$ rpki-client -vvvf rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft File: DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft (raw, json) Hash identifier: FZaHKRVddJAKb+rophzF5IPzC9mylrOJomB5qIml4tE= Subject key identifier: 59:DB:11:CD:90:5E:64:8B:1A:F0:77:C5:6B:84:06:35:38:25:6F:4B Authority key identifier: DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B Certificate issuer: /CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B Certificate serial: 3185B9BBB39B2320F9A7254AA8BBC3F303D758DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft Manifest number: BE Signing time: Sun 20 Sep 2026 22:50:09 +0000 Manifest this update: Sun 20 Sep 2026 22:45:09 +0000 Manifest next update: Mon 21 Sep 2026 23:39:09 +0000 Files and hashes: 1: 3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (hash: Je+1Z3JPlfN1SueLjZhyMHWstp3IWlu0F41bg1IrLNI=) 2: DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl (hash: MP+EdU1uY/wRILPFeQhgbQ+KZvmHnb7miZG/ePQzhKY=) 3: 3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (hash: DmsqerRTCfleWC17bgPmpGYVL2XXTPf5hE4dywrXO3g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:85:b9:bb:b3:9b:23:20:f9:a7:25:4a:a8:bb:c3:f3:03:d7:58:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B Validity Not Before: Sep 20 22:45:09 2026 GMT Not After : Sep 21 23:39:09 2026 GMT Subject: CN=59DB11CD905E648B1AF077C56B84063538256F4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:43:59:3c:71:c8:ba:f2:07:3f:c8:da:46:3e: 00:45:2c:b5:18:c3:55:fa:ec:a3:12:f9:a3:4b:71: b3:5f:de:07:84:0d:39:b5:09:6f:d5:3d:f5:d9:28: 9b:6d:9c:03:02:2e:41:a9:3c:f7:fa:09:a6:dd:a6: 5f:90:d5:28:13:69:b4:07:fe:57:43:49:41:c2:41: ce:5a:57:09:66:18:59:a5:32:4f:5d:01:a5:f4:7c: 1f:60:f4:2e:7c:be:2d:f4:56:14:92:ad:b8:9e:60: 6e:12:b9:e5:bf:20:0c:6b:48:3d:fd:ff:39:fe:d2: 5a:8c:a8:9b:4c:2e:bb:90:5d:a8:fd:12:92:68:68: 34:4e:3f:90:7b:70:c5:30:19:c5:d3:58:be:e8:e2: bf:e6:2a:98:b4:e2:08:ef:0f:66:b7:d2:7d:f2:49: ff:dd:68:bb:9f:e5:bb:10:b4:fd:c6:a7:e3:7a:d1: 97:8e:ec:4d:31:f5:ab:f4:39:10:09:29:2a:68:1e: a7:6d:40:8f:36:2f:b3:50:1e:cc:30:26:8d:97:f7: 89:44:e2:71:7f:df:b1:f8:34:2d:8d:33:5c:4e:a0: 05:8a:13:2c:ef:c8:d1:b9:4a:7d:f8:62:02:e2:a1: 17:4f:33:3f:9a:6e:35:37:a5:91:03:15:b2:e6:40: 61:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DB:11:CD:90:5E:64:8B:1A:F0:77:C5:6B:84:06:35:38:25:6F:4B X509v3 Authority Key Identifier: keyid:DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:6c:25:98:b1:5d:3b:cd:d1:ec:92:ce:4f:05:ee:64:03:a5: 78:5e:3c:da:d3:61:29:93:4a:06:e8:a4:31:14:b8:71:dd:14: ad:aa:7d:13:c7:8d:66:92:7f:7f:6d:81:f9:7b:23:b8:22:3c: 17:64:25:93:9d:dd:5e:e8:ef:74:e4:f8:36:45:e8:ec:fe:1c: 3c:e9:9a:2c:ac:a3:24:4f:e9:52:ff:fe:0a:08:74:25:5d:bd: c7:7c:1e:59:e8:3d:df:0c:bf:68:37:86:e4:14:26:44:4b:30: 35:c5:b0:4d:c0:a8:d2:9d:31:87:a1:56:e8:be:72:ba:4e:98: 5e:7d:dd:80:56:29:77:ca:31:42:da:0c:1d:97:65:c5:cd:f7: 6e:46:bc:9d:0b:d5:f6:f0:02:b3:01:c3:26:19:58:ff:f4:fc: d6:bb:59:1e:7d:17:3a:9c:ea:d1:c6:be:e0:6a:11:09:7e:b2: 65:b1:aa:92:51:d2:7c:f0:85:aa:8b:45:40:3d:c1:c6:65:63: 13:e0:d2:91:a7:b0:67:5f:16:8b:47:1e:bc:49:99:7e:25:e0: 49:7d:ec:21:67:1c:f8:3a:67:c3:9d:8f:60:97:1c:49:6a:6a: c4:26:73:c7:79:70:79:b7:72:27:1e:a7:98:2a:58:dc:58:5f: f4:88:5f:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMYW5u7ObIyD5pyVKqLvD8wPXWNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERENTQ4REE0RTJFRDY4ODAxOEMxNzhGRjZCMURCNkFC NDBBQUQ2QjAeFw0yNjA5MjAyMjQ1MDlaFw0yNjA5MjEyMzM5MDlaMDMxMTAvBgNV BAMTKDU5REIxMUNEOTA1RTY0OEIxQUYwNzdDNTZCODQwNjM1MzgyNTZGNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQ1k8cci68gc/yNpGPgBFLLUY w1X67KMS+aNLcbNf3geEDTm1CW/VPfXZKJttnAMCLkGpPPf6Cabdpl+Q1SgTabQH /ldDSUHCQc5aVwlmGFmlMk9dAaX0fB9g9C58vi30VhSSrbieYG4SueW/IAxrSD39 /zn+0lqMqJtMLruQXaj9EpJoaDROP5B7cMUwGcXTWL7o4r/mKpi04gjvD2a30n3y Sf/daLuf5bsQtP3Gp+N60ZeO7E0x9av0ORAJKSpoHqdtQI82L7NQHswwJo2X94lE 4nF/37H4NC2NM1xOoAWKEyzvyNG5Sn34YgLioRdPMz+abjU3pZEDFbLmQGEfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWdsRzZBeZIsa8HfFa4QGNTglb0swHwYDVR0j BBgwFoAU3dVI2k4u1ogBjBeP9rHbarQKrWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI1ZTg4YmQtNzVlMi00NWRmLTg4NjctNDU0MDJmYzdjNGIxLzAvRERENTQ4REE0 RTJFRDY4ODAxOEMxNzhGRjZCMURCNkFCNDBBQUQ2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREQ1NDhEQTRFMkVENjg4MDE4QzE3OEZGNkIxREI2QUI0MEFB RDZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI1ZTg4YmQtNzVlMi00NWRmLTg4 NjctNDU0MDJmYzdjNGIxLzAvRERENTQ4REE0RTJFRDY4ODAxOEMxNzhGRjZCMURC NkFCNDBBQUQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFsJZixXTvN0eySzk8F7mQDpXhePNrTYSmT SgbopDEUuHHdFK2qfRPHjWaSf39tgfl7I7giPBdkJZOd3V7o73Tk+DZF6Oz+HDzp miysoyRP6VL//goIdCVdvcd8HlnoPd8Mv2g3huQUJkRLMDXFsE3AqNKdMYehVui+ crpOmF593YBWKXfKMULaDB2XZcXN925GvJ0L1fbwArMBwyYZWP/0/Na7WR59Fzqc 6tHGvuBqEQl+smWxqpJR0nzwhaqLRUA9wcZlYxPg0pGnsGdfFotHHrxJmX4l4El9 7CFnHPg6Z8Odj2CXHElqasQmc8d5cHm3cicep5gqWNxYX/SIX78= -----END CERTIFICATE-----Generated at Mon Sep 21 17:39:42 2026 by rpki-client