$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft File: DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft (raw, json) Hash identifier: j/zWUIAIzoVX0DNRUV4lJLcPItf0nzJkeGb8Mw8ISSM= Subject key identifier: B1:1A:13:9B:57:0D:B4:C2:EA:F3:E6:8F:9C:AB:08:6A:C1:B5:F4:05 Authority key identifier: DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA Certificate issuer: /CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA Certificate serial: 74C83DEE43209F46DD8FAEB9234D8E615DA35CC5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft Manifest number: 0101 Signing time: Tue 10 Nov 2026 13:02:28 +0000 Manifest this update: Tue 10 Nov 2026 12:57:28 +0000 Manifest next update: Wed 11 Nov 2026 13:51:28 +0000 Files and hashes: 1: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (hash: /I/1xW7rsK7gJcZw8w0G3A5/hDeO0oqDDXrZo6p7Qtc=) 2: DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl (hash: 8BpyWhXPr3ZpS4pnFcM0K3oqwT43CWE3Qcmq+7qp3U8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c8:3d:ee:43:20:9f:46:dd:8f:ae:b9:23:4d:8e:61:5d:a3:5c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA Validity Not Before: Nov 10 12:57:28 2026 GMT Not After : Nov 11 13:51:28 2026 GMT Subject: CN=B11A139B570DB4C2EAF3E68F9CAB086AC1B5F405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9d:af:bf:69:53:f2:ee:4e:34:06:f6:cc:45: 66:0a:74:31:ad:bc:c9:fb:c6:aa:95:53:27:c4:00: 10:61:fc:c9:88:c5:4e:31:ac:01:8a:b8:04:0c:af: b0:ca:a2:89:2c:09:6d:3d:78:78:8c:61:6e:c6:1a: c8:1c:de:59:f8:df:d3:40:fe:00:87:65:da:29:15: c9:f3:73:c4:c7:b8:b1:bf:ff:f5:35:59:95:e4:ae: 20:cc:f9:ca:aa:ca:23:c0:c8:b9:5c:5d:e0:71:ad: 29:c5:81:2c:c7:77:e0:3f:99:39:b6:0f:48:a8:17: ed:e2:c2:07:64:ae:d8:c8:49:79:44:7e:db:2b:34: 4e:cc:bb:79:f8:4a:8e:0d:53:d1:25:89:92:84:c1: ca:e6:46:07:0d:2b:23:3d:2f:db:e2:1f:dc:9e:02: 65:6a:1d:35:27:0d:aa:2a:f6:2f:b7:76:5a:83:17: f8:3d:8e:01:a3:a8:cc:d9:8d:af:03:3b:21:37:cd: f3:db:a8:4f:f6:50:ea:cc:58:58:a1:5a:c3:04:d0: c7:97:d0:28:6d:b1:f4:0c:0a:bb:4e:75:ef:69:6e: b4:4c:4f:8c:67:71:dc:b9:da:0b:18:12:9e:42:ab: 71:01:44:0d:14:50:dd:79:69:6e:68:2b:0d:d8:fb: 7d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1A:13:9B:57:0D:B4:C2:EA:F3:E6:8F:9C:AB:08:6A:C1:B5:F4:05 X509v3 Authority Key Identifier: keyid:DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:63:1a:fc:0f:a0:24:72:42:84:d5:43:56:f0:74:5f:09:62: 25:42:90:b8:e7:a4:21:26:23:f1:d8:22:a9:6d:cb:cd:eb:21: ac:ea:92:dd:06:4f:72:c9:ed:b4:de:99:2b:9b:20:40:d3:3b: 7f:9a:99:9f:8b:f2:97:3d:e1:91:81:e7:48:f4:54:51:97:29: ea:24:10:78:a1:6b:66:53:1f:f8:7b:f0:31:ab:b5:10:ce:3a: 10:fd:39:0e:c7:5c:a7:58:33:72:d0:56:77:3e:aa:3c:b2:55: 5e:bd:12:d5:7c:05:d6:8c:95:0c:76:6b:d8:3a:40:87:d7:de: 94:49:8a:d8:07:32:f3:dc:a8:99:5d:68:44:bf:0c:2f:17:e9: 83:9b:b5:01:b4:1e:35:4c:f8:f7:2a:26:7d:e8:f4:65:c2:b9: 05:86:8a:0a:65:c0:9a:9a:7a:34:bc:7c:bf:c8:da:c5:f2:0a: b0:eb:60:ec:d9:45:b1:5b:7d:b2:7e:5c:59:f1:ac:d6:33:fe: ea:6a:91:47:83:72:79:8f:84:c5:80:84:37:c2:7a:a4:f5:fd: 72:8f:2c:fe:51:d1:09:3b:b4:f6:3a:eb:a7:7a:35:13:87:d1: b7:ad:6c:7b:a2:34:de:b8:91:32:f5:4e:50:e3:dd:7c:bb:df: c4:01:24:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMg97kMgn0bdj665I02OYV2jXMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFQzA3MkE5Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYxRDkw NzkyQzRCQTAeFw0yNjExMTAxMjU3MjhaFw0yNjExMTExMzUxMjhaMDMxMTAvBgNV BAMTKEIxMUExMzlCNTcwREI0QzJFQUYzRTY4RjlDQUIwODZBQzFCNUY0MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIna+/aVPy7k40BvbMRWYKdDGt vMn7xqqVUyfEABBh/MmIxU4xrAGKuAQMr7DKooksCW09eHiMYW7GGsgc3ln439NA /gCHZdopFcnzc8THuLG///U1WZXkriDM+cqqyiPAyLlcXeBxrSnFgSzHd+A/mTm2 D0ioF+3iwgdkrtjISXlEftsrNE7Mu3n4So4NU9EliZKEwcrmRgcNKyM9L9viH9ye AmVqHTUnDaoq9i+3dlqDF/g9jgGjqMzZja8DOyE3zfPbqE/2UOrMWFihWsME0MeX 0ChtsfQMCrtOde9pbrRMT4xncdy52gsYEp5Cq3EBRA0UUN15aW5oKw3Y+32JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsRoTm1cNtMLq8+aPnKsIasG19AUwHwYDVR0j BBgwFoAU3ewHKpJ3UdzItpRMpGDx2QeSxLowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY1ZmE1NGQtMjQ4ZS00MjNjLTllNDktZDZlNmJmYmJmNzhiLzAvRERFQzA3MkE5 Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYxRDkwNzkyQzRCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREVDMDcyQTkyNzc1MURDQzhCNjk0NENBNDYwRjFEOTA3OTJD NEJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY1ZmE1NGQtMjQ4ZS00MjNjLTll NDktZDZlNmJmYmJmNzhiLzAvRERFQzA3MkE5Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYx RDkwNzkyQzRCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1jGvwPoCRyQoTVQ1bwdF8JYiVCkLjnpCEm I/HYIqlty83rIazqkt0GT3LJ7bTemSubIEDTO3+amZ+L8pc94ZGB50j0VFGXKeok EHiha2ZTH/h78DGrtRDOOhD9OQ7HXKdYM3LQVnc+qjyyVV69EtV8BdaMlQx2a9g6 QIfX3pRJitgHMvPcqJldaES/DC8X6YObtQG0HjVM+PcqJn3o9GXCuQWGigplwJqa ejS8fL/I2sXyCrDrYOzZRbFbfbJ+XFnxrNYz/upqkUeDcnmPhMWAhDfCeqT1/XKP LP5R0Qk7tPY666d6NROH0betbHuiNN64kTL1TlDj3Xy738QBJAg= -----END CERTIFICATE-----Generated at Wed Nov 11 00:56:13 2026 by rpki-client