$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft File: DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft (raw, json) Hash identifier: MQpo8Agfmtai9Kjma3eOkLrGl9/PXQMAu7BF6//UWZ4= Subject key identifier: 95:46:0F:CF:0D:99:30:27:95:2D:EC:F6:0F:82:21:73:E6:94:D8:BD Authority key identifier: DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 Certificate issuer: /CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Certificate serial: 2886C8F6AACA3925E23D7FBF8DD538E9C75E5242 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 03:21:56 +0000 Manifest this update: Wed 17 Jun 2026 03:16:56 +0000 Manifest next update: Thu 18 Jun 2026 05:34:56 +0000 Files and hashes: 1: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: dYhK+jkniChfhicgSum73AYH3pvJ3PQYc3HjtlYfQRE=) 2: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: R2z9xaNaKZrL0Q1BTZoKmFOdkM+GucNCILqEsv6GHto=) 3: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: yIQlqFtzEyBabQj8ZV+fU4FgzaMPkBblM9AQE0hk6TU=) 4: DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl (hash: CouIY9rYa/mROQiLjjKuphej9XSA11L3r5mDmfPODb0=) 5: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: /ucuML0e+8NVeub1h81o1HfhxHTujbKLgWAANxTlJqo=) 6: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: 3vdIVahG9RTfTLGTYsntjI3pmo9GulTq1yl7EBwWw9o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:86:c8:f6:aa:ca:39:25:e2:3d:7f:bf:8d:d5:38:e9:c7:5e:52:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Validity Not Before: Jun 17 03:16:56 2026 GMT Not After : Jun 18 05:34:56 2026 GMT Subject: CN=95460FCF0D993027952DECF60F822173E694D8BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5b:04:b3:ca:f4:2d:41:a3:25:a2:13:49:11: 62:f5:bb:74:87:6d:39:32:b2:e9:ec:88:be:61:61: 15:06:05:36:43:17:43:83:45:f3:e9:7a:d6:46:f6: b2:07:54:28:23:d1:de:45:66:dd:ba:2f:c3:e4:8a: 87:b8:ae:86:49:c0:ca:89:ed:de:4a:3f:76:6e:ed: 65:09:8b:ef:f8:e3:84:0e:21:9d:3d:e5:01:f5:9a: 7a:da:27:59:7b:3b:1d:74:06:16:79:ae:e5:49:18: 53:db:08:ec:d3:b5:11:4f:07:68:fa:d7:86:a4:59: 68:b9:6e:aa:31:c8:f4:13:d1:b6:45:2a:87:e4:5c: f1:3d:00:a4:31:dd:90:46:a9:f2:17:93:6c:f9:83: 67:28:48:ac:8b:96:3f:c7:7d:3d:aa:bd:2d:ce:36: 8c:4b:e0:d7:05:62:09:57:55:0c:39:b8:0a:6f:09: e7:a6:21:d6:04:11:34:1b:66:2c:9c:8e:6e:d9:b7: c1:75:4c:78:a7:9a:09:03:cf:0f:d9:23:7a:06:63: fa:bf:d5:8f:de:05:97:c9:88:56:56:cc:7c:f8:41: e4:6e:83:90:9c:a9:07:b3:93:cf:b6:5d:74:be:08: ee:8c:75:95:97:fa:a6:f4:9a:6b:3c:bd:94:0e:ed: b0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:46:0F:CF:0D:99:30:27:95:2D:EC:F6:0F:82:21:73:E6:94:D8:BD X509v3 Authority Key Identifier: keyid:DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:95:94:33:b5:04:72:ab:e6:dd:00:a2:21:db:5f:ae:ca:63: 99:3b:89:c7:ca:9f:30:92:43:ef:91:9a:70:d0:96:93:52:08: fe:63:df:ca:5f:ac:5e:3c:87:81:ea:60:20:4a:8a:47:14:c9: 68:30:ce:db:09:f6:92:f2:1d:7c:bb:15:41:b3:c6:8b:a7:0e: 76:51:dd:ce:cd:ff:8b:b6:ce:38:4f:88:fd:cb:90:03:4c:11: 66:b1:2d:f8:e4:22:4d:3c:06:3f:6c:ff:75:c8:7a:59:c1:be: f9:3a:68:f3:ee:b1:c1:fb:cb:c1:aa:9c:71:98:35:2f:0a:a1: 37:8a:f6:12:e7:7d:95:75:ac:72:f9:05:f8:c5:1c:05:39:0e: bd:5b:f6:79:4a:16:a9:ca:cc:84:1f:36:65:b6:b2:98:01:71: 6b:2e:32:d0:43:1b:b4:77:64:ce:2f:8f:da:0b:6e:8e:b0:a2: 8e:9d:90:da:09:af:f0:62:e6:17:72:a5:cd:98:3b:e6:58:f5: c6:28:fa:80:ef:ea:3d:a6:b3:3e:ef:92:29:ba:1c:9c:83:2c: 8e:9d:dd:65:7e:d4:a5:c2:f3:0b:87:fe:62:e0:68:1b:b4:b3: bc:c7:73:44:91:16:ba:ac:32:c8:6b:7e:b5:08:48:0d:5b:be: a3:b9:2e:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKIbI9qrKOSXiPX+/jdU46cdeUkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCRTU4OUU2QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4 OUE4M0JGMDAeFw0yNjA2MTcwMzE2NTZaFw0yNjA2MTgwNTM0NTZaMDMxMTAvBgNV BAMTKDk1NDYwRkNGMEQ5OTMwMjc5NTJERUNGNjBGODIyMTczRTY5NEQ4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWwSzyvQtQaMlohNJEWL1u3SH bTkysunsiL5hYRUGBTZDF0ODRfPpetZG9rIHVCgj0d5FZt26L8Pkioe4roZJwMqJ 7d5KP3Zu7WUJi+/444QOIZ095QH1mnraJ1l7Ox10BhZ5ruVJGFPbCOzTtRFPB2j6 14akWWi5bqoxyPQT0bZFKofkXPE9AKQx3ZBGqfIXk2z5g2coSKyLlj/HfT2qvS3O NoxL4NcFYglXVQw5uApvCeemIdYEETQbZiycjm7Zt8F1THinmgkDzw/ZI3oGY/q/ 1Y/eBZfJiFZWzHz4QeRug5CcqQezk8+2XXS+CO6MdZWX+qb0mms8vZQO7bCpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlUYPzw2ZMCeVLez2D4Ihc+aU2L0wHwYDVR0j BBgwFoAU3b5YnmoCty2DCGs/VpfatomoO/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmFlN2Q0NjEtMGUzMi00ZTY1LWJiODgtZDcyNDA1YjI0NDUxLzAvRERCRTU4OUU2 QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4OUE4M0JGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREJFNTg5RTZBMDJCNzJEODMwODZCM0Y1Njk3REFCNjg5QTgz QkYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvRERCRTU4OUU2QTAyQjcyRDgzMDg2QjNGNTY5N0RB QjY4OUE4M0JGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiVlDO1BHKr5t0AoiHbX67KY5k7icfKnzCS Q++RmnDQlpNSCP5j38pfrF48h4HqYCBKikcUyWgwztsJ9pLyHXy7FUGzxounDnZR 3c7N/4u2zjhPiP3LkANMEWaxLfjkIk08Bj9s/3XIelnBvvk6aPPuscH7y8GqnHGY NS8KoTeK9hLnfZV1rHL5BfjFHAU5Dr1b9nlKFqnKzIQfNmW2spgBcWsuMtBDG7R3 ZM4vj9oLbo6woo6dkNoJr/Bi5hdypc2YO+ZY9cYo+oDv6j2msz7vkim6HJyDLI6d 3WV+1KXC8wuH/mLgaBu0s7zHc0SRFrqsMshrfrUISA1bvqO5LsY= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:25 2026 by rpki-client