$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft File: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft (raw, json) Hash identifier: OK5IyxEPQaJhQ1uBYh9wVRv1PCMkFKEdPa3X/EDD5qI= Subject key identifier: CB:BE:4E:A7:3B:71:0A:1E:30:8D:67:66:50:D7:FE:A3:44:BA:6A:2E Authority key identifier: DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 Certificate issuer: /CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Certificate serial: 30DA01A88D2F937A8179E6E71C9FF1401AED6883 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 11:13:03 +0000 Manifest this update: Sat 13 Jun 2026 11:08:03 +0000 Manifest next update: Sun 14 Jun 2026 13:00:03 +0000 Files and hashes: 1: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl (hash: WWCeptonoKAaCvuKqIjgPV7RT70cttg+V6MIEWU7iWU=) 2: 3130332e3138392e3132322e302f32342d3234203d3e20313338383836.roa (hash: w/XB+eAcVCXSBvP5zeesaKGcdg6afVF0i1dOhvajHGI=) 3: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: qSXSAuCypxITbArcxADdWqHfhFT512uFXifXCq40Lkk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:da:01:a8:8d:2f:93:7a:81:79:e6:e7:1c:9f:f1:40:1a:ed:68:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Validity Not Before: Jun 13 11:08:03 2026 GMT Not After : Jun 14 13:00:03 2026 GMT Subject: CN=CBBE4EA73B710A1E308D676650D7FEA344BA6A2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:52:23:2b:39:d4:8f:7b:46:61:d0:0e:e5:c8: fc:79:5e:83:58:44:38:97:34:6d:ac:9b:3c:ee:7e: b7:1e:5e:4e:33:d8:a9:29:10:9c:b6:21:b6:a3:58: 09:58:fc:ac:27:11:0f:52:05:eb:9f:ec:96:1b:f9: b9:bf:db:81:73:0c:5a:2a:b0:35:10:aa:cf:c3:cf: 7f:64:12:51:4b:db:25:31:9b:42:cc:b9:3e:ee:bb: 03:c2:6d:b5:d4:d1:ef:73:3d:46:a1:7d:88:52:fa: 0b:7a:55:d5:ff:26:18:60:51:26:74:0a:b6:d3:71: 1e:ba:32:34:96:e3:21:f4:8d:a1:5a:6f:8c:91:ea: f1:60:b6:7a:44:7a:48:5a:e5:e6:a1:fe:2e:55:13: 54:80:cd:60:4a:c1:b5:cd:99:a0:a0:3e:c7:20:01: b4:c3:fd:48:bd:9a:87:05:8f:f1:ba:29:0c:28:79: cf:21:78:5b:ec:ba:bc:81:4a:a5:72:0e:e9:21:67: 35:2a:d8:85:5c:b2:14:55:db:c8:30:f8:01:40:d9: 0f:b7:e6:cd:4f:77:00:26:92:6f:e7:06:b0:07:ff: 7f:f7:31:95:f6:da:6c:33:43:05:fa:0a:95:3a:7e: 2a:ef:19:8b:40:ac:77:6e:c0:21:5b:d3:67:80:28: f7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BE:4E:A7:3B:71:0A:1E:30:8D:67:66:50:D7:FE:A3:44:BA:6A:2E X509v3 Authority Key Identifier: keyid:DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:87:b1:ae:d0:be:ff:9a:98:9b:6e:8b:18:34:2a:c4:1d:e8: a0:cb:16:77:44:21:dd:59:68:2d:c4:e1:06:f2:f5:4d:a9:7d: 0f:a6:a8:a5:d2:3f:9b:87:d4:a6:a7:fe:b8:58:f1:91:8b:8d: 88:46:41:ce:b8:70:2a:92:04:6a:1c:df:98:f8:ed:a6:f4:d3: 88:b1:15:a9:33:85:f4:e1:8a:e3:24:ed:83:f2:f1:52:69:7c: 1d:35:11:0a:35:db:2d:e7:cd:90:67:25:b8:a7:13:a7:e6:e1: 94:3b:24:3b:22:4a:69:bb:9b:18:93:c2:3d:eb:f7:82:76:6c: 9d:12:ee:a0:5e:c8:5f:97:57:ef:3d:ba:26:fe:3a:fa:68:aa: 21:ae:3d:04:3b:eb:f3:70:71:e0:c8:f3:36:89:24:2e:8b:4c: b1:d5:63:8c:51:e7:17:20:1a:a1:32:10:1d:b6:88:bb:16:e6: 85:74:24:00:b5:39:b9:8c:d6:37:29:4a:f1:13:85:d4:9c:b8: ff:2b:0d:7f:d2:16:09:75:f1:d4:fa:30:7f:db:08:53:cf:06: f3:2c:88:f3:1b:97:26:71:b4:04:f9:64:aa:55:8e:be:a4:80: 47:e6:fd:b0:c1:dc:df:4e:b9:82:ed:62:a3:36:f7:ec:90:ae: ed:1e:26:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMNoBqI0vk3qBeebnHJ/xQBrtaIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5 ODUxQTFCOTAeFw0yNjA2MTMxMTA4MDNaFw0yNjA2MTQxMzAwMDNaMDMxMTAvBgNV BAMTKENCQkU0RUE3M0I3MTBBMUUzMDhENjc2NjUwRDdGRUEzNDRCQTZBMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZUiMrOdSPe0Zh0A7lyPx5XoNY RDiXNG2smzzufrceXk4z2KkpEJy2IbajWAlY/KwnEQ9SBeuf7JYb+bm/24FzDFoq sDUQqs/Dz39kElFL2yUxm0LMuT7uuwPCbbXU0e9zPUahfYhS+gt6VdX/JhhgUSZ0 CrbTcR66MjSW4yH0jaFab4yR6vFgtnpEekha5eah/i5VE1SAzWBKwbXNmaCgPscg AbTD/Ui9mocFj/G6KQwoec8heFvsuryBSqVyDukhZzUq2IVcshRV28gw+AFA2Q+3 5s1PdwAmkm/nBrAH/3/3MZX22mwzQwX6CpU6firvGYtArHduwCFb02eAKPenAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy75OpztxCh4wjWdmUNf+o0S6ai4wHwYDVR0j BBgwFoAU3U/+ysb7E8TxR2AvixgkQphRobkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJhMGI4ZjgtNGZjZi00YjliLTk3OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FD NkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5ODUxQTFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDRGRkVDQUM2RkIxM0M0RjE0NzYwMkY4QjE4MjQ0Mjk4NTFB MUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0 NDI5ODUxQTFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKHsa7Qvv+amJtuixg0KsQd6KDLFndEId1Z aC3E4Qby9U2pfQ+mqKXSP5uH1Kan/rhY8ZGLjYhGQc64cCqSBGoc35j47ab004ix FakzhfThiuMk7YPy8VJpfB01EQo12y3nzZBnJbinE6fm4ZQ7JDsiSmm7mxiTwj3r 94J2bJ0S7qBeyF+XV+89uib+OvpoqiGuPQQ76/NwceDI8zaJJC6LTLHVY4xR5xcg GqEyEB22iLsW5oV0JAC1ObmM1jcpSvEThdScuP8rDX/SFgl18dT6MH/bCFPPBvMs iPMblyZxtAT5ZKpVjr6kgEfm/bDB3N9OuYLtYqM29+yQru0eJmw= -----END CERTIFICATE-----Generated at Sat Jun 13 23:52:42 2026 by rpki-client