$ rpki-client -vvf rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft File: DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft (raw, json) Hash identifier: cJ3+iHf8YPV800lfVmhI4M3sgmI3MMXG6bhPwUmPw6M= Subject key identifier: 28:26:01:B4:4A:20:F5:A9:7D:CA:02:03:46:4B:B8:0B:9D:B0:0D:8D Authority key identifier: DD:34:AC:E6:27:4D:2C:13:A1:B4:23:EC:1A:9C:D7:5E:ED:F1:8D:24 Certificate issuer: /CN=DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24 Certificate serial: 57D40FF67753DD1A4910E05EE2FD65A5C213547C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 00:33:40 +0000 Manifest this update: Wed 17 Jun 2026 00:28:40 +0000 Manifest next update: Thu 18 Jun 2026 02:04:40 +0000 Files and hashes: 1: DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl (hash: UGc+LCviLXYG69XiVUC5tzYJ4vn56dT2uZ+8tTMRE0Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d4:0f:f6:77:53:dd:1a:49:10:e0:5e:e2:fd:65:a5:c2:13:54:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24 Validity Not Before: Jun 17 00:28:40 2026 GMT Not After : Jun 18 02:04:40 2026 GMT Subject: CN=282601B44A20F5A97DCA0203464BB80B9DB00D8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:a3:ae:ca:9c:95:e0:85:a0:af:8d:32:c2: 00:25:ea:65:60:2b:ec:8a:89:13:b5:79:3b:7b:f6: 26:c0:d6:12:27:73:f9:75:6b:d2:dc:f3:49:ba:e4: a0:0f:2f:c5:4f:0e:cb:b7:3b:37:75:88:97:84:86: 9f:fe:19:73:0d:c5:85:5e:bd:d2:8b:6c:de:d7:fb: f9:f7:9d:56:6b:e5:e6:15:53:5f:e0:93:00:4d:87: a2:c3:40:62:85:51:f7:ad:3f:cb:f7:24:9c:21:1d: 7d:c0:3c:c6:46:bf:bf:35:81:1c:67:86:9c:ad:2b: 5d:77:7d:f6:72:1e:f1:8d:06:28:8a:23:70:18:0f: de:2d:fc:b2:ff:c4:53:04:cc:51:de:c7:89:93:82: fd:06:cc:9a:c9:70:1d:b1:79:34:2d:65:32:ec:ac: eb:72:4d:3f:94:03:46:ef:d7:e4:f2:f7:8b:53:cd: 74:c3:f7:c0:bd:9a:56:41:42:c6:7c:47:45:da:4e: 87:6c:0a:2b:3b:da:13:2e:74:c5:d5:e9:53:bd:fe: 27:f5:aa:05:98:98:cb:f2:a6:5c:ee:5b:a1:86:2f: 05:a8:1c:7b:2d:05:4b:97:09:9c:52:8a:b4:c1:f6: 21:c2:fa:1c:72:79:d5:80:65:b7:1d:ab:fb:d1:0c: 51:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:26:01:B4:4A:20:F5:A9:7D:CA:02:03:46:4B:B8:0B:9D:B0:0D:8D X509v3 Authority Key Identifier: keyid:DD:34:AC:E6:27:4D:2C:13:A1:B4:23:EC:1A:9C:D7:5E:ED:F1:8D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3c:9d:90:5f:9c:9e:96:15:e3:f9:1a:77:0e:14:f0:2e:19: 1c:50:fa:a0:10:ce:f1:43:90:c4:a6:33:82:17:74:7d:00:5d: 92:a0:c8:23:b0:f3:e3:c6:73:f9:05:3b:aa:20:e2:db:30:15: 84:93:64:ab:f6:0a:e1:b0:7a:94:81:e0:1b:07:e0:99:80:e0: a5:4e:d8:a9:2b:f8:ab:f7:3e:48:f0:6d:ee:65:09:c2:51:ea: 4d:25:6d:cb:69:49:ce:86:90:2b:32:be:81:c2:96:51:68:d1: 4c:04:e9:33:b0:96:7a:c1:2a:8e:bd:5a:d0:5b:e1:0e:ae:f8: 75:cc:d5:74:42:6a:39:8a:65:40:7d:2d:b8:67:5c:a0:07:09: 7f:fe:f5:5f:34:10:2b:7c:0c:7c:08:9d:c2:94:2b:6c:31:ee: 4c:bc:13:a8:a2:10:7a:63:94:59:04:26:95:78:a5:39:4b:1c: c5:b2:da:fc:6e:93:00:a7:0a:23:d5:fa:e0:c3:e8:0a:e2:e1: e9:75:5b:72:d5:e9:86:24:ad:bc:3c:0c:6f:9f:a7:50:4a:11: 89:b0:38:eb:15:68:2b:49:9a:f9:ca:a8:db:21:ac:33:54:c6: 6a:44:69:ff:c0:c1:91:5f:b4:67:dc:88:57:c6:60:66:a5:64: b5:bc:8b:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV9QP9ndT3RpJEOBe4v1lpcITVHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQzNEFDRTYyNzREMkMxM0ExQjQyM0VDMUE5Q0Q3NUVF REYxOEQyNDAeFw0yNjA2MTcwMDI4NDBaFw0yNjA2MTgwMjA0NDBaMDMxMTAvBgNV BAMTKDI4MjYwMUI0NEEyMEY1QTk3RENBMDIwMzQ2NEJCODBCOURCMDBEOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN4KOuypyV4IWgr40ywgAl6mVg K+yKiRO1eTt79ibA1hInc/l1a9Lc80m65KAPL8VPDsu3Ozd1iJeEhp/+GXMNxYVe vdKLbN7X+/n3nVZr5eYVU1/gkwBNh6LDQGKFUfetP8v3JJwhHX3APMZGv781gRxn hpytK113ffZyHvGNBiiKI3AYD94t/LL/xFMEzFHex4mTgv0GzJrJcB2xeTQtZTLs rOtyTT+UA0bv1+Ty94tTzXTD98C9mlZBQsZ8R0XaTodsCis72hMudMXV6VO9/if1 qgWYmMvyplzuW6GGLwWoHHstBUuXCZxSirTB9iHC+hxyedWAZbcdq/vRDFFVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKCYBtEog9al9ygIDRku4C52wDY0wHwYDVR0j BBgwFoAU3TSs5idNLBOhtCPsGpzXXu3xjSQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWZjYWYyN2QtNjRlOS00NzRiLWE3M2ItMzVhZGJlOWIyZjAxLzAvREQzNEFDRTYy NzREMkMxM0ExQjQyM0VDMUE5Q0Q3NUVFREYxOEQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDM0QUNFNjI3NEQyQzEzQTFCNDIzRUMxQTlDRDc1RUVERjE4 RDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvREQzNEFDRTYyNzREMkMxM0ExQjQyM0VDMUE5Q0Q3 NUVFREYxOEQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo8nZBfnJ6WFeP5GncOFPAuGRxQ+qAQzvFD kMSmM4IXdH0AXZKgyCOw8+PGc/kFO6og4tswFYSTZKv2CuGwepSB4BsH4JmA4KVO 2Kkr+Kv3Pkjwbe5lCcJR6k0lbctpSc6GkCsyvoHCllFo0UwE6TOwlnrBKo69WtBb 4Q6u+HXM1XRCajmKZUB9LbhnXKAHCX/+9V80ECt8DHwIncKUK2wx7ky8E6iiEHpj lFkEJpV4pTlLHMWy2vxukwCnCiPV+uDD6Ari4el1W3LV6YYkrbw8DG+fp1BKEYmw OOsVaCtJmvnKqNshrDNUxmpEaf/AwZFftGfciFfGYGalZLW8i1k= -----END CERTIFICATE-----Generated at Wed Jun 17 10:53:17 2026 by rpki-client