$ rpki-client -vvvf rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft File: DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft (raw, json) Hash identifier: lyeHbLrtUOhxB+3GQhycg39NFyAg+3T8I1tI+inMY2I= Subject key identifier: D5:87:32:63:9A:B7:E2:E6:6A:5C:B7:9A:17:7C:32:1F:F8:ED:95:DE Authority key identifier: DD:DD:B3:9C:4F:26:5C:9D:4C:FC:C3:CB:FF:83:4B:12:F4:92:80:27 Certificate issuer: /CN=DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027 Certificate serial: 1BBF581C6F6D657194206AA7AB43BCF7FE524EF1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft Manifest number: FF Signing time: Mon 09 Nov 2026 09:01:53 +0000 Manifest this update: Mon 09 Nov 2026 08:56:53 +0000 Manifest next update: Tue 10 Nov 2026 09:10:53 +0000 Files and hashes: 1: DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl (hash: cSf6VaUvUscnBb78cnX+X6Djp4HtR2aVZz555+lMgQA=) 2: 3130332e3230352e36322e302f32332d3234203d3e20313530393932.roa (hash: 7auAs3JZetQc2Zih3zy94WvlM7s/oo6N4QlMSA+A3AA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:bf:58:1c:6f:6d:65:71:94:20:6a:a7:ab:43:bc:f7:fe:52:4e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027 Validity Not Before: Nov 9 08:56:53 2026 GMT Not After : Nov 10 09:10:53 2026 GMT Subject: CN=D58732639AB7E2E66A5CB79A177C321FF8ED95DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:26:e5:31:fb:64:fa:0a:82:2f:7c:62:c7:e4: 3f:76:e5:54:c2:59:89:52:28:0e:1d:40:78:d6:c2: 61:8a:40:73:90:cf:57:00:80:38:f1:3e:85:17:af: 63:33:dc:d6:01:5d:c5:73:7b:9e:c1:87:f2:c7:67: 77:23:97:eb:77:73:97:15:5b:3a:0e:33:87:a6:aa: 5f:2d:05:44:b9:73:99:0f:eb:b9:cc:24:08:44:2e: e2:d2:c8:c6:f5:d1:f9:63:0d:a2:9f:60:8f:f4:81: 8d:cb:0c:6e:75:72:67:c8:71:c0:aa:05:6f:93:8e: 0a:36:c3:d9:d7:ee:4b:f5:23:cc:0f:49:23:20:5e: 13:5a:82:a3:8a:36:ac:34:2f:09:55:fb:d0:d8:84: 80:23:67:ad:9f:b1:3f:62:07:4f:ac:8f:83:5a:f3: 4b:27:ca:72:77:88:3e:c4:68:cb:9c:eb:96:a6:85: 95:18:bd:6b:6c:81:92:27:af:4d:01:1e:5c:62:99: 69:8c:94:a4:2b:be:37:1a:55:56:b1:d6:33:c5:fe: 99:3f:31:58:e9:26:c5:4c:5e:7b:80:a1:04:eb:10: a0:27:05:2a:c5:c7:2d:e7:5f:c4:43:1b:e8:0d:b6: f0:83:e9:9c:9d:6e:24:7a:24:7c:37:88:85:80:a2: 0c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:87:32:63:9A:B7:E2:E6:6A:5C:B7:9A:17:7C:32:1F:F8:ED:95:DE X509v3 Authority Key Identifier: keyid:DD:DD:B3:9C:4F:26:5C:9D:4C:FC:C3:CB:FF:83:4B:12:F4:92:80:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:50:61:80:69:d5:13:91:4e:f0:31:39:04:1f:57:d6:0f:14: b4:4f:f8:7a:d0:8b:ed:00:44:02:2c:15:2c:a0:1b:02:93:53: 5e:55:0a:1f:63:77:0b:37:25:65:83:fb:be:c8:7e:38:65:6f: e8:4d:dd:d4:f3:a0:2b:56:d7:ba:f5:0c:03:25:7a:4b:ef:4e: d9:3b:22:a1:3c:e1:5f:88:ed:cc:67:ee:18:25:2c:0a:cb:29: 67:33:26:e9:fb:14:13:61:36:e4:29:84:08:ca:85:32:09:e0: 25:18:c2:53:bf:4f:61:2d:50:c0:22:f7:08:76:0f:8a:3d:1e: d8:de:e5:04:b5:d0:e3:10:92:95:a7:21:af:54:0d:22:98:63: 8d:02:ea:99:dd:b8:a3:f0:52:8a:16:94:3d:5a:b3:84:5c:b0: 57:1b:76:1c:a1:f4:0f:a1:ed:9d:9e:d7:b6:4e:28:05:78:7b: c2:72:d9:b1:d8:5a:ea:1d:26:36:af:63:b6:f7:7e:e3:75:74: 3a:8c:c5:f1:94:21:f3:72:7d:3d:b3:98:aa:c9:88:99:74:2c: a6:69:6b:e0:b6:da:7f:5e:1e:9d:2a:0a:8a:19:37:d1:b8:b7: d8:72:2f:23:41:0f:ea:84:e2:0f:e3:59:ff:3b:67:8b:f7:f3: 4c:44:ea:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG79YHG9tZXGUIGqnq0O89/5STvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREREREIzOUM0RjI2NUM5RDRDRkNDM0NCRkY4MzRCMTJG NDkyODAyNzAeFw0yNjExMDkwODU2NTNaFw0yNjExMTAwOTEwNTNaMDMxMTAvBgNV BAMTKEQ1ODczMjYzOUFCN0UyRTY2QTVDQjc5QTE3N0MzMjFGRjhFRDk1REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYJuUx+2T6CoIvfGLH5D925VTC WYlSKA4dQHjWwmGKQHOQz1cAgDjxPoUXr2Mz3NYBXcVze57Bh/LHZ3cjl+t3c5cV WzoOM4emql8tBUS5c5kP67nMJAhELuLSyMb10fljDaKfYI/0gY3LDG51cmfIccCq BW+Tjgo2w9nX7kv1I8wPSSMgXhNagqOKNqw0LwlV+9DYhIAjZ62fsT9iB0+sj4Na 80snynJ3iD7EaMuc65amhZUYvWtsgZInr00BHlximWmMlKQrvjcaVVax1jPF/pk/ MVjpJsVMXnuAoQTrEKAnBSrFxy3nX8RDG+gNtvCD6ZydbiR6JHw3iIWAogxDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1YcyY5q34uZqXLeaF3wyH/jtld4wHwYDVR0j BBgwFoAU3d2znE8mXJ1M/MPL/4NLEvSSgCcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQwNzliZWYtN2Y3ZC00M2NkLTkyN2YtZDVjZjU5YTBiMGZiLzAvREREREIzOUM0 RjI2NUM5RDRDRkNDM0NCRkY4MzRCMTJGNDkyODAyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREREQjM5QzRGMjY1QzlENENGQ0MzQ0JGRjgzNEIxMkY0OTI4 MDI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQwNzliZWYtN2Y3ZC00M2NkLTky N2YtZDVjZjU5YTBiMGZiLzAvREREREIzOUM0RjI2NUM5RDRDRkNDM0NCRkY4MzRC MTJGNDkyODAyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhQYYBp1RORTvAxOQQfV9YPFLRP+HrQi+0A RAIsFSygGwKTU15VCh9jdws3JWWD+77Ifjhlb+hN3dTzoCtW17r1DAMlekvvTtk7 IqE84V+I7cxn7hglLArLKWczJun7FBNhNuQphAjKhTIJ4CUYwlO/T2EtUMAi9wh2 D4o9Htje5QS10OMQkpWnIa9UDSKYY40C6pnduKPwUooWlD1as4RcsFcbdhyh9A+h 7Z2e17ZOKAV4e8Jy2bHYWuodJjavY7b3fuN1dDqMxfGUIfNyfT2zmKrJiJl0LKZp a+C22n9eHp0qCooZN9G4t9hyLyNBD+qE4g/jWf87Z4v380xE6vI= -----END CERTIFICATE-----Generated at Tue Nov 10 00:27:48 2026 by rpki-client