$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft File: DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft (raw, json) Hash identifier: uFCe7NE1U7hTyvo59pV1srjnDuKm646Qw5btZk5eYOs= Subject key identifier: 5F:51:4F:66:8B:F8:4B:D0:C0:73:39:7B:A6:A9:52:C9:FF:EB:6D:91 Authority key identifier: DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B Certificate issuer: /CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B Certificate serial: 44724074C7CC7E5396A03CFA91FC9F9FD51540F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 00:55:28 +0000 Manifest this update: Sat 13 Jun 2026 00:50:28 +0000 Manifest next update: Sun 14 Jun 2026 03:28:28 +0000 Files and hashes: 1: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: UGzAJ2L7c0+3TG5jr3kCTMBiqyH8xnVKmBzm3Kbw5NI=) 2: DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl (hash: fKSSgb3XvXMvTWUeClhHbqjxNL4slWrtCDYVxeZRvT4=) 3: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: 5L5io7waITJzSQf8m8FETlwgIknoTsA9vUH70jmgDog=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 03:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:72:40:74:c7:cc:7e:53:96:a0:3c:fa:91:fc:9f:9f:d5:15:40:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B Validity Not Before: Jun 13 00:50:28 2026 GMT Not After : Jun 14 03:28:28 2026 GMT Subject: CN=5F514F668BF84BD0C073397BA6A952C9FFEB6D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:9e:ab:93:c0:6f:74:6c:3d:85:00:8d:0e: 74:cd:ed:86:df:bf:b7:24:5d:8f:c0:22:d5:3a:55: 39:f4:d0:52:ae:0e:16:bc:4d:7c:3a:5e:05:a8:89: 13:f0:98:41:03:b3:1b:04:2e:8c:01:9f:37:05:48: b5:2a:9f:11:47:3f:ff:85:12:7d:54:52:42:69:29: 93:1b:d9:dd:9b:2f:0e:08:c0:05:29:70:e0:a9:4b: 53:be:14:da:e8:56:35:2f:09:09:05:38:f8:c3:75: 7f:6e:76:b4:07:c9:da:9f:c1:5e:0c:80:91:02:36: a2:53:f8:ee:61:be:bf:d8:e7:97:da:e1:90:33:da: 1d:e7:69:49:df:38:c9:7e:0c:4e:ba:18:15:41:14: fc:9d:89:cd:9e:dd:f3:ab:96:4c:1d:8f:d4:af:5e: 0e:59:67:97:a8:d6:d7:98:49:17:cf:ff:59:80:fe: c0:66:86:dc:ba:59:e5:61:23:85:fc:50:1c:88:3f: c3:3f:45:77:b6:eb:f3:7c:55:02:1d:5b:57:90:f4: 6f:52:43:a7:da:91:9e:c2:a3:34:cf:d1:e7:2d:4f: a1:9c:98:c0:a0:f3:1b:ed:07:c1:e4:65:95:7c:8f: 8a:71:ae:b6:eb:4d:52:07:5e:f7:06:4a:d6:32:85: 5b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:51:4F:66:8B:F8:4B:D0:C0:73:39:7B:A6:A9:52:C9:FF:EB:6D:91 X509v3 Authority Key Identifier: keyid:DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:27:72:81:9d:65:d4:1a:37:4c:49:e9:8a:11:1b:c8:27:ab: e1:94:51:07:f3:2e:82:72:e4:f9:78:cd:f3:1b:da:2e:8b:cb: e8:76:76:94:f8:8e:0f:3b:9c:d6:6e:2d:2c:b6:c9:95:08:84: ca:f7:2d:d2:25:69:27:f5:ed:cb:04:0d:a8:4c:df:90:30:66: e3:4e:a7:69:d9:9f:78:f6:01:c0:e8:36:86:0c:ef:be:2c:1e: 9e:c7:79:b1:96:2f:48:61:47:05:bb:63:ff:0e:3b:0e:f1:a9: 51:19:00:8d:00:e6:9b:2c:d3:d2:07:35:d6:95:37:58:be:1f: ee:e6:5f:04:f1:71:de:fa:46:76:5a:51:64:44:93:69:4c:30: 83:5b:0e:ba:92:e0:a9:d1:ea:ea:41:1d:6a:62:c9:60:51:9b: dd:0c:aa:e5:91:cf:8c:90:d1:12:4b:80:c0:15:1e:65:e6:e0: 0e:c6:9d:33:af:7f:45:4d:1f:e2:c8:16:91:d2:08:14:01:86: d4:ff:6f:3b:40:42:b7:94:b1:68:f5:b3:70:3f:4a:6a:28:b5: 4f:0f:e8:f6:ef:3f:42:c4:27:1c:b5:50:1a:a7:09:d7:d4:0f: e2:c2:a7:39:e9:64:91:34:66:e5:b1:ae:38:88:59:1b:4d:0f: 99:9f:18:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURHJAdMfMflOWoDz6kfyfn9UVQPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3RjAyQzI5OTA1NThFNTE0REMzQjFCN0E3RTJCQUUw MzFBM0Y1QjAeFw0yNjA2MTMwMDUwMjhaFw0yNjA2MTQwMzI4MjhaMDMxMTAvBgNV BAMTKDVGNTE0RjY2OEJGODRCRDBDMDczMzk3QkE2QTk1MkM5RkZFQjZEOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZ56rk8BvdGw9hQCNDnTN7Ybf v7ckXY/AItU6VTn00FKuDha8TXw6XgWoiRPwmEEDsxsELowBnzcFSLUqnxFHP/+F En1UUkJpKZMb2d2bLw4IwAUpcOCpS1O+FNroVjUvCQkFOPjDdX9udrQHydqfwV4M gJECNqJT+O5hvr/Y55fa4ZAz2h3naUnfOMl+DE66GBVBFPydic2e3fOrlkwdj9Sv Xg5ZZ5eo1teYSRfP/1mA/sBmhty6WeVhI4X8UByIP8M/RXe26/N8VQIdW1eQ9G9S Q6fakZ7CozTP0ectT6GcmMCg8xvtB8HkZZV8j4pxrrbrTVIHXvcGStYyhVsLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX1FPZov4S9DAczl7pqlSyf/rbZEwHwYDVR0j BBgwFoAU3X8CwpkFWOUU3Dsben4rrgMaP1swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWIzNzg0ZmUtZjlmZS00Y2JlLTg3NjgtMjYzYTc2OTg2YTNhLzAvREQ3RjAyQzI5 OTA1NThFNTE0REMzQjFCN0E3RTJCQUUwMzFBM0Y1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDdGMDJDMjk5MDU1OEU1MTREQzNCMUI3QTdFMkJBRTAzMUEz RjVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvREQ3RjAyQzI5OTA1NThFNTE0REMzQjFCN0E3RTJC QUUwMzFBM0Y1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkncoGdZdQaN0xJ6YoRG8gnq+GUUQfzLoJy 5Pl4zfMb2i6Ly+h2dpT4jg87nNZuLSy2yZUIhMr3LdIlaSf17csEDahM35AwZuNO p2nZn3j2AcDoNoYM774sHp7HebGWL0hhRwW7Y/8OOw7xqVEZAI0A5pss09IHNdaV N1i+H+7mXwTxcd76RnZaUWREk2lMMINbDrqS4KnR6upBHWpiyWBRm90MquWRz4yQ 0RJLgMAVHmXm4A7GnTOvf0VNH+LIFpHSCBQBhtT/bztAQreUsWj1s3A/SmootU8P 6PbvP0LEJxy1UBqnCdfUD+LCpznpZJE0ZuWxrjiIWRtND5mfGIY= -----END CERTIFICATE-----Generated at Sat Jun 13 17:15:49 2026 by rpki-client