$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft File: DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft (raw, json) Hash identifier: 68U+RUeddsc9fMG0u7OR2DMFrpIFjqUPK7LEPWuNqdk= Subject key identifier: 7A:B5:36:6D:EF:DB:DD:65:0E:68:A6:DD:10:3E:62:12:62:AB:62:3F Authority key identifier: DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA Certificate issuer: /CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA Certificate serial: 0F6E44B634F32A705CE902622B78A2DFAF3AEAF4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft Manifest number: BD Signing time: Sun 20 Sep 2026 09:13:40 +0000 Manifest this update: Sun 20 Sep 2026 09:08:40 +0000 Manifest next update: Mon 21 Sep 2026 11:23:40 +0000 Files and hashes: 1: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (hash: /I/1xW7rsK7gJcZw8w0G3A5/hDeO0oqDDXrZo6p7Qtc=) 2: DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl (hash: ropKowQrAi5E0uTBhL+nqFzox2m8tzUWPENu8C9HEDk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 11:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:6e:44:b6:34:f3:2a:70:5c:e9:02:62:2b:78:a2:df:af:3a:ea:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA Validity Not Before: Sep 20 09:08:40 2026 GMT Not After : Sep 21 11:23:40 2026 GMT Subject: CN=7AB5366DEFDBDD650E68A6DD103E621262AB623F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:52:92:a9:4d:9b:7c:42:19:7b:4f:9d:44:b7: 31:48:8f:20:64:fd:53:93:7c:69:1d:76:0a:51:16: f2:72:a9:a0:7b:39:da:15:2c:a2:6e:d8:0d:43:bf: 83:9e:ff:55:af:79:61:b0:de:03:6c:f0:18:b3:38: a3:56:8b:30:bb:e7:28:fc:6a:0f:49:28:57:5f:57: 7b:52:08:c2:84:7e:c3:23:bb:d8:31:b5:08:19:6c: ac:36:33:c5:19:b2:1d:c9:b6:ff:0f:99:32:79:b1: a3:bc:e2:b3:79:5b:9c:3b:a2:05:d0:28:d1:01:c1: 16:e5:0b:c3:cf:1d:90:f3:fb:81:9d:3d:13:50:7a: 7d:59:71:d5:e4:20:85:93:26:fe:79:e1:9b:1d:cf: 8f:14:e7:09:c5:30:04:75:b9:52:66:ff:93:ad:c7: 34:35:0b:39:e4:44:41:81:3d:5b:87:fd:c5:eb:8a: 21:37:1b:3f:af:3a:17:0b:22:08:1c:27:3c:c5:ba: 62:5c:b0:fc:cc:09:4e:cb:f1:f5:a6:b5:8c:c3:19: 37:ae:2e:2d:0b:ee:db:bb:24:32:44:a5:d2:26:07: 98:a4:e1:10:e4:cb:ee:8c:14:46:0e:78:c7:ea:2c: 90:8d:ff:8d:fc:d1:06:bc:73:49:95:d8:1e:79:8d: fb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B5:36:6D:EF:DB:DD:65:0E:68:A6:DD:10:3E:62:12:62:AB:62:3F X509v3 Authority Key Identifier: keyid:DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9f:46:ea:c5:ad:5a:13:03:98:52:11:4a:37:dc:5a:9b:30: 08:a0:e8:5d:b2:09:fc:59:f7:94:db:cb:07:f0:43:38:59:ed: 78:5c:b7:17:95:b3:f7:2d:07:0e:f6:ac:97:17:80:c8:7f:61: 72:c7:70:2e:b4:5c:72:5d:49:54:f7:3a:87:f9:51:e0:f3:63: 0a:67:89:1d:75:56:0b:5a:12:1c:02:a8:60:ec:62:59:77:4e: d9:f7:51:b9:33:b3:bd:ba:8d:6d:fc:bf:ab:0e:62:1b:03:5e: 4d:b9:c9:65:e0:a0:bd:a2:7c:99:40:1c:f1:23:33:01:68:11: 09:1d:64:64:f0:2b:d8:57:53:dd:d5:d2:f3:84:a9:c1:09:9b: 91:a0:ee:62:4f:33:4d:ef:fb:84:56:4e:9c:f7:39:53:59:31: dc:37:b0:1d:62:f6:e7:26:26:d2:ec:27:e8:d9:86:18:d0:fb: fb:a7:16:c9:85:1b:3d:e2:7b:9b:18:3e:29:a3:42:c6:ac:c9: a4:6d:47:8e:6a:36:71:d1:b9:89:b5:ca:54:3d:09:b8:21:89: 32:19:dd:75:3d:9f:f2:fb:a5:a0:01:63:5a:74:a6:8c:cc:e6: 27:50:00:b9:6e:df:4c:ba:75:f6:6f:93:46:80:24:a5:06:8c: 4d:52:1d:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD25EtjTzKnBc6QJiK3ii36866vQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFQzA3MkE5Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYxRDkw NzkyQzRCQTAeFw0yNjA5MjAwOTA4NDBaFw0yNjA5MjExMTIzNDBaMDMxMTAvBgNV BAMTKDdBQjUzNjZERUZEQkRENjUwRTY4QTZERDEwM0U2MjEyNjJBQjYyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8UpKpTZt8Qhl7T51EtzFIjyBk /VOTfGkddgpRFvJyqaB7OdoVLKJu2A1Dv4Oe/1WveWGw3gNs8BizOKNWizC75yj8 ag9JKFdfV3tSCMKEfsMju9gxtQgZbKw2M8UZsh3Jtv8PmTJ5saO84rN5W5w7ogXQ KNEBwRblC8PPHZDz+4GdPRNQen1ZcdXkIIWTJv554Zsdz48U5wnFMAR1uVJm/5Ot xzQ1CznkREGBPVuH/cXriiE3Gz+vOhcLIggcJzzFumJcsPzMCU7L8fWmtYzDGTeu Li0L7tu7JDJEpdImB5ik4RDky+6MFEYOeMfqLJCN/4380Qa8c0mV2B55jfv/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUerU2be/b3WUOaKbdED5iEmKrYj8wHwYDVR0j BBgwFoAU3ewHKpJ3UdzItpRMpGDx2QeSxLowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY1ZmE1NGQtMjQ4ZS00MjNjLTllNDktZDZlNmJmYmJmNzhiLzAvRERFQzA3MkE5 Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYxRDkwNzkyQzRCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREVDMDcyQTkyNzc1MURDQzhCNjk0NENBNDYwRjFEOTA3OTJD NEJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY1ZmE1NGQtMjQ4ZS00MjNjLTll NDktZDZlNmJmYmJmNzhiLzAvRERFQzA3MkE5Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYx RDkwNzkyQzRCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqfRurFrVoTA5hSEUo33FqbMAig6F2yCfxZ 95TbywfwQzhZ7XhctxeVs/ctBw72rJcXgMh/YXLHcC60XHJdSVT3Oof5UeDzYwpn iR11VgtaEhwCqGDsYll3Ttn3Ubkzs726jW38v6sOYhsDXk25yWXgoL2ifJlAHPEj MwFoEQkdZGTwK9hXU93V0vOEqcEJm5Gg7mJPM03v+4RWTpz3OVNZMdw3sB1i9ucm JtLsJ+jZhhjQ+/unFsmFGz3ie5sYPimjQsasyaRtR45qNnHRuYm1ylQ9CbghiTIZ 3XU9n/L7paABY1p0pozM5idQALlu30y6dfZvk0aAJKUGjE1SHR0= -----END CERTIFICATE-----Generated at Mon Sep 21 04:49:34 2026 by rpki-client