$ rpki-client -vvf rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft File: DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft (raw, json) Hash identifier: QGTmxVrWPqo0qrir+05OBKzO4/f8L060kr2UtmCUe2o= Subject key identifier: 9C:36:AA:95:FE:A4:F8:E8:5D:14:F6:70:45:B3:9A:2D:CD:38:27:08 Authority key identifier: DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA Certificate issuer: /CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA Certificate serial: 325E533825B22E96E40BDD62138F3E46C60A8830 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:46:07 +0000 Manifest this update: Wed 17 Jun 2026 02:41:07 +0000 Manifest next update: Thu 18 Jun 2026 03:47:07 +0000 Files and hashes: 1: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (hash: /I/1xW7rsK7gJcZw8w0G3A5/hDeO0oqDDXrZo6p7Qtc=) 2: DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl (hash: 8ij7MR3r7nvooc2i5TIIqHVXaM0Hnz9C8SZiAbTSLCE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:5e:53:38:25:b2:2e:96:e4:0b:dd:62:13:8f:3e:46:c6:0a:88:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA Validity Not Before: Jun 17 02:41:07 2026 GMT Not After : Jun 18 03:47:07 2026 GMT Subject: CN=9C36AA95FEA4F8E85D14F67045B39A2DCD382708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:41:5c:db:e4:16:c7:dc:2d:9d:7c:de:a4: 41:62:53:63:e9:18:d6:ef:84:39:e0:ae:81:fa:45: 7a:1c:fe:d3:39:9d:35:f9:e6:3c:2d:3e:25:32:47: d6:3a:35:3f:96:d8:28:29:4c:a8:1d:9b:e9:50:fe: 34:ed:e8:e2:9f:c6:bd:0d:e7:1e:5c:89:2e:0e:8d: 80:f8:f9:6e:e0:db:1d:ac:cf:d8:36:c3:49:9b:37: bd:76:a8:bc:56:da:11:23:e6:d6:e9:7c:9b:1f:c5: 98:a7:2d:cf:a7:e5:21:6d:ca:06:0d:77:6b:fb:6e: e0:aa:e5:36:a4:ac:83:5d:d7:84:3b:fc:c6:7f:24: ae:6b:4b:92:07:70:b4:9f:4a:70:a4:95:1e:44:18: 43:d9:fa:4a:88:8f:66:a9:cd:c3:f9:3f:81:0a:c5: 76:84:d1:04:93:f0:e0:ff:10:62:89:84:1a:ef:87: 74:85:83:92:02:9a:89:ba:df:db:9b:67:35:8b:2d: 8d:d6:80:52:80:1d:a7:a8:c6:da:9f:64:e2:b5:9a: 20:b2:d3:ca:1b:61:64:1e:13:03:49:4f:14:cb:bc: 14:dc:f7:6c:c3:a7:be:c8:0c:9b:7e:44:41:7e:a1: 2b:ef:ea:50:6d:41:c3:a9:d0:3f:49:75:c5:49:dc: 9b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:36:AA:95:FE:A4:F8:E8:5D:14:F6:70:45:B3:9A:2D:CD:38:27:08 X509v3 Authority Key Identifier: keyid:DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:5c:b5:83:f8:f4:3e:07:5c:b9:e4:37:fe:8d:42:ef:71:8c: 53:0d:89:ae:44:ed:fd:49:69:00:66:8d:a4:60:4e:b5:f0:6b: 17:a0:29:dc:d1:a6:1e:d9:8d:bf:41:62:46:d5:3c:0a:7c:14: 62:68:be:a6:70:38:98:60:ff:ae:97:8a:7b:a5:8f:d4:8a:d5: c5:c5:e7:13:f3:54:1e:95:4b:15:66:81:03:6e:b6:dc:b4:63: 09:a3:02:e2:69:39:b7:c6:47:1f:ef:dd:59:ee:9c:80:57:05: b2:48:27:c1:c1:17:e7:b2:6c:de:5a:c3:57:1c:b9:ac:2f:66: d3:2d:e2:36:a1:fc:d1:7d:7b:09:ee:df:13:f4:0c:e3:9e:34: 5b:02:67:13:b6:33:6c:7e:bb:7d:ee:e2:95:dc:8e:a8:0e:a0: f5:68:2d:10:8c:0f:36:7f:b0:ce:57:80:0f:90:82:fe:52:99: b7:e3:cc:37:f6:20:c2:a0:92:d2:b0:e4:d9:4d:81:93:75:6f: d8:b7:c0:a3:e4:18:b6:02:c6:b5:ca:18:54:49:2f:21:e4:30: 1a:ec:00:a7:f8:fc:1c:3a:ce:20:8f:87:95:81:73:8b:5c:98: d7:82:ac:4d:ec:00:03:a6:c0:29:d2:05:77:e0:10:1b:a1:fb: ef:36:cd:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMl5TOCWyLpbkC91iE48+RsYKiDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFQzA3MkE5Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYxRDkw NzkyQzRCQTAeFw0yNjA2MTcwMjQxMDdaFw0yNjA2MTgwMzQ3MDdaMDMxMTAvBgNV BAMTKDlDMzZBQTk1RkVBNEY4RTg1RDE0RjY3MDQ1QjM5QTJEQ0QzODI3MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5mkFc2+QWx9wtnXzepEFiU2Pp GNbvhDngroH6RXoc/tM5nTX55jwtPiUyR9Y6NT+W2CgpTKgdm+lQ/jTt6OKfxr0N 5x5ciS4OjYD4+W7g2x2sz9g2w0mbN712qLxW2hEj5tbpfJsfxZinLc+n5SFtygYN d2v7buCq5TakrINd14Q7/MZ/JK5rS5IHcLSfSnCklR5EGEPZ+kqIj2apzcP5P4EK xXaE0QST8OD/EGKJhBrvh3SFg5ICmom639ubZzWLLY3WgFKAHaeoxtqfZOK1miCy 08obYWQeEwNJTxTLvBTc92zDp77IDJt+REF+oSvv6lBtQcOp0D9JdcVJ3JtHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnDaqlf6k+OhdFPZwRbOaLc04JwgwHwYDVR0j BBgwFoAU3ewHKpJ3UdzItpRMpGDx2QeSxLowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY1ZmE1NGQtMjQ4ZS00MjNjLTllNDktZDZlNmJmYmJmNzhiLzAvRERFQzA3MkE5 Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYxRDkwNzkyQzRCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREVDMDcyQTkyNzc1MURDQzhCNjk0NENBNDYwRjFEOTA3OTJD NEJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY1ZmE1NGQtMjQ4ZS00MjNjLTll NDktZDZlNmJmYmJmNzhiLzAvRERFQzA3MkE5Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYx RDkwNzkyQzRCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpctYP49D4HXLnkN/6NQu9xjFMNia5E7f1J aQBmjaRgTrXwaxegKdzRph7Zjb9BYkbVPAp8FGJovqZwOJhg/66Xinulj9SK1cXF 5xPzVB6VSxVmgQNutty0YwmjAuJpObfGRx/v3VnunIBXBbJIJ8HBF+eybN5aw1cc uawvZtMt4jah/NF9ewnu3xP0DOOeNFsCZxO2M2x+u33u4pXcjqgOoPVoLRCMDzZ/ sM5XgA+Qgv5SmbfjzDf2IMKgktKw5NlNgZN1b9i3wKPkGLYCxrXKGFRJLyHkMBrs AKf4/Bw6ziCPh5WBc4tcmNeCrE3sAAOmwCnSBXfgEBuh++82zSc= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:52 2026 by rpki-client