$ rpki-client -vvvf rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft File: DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft (raw, json) Hash identifier: RO16Yx51wKD6dsLkkfsObCQLLNlkAnK/IeegIczpp7I= Subject key identifier: 91:54:02:14:7C:62:05:06:E3:EC:A3:41:1A:B4:7E:0E:2F:3C:48:96 Authority key identifier: DD:34:AC:E6:27:4D:2C:13:A1:B4:23:EC:1A:9C:D7:5E:ED:F1:8D:24 Certificate issuer: /CN=DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24 Certificate serial: 4B543F785FC96B685FCF80F5D08DDBDABB974068 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft Manifest number: FF Signing time: Tue 10 Nov 2026 05:53:17 +0000 Manifest this update: Tue 10 Nov 2026 05:48:17 +0000 Manifest next update: Wed 11 Nov 2026 08:24:17 +0000 Files and hashes: 1: DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl (hash: 0w7PWzm8JYLU7kKCcJUeoHLpm5nmJVJ5nPKxWLoAt48=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:54:3f:78:5f:c9:6b:68:5f:cf:80:f5:d0:8d:db:da:bb:97:40:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24 Validity Not Before: Nov 10 05:48:17 2026 GMT Not After : Nov 11 08:24:17 2026 GMT Subject: CN=915402147C620506E3ECA3411AB47E0E2F3C4896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:8e:1a:4d:21:2b:53:75:15:6e:6a:7c:d3: dc:8e:a1:34:a7:78:9c:2a:0a:50:b3:dc:5c:9c:4b: 73:91:65:3d:74:bf:8b:81:16:d7:49:8d:59:50:a3: 0c:84:a3:a1:63:aa:e3:d2:f0:a4:9f:0d:22:3e:16: 40:f3:72:a5:9f:a1:b7:fe:3a:d0:90:7a:b9:d1:33: 25:25:11:64:9f:5c:14:a9:91:2f:7f:5c:81:a2:d6: 93:30:36:9b:0c:4b:09:21:f5:72:53:f8:a3:68:da: 82:4b:98:29:61:62:4e:f9:f1:af:56:d2:42:1f:22: c6:3b:77:9d:1a:12:e9:8d:75:f6:c3:cb:dc:db:52: 41:40:2c:6d:9b:1f:d9:9f:51:ca:09:ac:b1:47:75: 9f:7a:2b:dc:46:8f:0c:57:11:f2:91:67:36:c6:8e: cb:69:95:7f:87:e5:88:e9:dc:97:5e:d9:a4:6a:37: 72:9d:10:5a:35:2c:c8:c2:df:9e:0f:cc:5a:07:34: 35:fe:d7:e8:af:6b:f7:65:dc:f5:2a:be:c1:c1:1f: 08:ac:16:b2:f4:58:9c:c5:d9:c1:35:e2:0c:84:02: 5d:32:a7:be:57:eb:00:cf:04:41:22:4b:2e:94:09: 20:03:50:5f:38:d0:6e:79:0b:04:ee:e5:87:56:d3: ff:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:54:02:14:7C:62:05:06:E3:EC:A3:41:1A:B4:7E:0E:2F:3C:48:96 X509v3 Authority Key Identifier: keyid:DD:34:AC:E6:27:4D:2C:13:A1:B4:23:EC:1A:9C:D7:5E:ED:F1:8D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:4e:f1:63:8c:e1:00:c5:2b:08:a0:06:5d:95:2e:41:29:c0: c5:23:5b:35:9c:e7:d5:2d:d3:e4:02:de:52:38:7b:54:20:b3: 60:fb:08:86:68:f3:68:0d:52:c5:2c:7f:93:d1:b7:ec:6a:5a: 75:27:1d:5e:df:80:e5:83:65:53:cf:f5:e3:ab:1e:71:82:68: 1d:48:9e:fe:2c:e6:59:9f:08:de:2a:41:22:45:07:31:3c:d7: 14:ff:ee:e8:7c:ac:6c:b1:5b:fc:ad:22:f6:d3:3c:a7:71:73: 12:87:9e:bf:2f:02:98:ed:e7:e5:93:30:33:a6:7f:d3:36:cd: 00:df:e6:54:97:2e:d4:8b:39:76:3c:09:af:e4:b7:52:77:10: 15:46:7b:5d:43:44:fc:99:62:86:6d:59:62:37:77:67:d1:4f: cf:83:75:ca:e3:a7:71:fe:09:93:b6:b4:91:06:80:00:be:7a: d7:d4:c7:f5:dc:ac:fb:9d:bb:56:be:e1:9f:c7:7f:75:e0:ae: 74:2b:09:cf:27:a2:be:27:fa:b2:6d:16:6a:9e:ac:b6:2f:5a: 5e:34:9e:22:58:6e:25:37:6a:de:42:84:4d:70:6e:b4:0f:50: 27:19:04:6d:1d:33:25:c6:80:99:4a:8c:68:8b:d0:85:93:7b: 70:2c:1b:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS1Q/eF/Ja2hfz4D10I3b2ruXQGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQzNEFDRTYyNzREMkMxM0ExQjQyM0VDMUE5Q0Q3NUVF REYxOEQyNDAeFw0yNjExMTAwNTQ4MTdaFw0yNjExMTEwODI0MTdaMDMxMTAvBgNV BAMTKDkxNTQwMjE0N0M2MjA1MDZFM0VDQTM0MTFBQjQ3RTBFMkYzQzQ4OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3244aTSErU3UVbmp809yOoTSn eJwqClCz3FycS3ORZT10v4uBFtdJjVlQowyEo6FjquPS8KSfDSI+FkDzcqWfobf+ OtCQernRMyUlEWSfXBSpkS9/XIGi1pMwNpsMSwkh9XJT+KNo2oJLmClhYk758a9W 0kIfIsY7d50aEumNdfbDy9zbUkFALG2bH9mfUcoJrLFHdZ96K9xGjwxXEfKRZzbG jstplX+H5Yjp3Jde2aRqN3KdEFo1LMjC354PzFoHNDX+1+iva/dl3PUqvsHBHwis FrL0WJzF2cE14gyEAl0yp75X6wDPBEEiSy6UCSADUF840G55CwTu5YdW0/8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkVQCFHxiBQbj7KNBGrR+Di88SJYwHwYDVR0j BBgwFoAU3TSs5idNLBOhtCPsGpzXXu3xjSQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWZjYWYyN2QtNjRlOS00NzRiLWE3M2ItMzVhZGJlOWIyZjAxLzAvREQzNEFDRTYy NzREMkMxM0ExQjQyM0VDMUE5Q0Q3NUVFREYxOEQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDM0QUNFNjI3NEQyQzEzQTFCNDIzRUMxQTlDRDc1RUVERjE4 RDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvREQzNEFDRTYyNzREMkMxM0ExQjQyM0VDMUE5Q0Q3 NUVFREYxOEQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRO8WOM4QDFKwigBl2VLkEpwMUjWzWc59Ut 0+QC3lI4e1Qgs2D7CIZo82gNUsUsf5PRt+xqWnUnHV7fgOWDZVPP9eOrHnGCaB1I nv4s5lmfCN4qQSJFBzE81xT/7uh8rGyxW/ytIvbTPKdxcxKHnr8vApjt5+WTMDOm f9M2zQDf5lSXLtSLOXY8Ca/kt1J3EBVGe11DRPyZYoZtWWI3d2fRT8+Ddcrjp3H+ CZO2tJEGgAC+etfUx/XcrPudu1a+4Z/Hf3XgrnQrCc8nor4n+rJtFmqerLYvWl40 niJYbiU3at5ChE1wbrQPUCcZBG0dMyXGgJlKjGiL0IWTe3AsG6c= -----END CERTIFICATE-----Generated at Tue Nov 10 10:32:29 2026 by rpki-client