$ rpki-client -vvf rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft File: DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft (raw, json) Hash identifier: mY7sqIqJSzUjE4NEWFFeWzml2s3A5ye6B8e29JglPzM= Subject key identifier: FE:D2:0C:33:E2:32:1B:2E:D9:73:25:06:4D:1C:F4:A9:A9:34:0B:73 Authority key identifier: DD:C8:46:A2:41:57:1E:1F:CF:5D:F5:39:AD:EE:44:F9:B1:68:48:AC Certificate issuer: /CN=DDC846A241571E1FCF5DF539ADEE44F9B16848AC Certificate serial: 03563031D9F9BF6D639F04B4EBDE568DE20C097E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:34:56 +0000 Manifest this update: Tue 02 Jun 2026 16:29:56 +0000 Manifest next update: Wed 03 Jun 2026 18:27:56 +0000 Files and hashes: 1: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: a0hNIi6O+sVqt42fhC5LTpjPNLA3CmOlEpxa01bnEUs=) 2: DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl (hash: g7/XF1hYkSjjCX+vHkVLFQSbsim2NwF1Pk0dtK8Ak2A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 18:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:56:30:31:d9:f9:bf:6d:63:9f:04:b4:eb:de:56:8d:e2:0c:09:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC846A241571E1FCF5DF539ADEE44F9B16848AC Validity Not Before: Jun 2 16:29:56 2026 GMT Not After : Jun 3 18:27:56 2026 GMT Subject: CN=FED20C33E2321B2ED97325064D1CF4A9A9340B73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:39:09:9d:6a:d5:91:09:1e:33:36:05:58:af: 4b:ed:54:42:0e:8e:05:4c:d7:5b:aa:0f:80:39:65: 43:a1:5a:9d:ac:82:87:b9:d7:8e:b9:e0:46:47:15: 9c:ea:08:7f:bf:c8:86:bf:b4:b8:bb:03:4d:6b:f9: 3c:89:a0:2f:b8:e8:4b:7d:ff:8d:ca:01:2d:fd:30: bc:9c:72:91:b4:bd:7b:86:71:07:18:37:03:20:f3: 4e:f2:88:96:27:d8:f7:10:35:de:c2:7c:b7:fb:62: 27:0e:88:ef:00:e5:c0:69:9f:2d:01:20:92:05:c5: b0:2c:23:ec:64:f2:7d:e0:2c:59:51:1e:8a:14:c9: 62:1d:b5:a0:68:e8:cc:e3:7c:58:24:60:bb:6c:81: b2:94:b2:cb:5c:e1:18:03:91:1e:69:3c:de:b9:5d: c0:97:42:9d:63:d1:48:b7:14:f0:3b:65:d7:e9:5c: 3c:c6:53:97:61:72:04:60:d4:8b:00:0d:1e:34:cf: 75:ac:bf:1e:3b:ae:39:3a:ce:a2:bf:64:20:ee:a0: 88:df:4f:99:2a:43:c7:38:39:3e:ca:97:22:c8:31: 70:6f:f3:c3:7d:2e:95:41:89:48:34:82:89:6b:ec: 27:40:f4:5f:8c:36:08:84:39:17:0e:50:a5:da:b5: b3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D2:0C:33:E2:32:1B:2E:D9:73:25:06:4D:1C:F4:A9:A9:34:0B:73 X509v3 Authority Key Identifier: keyid:DD:C8:46:A2:41:57:1E:1F:CF:5D:F5:39:AD:EE:44:F9:B1:68:48:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:76:03:f8:a4:35:54:59:f1:d4:2f:cd:cf:fd:f1:f8:85:b9: 1f:c6:e2:84:3c:52:4e:7b:49:1e:9b:fe:32:a9:78:8e:01:cd: c7:96:84:10:7d:bb:27:19:a8:a9:a9:b6:5c:60:56:fd:81:ec: b5:0d:27:23:2f:22:f7:78:61:9f:11:db:dd:81:9a:64:04:53: a4:63:f4:34:ae:3c:0f:75:02:bb:90:23:c9:3f:79:c9:df:6c: 21:cd:62:34:f8:38:45:b7:a4:cc:5b:75:11:b9:05:4f:11:17: 94:85:90:a5:61:2f:ad:23:98:a6:5a:f1:f8:8a:6c:0d:80:23: ca:e0:31:cc:1d:16:b5:5c:a1:42:24:01:8f:b8:78:18:75:e1: 74:8f:d9:05:8d:84:2c:ef:e2:bb:90:e2:13:48:b3:49:c3:f1: 5c:b8:22:bd:0b:23:06:58:cc:f3:98:bc:ad:53:98:45:84:35: f9:22:e0:2c:c3:33:c4:ad:5f:ed:26:83:99:9c:ae:cd:79:3f: 4f:cc:db:9c:2c:cd:b3:a3:60:e0:91:64:73:b0:bb:ec:dc:33: be:39:21:1a:7a:83:90:90:eb:57:73:21:72:0a:3b:e5:12:5b: 32:d9:01:7a:93:85:a7:9e:e4:eb:81:0f:5b:3e:76:17:d1:eb: d3:2a:1f:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA1YwMdn5v21jnwS0695WjeIMCX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDODQ2QTI0MTU3MUUxRkNGNURGNTM5QURFRTQ0RjlC MTY4NDhBQzAeFw0yNjA2MDIxNjI5NTZaFw0yNjA2MDMxODI3NTZaMDMxMTAvBgNV BAMTKEZFRDIwQzMzRTIzMjFCMkVEOTczMjUwNjREMUNGNEE5QTkzNDBCNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJOQmdatWRCR4zNgVYr0vtVEIO jgVM11uqD4A5ZUOhWp2sgoe514654EZHFZzqCH+/yIa/tLi7A01r+TyJoC+46Et9 /43KAS39MLyccpG0vXuGcQcYNwMg807yiJYn2PcQNd7CfLf7YicOiO8A5cBpny0B IJIFxbAsI+xk8n3gLFlRHooUyWIdtaBo6MzjfFgkYLtsgbKUsstc4RgDkR5pPN65 XcCXQp1j0Ui3FPA7ZdfpXDzGU5dhcgRg1IsADR40z3Wsvx47rjk6zqK/ZCDuoIjf T5kqQ8c4OT7KlyLIMXBv88N9LpVBiUg0golr7CdA9F+MNgiEORcOUKXatbNtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/tIMM+IyGy7ZcyUGTRz0qak0C3MwHwYDVR0j BBgwFoAU3chGokFXHh/PXfU5re5E+bFoSKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYmRkYmYtZDExOS00YzgwLTg4MjctN2E4ODhhOTNjZTAzLzAvRERDODQ2QTI0 MTU3MUUxRkNGNURGNTM5QURFRTQ0RjlCMTY4NDhBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREM4NDZBMjQxNTcxRTFGQ0Y1REY1MzlBREVFNDRGOUIxNjg0 OEFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvRERDODQ2QTI0MTU3MUUxRkNGNURGNTM5QURFRTQ0 RjlCMTY4NDhBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA12A/ikNVRZ8dQvzc/98fiFuR/G4oQ8Uk57 SR6b/jKpeI4BzceWhBB9uycZqKmptlxgVv2B7LUNJyMvIvd4YZ8R292BmmQEU6Rj 9DSuPA91AruQI8k/ecnfbCHNYjT4OEW3pMxbdRG5BU8RF5SFkKVhL60jmKZa8fiK bA2AI8rgMcwdFrVcoUIkAY+4eBh14XSP2QWNhCzv4ruQ4hNIs0nD8Vy4Ir0LIwZY zPOYvK1TmEWENfki4CzDM8StX+0mg5mcrs15P0/M25wszbOjYOCRZHOwu+zcM745 IRp6g5CQ61dzIXIKO+USWzLZAXqThaee5OuBD1s+dhfR69MqH0Q= -----END CERTIFICATE-----Generated at Wed Jun 3 04:26:22 2026 by rpki-client