$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft File: DDF88B435837261B13DE2248E2A856AB45CECC0B.mft (raw, json) Hash identifier: zH406cjCrUA9A/QoSr/RcmTb7xZG2eOtKFZTtsIfqS8= Subject key identifier: 86:79:19:E8:76:EB:A8:22:8C:0D:FB:A4:59:95:F0:61:E7:97:C6:88 Authority key identifier: DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B Certificate issuer: /CN=DDF88B435837261B13DE2248E2A856AB45CECC0B Certificate serial: 1F47F120D9FE2BE7B0F0CE161C3FA39633806E0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft Manifest number: BE Signing time: Mon 21 Sep 2026 16:42:17 +0000 Manifest this update: Mon 21 Sep 2026 16:37:17 +0000 Manifest next update: Tue 22 Sep 2026 18:09:17 +0000 Files and hashes: 1: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: yfH9V+v7CqjVW6BwpLw/uKH0EvFG6umOPa6WyO7b7X0=) 2: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: fhnpPa+v9pVR6utlcEhHmU/vCyGDDmaJK9JqRPVVGlI=) 3: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: edm1TV/7umFF7e1kNKXURZcIakqU8CWQ1lkJU/ljN7I=) 4: DDF88B435837261B13DE2248E2A856AB45CECC0B.crl (hash: 5ID0NIHgg37cEkjj4Uj9/0Fsacr+bJatPd8dsX7vrb0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:47:f1:20:d9:fe:2b:e7:b0:f0:ce:16:1c:3f:a3:96:33:80:6e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDF88B435837261B13DE2248E2A856AB45CECC0B Validity Not Before: Sep 21 16:37:17 2026 GMT Not After : Sep 22 18:09:17 2026 GMT Subject: CN=867919E876EBA8228C0DFBA45995F061E797C688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:77:d8:66:90:6c:f7:a0:37:05:b5:d9:5b:88: c7:94:6f:a7:8a:7f:4f:9d:13:ca:85:e7:33:df:59: 5d:f2:e0:0c:bb:ac:f0:7b:93:bc:50:e6:f9:76:dc: 16:e3:bb:f8:d8:a6:1a:0d:8a:b1:78:a6:79:48:6b: 99:e4:45:cb:1f:2a:7b:32:c0:88:92:49:64:0e:b4: 89:c7:e1:8d:bd:59:85:ad:01:47:2e:42:28:e3:aa: 93:c6:d4:77:00:3c:a8:00:51:6f:b2:3b:95:ac:97: b3:77:ec:38:d0:f1:fa:b7:55:50:3f:d7:be:8b:c3: 70:05:95:6a:97:6f:87:8c:ed:76:5b:a6:e7:c6:77: 2e:dd:1a:e9:b8:7a:5a:93:90:92:38:27:b8:2b:93: 37:0c:25:c2:18:e7:4f:8d:65:50:af:64:52:8e:8a: 68:78:93:fd:fb:09:e9:fd:f9:e8:9d:f5:f8:09:e4: 32:10:3e:35:a0:b1:e3:05:16:37:66:07:f3:9b:6c: 9e:e6:1d:5a:4f:62:0c:b5:01:39:64:97:a8:ce:f0: 49:e8:4e:99:57:5b:8f:e3:b8:0f:a1:ac:8f:d7:6d: 5f:2e:13:8d:55:6b:97:59:0d:94:b8:a7:aa:9d:bf: 58:74:ab:57:aa:bc:0b:f9:b7:ca:bf:4b:a6:d6:d7: a7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:79:19:E8:76:EB:A8:22:8C:0D:FB:A4:59:95:F0:61:E7:97:C6:88 X509v3 Authority Key Identifier: keyid:DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d2:07:58:1d:96:ef:74:95:00:e5:19:8e:00:67:d1:95:4b: fa:6f:99:11:9b:16:81:cc:46:98:a5:54:59:a3:59:df:8b:ee: ab:04:7d:39:9f:d5:1a:a8:70:b0:fe:bd:92:03:76:9e:db:68: a0:ee:0d:38:27:0b:c1:5b:4f:03:cf:59:7f:7e:8a:a8:dc:a3: 46:c4:59:cd:3a:74:8f:11:26:83:c3:26:cf:a1:ed:ea:cf:30: b7:4c:72:c9:9f:e1:3b:ed:c7:21:dc:e1:de:0f:c2:f8:9c:3e: 84:c9:51:1f:13:0b:32:eb:7a:81:0e:1c:8f:df:05:f2:e6:86: c1:ee:f7:00:ec:5a:23:c1:7d:a4:c3:43:80:90:38:4c:83:a6: 53:a5:53:6d:aa:e8:fb:25:56:96:37:49:27:2e:62:f8:41:88: 33:10:24:46:b6:62:47:23:f5:df:a9:fc:c3:25:f0:00:65:83: 7e:57:5e:f6:28:d1:1d:88:6e:c0:e1:6d:19:52:ef:95:96:57: f3:20:30:9d:cc:33:0b:40:25:36:e4:61:6a:30:88:8d:60:f3: 66:c0:63:61:c0:b7:b7:cf:0e:c3:4c:12:2d:2f:e9:a6:43:29: 81:7d:f2:81:c2:f3:42:ab:4b:d8:6c:14:00:57:e0:59:1c:52: d4:d2:89:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH0fxINn+K+ew8M4WHD+jljOAbgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGODhCNDM1ODM3MjYxQjEzREUyMjQ4RTJBODU2QUI0 NUNFQ0MwQjAeFw0yNjA5MjExNjM3MTdaFw0yNjA5MjIxODA5MTdaMDMxMTAvBgNV BAMTKDg2NzkxOUU4NzZFQkE4MjI4QzBERkJBNDU5OTVGMDYxRTc5N0M2ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVd9hmkGz3oDcFtdlbiMeUb6eK f0+dE8qF5zPfWV3y4Ay7rPB7k7xQ5vl23Bbju/jYphoNirF4pnlIa5nkRcsfKnsy wIiSSWQOtInH4Y29WYWtAUcuQijjqpPG1HcAPKgAUW+yO5Wsl7N37DjQ8fq3VVA/ 176Lw3AFlWqXb4eM7XZbpufGdy7dGum4elqTkJI4J7grkzcMJcIY50+NZVCvZFKO imh4k/37Cen9+eid9fgJ5DIQPjWgseMFFjdmB/ObbJ7mHVpPYgy1ATlkl6jO8Eno TplXW4/juA+hrI/XbV8uE41Va5dZDZS4p6qdv1h0q1eqvAv5t8q/S6bW16c3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhnkZ6HbrqCKMDfukWZXwYeeXxogwHwYDVR0j BBgwFoAU3fiLQ1g3JhsT3iJI4qhWq0XOzAswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUzNGQyZDgtMzRhZi00NzU3LThhZDktOTJkYTM1ZDkyMTY4LzAvRERGODhCNDM1 ODM3MjYxQjEzREUyMjQ4RTJBODU2QUI0NUNFQ0MwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREY4OEI0MzU4MzcyNjFCMTNERTIyNDhFMkE4NTZBQjQ1Q0VD QzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvRERGODhCNDM1ODM3MjYxQjEzREUyMjQ4RTJBODU2 QUI0NUNFQ0MwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/SB1gdlu90lQDlGY4AZ9GVS/pvmRGbFoHM RpilVFmjWd+L7qsEfTmf1RqocLD+vZIDdp7baKDuDTgnC8FbTwPPWX9+iqjco0bE Wc06dI8RJoPDJs+h7erPMLdMcsmf4TvtxyHc4d4PwvicPoTJUR8TCzLreoEOHI/f BfLmhsHu9wDsWiPBfaTDQ4CQOEyDplOlU22q6PslVpY3SScuYvhBiDMQJEa2Ykcj 9d+p/MMl8ABlg35XXvYo0R2IbsDhbRlS75WWV/MgMJ3MMwtAJTbkYWowiI1g82bA Y2HAt7fPDsNMEi0v6aZDKYF98oHC80KrS9hsFABX4FkcUtTSiTs= -----END CERTIFICATE-----Generated at Tue Sep 22 10:58:23 2026 by rpki-client