$ rpki-client -vvvf rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft File: DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft (raw, json) Hash identifier: H4fgeO2f7EkXSxRfUb/4DMX4GYbrUzF4Kc4S6QMBDXg= Subject key identifier: 83:35:CD:47:EF:47:47:7E:79:6F:75:95:DA:53:26:90:01:8A:B7:0E Authority key identifier: DD:34:AC:E6:27:4D:2C:13:A1:B4:23:EC:1A:9C:D7:5E:ED:F1:8D:24 Certificate issuer: /CN=DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24 Certificate serial: 0BF7D4FE9D6B0BE36EDF7748834A2771FAB18F3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft Manifest number: BD Signing time: Mon 21 Sep 2026 06:50:02 +0000 Manifest this update: Mon 21 Sep 2026 06:45:02 +0000 Manifest next update: Tue 22 Sep 2026 09:38:02 +0000 Files and hashes: 1: DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl (hash: na4NQc44vRkGKmwf1+wZ4ZuMXvM7WPKXKfaR0nDchpw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f7:d4:fe:9d:6b:0b:e3:6e:df:77:48:83:4a:27:71:fa:b1:8f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24 Validity Not Before: Sep 21 06:45:02 2026 GMT Not After : Sep 22 09:38:02 2026 GMT Subject: CN=8335CD47EF47477E796F7595DA532690018AB70E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4b:83:2b:d2:b7:09:6c:76:25:84:3c:0b:d7: ad:bd:18:79:fe:02:4e:9e:f7:2b:e9:73:6c:ea:a8: e6:bd:bd:db:cf:27:ac:45:5c:ff:49:b4:c2:a9:b1: be:bc:5d:c4:f4:28:fa:e8:b7:bb:a2:e4:8a:d5:d1: 5f:b2:65:24:3a:db:a2:03:db:ab:cf:b4:77:3d:da: 25:0b:da:15:01:79:c1:89:d1:61:01:af:c8:e3:9a: 22:50:72:af:66:a4:8a:f9:02:d8:e3:00:68:96:6a: 14:0b:4e:72:c2:46:a7:f5:41:87:b6:4d:68:cd:30: a6:54:1b:3b:4a:8f:78:98:2b:94:aa:12:bb:d4:75: bd:9b:8c:bb:6e:58:25:56:b1:bf:1a:83:03:de:4e: 52:11:6b:8c:de:2e:5c:88:5f:96:aa:e1:b8:30:53: f1:c0:47:16:fb:fd:f0:1d:01:7f:6c:33:6e:ab:7d: 23:62:27:d3:c4:c0:c6:48:52:c1:fd:90:75:ad:a2: e7:f0:c3:0d:a4:a7:c8:41:95:02:09:4d:ea:14:ea: 9d:ca:cf:6f:9e:c1:a8:a1:85:fe:e1:fd:f5:bd:78: 61:7a:0e:a6:8e:38:73:ab:ff:d5:51:ab:91:24:96: 35:70:ee:b0:e9:e0:a6:a5:67:94:7f:6c:41:b8:5b: 27:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:35:CD:47:EF:47:47:7E:79:6F:75:95:DA:53:26:90:01:8A:B7:0E X509v3 Authority Key Identifier: keyid:DD:34:AC:E6:27:4D:2C:13:A1:B4:23:EC:1A:9C:D7:5E:ED:F1:8D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:69:f9:99:91:b7:fb:54:44:6a:5f:31:87:61:6e:d5:d5:f7: 65:6f:01:55:e3:85:c5:23:68:0b:99:b5:96:96:c4:69:36:76: 45:95:07:f2:5c:0e:fd:2c:76:86:68:41:86:51:b0:ab:d2:49: eb:49:55:73:c2:61:4d:30:d2:20:56:6e:3d:34:67:a7:e2:ee: 7a:bb:58:4c:e2:da:1b:af:37:a7:eb:bf:7c:9c:7a:46:e7:5a: e4:f8:6e:1c:3a:a7:73:91:58:d8:f0:6d:52:04:cb:bf:93:87: 39:ff:b0:f5:aa:29:9d:f9:97:aa:e7:2c:f6:a6:73:5f:98:77: 83:c1:56:bb:42:ca:a4:0b:8c:23:b4:22:1a:14:92:29:0a:da: 10:e8:61:ea:7b:33:fd:0a:41:06:7a:d3:16:2b:ba:02:43:19: 6b:93:6a:39:e2:5d:04:6c:3d:e1:f7:a3:a0:57:ed:85:d1:11: fc:82:81:ea:1f:4a:75:b1:36:85:e5:80:67:bd:ae:fc:37:e3: 18:96:eb:4e:bb:6f:dd:1d:6d:ad:af:37:36:4b:e3:6b:76:85: ab:9f:8a:0a:e6:11:17:22:71:41:6d:5a:0e:34:09:e5:99:5b: 3c:d6:5f:39:3a:60:fc:3e:66:60:e7:43:e4:b7:82:e5:3a:c8: 11:47:46:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC/fU/p1rC+Nu33dIg0oncfqxjz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQzNEFDRTYyNzREMkMxM0ExQjQyM0VDMUE5Q0Q3NUVF REYxOEQyNDAeFw0yNjA5MjEwNjQ1MDJaFw0yNjA5MjIwOTM4MDJaMDMxMTAvBgNV BAMTKDgzMzVDRDQ3RUY0NzQ3N0U3OTZGNzU5NURBNTMyNjkwMDE4QUI3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtS4Mr0rcJbHYlhDwL1629GHn+ Ak6e9yvpc2zqqOa9vdvPJ6xFXP9JtMKpsb68XcT0KProt7ui5IrV0V+yZSQ626ID 26vPtHc92iUL2hUBecGJ0WEBr8jjmiJQcq9mpIr5AtjjAGiWahQLTnLCRqf1QYe2 TWjNMKZUGztKj3iYK5SqErvUdb2bjLtuWCVWsb8agwPeTlIRa4zeLlyIX5aq4bgw U/HARxb7/fAdAX9sM26rfSNiJ9PEwMZIUsH9kHWtoufwww2kp8hBlQIJTeoU6p3K z2+ewaihhf7h/fW9eGF6DqaOOHOr/9VRq5EkljVw7rDp4KalZ5R/bEG4WyfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgzXNR+9HR355b3WV2lMmkAGKtw4wHwYDVR0j BBgwFoAU3TSs5idNLBOhtCPsGpzXXu3xjSQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWZjYWYyN2QtNjRlOS00NzRiLWE3M2ItMzVhZGJlOWIyZjAxLzAvREQzNEFDRTYy NzREMkMxM0ExQjQyM0VDMUE5Q0Q3NUVFREYxOEQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDM0QUNFNjI3NEQyQzEzQTFCNDIzRUMxQTlDRDc1RUVERjE4 RDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvREQzNEFDRTYyNzREMkMxM0ExQjQyM0VDMUE5Q0Q3 NUVFREYxOEQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZp+ZmRt/tURGpfMYdhbtXV92VvAVXjhcUj aAuZtZaWxGk2dkWVB/JcDv0sdoZoQYZRsKvSSetJVXPCYU0w0iBWbj00Z6fi7nq7 WEzi2huvN6frv3ycekbnWuT4bhw6p3ORWNjwbVIEy7+Thzn/sPWqKZ35l6rnLPam c1+Yd4PBVrtCyqQLjCO0IhoUkikK2hDoYep7M/0KQQZ60xYrugJDGWuTajniXQRs PeH3o6BX7YXREfyCgeofSnWxNoXlgGe9rvw34xiW6067b90dba2vNzZL42t2hauf igrmERcicUFtWg40CeWZWzzWXzk6YPw+ZmDnQ+S3guU6yBFHRrk= -----END CERTIFICATE-----Generated at Mon Sep 21 13:17:16 2026 by rpki-client