$ rpki-client -vvf rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft File: DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft (raw, json) Hash identifier: 7+qFCOTNvphyjnx5GLYP2fU7Kphl9XG0q+nZnZVG888= Subject key identifier: 20:CD:F0:39:7F:4E:E6:D1:B3:D0:E8:F3:A7:FC:B6:AC:9F:F0:77:2D Authority key identifier: DD:C8:46:A2:41:57:1E:1F:CF:5D:F5:39:AD:EE:44:F9:B1:68:48:AC Certificate issuer: /CN=DDC846A241571E1FCF5DF539ADEE44F9B16848AC Certificate serial: 2E23D100E9164C78075CEC8D653AD8ACC97393D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 10:05:05 +0000 Manifest this update: Wed 17 Jun 2026 10:00:05 +0000 Manifest next update: Thu 18 Jun 2026 12:10:05 +0000 Files and hashes: 1: DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl (hash: v5Hgz9PI7GkYhzAEhP6Y7ZSfyoir3kpLeSefAW8trA0=) 2: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: a0hNIi6O+sVqt42fhC5LTpjPNLA3CmOlEpxa01bnEUs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:23:d1:00:e9:16:4c:78:07:5c:ec:8d:65:3a:d8:ac:c9:73:93:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC846A241571E1FCF5DF539ADEE44F9B16848AC Validity Not Before: Jun 17 10:00:05 2026 GMT Not After : Jun 18 12:10:05 2026 GMT Subject: CN=20CDF0397F4EE6D1B3D0E8F3A7FCB6AC9FF0772D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:7a:b5:00:6b:0a:7d:50:7c:3c:54:01:7c: 94:33:1b:b2:01:60:a2:ba:a3:f8:d3:81:00:07:94: 9f:28:9c:86:54:82:45:49:a1:58:ea:a4:3f:76:b4: 9d:9a:7c:72:2f:40:47:71:55:b3:2a:11:b7:be:42: 8c:76:4e:f3:b3:5b:6c:29:37:77:f1:82:13:c6:ff: fc:18:38:ea:b6:8f:b0:8f:ec:68:5d:b0:61:d4:74: 49:52:6c:fb:08:41:fd:81:eb:da:86:98:62:9f:c4: ac:81:0d:7b:1a:88:70:a9:20:ca:27:8d:1a:1a:db: 51:0f:69:8a:cb:b4:1e:07:dd:db:ad:b2:67:ab:91: b4:ad:c4:eb:f8:ad:c9:8a:3c:6f:f7:9c:c7:14:7a: d9:62:c2:20:c6:ef:fc:60:17:97:e4:28:c4:b1:e9: 43:45:d1:00:60:38:4c:e9:fd:cc:83:a4:fd:cf:9b: 3a:37:2f:8c:be:96:0f:40:42:48:42:0f:19:9e:bd: 70:87:76:0c:4f:12:9d:f2:98:48:46:08:11:52:09: a8:60:cf:8a:f5:8d:86:8e:62:c0:dd:43:03:4b:f5: 4f:07:f7:1b:c4:16:a3:e9:2b:c0:60:78:ef:66:7e: 9d:a5:cb:c7:46:80:6b:03:30:69:0a:a9:12:1f:29: e2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CD:F0:39:7F:4E:E6:D1:B3:D0:E8:F3:A7:FC:B6:AC:9F:F0:77:2D X509v3 Authority Key Identifier: keyid:DD:C8:46:A2:41:57:1E:1F:CF:5D:F5:39:AD:EE:44:F9:B1:68:48:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6b:ee:b9:0c:3e:1d:02:51:e6:a9:80:7b:36:b6:4a:28:98: 40:79:9c:72:34:5e:c6:f0:9a:3f:c9:00:ba:8e:d0:ed:63:ca: 42:18:09:40:7f:72:1d:b9:b0:f8:07:05:52:cd:de:e4:88:d9: 1b:76:b4:fe:d9:b1:64:ff:1c:71:18:3d:30:4c:3c:7e:6a:5f: 4e:70:14:75:7e:fe:99:64:c8:e7:83:57:da:73:7b:20:96:57: 25:0a:cc:c1:d2:23:aa:e2:13:32:8a:80:88:bf:e4:1d:22:1e: 97:51:17:95:b4:a2:64:43:37:c4:89:c1:c2:c9:28:9d:45:d1: c8:8c:b7:0a:3d:fb:34:65:31:11:5d:f2:94:85:a9:90:a2:88: 42:0a:aa:2d:7f:62:b1:21:d5:89:fd:86:56:ec:f4:ab:48:66: 2f:6d:58:2f:be:eb:c7:01:cc:48:d5:f0:a6:a7:f2:d4:ea:2b: 39:71:6a:b3:19:48:fe:ea:0b:f3:f8:ec:c0:e2:13:80:47:c3: cc:99:a1:43:33:4c:24:21:d7:28:90:ef:09:d8:8f:1f:b0:76: 0d:19:8b:30:30:9b:f1:9d:a2:0c:70:5a:41:fa:2c:d2:ef:1e: 01:3c:89:0e:80:ed:4a:5c:69:64:62:15:ca:f5:28:17:ca:ff: 3c:cc:6f:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULiPRAOkWTHgHXOyNZTrYrMlzk9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDODQ2QTI0MTU3MUUxRkNGNURGNTM5QURFRTQ0RjlC MTY4NDhBQzAeFw0yNjA2MTcxMDAwMDVaFw0yNjA2MTgxMjEwMDVaMDMxMTAvBgNV BAMTKDIwQ0RGMDM5N0Y0RUU2RDFCM0QwRThGM0E3RkNCNkFDOUZGMDc3MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5mnq1AGsKfVB8PFQBfJQzG7IB YKK6o/jTgQAHlJ8onIZUgkVJoVjqpD92tJ2afHIvQEdxVbMqEbe+Qox2TvOzW2wp N3fxghPG//wYOOq2j7CP7GhdsGHUdElSbPsIQf2B69qGmGKfxKyBDXsaiHCpIMon jRoa21EPaYrLtB4H3dutsmerkbStxOv4rcmKPG/3nMcUetliwiDG7/xgF5fkKMSx 6UNF0QBgOEzp/cyDpP3Pmzo3L4y+lg9AQkhCDxmevXCHdgxPEp3ymEhGCBFSCahg z4r1jYaOYsDdQwNL9U8H9xvEFqPpK8BgeO9mfp2ly8dGgGsDMGkKqRIfKeILAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIM3wOX9O5tGz0Ojzp/y2rJ/wdy0wHwYDVR0j BBgwFoAU3chGokFXHh/PXfU5re5E+bFoSKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYmRkYmYtZDExOS00YzgwLTg4MjctN2E4ODhhOTNjZTAzLzAvRERDODQ2QTI0 MTU3MUUxRkNGNURGNTM5QURFRTQ0RjlCMTY4NDhBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREM4NDZBMjQxNTcxRTFGQ0Y1REY1MzlBREVFNDRGOUIxNjg0 OEFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvRERDODQ2QTI0MTU3MUUxRkNGNURGNTM5QURFRTQ0 RjlCMTY4NDhBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxr7rkMPh0CUeapgHs2tkoomEB5nHI0Xsbw mj/JALqO0O1jykIYCUB/ch25sPgHBVLN3uSI2Rt2tP7ZsWT/HHEYPTBMPH5qX05w FHV+/plkyOeDV9pzeyCWVyUKzMHSI6riEzKKgIi/5B0iHpdRF5W0omRDN8SJwcLJ KJ1F0ciMtwo9+zRlMRFd8pSFqZCiiEIKqi1/YrEh1Yn9hlbs9KtIZi9tWC++68cB zEjV8Kan8tTqKzlxarMZSP7qC/P47MDiE4BHw8yZoUMzTCQh1yiQ7wnYjx+wdg0Z izAwm/GdogxwWkH6LNLvHgE8iQ6A7UpcaWRiFcr1KBfK/zzMb1Y= -----END CERTIFICATE-----Generated at Wed Jun 17 12:50:50 2026 by rpki-client