$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft File: DDF88B435837261B13DE2248E2A856AB45CECC0B.mft (raw, json) Hash identifier: 9X3lXW3FxYtXmlMk179UdFfXtg26Q1c8fmnuqIk2jnY= Subject key identifier: 20:40:CF:CC:21:2C:0D:49:6F:13:57:94:21:61:12:C0:7C:B8:EF:9C Authority key identifier: DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B Certificate issuer: /CN=DDF88B435837261B13DE2248E2A856AB45CECC0B Certificate serial: 6FAF8A12C6ECDEC90B6AB637236AB37EF7852E40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 03:57:42 +0000 Manifest this update: Sun 14 Jun 2026 03:52:42 +0000 Manifest next update: Mon 15 Jun 2026 05:00:42 +0000 Files and hashes: 1: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: fhnpPa+v9pVR6utlcEhHmU/vCyGDDmaJK9JqRPVVGlI=) 2: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: edm1TV/7umFF7e1kNKXURZcIakqU8CWQ1lkJU/ljN7I=) 3: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: yfH9V+v7CqjVW6BwpLw/uKH0EvFG6umOPa6WyO7b7X0=) 4: DDF88B435837261B13DE2248E2A856AB45CECC0B.crl (hash: zxjdGYmFNXEDlTIfvaQgZ/+fuR8EXU9lrDz7IF4NHOs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:af:8a:12:c6:ec:de:c9:0b:6a:b6:37:23:6a:b3:7e:f7:85:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDF88B435837261B13DE2248E2A856AB45CECC0B Validity Not Before: Jun 14 03:52:42 2026 GMT Not After : Jun 15 05:00:42 2026 GMT Subject: CN=2040CFCC212C0D496F135794216112C07CB8EF9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bf:47:b1:a3:4f:98:b3:79:76:95:76:bd:2c: 6e:3d:f1:4a:d2:16:52:b0:99:b4:c2:d0:fd:f1:44: 42:e3:d9:17:33:db:fc:55:f9:24:47:8d:48:0f:1a: 1e:4f:61:b9:5e:b9:f9:b8:7f:da:5f:a2:a2:43:f3: ab:68:38:ac:29:61:20:67:4f:9f:b8:a4:70:2d:c8: ec:8b:79:51:73:3a:33:0a:9c:af:9f:23:a7:7c:7d: c5:0c:35:3a:ad:4c:51:8b:10:eb:ad:62:c5:f3:39: 12:56:6a:13:83:ea:33:dd:fb:83:ad:88:48:57:5f: 74:95:bc:d2:93:01:80:43:31:87:b1:77:a1:6b:95: b3:c8:60:00:c0:54:39:67:dd:eb:01:43:33:99:39: 21:32:00:4c:8a:05:10:53:02:4a:16:bb:cd:96:29: 5c:d9:dc:7b:7b:e9:67:b7:45:63:50:7f:30:88:eb: 36:76:8d:37:87:95:5a:1d:92:bc:e5:5b:90:b3:5a: 7a:0e:42:f0:2a:94:f3:53:65:bd:3d:bf:d3:ca:26: 6b:83:b8:4e:11:c1:f9:e6:31:9f:13:2d:3d:1e:e9: a6:d4:28:8c:2e:19:b6:a9:f3:a6:97:84:63:b8:f7: a7:de:f0:57:18:ef:08:e0:c6:e5:20:11:bc:a7:f7: 96:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:40:CF:CC:21:2C:0D:49:6F:13:57:94:21:61:12:C0:7C:B8:EF:9C X509v3 Authority Key Identifier: keyid:DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3e:4f:67:76:b0:13:d9:79:f4:c2:93:df:a2:ec:d2:db:17: d9:f7:80:76:37:92:a8:f1:f0:c4:c9:37:6a:87:a0:10:9c:ef: 42:53:6b:df:7d:16:e8:6f:79:29:ea:a8:2d:da:1b:d9:91:54: d9:65:37:5c:6c:a6:6e:f3:47:36:df:a3:6c:e2:37:2e:12:6f: 26:fd:ab:70:fc:65:02:7e:87:e6:a6:72:f3:d4:b3:5f:ff:cd: aa:0f:61:d7:3b:67:55:7a:35:fd:f9:65:67:95:67:b3:ae:1f: 06:5d:1b:d6:21:d8:25:d8:e6:53:cc:de:2c:28:14:9b:73:22: 44:37:b5:c6:5d:d3:b2:ec:ab:d0:06:7d:aa:56:d5:d7:5c:38: 70:9a:9c:bd:a0:7e:b3:c2:0f:29:6d:23:ab:b7:f8:71:a0:a4: 5e:cc:bc:ee:ad:2e:da:25:b5:4a:d7:c4:42:7f:d0:46:a0:a2: fb:a8:99:97:4b:e7:0d:0f:b2:a7:ae:59:50:24:5e:1a:0f:0e: ef:e0:3f:d3:d9:9c:37:84:e0:21:5f:9e:9f:6b:2b:d2:a0:2e: 34:92:7b:eb:11:dc:48:b4:d3:9f:ad:af:40:04:8c:75:5f:8f: f8:91:cf:d7:4f:5d:d0:d0:fa:dc:3a:2a:80:c9:7a:49:a9:a2: 3c:12:22:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb6+KEsbs3skLarY3I2qzfveFLkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGODhCNDM1ODM3MjYxQjEzREUyMjQ4RTJBODU2QUI0 NUNFQ0MwQjAeFw0yNjA2MTQwMzUyNDJaFw0yNjA2MTUwNTAwNDJaMDMxMTAvBgNV BAMTKDIwNDBDRkNDMjEyQzBENDk2RjEzNTc5NDIxNjExMkMwN0NCOEVGOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBv0exo0+Ys3l2lXa9LG498UrS FlKwmbTC0P3xRELj2Rcz2/xV+SRHjUgPGh5PYbleufm4f9pfoqJD86toOKwpYSBn T5+4pHAtyOyLeVFzOjMKnK+fI6d8fcUMNTqtTFGLEOutYsXzORJWahOD6jPd+4Ot iEhXX3SVvNKTAYBDMYexd6FrlbPIYADAVDln3esBQzOZOSEyAEyKBRBTAkoWu82W KVzZ3Ht76We3RWNQfzCI6zZ2jTeHlVodkrzlW5CzWnoOQvAqlPNTZb09v9PKJmuD uE4RwfnmMZ8TLT0e6abUKIwuGbap86aXhGO496fe8FcY7wjgxuUgEbyn95ZJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIEDPzCEsDUlvE1eUIWESwHy475wwHwYDVR0j BBgwFoAU3fiLQ1g3JhsT3iJI4qhWq0XOzAswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUzNGQyZDgtMzRhZi00NzU3LThhZDktOTJkYTM1ZDkyMTY4LzAvRERGODhCNDM1 ODM3MjYxQjEzREUyMjQ4RTJBODU2QUI0NUNFQ0MwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREY4OEI0MzU4MzcyNjFCMTNERTIyNDhFMkE4NTZBQjQ1Q0VD QzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvRERGODhCNDM1ODM3MjYxQjEzREUyMjQ4RTJBODU2 QUI0NUNFQ0MwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHs+T2d2sBPZefTCk9+i7NLbF9n3gHY3kqjx 8MTJN2qHoBCc70JTa999FuhveSnqqC3aG9mRVNllN1xspm7zRzbfo2ziNy4Sbyb9 q3D8ZQJ+h+amcvPUs1//zaoPYdc7Z1V6Nf35ZWeVZ7OuHwZdG9Yh2CXY5lPM3iwo FJtzIkQ3tcZd07Lsq9AGfapW1ddcOHCanL2gfrPCDyltI6u3+HGgpF7MvO6tLtol tUrXxEJ/0EagovuomZdL5w0PsqeuWVAkXhoPDu/gP9PZnDeE4CFfnp9rK9KgLjSS e+sR3Ei005+tr0AEjHVfj/iRz9dPXdDQ+tw6KoDJekmpojwSIt4= -----END CERTIFICATE-----Generated at Sun Jun 14 12:03:32 2026 by rpki-client