$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft File: DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft (raw, json) Hash identifier: C7Kp4uHF5ZHKBpCoxk8x7buH5nWquNAl3rpKqmn8jXg= Subject key identifier: 69:80:4B:62:4B:6F:8E:AE:E7:B2:9F:52:49:D8:9E:6F:20:E5:66:E7 Authority key identifier: DD:AF:8D:65:28:C4:2D:5B:45:31:AC:E7:7D:6A:1C:BE:1F:04:66:41 Certificate issuer: /CN=DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641 Certificate serial: 41E7861408E9B5B137AE9CB40EFE5FC9EE7F13BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft Manifest number: BD Signing time: Sun 20 Sep 2026 09:28:54 +0000 Manifest this update: Sun 20 Sep 2026 09:23:54 +0000 Manifest next update: Mon 21 Sep 2026 12:36:54 +0000 Files and hashes: 1: DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl (hash: GJW2e2CTss7CFJ3DI7WIpGW4ZROf2eeY75x67dzuaFw=) 2: 3130332e33312e3130392e302f32342d3234203d3e20313333333630.roa (hash: ohVHX4YN8ERE5ZaanIq+FJ4sj6xtkTx6fZFuzW5hCso=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 12:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e7:86:14:08:e9:b5:b1:37:ae:9c:b4:0e:fe:5f:c9:ee:7f:13:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641 Validity Not Before: Sep 20 09:23:54 2026 GMT Not After : Sep 21 12:36:54 2026 GMT Subject: CN=69804B624B6F8EAEE7B29F5249D89E6F20E566E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3d:ed:5b:cc:e1:d5:87:bf:60:57:18:a2:b6: fe:7f:fe:3a:69:04:27:18:1a:20:34:91:68:79:8a: 28:05:d3:44:7a:a6:a3:ef:55:36:99:c9:ab:37:55: d6:e6:32:d5:a3:5f:be:6e:90:52:48:7e:70:c2:91: 89:c5:d2:c8:b9:f3:9b:87:fb:17:01:a8:04:aa:a4: 83:aa:df:1f:e6:6a:a3:d9:b1:df:47:df:48:f0:f4: 4b:ea:a3:38:38:74:1d:b7:85:1f:9f:7a:25:c6:1c: 0b:1d:02:4d:1d:e1:10:5d:62:73:d3:c7:7f:84:2b: 84:6a:65:fc:1a:0a:84:ca:e7:d1:19:c3:39:07:86: ea:57:a1:08:2c:3b:4a:6b:6a:75:f8:ca:7a:36:d7: 46:1f:30:04:55:a0:52:f9:6a:53:39:ae:fb:72:82: bc:c0:30:88:5e:cf:4d:71:8b:59:59:8c:10:29:4e: 86:06:35:27:1c:0f:66:3a:b0:db:56:87:27:8f:24: 14:e8:12:c6:03:d3:b8:10:c3:f4:d1:32:bd:51:d9: a7:0a:6f:c1:3d:10:1e:f6:56:32:61:fe:68:ec:a7: 6c:5a:88:06:dc:29:a0:c6:e7:00:33:d3:61:e1:ae: e3:82:8c:51:1a:3a:02:a6:73:8e:9c:21:49:a7:d4: d8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:80:4B:62:4B:6F:8E:AE:E7:B2:9F:52:49:D8:9E:6F:20:E5:66:E7 X509v3 Authority Key Identifier: keyid:DD:AF:8D:65:28:C4:2D:5B:45:31:AC:E7:7D:6A:1C:BE:1F:04:66:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:28:ca:c3:61:4d:f7:e6:44:8c:d0:f5:3a:25:be:d0:4d:3a: 02:3a:b9:95:56:de:0b:81:ce:b7:75:fd:7e:c4:08:c1:d4:b4: 02:d6:09:03:4b:0d:21:18:f5:ea:f4:f0:c1:78:b7:9d:15:45: 01:be:d1:cb:93:67:11:71:53:25:24:d9:48:a3:6b:5d:17:6b: 88:9c:f5:85:69:d8:69:fe:f8:6e:e6:3e:ab:63:57:8f:73:22: 90:1e:6a:6d:7d:cf:d7:b2:02:ab:42:c5:b0:12:ee:cd:04:49: 3f:4c:cf:6a:ba:53:55:a8:5f:0d:90:ea:b2:e6:46:0f:40:ea: 9d:c1:6f:ee:6b:07:6e:58:b7:b7:04:95:ff:e0:54:d5:29:ab: 5b:e3:77:e2:01:c8:cd:de:ad:06:49:df:c5:07:6f:5f:31:e8: d6:d0:91:1f:c3:80:cb:0b:c5:6f:37:25:0b:20:42:09:f4:d5: 83:45:1b:d8:69:06:08:90:d1:fa:eb:54:21:7d:1b:03:f1:04: b9:1c:f0:0c:40:5d:45:52:9a:af:9b:66:2a:62:ab:82:b5:d3: 1e:50:d6:1d:fa:c4:6f:5d:49:f4:90:bc:6d:b2:d3:fc:98:5a: c2:69:ae:38:05:88:de:bf:93:bf:89:84:07:0a:c2:7d:16:da: d0:1c:a2:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQeeGFAjptbE3rpy0Dv5fye5/E7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjhENjUyOEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFDQkUx RjA0NjY0MTAeFw0yNjA5MjAwOTIzNTRaFw0yNjA5MjExMjM2NTRaMDMxMTAvBgNV BAMTKDY5ODA0QjYyNEI2RjhFQUVFN0IyOUY1MjQ5RDg5RTZGMjBFNTY2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmPe1bzOHVh79gVxiitv5//jpp BCcYGiA0kWh5iigF00R6pqPvVTaZyas3VdbmMtWjX75ukFJIfnDCkYnF0si585uH +xcBqASqpIOq3x/maqPZsd9H30jw9Evqozg4dB23hR+feiXGHAsdAk0d4RBdYnPT x3+EK4RqZfwaCoTK59EZwzkHhupXoQgsO0pranX4yno210YfMARVoFL5alM5rvty grzAMIhez01xi1lZjBApToYGNSccD2Y6sNtWhyePJBToEsYD07gQw/TRMr1R2acK b8E9EB72VjJh/mjsp2xaiAbcKaDG5wAz02HhruOCjFEaOgKmc46cIUmn1NhZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaYBLYktvjq7nsp9SSdiebyDlZucwHwYDVR0j BBgwFoAU3a+NZSjELVtFMaznfWocvh8EZkEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY2YWEzMWEtZGQwZC00YzEwLWI1ZGQtYjFhODNmYTU3NzYzLzAvRERBRjhENjUy OEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFDQkUxRjA0NjY0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREFGOEQ2NTI4QzQyRDVCNDUzMUFDRTc3RDZBMUNCRTFGMDQ2 NjQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY2YWEzMWEtZGQwZC00YzEwLWI1 ZGQtYjFhODNmYTU3NzYzLzAvRERBRjhENjUyOEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFD QkUxRjA0NjY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkoysNhTffmRIzQ9TolvtBNOgI6uZVW3guB zrd1/X7ECMHUtALWCQNLDSEY9er08MF4t50VRQG+0cuTZxFxUyUk2Uija10Xa4ic 9YVp2Gn++G7mPqtjV49zIpAeam19z9eyAqtCxbAS7s0EST9Mz2q6U1WoXw2Q6rLm Rg9A6p3Bb+5rB25Yt7cElf/gVNUpq1vjd+IByM3erQZJ38UHb18x6NbQkR/DgMsL xW83JQsgQgn01YNFG9hpBgiQ0frrVCF9GwPxBLkc8AxAXUVSmq+bZipiq4K10x5Q 1h36xG9dSfSQvG2y0/yYWsJprjgFiN6/k7+JhAcKwn0W2tAcosY= -----END CERTIFICATE-----Generated at Sun Sep 20 20:09:25 2026 by rpki-client