$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft File: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft (raw, json) Hash identifier: PGBC5+M8gvZRGgXwrQY/bEFstBttMICOOsN577fpVnE= Subject key identifier: 61:B7:E1:CF:21:BB:D8:95:94:FC:B2:65:1B:75:D8:62:79:55:5D:88 Authority key identifier: DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 Certificate issuer: /CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Certificate serial: 26BCBB339783C600185F0AEBA78097B18225101A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft Manifest number: 0101 Signing time: Tue 10 Nov 2026 21:02:31 +0000 Manifest this update: Tue 10 Nov 2026 20:57:31 +0000 Manifest next update: Wed 11 Nov 2026 22:31:31 +0000 Files and hashes: 1: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl (hash: K/qFBg7JrRM1gCUmnCW/XDap43O+ocCP2yOz1nlctTM=) 2: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: qSXSAuCypxITbArcxADdWqHfhFT512uFXifXCq40Lkk=) 3: 3130332e3138392e3132322e302f32342d3234203d3e20313338383836.roa (hash: w/XB+eAcVCXSBvP5zeesaKGcdg6afVF0i1dOhvajHGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:bc:bb:33:97:83:c6:00:18:5f:0a:eb:a7:80:97:b1:82:25:10:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Validity Not Before: Nov 10 20:57:31 2026 GMT Not After : Nov 11 22:31:31 2026 GMT Subject: CN=61B7E1CF21BBD89594FCB2651B75D86279555D88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:28:02:73:f2:b0:62:22:33:d4:2e:1a:c6:32: cd:5f:da:c1:73:4f:54:08:1f:d8:ce:94:86:bf:5b: 3e:aa:f6:e6:90:91:6d:c7:4c:da:83:0f:3b:62:5c: ba:aa:0f:e3:94:e9:83:cd:64:30:2f:5c:f6:66:50: c6:18:41:02:47:0b:ef:29:36:9e:30:b8:2c:86:1b: 9b:42:0a:c6:dc:35:00:cf:76:0d:fc:d9:ee:ae:08: e2:0c:7a:2c:b9:b8:b0:2a:ea:f3:0a:43:56:6d:87: e0:5d:5c:d9:49:cb:4a:1f:ef:96:a4:91:91:61:d0: 35:14:f5:11:73:ed:2d:0e:ef:d6:e4:57:c6:1b:bf: 6d:13:5c:3b:79:b1:39:d2:36:bf:c8:74:1d:43:37: 56:13:b9:9b:ed:e7:8e:84:d2:1f:15:43:3c:84:54: d8:71:09:1a:e3:11:97:6a:f3:3f:70:55:4e:bc:60: 10:a2:dc:d9:42:dd:87:eb:ca:b3:ce:b5:5d:af:62: 30:33:2d:33:65:ff:5c:17:f6:1f:07:ef:91:ac:81: 59:20:a2:71:43:cf:ee:c7:34:ee:b9:1e:e2:30:79: 08:49:44:ed:a4:bb:36:56:64:7e:e5:d3:1d:5a:9e: 00:d7:90:0e:87:a2:f5:b9:0f:6d:33:80:32:df:02: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B7:E1:CF:21:BB:D8:95:94:FC:B2:65:1B:75:D8:62:79:55:5D:88 X509v3 Authority Key Identifier: keyid:DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:f6:4a:40:ce:95:26:d6:2d:40:bb:40:77:23:4e:d8:03:f3: 2c:30:5b:a4:8d:8b:89:d1:a7:d5:a5:fd:02:05:e5:3a:cf:d6: 31:a5:be:a0:c4:ad:3c:b8:65:b4:a0:0a:60:a5:64:93:11:ce: ef:77:48:74:c4:00:ba:f3:2b:8c:26:9b:fb:70:3e:b5:1a:2a: e1:4a:04:06:a6:37:66:e0:bf:28:66:fa:51:61:e7:80:9a:d4: 96:b0:ad:34:fe:03:8c:62:5c:a3:7b:8f:5a:bc:3d:c6:44:71: c5:c0:8d:b9:80:8a:33:43:a9:3c:3a:9b:72:33:6d:8a:70:98: d8:82:02:75:47:70:c2:98:68:a6:49:cc:cb:6a:9e:4a:5c:8f: c1:30:6f:13:79:72:37:13:c9:35:2c:a9:7c:1e:87:f9:b0:a4: 21:ab:7a:af:f7:4b:c9:19:77:58:45:0e:8c:96:76:58:10:9d: 15:70:c1:76:0b:5d:28:90:17:ee:d9:0e:33:dc:dc:5e:e9:f2: ca:a7:8e:71:78:12:40:04:3c:03:e6:8d:61:f2:60:97:0b:f3: f8:c3:e5:3c:6d:a1:8b:e3:2a:5b:67:be:70:55:38:a9:83:d9: 88:85:aa:8f:08:59:66:e8:8c:63:7d:e7:84:9d:28:1d:15:e1: 3d:3a:97:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJry7M5eDxgAYXwrrp4CXsYIlEBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5 ODUxQTFCOTAeFw0yNjExMTAyMDU3MzFaFw0yNjExMTEyMjMxMzFaMDMxMTAvBgNV BAMTKDYxQjdFMUNGMjFCQkQ4OTU5NEZDQjI2NTFCNzVEODYyNzk1NTVEODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUKAJz8rBiIjPULhrGMs1f2sFz T1QIH9jOlIa/Wz6q9uaQkW3HTNqDDztiXLqqD+OU6YPNZDAvXPZmUMYYQQJHC+8p Np4wuCyGG5tCCsbcNQDPdg382e6uCOIMeiy5uLAq6vMKQ1Zth+BdXNlJy0of75ak kZFh0DUU9RFz7S0O79bkV8Ybv20TXDt5sTnSNr/IdB1DN1YTuZvt546E0h8VQzyE VNhxCRrjEZdq8z9wVU68YBCi3NlC3YfryrPOtV2vYjAzLTNl/1wX9h8H75GsgVkg onFDz+7HNO65HuIweQhJRO2kuzZWZH7l0x1angDXkA6HovW5D20zgDLfAi25AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYbfhzyG72JWU/LJlG3XYYnlVXYgwHwYDVR0j BBgwFoAU3U/+ysb7E8TxR2AvixgkQphRobkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJhMGI4ZjgtNGZjZi00YjliLTk3OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FD NkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5ODUxQTFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDRGRkVDQUM2RkIxM0M0RjE0NzYwMkY4QjE4MjQ0Mjk4NTFB MUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0 NDI5ODUxQTFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKr2SkDOlSbWLUC7QHcjTtgD8ywwW6SNi4nR p9Wl/QIF5TrP1jGlvqDErTy4ZbSgCmClZJMRzu93SHTEALrzK4wmm/twPrUaKuFK BAamN2bgvyhm+lFh54Ca1JawrTT+A4xiXKN7j1q8PcZEccXAjbmAijNDqTw6m3Iz bYpwmNiCAnVHcMKYaKZJzMtqnkpcj8EwbxN5cjcTyTUsqXweh/mwpCGreq/3S8kZ d1hFDoyWdlgQnRVwwXYLXSiQF+7ZDjPc3F7p8sqnjnF4EkAEPAPmjWHyYJcL8/jD 5TxtoYvjKltnvnBVOKmD2YiFqo8IWWbojGN954SdKB0V4T06l0k= -----END CERTIFICATE-----Generated at Wed Nov 11 01:08:55 2026 by rpki-client