$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft File: DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft (raw, json) Hash identifier: PRlXIJ43Du8SgZSZc51rFpR94zMQKNpxNeZB/ElxdD0= Subject key identifier: 2A:19:F5:DF:D3:1D:07:09:97:FA:77:B6:88:B3:91:84:97:AC:79:81 Authority key identifier: DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B Certificate issuer: /CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B Certificate serial: 164C4EE50998C1E168DC4149B04DB57BFDBC0DB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 16:16:43 +0000 Manifest this update: Tue 28 Jul 2026 16:11:43 +0000 Manifest next update: Wed 29 Jul 2026 17:00:43 +0000 Files and hashes: 1: DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl (hash: rzbFXusq7V5yEfQz8sSaEoxaGEJBnptuHeeBqbLDj4Y=) 2: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: 5L5io7waITJzSQf8m8FETlwgIknoTsA9vUH70jmgDog=) 3: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: UGzAJ2L7c0+3TG5jr3kCTMBiqyH8xnVKmBzm3Kbw5NI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:4c:4e:e5:09:98:c1:e1:68:dc:41:49:b0:4d:b5:7b:fd:bc:0d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B Validity Not Before: Jul 28 16:11:43 2026 GMT Not After : Jul 29 17:00:43 2026 GMT Subject: CN=2A19F5DFD31D070997FA77B688B3918497AC7981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3a:f1:17:e7:3b:51:60:9d:e9:4e:72:5f:66: 15:88:c8:15:fc:1f:5d:0e:bd:ba:5b:a5:f9:cd:af: 44:96:7b:c3:57:df:6f:ad:8c:d2:8c:86:d9:e5:81: 4b:7c:72:28:61:b2:4e:b8:c2:e0:2e:1a:48:af:f0: de:31:0b:d7:33:7e:f6:3a:58:4a:39:f0:4f:68:f7: 2e:76:63:56:dd:90:fd:23:70:cc:e3:45:9c:4a:84: e9:71:17:2c:80:63:c0:ed:3c:b6:b6:32:99:2e:0d: e8:57:5e:db:be:9b:d3:2b:2f:fa:0d:fc:8c:2f:e1: 45:d5:19:d4:79:e5:21:63:3c:16:5d:d1:f5:3c:fb: b5:3e:95:65:0a:2b:7e:8e:c4:f5:89:da:6b:d7:fa: 5a:f4:61:e5:cf:57:b1:a4:59:24:5c:00:71:2f:99: 9b:13:aa:0c:36:7d:79:79:a7:0d:09:2c:99:d7:d2: 20:d4:88:90:97:7d:ad:8a:44:58:58:de:33:1f:7a: 32:83:51:42:3b:ac:58:cd:1a:39:88:6f:81:e6:29: fa:05:4b:1f:22:b3:3f:53:56:9e:91:27:f7:f0:fc: 22:25:b4:d1:36:87:a1:2c:7d:7d:fb:a9:ec:c6:d3: 9b:5f:c7:9d:1c:83:79:24:27:b7:65:22:45:b0:e2: 69:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:19:F5:DF:D3:1D:07:09:97:FA:77:B6:88:B3:91:84:97:AC:79:81 X509v3 Authority Key Identifier: keyid:DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:bf:4c:0b:ed:b7:ff:07:c8:e7:7b:bd:77:d5:9e:5e:ec:91: 40:ad:da:52:73:9c:8e:66:d1:a6:64:68:0f:d6:6b:ea:b3:5b: 73:4e:6d:ef:ac:1f:0d:43:ee:52:21:6f:2e:56:55:e5:a1:8d: 31:cd:80:1e:a4:d2:a1:5c:11:0b:8e:9c:89:85:e7:9c:39:94: 91:ae:f9:77:2e:ed:bc:e4:a5:53:8a:6a:ce:e0:e2:d6:ec:5a: e0:18:6d:89:0b:92:36:13:c9:89:be:4a:8e:4f:42:78:22:ca: d7:1e:a3:e1:bb:5a:a1:30:ca:4d:a7:e8:d7:b3:e8:b5:58:12: 31:32:41:1b:1c:cf:cc:fa:df:54:67:e4:da:bc:56:2c:b6:42: 4b:90:0c:d6:4f:46:bb:a0:ea:7f:6a:49:cf:9f:7c:89:ec:91: 74:71:42:09:fe:69:60:29:b0:2d:62:83:98:54:8a:26:73:98: b3:69:f2:a2:ae:4e:8a:fc:a8:17:34:04:c3:76:4a:a1:21:05: de:74:53:74:4f:f6:a2:bb:29:e1:8f:38:52:e6:85:5f:99:a7: c7:91:14:97:ac:e1:2b:78:0f:9f:39:b5:3a:a1:cb:6e:d1:6f: 27:a8:93:78:be:c8:1b:5b:9a:b9:06:28:dd:6f:09:09:62:23: 63:48:e5:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFkxO5QmYweFo3EFJsE21e/28DbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3RjAyQzI5OTA1NThFNTE0REMzQjFCN0E3RTJCQUUw MzFBM0Y1QjAeFw0yNjA3MjgxNjExNDNaFw0yNjA3MjkxNzAwNDNaMDMxMTAvBgNV BAMTKDJBMTlGNURGRDMxRDA3MDk5N0ZBNzdCNjg4QjM5MTg0OTdBQzc5ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbOvEX5ztRYJ3pTnJfZhWIyBX8 H10OvbpbpfnNr0SWe8NX32+tjNKMhtnlgUt8cihhsk64wuAuGkiv8N4xC9czfvY6 WEo58E9o9y52Y1bdkP0jcMzjRZxKhOlxFyyAY8DtPLa2MpkuDehXXtu+m9MrL/oN /Iwv4UXVGdR55SFjPBZd0fU8+7U+lWUKK36OxPWJ2mvX+lr0YeXPV7GkWSRcAHEv mZsTqgw2fXl5pw0JLJnX0iDUiJCXfa2KRFhY3jMfejKDUUI7rFjNGjmIb4HmKfoF Sx8isz9TVp6RJ/fw/CIltNE2h6EsfX37qezG05tfx50cg3kkJ7dlIkWw4ml9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKhn139MdBwmX+ne2iLORhJeseYEwHwYDVR0j BBgwFoAU3X8CwpkFWOUU3Dsben4rrgMaP1swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWIzNzg0ZmUtZjlmZS00Y2JlLTg3NjgtMjYzYTc2OTg2YTNhLzAvREQ3RjAyQzI5 OTA1NThFNTE0REMzQjFCN0E3RTJCQUUwMzFBM0Y1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDdGMDJDMjk5MDU1OEU1MTREQzNCMUI3QTdFMkJBRTAzMUEz RjVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvREQ3RjAyQzI5OTA1NThFNTE0REMzQjFCN0E3RTJC QUUwMzFBM0Y1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGW/TAvtt/8HyOd7vXfVnl7skUCt2lJznI5m 0aZkaA/Wa+qzW3NObe+sHw1D7lIhby5WVeWhjTHNgB6k0qFcEQuOnImF55w5lJGu +Xcu7bzkpVOKas7g4tbsWuAYbYkLkjYTyYm+So5PQngiytceo+G7WqEwyk2n6Nez 6LVYEjEyQRscz8z631Rn5Nq8Viy2QkuQDNZPRrug6n9qSc+ffInskXRxQgn+aWAp sC1ig5hUiiZzmLNp8qKuTor8qBc0BMN2SqEhBd50U3RP9qK7KeGPOFLmhV+Zp8eR FJes4St4D585tTqhy27Rbyeok3i+yBtbmrkGKN1vCQliI2NI5Uc= -----END CERTIFICATE-----Generated at Tue Jul 28 19:47:36 2026 by rpki-client