$ rpki-client -vvf rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft File: DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft (raw, json) Hash identifier: spuGyTJAAhUQWIBcvzr9ZkeH/hYWcXbRGu1/+x/DZk0= Subject key identifier: 54:BC:8E:1F:7A:7A:C5:A4:F8:E5:EE:01:AC:0C:7F:2A:90:CF:69:87 Authority key identifier: DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B Certificate issuer: /CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B Certificate serial: 49B81EF40DE389D8034FDA8A3EAADDBEED6B3A75 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:56:16 +0000 Manifest this update: Wed 17 Jun 2026 06:51:16 +0000 Manifest next update: Thu 18 Jun 2026 09:49:16 +0000 Files and hashes: 1: DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl (hash: yDld0xy6hm/mj+11zFKTFymm87ghADuLeEEMaCeErU0=) 2: 3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (hash: DmsqerRTCfleWC17bgPmpGYVL2XXTPf5hE4dywrXO3g=) 3: 3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (hash: Je+1Z3JPlfN1SueLjZhyMHWstp3IWlu0F41bg1IrLNI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b8:1e:f4:0d:e3:89:d8:03:4f:da:8a:3e:aa:dd:be:ed:6b:3a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B Validity Not Before: Jun 17 06:51:16 2026 GMT Not After : Jun 18 09:49:16 2026 GMT Subject: CN=54BC8E1F7A7AC5A4F8E5EE01AC0C7F2A90CF6987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:49:4f:48:27:c3:56:35:6a:60:6d:c9:8b:4b: 43:f3:68:43:18:46:87:42:bf:2f:ad:bd:28:4f:65: e1:90:3a:e4:bd:0b:a6:99:83:63:15:6e:c9:04:3a: ed:59:a5:34:a1:ab:96:0e:b9:3b:85:e9:3a:37:37: df:9d:44:f1:af:79:2d:f6:59:8b:66:da:ba:82:6a: 7e:fa:c1:8e:bb:32:ce:89:18:cd:0c:98:41:34:a3: 21:e4:f3:3b:c0:31:32:ba:46:50:dc:37:b2:d4:eb: 9a:6d:8f:07:81:67:6c:61:a7:ac:c6:68:1e:4c:44: 61:68:2e:5d:85:3e:1c:d2:0b:2b:49:ae:84:39:18: e2:cf:43:57:a9:60:9a:07:e7:5c:07:a2:a8:4b:56: b6:58:d8:39:67:56:7c:26:34:22:d3:a6:9b:29:93: b4:5f:84:32:6a:4d:16:1c:18:93:af:2e:40:e7:f1: ad:1b:34:9c:72:18:a0:d1:15:2d:0a:b4:54:36:83: 35:e0:5b:27:1b:91:e6:f3:94:75:c2:8c:54:da:ff: 4e:d0:44:79:83:63:5a:7e:5a:f6:bd:56:8a:f7:95: 7b:bd:54:b1:b9:95:04:4b:55:92:3b:b1:87:c2:95: 71:39:07:50:94:fd:9e:01:8d:e6:a3:55:8c:2b:ca: ba:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BC:8E:1F:7A:7A:C5:A4:F8:E5:EE:01:AC:0C:7F:2A:90:CF:69:87 X509v3 Authority Key Identifier: keyid:DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:7c:0b:2b:f1:ca:30:a1:c1:00:e1:fd:f2:66:61:01:8d:70: b9:b1:6b:c1:0b:89:7d:79:81:6e:b7:97:45:6a:ea:b2:61:f2: 19:c1:f4:b9:aa:97:ac:20:db:5c:6a:32:88:58:11:d6:e0:76: 79:7e:76:a2:c8:69:33:c7:6d:14:4e:2e:5c:78:e3:3b:6a:3f: 30:d1:9d:da:74:68:9b:c3:5e:f4:8d:a3:2f:67:32:d8:4d:07: 8c:98:54:b6:1e:b3:b3:c3:da:74:ef:72:b7:9b:f4:50:fc:25: c9:56:85:14:4b:b2:9d:a8:fe:1d:15:09:19:e4:4d:ea:08:3d: 0a:13:63:bd:93:b1:75:9b:2a:44:87:40:44:4f:c3:fe:ee:aa: 54:ec:93:17:fe:31:c9:20:7c:c9:12:75:79:9a:60:a6:b6:3c: 02:e7:b1:75:a9:07:ba:08:f0:e4:ae:53:78:47:ec:bd:70:bc: e9:92:6d:81:eb:32:d0:51:98:55:6b:6d:17:79:8a:78:ac:cd: 94:cc:1f:6c:35:a4:56:99:b3:62:cc:13:00:b5:f3:51:be:0e: 2a:b6:33:4b:d7:46:b9:65:02:e7:cf:68:68:5c:3e:62:e0:de: d6:5a:cd:fd:21:77:87:78:73:b3:e0:1f:c4:26:11:5f:de:0a: 9d:f4:42:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSbge9A3jidgDT9qKPqrdvu1rOnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERENTQ4REE0RTJFRDY4ODAxOEMxNzhGRjZCMURCNkFC NDBBQUQ2QjAeFw0yNjA2MTcwNjUxMTZaFw0yNjA2MTgwOTQ5MTZaMDMxMTAvBgNV BAMTKDU0QkM4RTFGN0E3QUM1QTRGOEU1RUUwMUFDMEM3RjJBOTBDRjY5ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHSU9IJ8NWNWpgbcmLS0PzaEMY RodCvy+tvShPZeGQOuS9C6aZg2MVbskEOu1ZpTShq5YOuTuF6To3N9+dRPGveS32 WYtm2rqCan76wY67Ms6JGM0MmEE0oyHk8zvAMTK6RlDcN7LU65ptjweBZ2xhp6zG aB5MRGFoLl2FPhzSCytJroQ5GOLPQ1epYJoH51wHoqhLVrZY2DlnVnwmNCLTppsp k7RfhDJqTRYcGJOvLkDn8a0bNJxyGKDRFS0KtFQ2gzXgWycbkebzlHXCjFTa/07Q RHmDY1p+Wva9Vor3lXu9VLG5lQRLVZI7sYfClXE5B1CU/Z4BjeajVYwryrojAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVLyOH3p6xaT45e4BrAx/KpDPaYcwHwYDVR0j BBgwFoAU3dVI2k4u1ogBjBeP9rHbarQKrWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI1ZTg4YmQtNzVlMi00NWRmLTg4NjctNDU0MDJmYzdjNGIxLzAvRERENTQ4REE0 RTJFRDY4ODAxOEMxNzhGRjZCMURCNkFCNDBBQUQ2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREQ1NDhEQTRFMkVENjg4MDE4QzE3OEZGNkIxREI2QUI0MEFB RDZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI1ZTg4YmQtNzVlMi00NWRmLTg4 NjctNDU0MDJmYzdjNGIxLzAvRERENTQ4REE0RTJFRDY4ODAxOEMxNzhGRjZCMURC NkFCNDBBQUQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADB8CyvxyjChwQDh/fJmYQGNcLmxa8ELiX15 gW63l0Vq6rJh8hnB9Lmql6wg21xqMohYEdbgdnl+dqLIaTPHbRROLlx44ztqPzDR ndp0aJvDXvSNoy9nMthNB4yYVLYes7PD2nTvcreb9FD8JclWhRRLsp2o/h0VCRnk TeoIPQoTY72TsXWbKkSHQERPw/7uqlTskxf+MckgfMkSdXmaYKa2PALnsXWpB7oI 8OSuU3hH7L1wvOmSbYHrMtBRmFVrbRd5iniszZTMH2w1pFaZs2LMEwC181G+Diq2 M0vXRrllAufPaGhcPmLg3tZazf0hd4d4c7PgH8QmEV/eCp30QoU= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:32 2026 by rpki-client