$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft File: DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft (raw, json) Hash identifier: Xmbqh5AwQpz9aKrXHX9knjaEoV77E+QcuotOceSgIvE= Subject key identifier: E5:E3:0A:06:37:5B:56:C1:1D:35:4C:55:4E:BA:25:79:EB:5B:23:18 Authority key identifier: DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 Certificate issuer: /CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Certificate serial: 4BB4DD187096A295D344DFAD70095A8BBF17FDF4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 19:06:18 +0000 Manifest this update: Wed 02 Sep 2026 19:01:18 +0000 Manifest next update: Thu 03 Sep 2026 20:46:18 +0000 Files and hashes: 1: DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl (hash: dHsRRDs7S5AbMRtm8qhCDC1v7FF41+E5aHDipADIydk=) 2: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: 3vdIVahG9RTfTLGTYsntjI3pmo9GulTq1yl7EBwWw9o=) 3: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: R2z9xaNaKZrL0Q1BTZoKmFOdkM+GucNCILqEsv6GHto=) 4: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: dYhK+jkniChfhicgSum73AYH3pvJ3PQYc3HjtlYfQRE=) 5: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: /ucuML0e+8NVeub1h81o1HfhxHTujbKLgWAANxTlJqo=) 6: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: yIQlqFtzEyBabQj8ZV+fU4FgzaMPkBblM9AQE0hk6TU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 20:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b4:dd:18:70:96:a2:95:d3:44:df:ad:70:09:5a:8b:bf:17:fd:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Validity Not Before: Sep 2 19:01:18 2026 GMT Not After : Sep 3 20:46:18 2026 GMT Subject: CN=E5E30A06375B56C11D354C554EBA2579EB5B2318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e6:d9:52:49:39:05:1b:11:8c:16:ae:3c:be: 1d:67:76:ec:da:63:8b:e1:af:df:a7:af:88:09:77: 0e:5a:ca:7d:ee:e3:b9:3b:94:8b:b5:46:98:7f:86: 0c:1a:45:94:fd:36:2e:a8:fc:03:6f:eb:0d:6a:81: d7:68:4b:38:7c:35:80:9e:b4:16:49:e9:6d:48:68: e1:b3:3b:35:26:3f:aa:ef:48:63:2e:7d:e6:d1:ed: 99:b8:ed:34:f8:9a:3c:26:16:af:f2:a9:f6:a8:f8: 73:b1:f1:0e:dc:ec:50:f4:d9:8f:87:21:41:58:85: 53:cc:49:9a:2b:99:b4:4c:26:80:b8:b5:ba:c0:97: 39:19:0d:17:9d:82:cc:f7:2a:c5:2c:59:c0:24:d5: b2:c6:2a:80:02:e0:9b:2c:36:d3:ef:48:28:c5:24: 28:cd:51:aa:01:95:5c:cc:76:c1:21:fd:70:db:fa: 73:06:25:58:87:f9:9f:35:dd:28:0c:a8:fa:fa:02: 93:f0:6a:95:8c:18:05:83:c3:14:57:77:e7:82:71: 2e:53:c7:ac:e6:71:29:f3:45:95:55:38:df:bf:0f: 0d:26:fb:f5:b8:44:47:13:10:5a:dd:00:27:35:75: b0:b0:7e:91:d8:7d:35:76:d5:5c:90:bd:1b:c6:2c: 3f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E3:0A:06:37:5B:56:C1:1D:35:4C:55:4E:BA:25:79:EB:5B:23:18 X509v3 Authority Key Identifier: keyid:DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:03:6c:84:b0:76:45:ad:dd:e5:a8:96:a1:48:04:8f:9b:27: f6:c1:84:eb:c5:92:4f:c0:6d:49:62:cb:fe:55:ff:52:a6:4d: 5a:53:93:7c:aa:9f:94:04:ba:6d:e6:aa:58:10:b3:e0:19:73: c7:f6:04:80:07:2c:8a:0d:e7:ad:23:fd:ec:03:d2:7d:2e:fc: ff:38:5b:3d:50:4a:a1:2c:cf:64:41:cf:e6:ff:74:a9:2e:5b: d0:b8:79:fb:0a:b2:00:cf:c0:ad:55:b0:6d:9f:07:ef:37:44: 53:e0:39:ad:b8:34:34:6d:8d:e6:45:1f:cc:af:28:05:c0:79: da:67:c1:39:b2:19:b1:b4:38:bf:b0:62:2d:51:09:85:ca:b4: c2:f5:45:d1:ea:ea:27:d8:0b:b6:45:28:0d:d7:76:62:f9:c9: dc:46:9e:e3:24:7a:c3:54:7e:a1:0e:22:27:65:59:ab:45:ce: 0a:21:61:7d:81:63:cb:0e:ee:13:8a:cc:ab:f3:fb:42:e8:21: 9e:f2:d1:ee:04:cd:40:51:7b:19:c9:93:97:f1:84:4a:74:39: 14:02:55:ab:f5:9b:68:02:9d:cc:4c:48:94:c3:e6:c0:78:69: a6:ba:6d:48:38:e8:51:40:06:29:16:76:f4:f2:c6:97:6f:ed: 79:a5:df:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7TdGHCWopXTRN+tcAlai78X/fQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCRTU4OUU2QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4 OUE4M0JGMDAeFw0yNjA5MDIxOTAxMThaFw0yNjA5MDMyMDQ2MThaMDMxMTAvBgNV BAMTKEU1RTMwQTA2Mzc1QjU2QzExRDM1NEM1NTRFQkEyNTc5RUI1QjIzMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp5tlSSTkFGxGMFq48vh1nduza Y4vhr9+nr4gJdw5ayn3u47k7lIu1Rph/hgwaRZT9Ni6o/ANv6w1qgddoSzh8NYCe tBZJ6W1IaOGzOzUmP6rvSGMufebR7Zm47TT4mjwmFq/yqfao+HOx8Q7c7FD02Y+H IUFYhVPMSZormbRMJoC4tbrAlzkZDRedgsz3KsUsWcAk1bLGKoAC4JssNtPvSCjF JCjNUaoBlVzMdsEh/XDb+nMGJViH+Z813SgMqPr6ApPwapWMGAWDwxRXd+eCcS5T x6zmcSnzRZVVON+/Dw0m+/W4REcTEFrdACc1dbCwfpHYfTV21VyQvRvGLD9tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5eMKBjdbVsEdNUxVTroleetbIxgwHwYDVR0j BBgwFoAU3b5YnmoCty2DCGs/VpfatomoO/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmFlN2Q0NjEtMGUzMi00ZTY1LWJiODgtZDcyNDA1YjI0NDUxLzAvRERCRTU4OUU2 QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4OUE4M0JGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREJFNTg5RTZBMDJCNzJEODMwODZCM0Y1Njk3REFCNjg5QTgz QkYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvRERCRTU4OUU2QTAyQjcyRDgzMDg2QjNGNTY5N0RB QjY4OUE4M0JGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwDbISwdkWt3eWolqFIBI+bJ/bBhOvFkk/A bUliy/5V/1KmTVpTk3yqn5QEum3mqlgQs+AZc8f2BIAHLIoN560j/ewD0n0u/P84 Wz1QSqEsz2RBz+b/dKkuW9C4efsKsgDPwK1VsG2fB+83RFPgOa24NDRtjeZFH8yv KAXAedpnwTmyGbG0OL+wYi1RCYXKtML1RdHq6ifYC7ZFKA3XdmL5ydxGnuMkesNU fqEOIidlWatFzgohYX2BY8sO7hOKzKvz+0LoIZ7y0e4EzUBRexnJk5fxhEp0ORQC Vav1m2gCncxMSJTD5sB4aaa6bUg46FFABikWdvTyxpdv7Xml3zs= -----END CERTIFICATE-----Generated at Thu Sep 3 05:56:23 2026 by rpki-client