$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft File: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft (raw, json) Hash identifier: oHIg/ZTFtKmA13GoW9TDC2r0/K7icVqfZfHg5NJYKtE= Subject key identifier: 1A:13:8C:A8:3A:C4:6F:49:F6:07:93:43:E2:A8:D3:2C:75:B9:D9:A8 Authority key identifier: DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 Certificate issuer: /CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Certificate serial: 5E564E63B34C90807106FF79AA4B35A90853BB35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 03:30:18 +0000 Manifest this update: Wed 29 Jul 2026 03:25:18 +0000 Manifest next update: Thu 30 Jul 2026 07:10:18 +0000 Files and hashes: 1: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl (hash: IO2zU+WryLLnHYgNmceG60cjaKUb8eStgirUqqIseMA=) 2: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: qSXSAuCypxITbArcxADdWqHfhFT512uFXifXCq40Lkk=) 3: 3130332e3138392e3132322e302f32342d3234203d3e20313338383836.roa (hash: w/XB+eAcVCXSBvP5zeesaKGcdg6afVF0i1dOhvajHGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:56:4e:63:b3:4c:90:80:71:06:ff:79:aa:4b:35:a9:08:53:bb:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Validity Not Before: Jul 29 03:25:18 2026 GMT Not After : Jul 30 07:10:18 2026 GMT Subject: CN=1A138CA83AC46F49F6079343E2A8D32C75B9D9A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c0:db:18:e2:c9:db:dd:ec:24:cb:0b:ea:36: 91:fb:88:60:cc:79:16:c9:2f:9e:b1:c4:31:2d:b0: c9:a9:ee:4e:dc:a0:a7:2c:9b:6b:2e:6e:48:02:63: 9b:43:9e:f3:12:2f:82:b5:a9:2b:e8:55:7b:61:4a: 4f:b4:7f:ad:eb:ad:44:18:cb:cd:1c:c1:38:71:7e: ab:74:ac:c3:47:df:a6:f7:2c:4c:11:54:a7:22:86: a2:10:4c:47:52:2d:a1:78:01:c9:64:b8:ef:c1:fe: 94:28:61:b0:36:74:1f:fd:4a:34:1c:c6:cf:8c:cf: 93:aa:d8:53:b4:d2:60:b0:64:90:18:42:f6:44:d1: 07:e4:c7:c3:7f:1c:79:7b:9e:fc:9d:54:1d:2b:76: 8f:3c:ee:e8:6b:c8:41:16:eb:48:10:51:d3:3b:63: 26:64:13:0f:5d:e6:4f:c2:5c:15:05:3f:7b:ee:1a: 72:60:ca:37:08:be:33:7e:48:d3:97:05:45:06:08: 3f:23:46:2b:46:70:cc:bb:f6:1f:71:cb:0e:b5:88: e0:24:46:f9:a2:43:0c:c3:cc:66:8f:02:ee:3b:e5: 4c:48:d1:fd:40:ee:e2:ad:9c:67:99:0b:c0:46:f4: 74:53:6a:88:41:90:39:f2:55:69:ce:e0:8f:aa:75: 20:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:13:8C:A8:3A:C4:6F:49:F6:07:93:43:E2:A8:D3:2C:75:B9:D9:A8 X509v3 Authority Key Identifier: keyid:DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e1:54:e9:8d:45:f1:58:91:c6:6c:d3:f7:8a:0a:7f:db:6d: a0:54:5e:23:66:eb:f5:94:29:82:8c:0c:b8:5e:60:a4:3f:e8: 63:41:4f:73:e0:29:d4:ed:e2:d0:c1:a1:7c:e6:ad:8b:04:cc: 31:7a:73:ac:d7:76:82:26:3e:6c:50:b6:0a:45:72:29:e6:ba: b5:e4:e2:37:bc:51:4f:8e:4f:d5:3e:ff:6d:7b:28:2d:1c:43: 8b:1a:f9:3b:6f:f3:fa:81:4f:bd:7d:b0:f8:70:c8:51:86:39: 85:27:4e:a4:ba:23:5c:6b:33:7f:d5:da:01:38:9f:db:7d:74: 39:85:0e:e0:3b:3b:f2:42:8a:44:82:56:dc:41:c7:f0:13:11: c3:d0:12:c0:a1:ab:b8:74:6d:45:1d:bd:ce:9c:09:20:33:6e: e7:57:2f:d3:1c:c0:84:1d:71:47:f6:a6:dd:87:25:d4:f0:85: 3b:6f:43:cc:a4:bd:86:7d:64:7b:f4:f2:6d:5a:5f:d3:fd:c6: c7:c8:6a:b1:4e:54:58:5d:e4:b6:86:8d:20:fa:0f:06:e5:eb: 3f:6d:3a:cf:22:88:60:f8:fa:6f:00:99:e4:71:19:93:ef:be: 54:a5:d3:27:0a:03:f2:c0:87:e3:41:be:d0:33:a7:d0:92:d1: 6a:de:b4:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXlZOY7NMkIBxBv95qks1qQhTuzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5 ODUxQTFCOTAeFw0yNjA3MjkwMzI1MThaFw0yNjA3MzAwNzEwMThaMDMxMTAvBgNV BAMTKDFBMTM4Q0E4M0FDNDZGNDlGNjA3OTM0M0UyQThEMzJDNzVCOUQ5QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMwNsY4snb3ewkywvqNpH7iGDM eRbJL56xxDEtsMmp7k7coKcsm2subkgCY5tDnvMSL4K1qSvoVXthSk+0f63rrUQY y80cwThxfqt0rMNH36b3LEwRVKcihqIQTEdSLaF4AclkuO/B/pQoYbA2dB/9SjQc xs+Mz5Oq2FO00mCwZJAYQvZE0Qfkx8N/HHl7nvydVB0rdo887uhryEEW60gQUdM7 YyZkEw9d5k/CXBUFP3vuGnJgyjcIvjN+SNOXBUUGCD8jRitGcMy79h9xyw61iOAk RvmiQwzDzGaPAu475UxI0f1A7uKtnGeZC8BG9HRTaohBkDnyVWnO4I+qdSCnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGhOMqDrEb0n2B5ND4qjTLHW52agwHwYDVR0j BBgwFoAU3U/+ysb7E8TxR2AvixgkQphRobkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJhMGI4ZjgtNGZjZi00YjliLTk3OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FD NkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5ODUxQTFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDRGRkVDQUM2RkIxM0M0RjE0NzYwMkY4QjE4MjQ0Mjk4NTFB MUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0 NDI5ODUxQTFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvhVOmNRfFYkcZs0/eKCn/bbaBUXiNm6/WU KYKMDLheYKQ/6GNBT3PgKdTt4tDBoXzmrYsEzDF6c6zXdoImPmxQtgpFcinmurXk 4je8UU+OT9U+/217KC0cQ4sa+Ttv8/qBT719sPhwyFGGOYUnTqS6I1xrM3/V2gE4 n9t9dDmFDuA7O/JCikSCVtxBx/ATEcPQEsChq7h0bUUdvc6cCSAzbudXL9McwIQd cUf2pt2HJdTwhTtvQ8ykvYZ9ZHv08m1aX9P9xsfIarFOVFhd5LaGjSD6Dwbl6z9t Os8iiGD4+m8AmeRxGZPvvlSl0ycKA/LAh+NBvtAzp9CS0WretMQ= -----END CERTIFICATE-----Generated at Wed Jul 29 08:57:57 2026 by rpki-client