
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft
File: DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft (raw, json)
Hash identifier: r9wPybqjMpjI8Mx8bZ7n2VeuXQKKjg9hmqOoV8oRLrU=
Subject key identifier: 27:87:B2:93:D3:C8:54:24:B3:C1:0A:97:7F:14:4A:0C:EC:EC:E9:B6
Authority key identifier: DD:4A:D6:DE:56:A2:26:7F:C5:F2:7E:4A:EA:ED:44:4B:28:71:57:22
Certificate issuer: /CN=DD4AD6DE56A2267FC5F27E4AEAED444B28715722
Certificate serial: 51CA2E51051A72A5DFC512898C05ED9526D19C7D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft
Manifest number: BD
Signing time: Sun 20 Sep 2026 19:36:03 +0000
Manifest this update: Sun 20 Sep 2026 19:31:03 +0000
Manifest next update: Mon 21 Sep 2026 20:18:03 +0000
Files and hashes: 1: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: 2aIQ3QBHP7J+Ky6wBfEPSC4GdD2wiOq9JYf33DaTyyo=)
2: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: tmRs1+AlBzBvmjJrjjc0kMDSK7a2kwnxBLvtC10ciHE=)
3: DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl (hash: M3EBRrfELSo6lE38DrEy++sSh3C3/llBvjEJYy3wqgk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl
rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 20:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ca:2e:51:05:1a:72:a5:df:c5:12:89:8c:05:ed:95:26:d1:9c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD4AD6DE56A2267FC5F27E4AEAED444B28715722
Validity
Not Before: Sep 20 19:31:03 2026 GMT
Not After : Sep 21 20:18:03 2026 GMT
Subject: CN=2787B293D3C85424B3C10A977F144A0CECECE9B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:8e:85:02:9b:bd:95:ef:07:ce:f5:c4:cd:
ef:ba:cb:af:25:73:55:17:c2:15:48:27:63:de:80:
c6:a8:8b:18:af:c6:43:5a:bd:f9:9a:7b:28:ed:42:
b9:e2:38:92:5d:11:57:a2:6d:0d:48:99:75:84:58:
22:87:98:4d:e3:42:f6:28:78:da:0b:c2:a1:14:04:
76:07:1c:3e:d5:7d:f4:6f:28:58:40:ee:b7:d1:1d:
58:9e:00:c7:d7:27:aa:c9:65:8a:b4:e2:e6:da:e6:
2d:1f:bd:79:fd:64:0c:4d:e6:b7:87:5d:1a:8e:f4:
c1:44:c6:51:03:c2:56:48:6b:7f:16:ed:7a:8f:a7:
e7:52:a9:e6:67:65:bf:2e:26:61:f2:25:e3:8b:18:
fd:61:a4:7b:bc:9f:79:f4:a3:61:8f:b9:a7:1b:2c:
2f:0c:57:29:ff:69:d9:65:e8:42:90:af:cd:97:ec:
6d:67:5c:6f:84:dc:e9:38:cf:4b:58:31:02:6f:5e:
0c:d9:8c:6b:bf:9c:ba:bc:e1:c2:f4:8b:82:89:80:
8b:80:6b:a2:57:4d:74:05:ee:0d:5f:51:31:07:e4:
4f:1f:35:4d:af:db:6e:b2:f0:5c:37:25:01:07:e7:
0b:e5:c6:dd:9f:3a:03:a2:f7:0f:a4:c6:7f:ef:cb:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:87:B2:93:D3:C8:54:24:B3:C1:0A:97:7F:14:4A:0C:EC:EC:E9:B6
X509v3 Authority Key Identifier:
keyid:DD:4A:D6:DE:56:A2:26:7F:C5:F2:7E:4A:EA:ED:44:4B:28:71:57:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ee:18:7b:81:61:6a:5b:3d:30:f9:4e:26:87:34:90:f5:59:
21:9b:49:50:a0:21:89:25:da:9c:d9:53:a3:23:5e:01:62:d6:
7c:21:39:6d:f7:b1:cf:c3:7a:44:e2:4d:db:6c:40:cb:e7:8a:
26:69:3b:8c:4d:5e:57:39:4a:02:99:dd:6c:2f:80:c9:fd:01:
23:c6:2d:89:f2:00:3e:b0:f8:0f:bb:50:18:3f:3e:2f:22:6b:
9a:fe:cc:4a:2a:57:1d:38:a8:ce:23:9d:9a:be:a1:c4:08:36:
21:81:41:81:90:72:ac:ef:bb:84:c1:d8:db:f6:0e:73:de:ef:
f6:e3:12:18:82:b1:2a:54:02:c2:b9:58:86:1c:53:e2:bd:78:
60:14:d8:85:00:55:e3:ed:0d:c2:96:64:dd:00:a0:67:dc:73:
51:8c:f0:c4:91:3d:ec:69:34:c9:e9:c6:1c:cd:2a:4a:04:ee:
bb:95:2e:5e:d7:64:5d:48:78:f2:d8:37:f5:cf:9b:a2:da:09:
9a:15:98:36:7b:57:62:2c:36:9b:b1:05:16:17:e1:8f:61:6e:
1f:47:ec:f5:97:09:aa:73:db:6b:f8:85:ea:60:73:76:1b:41:
cf:58:04:2c:10:b0:ea:d1:32:2a:1b:54:fc:d6:00:f1:35:07:
96:c0:31:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:54:01 2026 by rpki-client