$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft File: DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft (raw, json) Hash identifier: smh3gujpq2RaoX8+gEJvhIqajathLoQX2X7KTELAf58= Subject key identifier: 85:0B:50:E8:FE:2F:DA:C7:BC:2E:1B:E5:CD:41:2B:6C:A9:D0:B8:08 Authority key identifier: DD:AF:8D:65:28:C4:2D:5B:45:31:AC:E7:7D:6A:1C:BE:1F:04:66:41 Certificate issuer: /CN=DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641 Certificate serial: 5C32F49B5987043DAC39F2495A0F46C889689E2D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 23:30:00 +0000 Manifest this update: Mon 09 Nov 2026 23:25:00 +0000 Manifest next update: Wed 11 Nov 2026 01:17:00 +0000 Files and hashes: 1: 3130332e33312e3130392e302f32342d3234203d3e20313333333630.roa (hash: ohVHX4YN8ERE5ZaanIq+FJ4sj6xtkTx6fZFuzW5hCso=) 2: DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl (hash: OVMTdBAmuFEyStHYj665SeZTemmImiTsBiIdtHA0xqY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 01:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:32:f4:9b:59:87:04:3d:ac:39:f2:49:5a:0f:46:c8:89:68:9e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641 Validity Not Before: Nov 9 23:25:00 2026 GMT Not After : Nov 11 01:17:00 2026 GMT Subject: CN=850B50E8FE2FDAC7BC2E1BE5CD412B6CA9D0B808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:69:ea:4c:54:c3:5e:01:4c:00:f0:ed:0b:a3: 52:bb:87:ba:4d:d1:f7:93:5d:f8:a4:63:6a:2c:99: b5:53:32:c7:a4:43:e3:41:5c:94:0c:8d:32:f2:c8: a6:52:b6:82:7a:fb:c2:08:5b:88:6e:9d:03:6c:f4: 23:57:33:59:c7:01:8c:fc:d9:10:65:93:ad:24:3e: 78:9b:f1:eb:8d:c3:34:90:f7:fa:ae:e3:81:02:51: ec:ce:49:8d:19:c1:5a:72:99:d2:c6:e4:51:29:d1: 96:fe:dd:34:45:38:9e:2e:7f:94:fb:b1:0f:ef:8f: 55:a9:ce:fe:b0:71:6f:48:eb:fc:b1:2d:0c:6f:04: 2c:c9:58:c5:de:99:e7:bd:21:17:cf:88:b2:aa:c9: bb:09:0a:32:38:65:c2:0b:c4:2c:ec:d1:a7:ef:28: 18:df:aa:15:c0:d9:1c:b5:54:7c:ed:8c:43:09:93: cb:b0:4b:37:4f:83:53:7f:19:3b:4f:4b:3e:74:ae: f0:c9:f5:e2:5d:c7:a5:29:33:ad:e1:ff:bc:bd:84: 2e:ea:77:67:47:81:34:c1:ae:97:5c:bb:75:cd:3e: 88:05:7d:65:e3:05:4b:9f:a0:49:cf:bd:a5:48:e7: 1f:bb:fc:06:c6:3e:95:34:1f:83:00:83:9b:c1:3b: 59:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0B:50:E8:FE:2F:DA:C7:BC:2E:1B:E5:CD:41:2B:6C:A9:D0:B8:08 X509v3 Authority Key Identifier: keyid:DD:AF:8D:65:28:C4:2D:5B:45:31:AC:E7:7D:6A:1C:BE:1F:04:66:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ab:d8:43:9d:7a:ce:c4:96:62:8d:2b:be:79:ef:87:b8:25: bb:cc:47:cc:b6:2a:c3:3d:8f:4f:18:da:f8:48:86:93:cd:9c: 08:fb:52:af:b9:80:87:4b:72:9c:19:02:b0:84:9a:63:53:85: cd:5e:58:ea:7e:9e:18:3d:8b:6a:4c:d9:8b:73:58:1a:00:f7: c8:f3:8b:95:f7:7b:7a:01:dd:7e:ea:38:cf:ed:5e:9b:67:ca: 99:3c:7a:3b:ae:af:1a:41:3f:6c:0e:58:ec:39:1f:2c:04:ce: 3e:da:a8:b8:49:1d:08:73:2f:21:e0:74:50:bd:9a:12:6b:13: 20:c8:43:c8:3f:98:72:81:00:f9:02:24:c3:ab:02:1b:e9:19: ff:5c:fb:63:37:e8:00:18:68:16:e6:38:30:0f:6f:d7:27:b2: 34:cb:7e:4f:48:2b:83:4c:6f:2f:eb:0d:b3:d3:7b:49:99:37: df:63:9d:75:cb:ed:d3:5a:e0:dc:69:14:ad:33:f5:01:1f:17: 0c:b8:08:6e:8c:4e:30:ef:10:a6:b5:3d:e9:ce:08:41:0e:25: 74:8b:0b:08:b3:85:b9:01:0e:ef:04:d4:d5:54:b4:e5:23:46: 34:51:75:f5:e2:68:51:61:49:34:5a:f7:cd:81:c1:e1:da:04: 8c:9f:9a:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXDL0m1mHBD2sOfJJWg9GyIloni0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjhENjUyOEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFDQkUx RjA0NjY0MTAeFw0yNjExMDkyMzI1MDBaFw0yNjExMTEwMTE3MDBaMDMxMTAvBgNV BAMTKDg1MEI1MEU4RkUyRkRBQzdCQzJFMUJFNUNENDEyQjZDQTlEMEI4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJaepMVMNeAUwA8O0Lo1K7h7pN 0feTXfikY2osmbVTMsekQ+NBXJQMjTLyyKZStoJ6+8IIW4hunQNs9CNXM1nHAYz8 2RBlk60kPnib8euNwzSQ9/qu44ECUezOSY0ZwVpymdLG5FEp0Zb+3TRFOJ4uf5T7 sQ/vj1Wpzv6wcW9I6/yxLQxvBCzJWMXemee9IRfPiLKqybsJCjI4ZcILxCzs0afv KBjfqhXA2Ry1VHztjEMJk8uwSzdPg1N/GTtPSz50rvDJ9eJdx6UpM63h/7y9hC7q d2dHgTTBrpdcu3XNPogFfWXjBUufoEnPvaVI5x+7/AbGPpU0H4MAg5vBO1n1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhQtQ6P4v2se8LhvlzUErbKnQuAgwHwYDVR0j BBgwFoAU3a+NZSjELVtFMaznfWocvh8EZkEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY2YWEzMWEtZGQwZC00YzEwLWI1ZGQtYjFhODNmYTU3NzYzLzAvRERBRjhENjUy OEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFDQkUxRjA0NjY0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREFGOEQ2NTI4QzQyRDVCNDUzMUFDRTc3RDZBMUNCRTFGMDQ2 NjQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY2YWEzMWEtZGQwZC00YzEwLWI1 ZGQtYjFhODNmYTU3NzYzLzAvRERBRjhENjUyOEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFD QkUxRjA0NjY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASr2EOdes7ElmKNK75574e4JbvMR8y2KsM9 j08Y2vhIhpPNnAj7Uq+5gIdLcpwZArCEmmNThc1eWOp+nhg9i2pM2YtzWBoA98jz i5X3e3oB3X7qOM/tXptnypk8ejuurxpBP2wOWOw5HywEzj7aqLhJHQhzLyHgdFC9 mhJrEyDIQ8g/mHKBAPkCJMOrAhvpGf9c+2M36AAYaBbmODAPb9cnsjTLfk9IK4NM by/rDbPTe0mZN99jnXXL7dNa4NxpFK0z9QEfFwy4CG6MTjDvEKa1PenOCEEOJXSL CwizhbkBDu8E1NVUtOUjRjRRdfXiaFFhSTRa982BweHaBIyfmmE= -----END CERTIFICATE-----Generated at Tue Nov 10 18:20:31 2026 by rpki-client