$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft File: DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft (raw, json) Hash identifier: zu/2v52+mxSHkQw9XkJ5LCstkdsYT4sdI/mr5VKb1rg= Subject key identifier: 6F:F0:67:F7:05:3F:02:2A:3F:2D:A8:92:F7:EC:BA:5C:FC:7A:F0:90 Authority key identifier: DD:C8:46:A2:41:57:1E:1F:CF:5D:F5:39:AD:EE:44:F9:B1:68:48:AC Certificate issuer: /CN=DDC846A241571E1FCF5DF539ADEE44F9B16848AC Certificate serial: DC09A0A6379484E05FA9BFDB50FB5FE3DB5396 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft Manifest number: BF Signing time: Mon 21 Sep 2026 22:03:55 +0000 Manifest this update: Mon 21 Sep 2026 21:58:55 +0000 Manifest next update: Wed 23 Sep 2026 00:42:55 +0000 Files and hashes: 1: DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl (hash: C7lsGSiQ3/kaQzkFAgAWSPU7Na4DFsunBAZEQyEfqRs=) 2: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: a0hNIi6O+sVqt42fhC5LTpjPNLA3CmOlEpxa01bnEUs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: dc:09:a0:a6:37:94:84:e0:5f:a9:bf:db:50:fb:5f:e3:db:53:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC846A241571E1FCF5DF539ADEE44F9B16848AC Validity Not Before: Sep 21 21:58:55 2026 GMT Not After : Sep 23 00:42:55 2026 GMT Subject: CN=6FF067F7053F022A3F2DA892F7ECBA5CFC7AF090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:3f:29:f1:b4:7e:a0:80:0a:c3:8e:82:2a: 93:dd:e9:39:85:5a:9f:43:47:e8:99:3c:b8:1b:67: 81:84:02:c0:1a:af:fa:e3:ac:b3:2e:ee:5e:c0:02: 7c:56:d1:08:f2:a3:16:7f:0b:ac:1d:f7:3b:f4:7e: 86:5a:c0:b4:bb:51:99:76:a9:47:8a:cd:d9:db:2e: 61:d2:a5:07:ea:51:85:d3:25:5d:a1:de:52:2d:ca: 0a:7f:1f:43:1c:47:e4:50:ae:6b:c7:25:5a:7a:60: 2e:6b:f8:d1:62:ba:22:d4:0d:58:26:9a:74:bd:3d: 63:37:83:91:d7:f3:47:85:bb:03:a5:bb:08:a2:cb: e9:09:e6:4c:1b:11:0e:a9:18:7c:33:26:da:69:db: 2d:65:7b:cc:68:49:40:6a:82:73:4c:fd:eb:e8:f2: 11:3c:13:f5:98:4b:12:c2:8d:90:32:a1:e9:2c:e5: cb:0f:b0:9d:d7:d5:00:71:35:ed:1c:4c:2f:e6:c1: c9:9d:10:63:ee:a1:03:53:42:3b:e1:3d:9c:b1:51: a4:17:db:ef:06:d9:89:1f:0f:2d:7c:77:90:c6:b5: e8:19:f2:c4:69:11:27:d7:be:44:ad:ed:62:b3:f7: 32:2a:6a:7b:64:cf:0f:07:69:48:80:67:1c:c6:7a: f8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F0:67:F7:05:3F:02:2A:3F:2D:A8:92:F7:EC:BA:5C:FC:7A:F0:90 X509v3 Authority Key Identifier: keyid:DD:C8:46:A2:41:57:1E:1F:CF:5D:F5:39:AD:EE:44:F9:B1:68:48:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:4b:45:fe:4b:ee:9d:f1:d5:d3:b6:d6:62:55:12:81:3c:f1: 54:b4:1c:17:d1:be:15:70:af:e1:af:c3:c6:34:45:07:fa:c0: 14:f6:e7:53:2f:c6:c0:61:3f:cf:8d:0c:c7:77:c6:ef:f4:e3: 42:e9:10:ce:b3:0a:97:b2:ac:ba:0e:ae:a6:2b:89:ca:6f:63: f8:20:36:9f:c9:e4:9d:8d:fa:fa:c3:c7:73:bc:43:e0:53:f7: fb:85:eb:9e:6e:0a:fa:16:4b:21:7b:df:b9:20:98:96:02:25: aa:57:d7:91:5f:3f:ac:42:ad:51:84:90:82:47:29:32:58:8c: 0f:e4:22:6b:98:a0:b5:52:fa:87:48:f7:cd:37:d7:bc:e8:60: 6d:dd:76:91:23:37:b4:5c:0c:29:69:00:1c:97:3c:cd:63:60: fe:5c:e4:be:ab:a2:96:e3:88:5b:96:a3:01:61:1e:57:c3:62: fa:58:8c:5a:fc:61:e1:12:12:c1:3a:b1:da:ff:3a:3c:cf:52: 26:4f:de:d4:46:52:dc:75:2b:22:f6:78:a5:92:ab:3d:82:e2: 70:82:d9:b5:c2:57:44:57:41:e7:01:3f:79:13:94:00:a1:cc: 38:07:97:6c:8f:09:51:86:f1:8d:61:80:e3:3c:78:c0:ad:8a: 0f:0d:f2:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUANwJoKY3lITgX6m/21D7X+PbU5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDODQ2QTI0MTU3MUUxRkNGNURGNTM5QURFRTQ0RjlC MTY4NDhBQzAeFw0yNjA5MjEyMTU4NTVaFw0yNjA5MjMwMDQyNTVaMDMxMTAvBgNV BAMTKDZGRjA2N0Y3MDUzRjAyMkEzRjJEQTg5MkY3RUNCQTVDRkM3QUYwOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3D8p8bR+oIAKw46CKpPd6TmF Wp9DR+iZPLgbZ4GEAsAar/rjrLMu7l7AAnxW0QjyoxZ/C6wd9zv0foZawLS7UZl2 qUeKzdnbLmHSpQfqUYXTJV2h3lItygp/H0McR+RQrmvHJVp6YC5r+NFiuiLUDVgm mnS9PWM3g5HX80eFuwOluwiiy+kJ5kwbEQ6pGHwzJtpp2y1le8xoSUBqgnNM/evo 8hE8E/WYSxLCjZAyoeks5csPsJ3X1QBxNe0cTC/mwcmdEGPuoQNTQjvhPZyxUaQX 2+8G2YkfDy18d5DGtegZ8sRpESfXvkSt7WKz9zIqantkzw8HaUiAZxzGevjnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb/Bn9wU/Aio/LaiS9+y6XPx68JAwHwYDVR0j BBgwFoAU3chGokFXHh/PXfU5re5E+bFoSKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYmRkYmYtZDExOS00YzgwLTg4MjctN2E4ODhhOTNjZTAzLzAvRERDODQ2QTI0 MTU3MUUxRkNGNURGNTM5QURFRTQ0RjlCMTY4NDhBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREM4NDZBMjQxNTcxRTFGQ0Y1REY1MzlBREVFNDRGOUIxNjg0 OEFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvRERDODQ2QTI0MTU3MUUxRkNGNURGNTM5QURFRTQ0 RjlCMTY4NDhBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZLRf5L7p3x1dO21mJVEoE88VS0HBfRvhVw r+Gvw8Y0RQf6wBT251MvxsBhP8+NDMd3xu/040LpEM6zCpeyrLoOrqYricpvY/gg Np/J5J2N+vrDx3O8Q+BT9/uF655uCvoWSyF737kgmJYCJapX15FfP6xCrVGEkIJH KTJYjA/kImuYoLVS+odI980317zoYG3ddpEjN7RcDClpAByXPM1jYP5c5L6ropbj iFuWowFhHlfDYvpYjFr8YeESEsE6sdr/OjzPUiZP3tRGUtx1KyL2eKWSqz2C4nCC 2bXCV0RXQecBP3kTlAChzDgHl2yPCVGG8Y1hgOM8eMCtig8N8ls= -----END CERTIFICATE-----Generated at Tue Sep 22 15:58:37 2026 by rpki-client