECF1D02321A518BFA01A36472F4B96D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5b:b2:a8:e1:ec:51:0c:ef:05:3d:19:08:60: bc:97:6c:21:f6:f2:d7:3d:9c:60:42:8e:f9:74:53: 09:d7:6a:3c:85:37:ad:25:fb:84:dd:ca:47:03:14: 06:8d:d4:88:8b:7a:a2:39:06:de:a2:d2:06:bc:79: e7:80:54:14:2e:b8:c5:66:64:a5:79:bf:83:ed:26: d8:53:1c:2d:80:ce:5f:97:12:1e:4d:de:ce:6b:dc: 3f:8b:47:e6:fc:79:ba:74:52:16:ec:04:b0:fa:fa: 19:d6:c4:09:a7:94:0a:92:c4:48:3f:87:17:6f:b2: d2:12:dc:91:cd:73:34:69:b2:a9:c0:e7:62:86:b0: b7:5a:19:17:b4:b2:e4:2d:bb:42:94:d9:23:75:a9: 21:b5:16:d4:e4:c2:f1:05:a8:98:36:d7:58:21:5a: 5d:17:67:1d:d2:9a:68:0d:93:1d:84:e1:74:96:28: b3:20:8e:7a:4e:c7:de:0b:0b:c5:e9:fe:ea:68:9a: 85:1f:a9:b9:97:83:e4:5f:41:0f:e4:fb:de:10:10: 8e:4b:ad:80:4b:93:36:6d:6f:7d:85:4d:77:e0:67: 3d:cb:a7:81:29:5c:13:35:82:e8:30:49:46:81:05: f7:7a:85:52:55:fc:4b:43:fc:9c:d8:29:e9:1d:d1: 8a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8D:BE:F9:3E:CF:1D:02:32:1A:51:8B:FA:01:A3:64:72:F4:B9:6D X509v3 Authority Key Identifier: keyid:1D:D0:DE:90:19:8F:9D:1A:28:E4:57:EE:57:88:E7:D1:35:47:CB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:39:d1:8b:6a:d3:2f:f6:84:a0:ff:45:73:9c:0f:2f:4d:46: 74:bc:78:97:44:7c:cd:97:78:34:3f:30:ba:11:63:37:68:73: 0c:3b:38:ba:48:92:0d:24:2c:83:b5:3f:29:e0:0a:31:07:cb: 01:82:5d:14:b1:c9:cf:f9:0e:20:a0:72:30:3d:e7:f6:1b:a4: 4e:e8:1d:83:b0:3f:23:7a:56:9e:b3:7d:52:65:2a:44:63:63: 94:d7:42:7d:99:a8:20:76:5f:fb:13:e3:de:9c:1a:a9:70:41: a8:bd:36:8a:e9:ab:c1:da:e9:23:a1:4e:5b:cb:5a:4d:4e:5e: 70:3c:a1:e4:dc:8e:bf:bf:aa:24:71:d6:5b:96:1a:f6:f6:95: e3:c9:7b:14:d2:4f:6c:23:11:8c:27:0a:7d:15:1f:c9:67:d1: a3:a6:ef:92:d5:12:5c:df:50:79:01:d7:c6:34:d7:10:dc:2c: 1b:0a:86:10:1a:81:df:ad:e3:cc:77:20:d8:c1:01:5d:38:23: 26:ea:6d:e8:a8:fe:4e:58:d7:73:6f:69:2c:29:e5:83:77:f6: 3b:1b:7b:42:31:de:57:cb:1f:11:6e:fe:82:d4:94:70:58:5a: 78:6b:b9:71:df:20:c6:06:99:6d:8f:e5:99:7e:08:99:d3:76: 27:fe:91:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUREcKraI7eENDXD/48A/FZtIuCmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUREMERFOTAxOThGOUQxQTI4RTQ1N0VFNTc4OEU3RDEz NTQ3Q0I5MTAeFw0yNjEwMDgwNjM2MzFaFw0yNjEwMDkwNzQyMzFaMDMxMTAvBgNV BAMTKDJDOERCRUY5M0VDRjFEMDIzMjFBNTE4QkZBMDFBMzY0NzJGNEI5NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2W7Ko4exRDO8FPRkIYLyXbCH2 8tc9nGBCjvl0UwnXajyFN60l+4TdykcDFAaN1IiLeqI5Bt6i0ga8eeeAVBQuuMVm ZKV5v4PtJthTHC2Azl+XEh5N3s5r3D+LR+b8ebp0UhbsBLD6+hnWxAmnlAqSxEg/ hxdvstIS3JHNczRpsqnA52KGsLdaGRe0suQtu0KU2SN1qSG1FtTkwvEFqJg211gh Wl0XZx3SmmgNkx2E4XSWKLMgjnpOx94LC8Xp/upomoUfqbmXg+RfQQ/k+94QEI5L rYBLkzZtb32FTXfgZz3Lp4EpXBM1gugwSUaBBfd6hVJV/EtD/JzYKekd0YrBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULI2++T7PHQIyGlGL+gGjZHL0uW0wHwYDVR0j BBgwFoAUHdDekBmPnRoo5FfuV4jn0TVHy5EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU4OGRmZjctNmE5Mi00MjkzLTg4MDAtYjUzZTJhOTE4YWNhLzEvMUREMERFOTAx OThGOUQxQTI4RTQ1N0VFNTc4OEU3RDEzNTQ3Q0I5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xREQwREU5MDE5OEY5RDFBMjhFNDU3RUU1Nzg4RTdEMTM1NDdD QjkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzEvMUREMERFOTAxOThGOUQxQTI4RTQ1N0VFNTc4OEU3 RDEzNTQ3Q0I5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACU50Ytq0y/2hKD/RXOcDy9NRnS8eJdEfM2X eDQ/MLoRYzdocww7OLpIkg0kLIO1PyngCjEHywGCXRSxyc/5DiCgcjA95/YbpE7o HYOwPyN6Vp6zfVJlKkRjY5TXQn2ZqCB2X/sT496cGqlwQai9Norpq8Ha6SOhTlvL Wk1OXnA8oeTcjr+/qiRx1luWGvb2lePJexTST2wjEYwnCn0VH8ln0aOm75LVElzf UHkB18Y01xDcLBsKhhAagd+t48x3INjBAV04Iybqbeio/k5Y13NvaSwp5YN39jsb e0Ix3lfLHxFu/oLUlHBYWnhruXHfIMYGmW2P5Zl+CJnTdif+kUE= -----END CERTIFICATE-----Generated at Thu Oct 8 20:53:56 2026 by rpki-client