$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft File: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft (raw, json) Hash identifier: GXYceOLvZXdLd3KsAKPqJAXMjUkkIFVoyzZRJCiNetc= Subject key identifier: 62:D7:53:D0:CB:DA:AD:52:A5:B9:36:52:DA:EF:FC:56:61:64:3F:78 Authority key identifier: DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 Certificate issuer: /CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Certificate serial: 226A859109BC7B63F46351A5AA38306F67E75848 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft Manifest number: BE Signing time: Mon 21 Sep 2026 10:54:56 +0000 Manifest this update: Mon 21 Sep 2026 10:49:56 +0000 Manifest next update: Tue 22 Sep 2026 13:20:56 +0000 Files and hashes: 1: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl (hash: 0B2xoNXGrk4xRvvd1cSPCrtuKnG8m5ShuRScseJWlHo=) 2: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: qSXSAuCypxITbArcxADdWqHfhFT512uFXifXCq40Lkk=) 3: 3130332e3138392e3132322e302f32342d3234203d3e20313338383836.roa (hash: w/XB+eAcVCXSBvP5zeesaKGcdg6afVF0i1dOhvajHGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6a:85:91:09:bc:7b:63:f4:63:51:a5:aa:38:30:6f:67:e7:58:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Validity Not Before: Sep 21 10:49:56 2026 GMT Not After : Sep 22 13:20:56 2026 GMT Subject: CN=62D753D0CBDAAD52A5B93652DAEFFC5661643F78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:00:f8:27:79:4d:24:27:3b:fa:75:7a:0f: 02:62:5a:6a:0f:d4:69:d2:d6:91:21:ea:5d:5e:76: f4:bd:fe:f2:ae:44:ec:5b:0d:a7:33:85:c3:b7:8f: 00:4e:78:46:6b:ab:8c:f4:e8:8b:c1:9a:3b:bb:5e: f0:08:13:98:c1:f8:01:b6:2b:f6:72:86:a3:20:e5: 96:24:ab:a2:ff:26:38:ef:55:46:50:92:88:0e:7b: 3b:e7:57:0d:fc:1d:75:9e:78:20:3f:6a:da:a7:8c: 29:f5:73:5d:25:d3:2c:15:5e:76:a9:eb:d4:d3:aa: e4:82:50:3f:6b:67:31:f5:c9:0c:89:8b:4b:35:50: 69:6f:38:8a:10:f9:fa:59:6c:83:10:a4:1d:41:a8: c8:ec:1a:91:3b:17:22:d9:cb:96:f9:ac:48:30:e0: bb:4a:b7:84:cd:50:bc:4c:71:27:b4:fa:12:a1:b0: e4:84:c5:23:9c:65:21:56:4d:85:1b:f0:66:69:d7: 2b:57:2e:f6:b6:75:dc:82:f3:5e:18:d6:91:a3:6e: f8:c4:b1:4b:9a:46:2c:9b:fa:3b:cb:48:5a:02:fd: 97:03:bc:cf:f7:16:37:ae:2d:f6:e9:0f:f3:1d:b3: cf:6a:fc:61:04:75:0e:7d:20:a1:f8:dd:b1:23:de: ff:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D7:53:D0:CB:DA:AD:52:A5:B9:36:52:DA:EF:FC:56:61:64:3F:78 X509v3 Authority Key Identifier: keyid:DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:fa:bc:34:b5:a0:0c:fe:37:64:e0:91:5a:72:1f:b6:24:41: 41:b0:7c:1b:33:86:3c:1f:0e:1b:b5:0e:d5:23:a2:25:50:dc: 47:10:c5:6c:c6:e2:bd:ee:df:3a:6b:cc:cf:87:c7:a2:eb:26: 79:c7:56:92:06:95:2f:ee:4e:b2:9a:2e:fd:ed:3a:fe:db:a8: 18:88:fd:ed:8b:0e:7f:0a:f3:e7:0e:56:09:a4:54:ee:6e:da: c3:dd:c5:fc:e8:1c:c0:2c:ba:d7:ed:16:14:f9:c2:9f:b8:a8: cb:69:93:91:d9:51:23:b4:2e:35:8c:d8:b4:ae:db:a1:49:9d: 8d:e9:a4:a6:8c:0d:e6:9d:d7:72:1b:79:30:43:81:da:57:c3: 31:09:dd:3e:b8:3e:8c:38:08:54:4a:7f:ee:f3:ba:65:bb:5e: a5:b4:55:0d:68:e7:54:f2:8a:66:be:05:b5:52:55:44:8c:6e: a4:51:38:67:73:a8:8b:be:12:58:83:88:6d:13:ab:b9:0b:de: fd:47:b7:8c:4b:90:27:aa:fc:47:5c:f4:44:25:47:87:e5:36: b0:50:71:9c:00:7c:7c:8b:be:b1:66:fc:b5:1b:97:f9:f9:0a: a7:5e:a7:aa:6d:34:69:ee:c3:b7:21:ed:c0:89:1c:ef:18:7a: 3d:8e:53:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImqFkQm8e2P0Y1Glqjgwb2fnWEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5 ODUxQTFCOTAeFw0yNjA5MjExMDQ5NTZaFw0yNjA5MjIxMzIwNTZaMDMxMTAvBgNV BAMTKDYyRDc1M0QwQ0JEQUFENTJBNUI5MzY1MkRBRUZGQzU2NjE2NDNGNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChaAD4J3lNJCc7+nV6DwJiWmoP 1GnS1pEh6l1edvS9/vKuROxbDaczhcO3jwBOeEZrq4z06IvBmju7XvAIE5jB+AG2 K/ZyhqMg5ZYkq6L/JjjvVUZQkogOezvnVw38HXWeeCA/atqnjCn1c10l0ywVXnap 69TTquSCUD9rZzH1yQyJi0s1UGlvOIoQ+fpZbIMQpB1BqMjsGpE7FyLZy5b5rEgw 4LtKt4TNULxMcSe0+hKhsOSExSOcZSFWTYUb8GZp1ytXLva2ddyC814Y1pGjbvjE sUuaRiyb+jvLSFoC/ZcDvM/3FjeuLfbpD/Mds89q/GEEdQ59IKH43bEj3v83AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYtdT0MvarVKluTZS2u/8VmFkP3gwHwYDVR0j BBgwFoAU3U/+ysb7E8TxR2AvixgkQphRobkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJhMGI4ZjgtNGZjZi00YjliLTk3OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FD NkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5ODUxQTFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDRGRkVDQUM2RkIxM0M0RjE0NzYwMkY4QjE4MjQ0Mjk4NTFB MUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0 NDI5ODUxQTFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAML6vDS1oAz+N2TgkVpyH7YkQUGwfBszhjwf Dhu1DtUjoiVQ3EcQxWzG4r3u3zprzM+Hx6LrJnnHVpIGlS/uTrKaLv3tOv7bqBiI /e2LDn8K8+cOVgmkVO5u2sPdxfzoHMAsutftFhT5wp+4qMtpk5HZUSO0LjWM2LSu 26FJnY3ppKaMDead13IbeTBDgdpXwzEJ3T64Pow4CFRKf+7zumW7XqW0VQ1o51Ty ima+BbVSVUSMbqRROGdzqIu+EliDiG0Tq7kL3v1Ht4xLkCeq/Edc9EQlR4flNrBQ cZwAfHyLvrFm/LUbl/n5Cqdep6ptNGnuw7ch7cCJHO8Yej2OU/E= -----END CERTIFICATE-----Generated at Mon Sep 21 18:52:18 2026 by rpki-client