$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft File: DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft (raw, json) Hash identifier: KyHGrjVLK9PFOWyV3UOhH0LJYAT1TEKsUKgGeYSNLG0= Subject key identifier: 32:A1:61:57:3A:7D:0D:CF:B1:58:6C:E2:51:EA:72:09:4D:07:94:08 Authority key identifier: DD:AF:8D:65:28:C4:2D:5B:45:31:AC:E7:7D:6A:1C:BE:1F:04:66:41 Certificate issuer: /CN=DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641 Certificate serial: 6B4A34024B0F717700FB5163840B4A6A1E890A24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:30:18 +0000 Manifest this update: Tue 16 Jun 2026 17:25:18 +0000 Manifest next update: Wed 17 Jun 2026 18:22:18 +0000 Files and hashes: 1: DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl (hash: 3yGi51PVdHj65Ji+dG6JB49gzctjqwiQNpJr4pQfThA=) 2: 3130332e33312e3130392e302f32342d3234203d3e20313333333630.roa (hash: ohVHX4YN8ERE5ZaanIq+FJ4sj6xtkTx6fZFuzW5hCso=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4a:34:02:4b:0f:71:77:00:fb:51:63:84:0b:4a:6a:1e:89:0a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641 Validity Not Before: Jun 16 17:25:18 2026 GMT Not After : Jun 17 18:22:18 2026 GMT Subject: CN=32A161573A7D0DCFB1586CE251EA72094D079408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:40:40:bc:5a:c0:3d:54:0c:61:78:ba:ea: 5e:2f:bc:0f:f5:82:dd:be:29:5e:e9:84:a0:a7:b8: 12:17:b0:77:df:3a:00:72:d7:fd:65:bf:35:60:56: 8e:fc:b4:a9:23:3d:f8:64:c0:0d:90:5f:f8:e4:46: 3c:10:47:9c:ba:16:b4:32:e3:5b:de:7a:00:76:7a: ca:2e:fd:82:3a:42:1b:7c:a4:60:d9:e1:8a:38:fb: ee:65:43:b7:ef:5e:65:52:2e:10:7b:bb:de:c4:0c: 36:9c:37:78:f6:98:8e:30:7c:9f:bb:26:90:be:1f: 56:ce:d1:09:23:78:13:d7:4d:c9:fe:4d:b2:9d:8f: ae:39:50:63:bc:57:60:8d:ca:c3:79:7a:86:d3:a7: 38:17:30:93:4e:fd:98:e1:5c:b0:60:d0:2e:e7:e9: ba:97:4a:a6:76:61:7e:1c:e3:3f:6b:7d:ce:c5:80: 25:c6:00:82:82:81:b3:4d:55:b6:2b:45:38:0a:ae: fd:29:a6:43:c6:fb:06:f9:ef:a4:27:81:7d:69:e6: 1b:8e:db:e3:a9:e9:62:bb:87:b2:06:ad:45:35:77: 8c:86:e6:8b:c0:8d:37:c4:5d:f3:22:88:4b:52:f2: ee:c1:83:7e:1c:22:77:e9:8c:0e:ac:37:01:95:b8: 6b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A1:61:57:3A:7D:0D:CF:B1:58:6C:E2:51:EA:72:09:4D:07:94:08 X509v3 Authority Key Identifier: keyid:DD:AF:8D:65:28:C4:2D:5B:45:31:AC:E7:7D:6A:1C:BE:1F:04:66:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:71:f7:e2:04:ee:a2:dd:bc:7e:7a:cd:54:18:78:93:99:b2: 72:23:b1:94:ce:9f:8b:b6:d4:50:41:29:5c:d0:11:5b:a4:33: a7:a9:a9:be:4d:00:80:4c:e3:f4:cf:0e:e9:59:9d:44:14:50: 84:8b:4d:3f:54:e8:81:8d:af:64:6a:24:e0:48:4a:e2:14:75: b0:33:a2:ad:2c:4c:8f:e5:d4:88:76:07:90:66:05:c4:8c:5b: 15:8a:9c:b0:6f:14:ef:bf:f7:40:28:b8:a5:f3:3f:36:77:94: dd:6f:ab:94:c4:00:b2:3b:e4:ae:3b:6f:16:b2:fa:32:41:45: f5:dc:1f:67:ce:4a:1b:17:53:04:b4:91:9d:36:c8:64:62:04: 6a:15:cb:bc:7a:03:ad:f7:f1:2e:de:fe:d9:ce:1a:20:71:69: 26:32:13:f2:f3:bb:1e:bc:b3:0a:be:28:0d:4c:e9:cd:28:c5: 2f:22:4d:79:e6:6b:fb:db:44:f2:88:ff:ee:b8:26:a7:34:4e: b5:1d:57:9b:71:f5:2f:6a:fe:6d:be:20:08:c0:09:a5:ee:24: 6a:e4:87:e0:04:5f:89:30:74:d8:21:06:20:12:2b:0d:bb:9e: 67:f8:a2:a9:7c:09:a8:6d:f0:de:5f:cc:a2:8f:83:d5:a2:0d: 43:c0:93:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa0o0AksPcXcA+1FjhAtKah6JCiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjhENjUyOEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFDQkUx RjA0NjY0MTAeFw0yNjA2MTYxNzI1MThaFw0yNjA2MTcxODIyMThaMDMxMTAvBgNV BAMTKDMyQTE2MTU3M0E3RDBEQ0ZCMTU4NkNFMjUxRUE3MjA5NEQwNzk0MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCGEBAvFrAPVQMYXi66l4vvA/1 gt2+KV7phKCnuBIXsHffOgBy1/1lvzVgVo78tKkjPfhkwA2QX/jkRjwQR5y6FrQy 41veegB2esou/YI6Qht8pGDZ4Yo4++5lQ7fvXmVSLhB7u97EDDacN3j2mI4wfJ+7 JpC+H1bO0QkjeBPXTcn+TbKdj645UGO8V2CNysN5eobTpzgXMJNO/ZjhXLBg0C7n 6bqXSqZ2YX4c4z9rfc7FgCXGAIKCgbNNVbYrRTgKrv0ppkPG+wb576QngX1p5huO 2+Op6WK7h7IGrUU1d4yG5ovAjTfEXfMiiEtS8u7Bg34cInfpjA6sNwGVuGu5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMqFhVzp9Dc+xWGziUepyCU0HlAgwHwYDVR0j BBgwFoAU3a+NZSjELVtFMaznfWocvh8EZkEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY2YWEzMWEtZGQwZC00YzEwLWI1ZGQtYjFhODNmYTU3NzYzLzAvRERBRjhENjUy OEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFDQkUxRjA0NjY0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREFGOEQ2NTI4QzQyRDVCNDUzMUFDRTc3RDZBMUNCRTFGMDQ2 NjQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY2YWEzMWEtZGQwZC00YzEwLWI1 ZGQtYjFhODNmYTU3NzYzLzAvRERBRjhENjUyOEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFD QkUxRjA0NjY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlx9+IE7qLdvH56zVQYeJOZsnIjsZTOn4u2 1FBBKVzQEVukM6epqb5NAIBM4/TPDulZnUQUUISLTT9U6IGNr2RqJOBISuIUdbAz oq0sTI/l1Ih2B5BmBcSMWxWKnLBvFO+/90AouKXzPzZ3lN1vq5TEALI75K47bxay +jJBRfXcH2fOShsXUwS0kZ02yGRiBGoVy7x6A6338S7e/tnOGiBxaSYyE/Lzux68 swq+KA1M6c0oxS8iTXnma/vbRPKI/+64Jqc0TrUdV5tx9S9q/m2+IAjACaXuJGrk h+AEX4kwdNghBiASKw27nmf4oql8Caht8N5fzKKPg9WiDUPAk7w= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:58 2026 by rpki-client