$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft File: DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft (raw, json) Hash identifier: DB2h9YOHuGl4G/WyKC1aoYldu75sBgZ39QLyu6kGiLs= Subject key identifier: F7:44:69:BF:E9:B3:A5:11:0E:15:72:0F:21:FC:7F:25:0B:68:89:28 Authority key identifier: DD:4A:D6:DE:56:A2:26:7F:C5:F2:7E:4A:EA:ED:44:4B:28:71:57:22 Certificate issuer: /CN=DD4AD6DE56A2267FC5F27E4AEAED444B28715722 Certificate serial: 121F348F88692B25405B2A83C6468E21C55A8303 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 20:59:35 +0000 Manifest this update: Tue 16 Jun 2026 20:54:35 +0000 Manifest next update: Thu 18 Jun 2026 00:09:35 +0000 Files and hashes: 1: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: 2aIQ3QBHP7J+Ky6wBfEPSC4GdD2wiOq9JYf33DaTyyo=) 2: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: tmRs1+AlBzBvmjJrjjc0kMDSK7a2kwnxBLvtC10ciHE=) 3: DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl (hash: /sUp/xwidFQxmCemptgHLgCUZIW6gKZDc/r8k0e93js=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:1f:34:8f:88:69:2b:25:40:5b:2a:83:c6:46:8e:21:c5:5a:83:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4AD6DE56A2267FC5F27E4AEAED444B28715722 Validity Not Before: Jun 16 20:54:35 2026 GMT Not After : Jun 18 00:09:35 2026 GMT Subject: CN=F74469BFE9B3A5110E15720F21FC7F250B688928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7d:c3:9e:42:52:22:7f:f9:2e:78:80:b0:6c: 46:41:74:a9:fa:02:28:e5:bc:16:5c:74:77:55:0a: 93:0a:50:98:34:04:39:51:de:51:e7:1d:49:0a:19: 17:6f:40:27:09:22:55:12:ca:08:a9:0d:a4:99:49: 0d:06:a7:b3:4f:51:d2:f4:fd:a6:80:b1:84:ca:bb: 3b:cd:6e:a4:51:9a:c7:8f:6b:f7:45:df:5c:e5:0c: 27:4e:50:63:f5:fd:45:ad:13:2e:90:6a:c4:6c:7d: 68:c2:d2:d6:f8:64:70:5d:18:a9:9f:36:b1:61:b4: 47:b9:6e:d4:95:a8:33:09:5f:6b:fb:f5:4b:6d:66: b1:22:63:5a:0c:15:ce:10:34:3e:52:5d:f8:20:c6: 77:8a:ff:00:9e:e9:0c:57:57:f3:67:7d:2a:5d:ee: e2:2a:4e:43:04:ef:8e:b0:53:fb:83:4b:01:cc:e8: e8:7c:2b:46:d2:50:b5:0e:e2:e0:b1:55:cf:81:12: 3d:a3:58:75:4d:71:d2:ae:21:a3:19:f4:a5:d1:bc: f8:84:89:54:ad:75:e5:2d:dc:01:fd:d2:cd:43:2a: c9:77:0b:fe:fa:ce:db:38:b1:1e:c4:11:e2:f4:87: ad:67:02:97:ac:e7:60:ed:78:d4:78:b4:dd:7a:5e: b9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:44:69:BF:E9:B3:A5:11:0E:15:72:0F:21:FC:7F:25:0B:68:89:28 X509v3 Authority Key Identifier: keyid:DD:4A:D6:DE:56:A2:26:7F:C5:F2:7E:4A:EA:ED:44:4B:28:71:57:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:28:b6:df:80:e1:83:a5:85:f9:76:6f:bb:18:15:81:37:8b: 34:3d:4d:4e:81:8a:07:13:2c:e8:05:b9:39:1b:4f:5e:e2:37: d9:a0:00:a5:ee:13:c6:98:0e:ad:86:78:c0:2f:94:a4:ec:2a: 6e:6b:8e:38:f7:22:b6:55:b1:37:2f:99:61:ca:10:99:3a:b8: 47:f7:65:48:18:4e:38:17:4b:ff:5d:d3:39:63:ed:e5:96:92: 7c:3d:ec:e2:5b:5c:b0:07:c2:7b:6e:f1:06:65:4e:8c:5c:09: e8:da:2f:05:e0:2b:03:79:f1:0d:fb:84:38:a9:2c:67:51:c7: a5:a2:7e:2d:bf:84:13:b4:ee:38:42:0c:78:00:97:9d:34:b4: 86:be:42:e2:d3:bd:0b:80:5d:95:dd:a9:34:21:96:99:b1:bc: 2b:9b:33:d3:24:4a:a7:89:c9:d2:dd:e6:78:ab:8d:65:c0:7c: 98:ee:7a:92:d0:7a:38:8c:6f:ab:8c:7a:3c:ac:66:20:82:b0: 57:fd:1a:d9:54:c4:59:a4:a5:1e:13:3d:59:32:71:5c:0f:6c: 9e:33:9e:19:3b:e2:65:d5:d2:42:e0:80:8d:56:4e:bd:1c:27: 9f:80:21:1f:37:22:19:58:74:1f:8c:05:9c:dc:61:03:58:4a: db:39:0a:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEh80j4hpKyVAWyqDxkaOIcVagwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0QUQ2REU1NkEyMjY3RkM1RjI3RTRBRUFFRDQ0NEIy ODcxNTcyMjAeFw0yNjA2MTYyMDU0MzVaFw0yNjA2MTgwMDA5MzVaMDMxMTAvBgNV BAMTKEY3NDQ2OUJGRTlCM0E1MTEwRTE1NzIwRjIxRkM3RjI1MEI2ODg5MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyfcOeQlIif/kueICwbEZBdKn6 AijlvBZcdHdVCpMKUJg0BDlR3lHnHUkKGRdvQCcJIlUSygipDaSZSQ0Gp7NPUdL0 /aaAsYTKuzvNbqRRmsePa/dF31zlDCdOUGP1/UWtEy6QasRsfWjC0tb4ZHBdGKmf NrFhtEe5btSVqDMJX2v79UttZrEiY1oMFc4QND5SXfggxneK/wCe6QxXV/NnfSpd 7uIqTkME746wU/uDSwHM6Oh8K0bSULUO4uCxVc+BEj2jWHVNcdKuIaMZ9KXRvPiE iVStdeUt3AH90s1DKsl3C/76zts4sR7EEeL0h61nApes52DteNR4tN16XrlZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU90Rpv+mzpREOFXIPIfx/JQtoiSgwHwYDVR0j BBgwFoAU3UrW3laiJn/F8n5K6u1ESyhxVyIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU4OWU4NTktM2MyYy00YTA5LWE0YTktMzczMjNlYTVkZTIyLzAvREQ0QUQ2REU1 NkEyMjY3RkM1RjI3RTRBRUFFRDQ0NEIyODcxNTcyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDRBRDZERTU2QTIyNjdGQzVGMjdFNEFFQUVENDQ0QjI4NzE1 NzIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU4OWU4NTktM2MyYy00YTA5LWE0 YTktMzczMjNlYTVkZTIyLzAvREQ0QUQ2REU1NkEyMjY3RkM1RjI3RTRBRUFFRDQ0 NEIyODcxNTcyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAott+A4YOlhfl2b7sYFYE3izQ9TU6BigcT LOgFuTkbT17iN9mgAKXuE8aYDq2GeMAvlKTsKm5rjjj3IrZVsTcvmWHKEJk6uEf3 ZUgYTjgXS/9d0zlj7eWWknw97OJbXLAHwntu8QZlToxcCejaLwXgKwN58Q37hDip LGdRx6Wifi2/hBO07jhCDHgAl500tIa+QuLTvQuAXZXdqTQhlpmxvCubM9MkSqeJ ydLd5nirjWXAfJjuepLQejiMb6uMejysZiCCsFf9GtlUxFmkpR4TPVkycVwPbJ4z nhk74mXV0kLggI1WTr0cJ5+AIR83IhlYdB+MBZzcYQNYSts5CrY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:02 2026 by rpki-client