$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft File: DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft (raw, json) Hash identifier: /6zRZ7NfGINQhkTcnP5cPcAewEzlsXLWudYKwrxvbuw= Subject key identifier: B8:46:00:18:F1:10:97:88:32:24:71:5E:71:69:89:47:C8:99:1D:54 Authority key identifier: DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B Certificate issuer: /CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B Certificate serial: 3B384595F18927671DF7D5859275D6EDF5173257 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft Manifest number: BF Signing time: Tue 22 Sep 2026 18:39:34 +0000 Manifest this update: Tue 22 Sep 2026 18:34:34 +0000 Manifest next update: Wed 23 Sep 2026 22:34:34 +0000 Files and hashes: 1: DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl (hash: d0AN8yWk+SSNl3WbGI8s1QFsbC7gGeaJXRMFG99qEOw=) 2: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: 5L5io7waITJzSQf8m8FETlwgIknoTsA9vUH70jmgDog=) 3: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: UGzAJ2L7c0+3TG5jr3kCTMBiqyH8xnVKmBzm3Kbw5NI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 22:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:38:45:95:f1:89:27:67:1d:f7:d5:85:92:75:d6:ed:f5:17:32:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B Validity Not Before: Sep 22 18:34:34 2026 GMT Not After : Sep 23 22:34:34 2026 GMT Subject: CN=B8460018F11097883224715E71698947C8991D54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:c8:ab:2b:b9:a9:d9:4a:01:e8:34:e7:dc: 51:11:0e:01:1e:c8:b8:1a:f1:fb:d3:bb:93:06:b9: 0d:3c:60:2d:f1:41:05:22:8c:08:bc:62:13:ed:47: b9:2a:50:41:4d:1b:fd:a5:99:fa:81:b9:c2:49:c2: 79:6f:b6:51:c5:ba:b2:0d:eb:51:eb:e8:58:7c:97: 08:d2:7c:8d:bd:af:6c:cc:3d:d7:58:82:ed:56:36: b2:86:a8:54:f9:df:b9:17:30:6f:ed:1e:69:42:dc: 28:01:1d:f9:ba:b0:ea:0e:27:6d:74:7a:6d:b6:f9: 34:17:1f:bd:85:a8:71:c6:f4:f6:1b:3f:38:e1:4d: 59:62:c1:d9:49:01:64:f1:96:b0:90:52:87:99:2f: 4e:93:d8:99:d9:d9:35:ce:28:1c:41:62:7a:db:54: c8:75:c6:da:cd:26:e2:0c:67:09:c0:98:d0:4d:7f: ab:18:31:0e:47:c2:16:44:dc:6a:ae:73:23:69:15: 84:2b:f6:20:13:31:bb:54:7b:21:94:23:cc:50:e7: 75:f1:86:16:da:b9:d8:f5:c3:d4:cd:64:47:eb:32: b5:2d:99:cf:99:15:84:d6:01:e3:2d:a4:94:27:5d: 57:9e:bf:f1:2d:b3:6b:e8:b3:15:3a:c3:94:cb:11: ff:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:46:00:18:F1:10:97:88:32:24:71:5E:71:69:89:47:C8:99:1D:54 X509v3 Authority Key Identifier: keyid:DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a0:f9:8f:83:09:db:99:95:45:e7:85:ed:71:f1:96:64:29: b4:cf:fe:56:18:d8:da:b3:a6:48:80:51:70:87:a8:9c:0a:c8: 0a:b1:9b:98:c6:a3:bd:a9:55:f1:c3:de:ac:70:db:15:4c:7b: ac:5f:4a:8e:97:f0:f4:e3:b5:ee:54:4a:7c:c5:6e:21:3d:27: b9:70:36:5e:07:1d:22:64:6f:a7:9b:1f:8c:b2:45:c6:6e:d0: 7b:48:d6:a6:a2:5c:7e:f3:f5:ad:b9:42:38:d0:e0:0d:12:48: bd:ad:84:2e:57:d2:83:0e:d6:02:51:cd:99:8e:8f:cf:ce:c1: b5:77:e9:df:b2:f6:99:1a:d3:a6:07:03:9b:cc:24:a5:bc:39: 7f:7d:0e:e4:30:80:4f:06:ad:2d:b5:a4:9d:26:c9:56:19:bc: 83:16:1c:dc:ab:0b:0c:9b:c8:7a:17:c4:47:7b:fa:49:00:b7: 13:8c:43:5b:66:86:26:d4:aa:47:0f:fa:68:65:5a:9b:17:c0: bc:ba:33:0e:51:47:7d:b7:0e:7c:69:d8:42:ce:68:de:1e:a8: 9c:ba:85:62:d9:be:99:66:01:bd:51:1c:cc:7a:79:3f:48:f6: 67:6c:d9:55:dc:f9:73:18:af:a7:5e:76:0e:f0:2a:09:27:e4: 54:e1:f4:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzhFlfGJJ2cd99WFknXW7fUXMlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3RjAyQzI5OTA1NThFNTE0REMzQjFCN0E3RTJCQUUw MzFBM0Y1QjAeFw0yNjA5MjIxODM0MzRaFw0yNjA5MjMyMjM0MzRaMDMxMTAvBgNV BAMTKEI4NDYwMDE4RjExMDk3ODgzMjI0NzE1RTcxNjk4OTQ3Qzg5OTFENTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBsirK7mp2UoB6DTn3FERDgEe yLga8fvTu5MGuQ08YC3xQQUijAi8YhPtR7kqUEFNG/2lmfqBucJJwnlvtlHFurIN 61Hr6Fh8lwjSfI29r2zMPddYgu1WNrKGqFT537kXMG/tHmlC3CgBHfm6sOoOJ210 em22+TQXH72FqHHG9PYbPzjhTVliwdlJAWTxlrCQUoeZL06T2JnZ2TXOKBxBYnrb VMh1xtrNJuIMZwnAmNBNf6sYMQ5HwhZE3GqucyNpFYQr9iATMbtUeyGUI8xQ53Xx hhbaudj1w9TNZEfrMrUtmc+ZFYTWAeMtpJQnXVeev/Ets2vosxU6w5TLEf91AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuEYAGPEQl4gyJHFecWmJR8iZHVQwHwYDVR0j BBgwFoAU3X8CwpkFWOUU3Dsben4rrgMaP1swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWIzNzg0ZmUtZjlmZS00Y2JlLTg3NjgtMjYzYTc2OTg2YTNhLzAvREQ3RjAyQzI5 OTA1NThFNTE0REMzQjFCN0E3RTJCQUUwMzFBM0Y1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDdGMDJDMjk5MDU1OEU1MTREQzNCMUI3QTdFMkJBRTAzMUEz RjVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvREQ3RjAyQzI5OTA1NThFNTE0REMzQjFCN0E3RTJC QUUwMzFBM0Y1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2g+Y+DCduZlUXnhe1x8ZZkKbTP/lYY2Nqz pkiAUXCHqJwKyAqxm5jGo72pVfHD3qxw2xVMe6xfSo6X8PTjte5USnzFbiE9J7lw Nl4HHSJkb6ebH4yyRcZu0HtI1qaiXH7z9a25QjjQ4A0SSL2thC5X0oMO1gJRzZmO j8/OwbV36d+y9pka06YHA5vMJKW8OX99DuQwgE8GrS21pJ0myVYZvIMWHNyrCwyb yHoXxEd7+kkAtxOMQ1tmhibUqkcP+mhlWpsXwLy6Mw5RR323Dnxp2ELOaN4eqJy6 hWLZvplmAb1RHMx6eT9I9mds2VXc+XMYr6dedg7wKgkn5FTh9No= -----END CERTIFICATE-----Generated at Wed Sep 23 13:54:10 2026 by rpki-client