$ rpki-client -vvf rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft File: DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft (raw, json) Hash identifier: 3QAZNpzy2LBEYvS3s6E8n3Rqq3V2ud1UBxxjHD94PBE= Subject key identifier: B4:F9:0D:F3:9B:94:73:12:E1:18:43:DE:74:DF:1D:77:A9:12:EA:0A Authority key identifier: DD:C8:46:A2:41:57:1E:1F:CF:5D:F5:39:AD:EE:44:F9:B1:68:48:AC Certificate issuer: /CN=DDC846A241571E1FCF5DF539ADEE44F9B16848AC Certificate serial: 6C03E8DC3E9EEF41A781402DBC928F260D5DFDAB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 05:12:12 +0000 Manifest this update: Tue 21 Jul 2026 05:07:12 +0000 Manifest next update: Wed 22 Jul 2026 07:38:12 +0000 Files and hashes: 1: DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl (hash: V+Rp9r3mOwZbfd75cQbspeZCII6p8tEVxHt9JY93lzU=) 2: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: a0hNIi6O+sVqt42fhC5LTpjPNLA3CmOlEpxa01bnEUs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:03:e8:dc:3e:9e:ef:41:a7:81:40:2d:bc:92:8f:26:0d:5d:fd:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC846A241571E1FCF5DF539ADEE44F9B16848AC Validity Not Before: Jul 21 05:07:12 2026 GMT Not After : Jul 22 07:38:12 2026 GMT Subject: CN=B4F90DF39B947312E11843DE74DF1D77A912EA0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:c5:ea:a1:4a:a6:bd:dc:31:cf:03:cf:7a: 44:76:dc:ba:e1:59:51:6b:81:33:c6:80:93:ed:41: 51:8b:e5:fd:7b:20:fa:cf:9a:de:3f:db:c0:ad:52: ea:3d:2f:12:79:b7:c1:1a:c6:94:25:86:70:cb:2c: 08:2d:1b:1f:ac:84:0a:e5:bb:d3:e2:d4:5e:e3:16: 03:91:7a:fd:ca:64:86:b5:de:5f:31:08:11:c5:05: ed:ec:ec:a7:f5:96:62:61:6d:7b:5d:c1:11:e6:94: 74:ea:7a:03:7b:a8:b3:c2:c6:8d:16:1f:55:a4:44: 24:6a:89:9c:6c:e0:76:fe:a7:40:11:d4:04:cb:45: ee:5d:30:fd:c5:13:ba:39:a8:06:91:64:e2:96:24: 4d:31:d9:03:5b:21:d5:c1:82:98:17:db:1a:94:92: 12:bd:e7:36:93:e8:84:6f:83:64:7a:f1:42:7d:53: 0e:e7:22:65:cd:94:85:5b:1c:40:9e:df:09:68:e2: 26:21:3e:44:7d:f0:77:8f:37:6d:88:4a:59:b1:8e: 37:56:85:f5:38:f4:d7:78:fe:e9:1f:b1:1f:41:1c: 7b:3e:de:1b:0b:43:9a:31:1b:ed:9a:9e:94:14:84: f5:6c:06:3d:b5:a0:47:95:f0:f8:fe:d3:3e:c4:cc: f5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F9:0D:F3:9B:94:73:12:E1:18:43:DE:74:DF:1D:77:A9:12:EA:0A X509v3 Authority Key Identifier: keyid:DD:C8:46:A2:41:57:1E:1F:CF:5D:F5:39:AD:EE:44:F9:B1:68:48:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:74:fd:59:70:0f:6c:e9:6b:71:f5:91:32:0b:ef:25:c8:03: 61:8b:26:2d:85:7a:be:b8:58:bd:7f:cd:72:0b:6a:8e:46:e0: 94:6b:c8:f5:f7:23:a1:df:c6:98:be:d7:6b:03:d6:21:ae:5f: 32:c9:d5:2c:a6:65:3a:6a:a7:d0:f7:22:d6:26:ac:a2:f0:0e: 6f:76:7f:7a:53:d3:33:0e:75:e0:ea:93:ac:60:78:af:6c:c8: c6:08:35:3b:aa:11:f5:08:20:8f:6b:4a:fe:29:33:66:3e:85: 45:43:14:80:50:d7:b7:a4:59:e4:93:74:65:62:d6:e3:ba:f5: 11:04:f6:48:53:f4:2a:ed:71:53:8e:97:8b:3e:91:63:42:4f: ee:75:48:46:67:6e:6d:f7:11:e5:dd:4d:3e:bc:28:48:a1:c0: ac:2f:e2:fa:e6:8c:d1:da:10:52:98:4a:06:56:fe:3a:1a:6c: b7:fc:04:c7:a5:9b:22:a4:73:30:42:92:94:a3:8d:d1:cd:2f: 00:fd:ed:eb:64:15:16:a3:c2:f9:1d:72:90:6c:7b:d4:d0:1d: cd:2b:b4:34:5d:6f:1f:6f:32:9f:cc:69:32:88:b4:b3:45:b3: 38:78:d8:66:c7:c2:84:71:69:2d:64:fb:88:c7:ad:f3:12:e5: e5:10:f2:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbAPo3D6e70GngUAtvJKPJg1d/aswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDODQ2QTI0MTU3MUUxRkNGNURGNTM5QURFRTQ0RjlC MTY4NDhBQzAeFw0yNjA3MjEwNTA3MTJaFw0yNjA3MjIwNzM4MTJaMDMxMTAvBgNV BAMTKEI0RjkwREYzOUI5NDczMTJFMTE4NDNERTc0REYxRDc3QTkxMkVBMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6icXqoUqmvdwxzwPPekR23Lrh WVFrgTPGgJPtQVGL5f17IPrPmt4/28CtUuo9LxJ5t8EaxpQlhnDLLAgtGx+shArl u9Pi1F7jFgORev3KZIa13l8xCBHFBe3s7Kf1lmJhbXtdwRHmlHTqegN7qLPCxo0W H1WkRCRqiZxs4Hb+p0AR1ATLRe5dMP3FE7o5qAaRZOKWJE0x2QNbIdXBgpgX2xqU khK95zaT6IRvg2R68UJ9Uw7nImXNlIVbHECe3wlo4iYhPkR98HePN22ISlmxjjdW hfU49Nd4/ukfsR9BHHs+3hsLQ5oxG+2anpQUhPVsBj21oEeV8Pj+0z7EzPXTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtPkN85uUcxLhGEPedN8dd6kS6gowHwYDVR0j BBgwFoAU3chGokFXHh/PXfU5re5E+bFoSKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYmRkYmYtZDExOS00YzgwLTg4MjctN2E4ODhhOTNjZTAzLzAvRERDODQ2QTI0 MTU3MUUxRkNGNURGNTM5QURFRTQ0RjlCMTY4NDhBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREM4NDZBMjQxNTcxRTFGQ0Y1REY1MzlBREVFNDRGOUIxNjg0 OEFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvRERDODQ2QTI0MTU3MUUxRkNGNURGNTM5QURFRTQ0 RjlCMTY4NDhBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZ0/VlwD2zpa3H1kTIL7yXIA2GLJi2Fer64 WL1/zXILao5G4JRryPX3I6Hfxpi+12sD1iGuXzLJ1SymZTpqp9D3ItYmrKLwDm92 f3pT0zMOdeDqk6xgeK9syMYINTuqEfUIII9rSv4pM2Y+hUVDFIBQ17ekWeSTdGVi 1uO69REE9khT9CrtcVOOl4s+kWNCT+51SEZnbm33EeXdTT68KEihwKwv4vrmjNHa EFKYSgZW/joabLf8BMelmyKkczBCkpSjjdHNLwD97etkFRajwvkdcpBse9TQHc0r tDRdbx9vMp/MaTKItLNFszh42GbHwoRxaS1k+4jHrfMS5eUQ8pg= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:18 2026 by rpki-client