$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft File: DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft (raw, json) Hash identifier: OBICgoBi896BnxooGUt3qo5Se10AXEbXK+ejXh6ltjU= Subject key identifier: 7B:68:A6:58:85:EF:97:71:AA:F5:BA:14:90:12:04:F5:AC:B6:BE:34 Authority key identifier: DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 Certificate issuer: /CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Certificate serial: 2679C94337770CA38BF55808A170BE5942B4AE28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft Manifest number: BE Signing time: Mon 21 Sep 2026 05:33:37 +0000 Manifest this update: Mon 21 Sep 2026 05:28:37 +0000 Manifest next update: Tue 22 Sep 2026 06:41:37 +0000 Files and hashes: 1: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: R2z9xaNaKZrL0Q1BTZoKmFOdkM+GucNCILqEsv6GHto=) 2: DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl (hash: SYI1Td7JUMnJcdwAjpwOlYm0ssd4xIfcHBIdhLqN30A=) 3: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: 3vdIVahG9RTfTLGTYsntjI3pmo9GulTq1yl7EBwWw9o=) 4: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: yIQlqFtzEyBabQj8ZV+fU4FgzaMPkBblM9AQE0hk6TU=) 5: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: dYhK+jkniChfhicgSum73AYH3pvJ3PQYc3HjtlYfQRE=) 6: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: /ucuML0e+8NVeub1h81o1HfhxHTujbKLgWAANxTlJqo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:79:c9:43:37:77:0c:a3:8b:f5:58:08:a1:70:be:59:42:b4:ae:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Validity Not Before: Sep 21 05:28:37 2026 GMT Not After : Sep 22 06:41:37 2026 GMT Subject: CN=7B68A65885EF9771AAF5BA14901204F5ACB6BE34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:32:fd:3e:1e:dd:e8:3a:84:59:9c:97:cd:f3: 2b:7b:59:a7:59:1f:74:16:f3:3c:33:dd:17:43:12: fa:43:f3:65:87:77:18:4f:8a:0b:70:70:1b:60:6e: 19:55:74:ed:01:c5:f4:62:55:1a:9e:b3:0d:2e:6b: da:04:a6:a5:b8:ce:61:9a:f3:f6:b1:8b:5d:d9:a6: 4d:21:dc:7c:dc:f8:86:28:4b:1f:52:b4:b5:12:12: be:62:9c:a2:6e:d6:a8:0e:3f:88:8a:32:1a:65:7c: 4a:40:13:14:56:d3:fe:a3:4c:1d:0e:17:21:3c:ac: fe:4f:3c:ae:2d:bc:b7:b1:c3:ce:dd:ea:75:fe:3f: ad:f7:0d:36:56:7b:8f:6e:45:d5:d4:1f:99:9a:e2: 7e:b2:4a:8e:9d:73:ea:9e:f4:b1:62:d3:ef:cd:89: c1:e4:91:c3:d5:f9:4f:5f:52:44:0f:f2:1f:8b:d7: 01:60:54:22:cb:22:50:dc:e3:60:a8:86:bd:7f:f6: bb:60:65:4b:c3:30:dd:ed:b6:44:5c:82:bd:cc:56: fc:c3:95:21:6f:6f:74:56:f4:c1:85:62:71:00:31: 9b:b0:c2:03:b3:a3:75:a3:0f:5f:d8:8b:62:f7:70: 17:09:37:b9:23:6d:0d:f3:c9:97:76:ec:f1:6c:03: 9d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:68:A6:58:85:EF:97:71:AA:F5:BA:14:90:12:04:F5:AC:B6:BE:34 X509v3 Authority Key Identifier: keyid:DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a3:c9:b8:9d:93:28:c1:c9:f4:42:bf:44:78:c2:2f:b8:9a: b8:68:ca:5e:bc:19:44:fd:a9:2d:38:1d:df:d4:08:b9:01:6f: e3:09:fd:ff:93:5e:3b:08:16:0b:00:82:00:32:9f:45:32:14: 8f:4c:8a:ba:56:81:1f:e3:59:da:be:b3:b5:45:a1:fa:0a:18: 62:30:b6:b3:27:ec:04:bb:a4:57:f1:cb:96:06:59:40:97:4e: 07:a4:6b:0b:cf:c9:6f:bd:8a:53:5b:a5:47:5c:18:9a:3e:b1: 2c:b3:cc:04:b1:2b:d1:40:0b:06:1d:6b:87:6d:5a:5e:68:8f: 7e:12:47:65:35:0e:74:1c:62:89:05:8c:a6:ec:0f:df:cd:e3: df:3a:43:25:9d:e6:75:29:ac:6f:c5:1c:35:b6:01:2d:62:d3: d5:dc:59:af:54:86:a7:9f:df:cc:37:4f:5e:48:09:8d:b4:a5: 4a:75:51:10:08:ad:b6:b7:8c:05:f1:bb:bd:ea:9e:ed:6b:2c: 05:cf:f5:94:8a:e6:96:56:e3:53:f8:0c:23:d4:d5:68:d3:be: e2:12:03:f9:be:8c:c6:22:6c:6d:07:ae:14:0c:f9:6b:df:5c: d5:70:e1:55:92:c2:80:c1:e4:c5:96:96:d0:d6:4c:0a:c0:02: 5b:0c:22:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJnnJQzd3DKOL9VgIoXC+WUK0rigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCRTU4OUU2QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4 OUE4M0JGMDAeFw0yNjA5MjEwNTI4MzdaFw0yNjA5MjIwNjQxMzdaMDMxMTAvBgNV BAMTKDdCNjhBNjU4ODVFRjk3NzFBQUY1QkExNDkwMTIwNEY1QUNCNkJFMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaMv0+Ht3oOoRZnJfN8yt7WadZ H3QW8zwz3RdDEvpD82WHdxhPigtwcBtgbhlVdO0BxfRiVRqesw0ua9oEpqW4zmGa 8/axi13Zpk0h3Hzc+IYoSx9StLUSEr5inKJu1qgOP4iKMhplfEpAExRW0/6jTB0O FyE8rP5PPK4tvLexw87d6nX+P633DTZWe49uRdXUH5ma4n6ySo6dc+qe9LFi0+/N icHkkcPV+U9fUkQP8h+L1wFgVCLLIlDc42Cohr1/9rtgZUvDMN3ttkRcgr3MVvzD lSFvb3RW9MGFYnEAMZuwwgOzo3WjD1/Yi2L3cBcJN7kjbQ3zyZd27PFsA517AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe2imWIXvl3Gq9boUkBIE9ay2vjQwHwYDVR0j BBgwFoAU3b5YnmoCty2DCGs/VpfatomoO/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmFlN2Q0NjEtMGUzMi00ZTY1LWJiODgtZDcyNDA1YjI0NDUxLzAvRERCRTU4OUU2 QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4OUE4M0JGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREJFNTg5RTZBMDJCNzJEODMwODZCM0Y1Njk3REFCNjg5QTgz QkYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvRERCRTU4OUU2QTAyQjcyRDgzMDg2QjNGNTY5N0RB QjY4OUE4M0JGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKjybidkyjByfRCv0R4wi+4mrhoyl68GUT9 qS04Hd/UCLkBb+MJ/f+TXjsIFgsAggAyn0UyFI9MirpWgR/jWdq+s7VFofoKGGIw trMn7AS7pFfxy5YGWUCXTgekawvPyW+9ilNbpUdcGJo+sSyzzASxK9FACwYda4dt Wl5oj34SR2U1DnQcYokFjKbsD9/N4986QyWd5nUprG/FHDW2AS1i09XcWa9Uhqef 38w3T15ICY20pUp1URAIrba3jAXxu73qnu1rLAXP9ZSK5pZW41P4DCPU1WjTvuIS A/m+jMYibG0HrhQM+WvfXNVw4VWSwoDB5MWWltDWTArAAlsMIg0= -----END CERTIFICATE-----Generated at Mon Sep 21 17:39:30 2026 by rpki-client