$ rpki-client -vvvf rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft File: DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft (raw, json) Hash identifier: t1xsy2T0mth90qvQbHBvPFOnHMacBICET8emhl97JoA= Subject key identifier: C4:F9:2D:A9:C7:9A:36:21:74:5E:34:D5:DB:2D:08:8F:B5:A1:8A:A1 Authority key identifier: DD:DD:B3:9C:4F:26:5C:9D:4C:FC:C3:CB:FF:83:4B:12:F4:92:80:27 Certificate issuer: /CN=DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027 Certificate serial: 056CD28D518E946052D63615EB1A9F92042C37F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 23:42:29 +0000 Manifest this update: Wed 02 Sep 2026 23:37:29 +0000 Manifest next update: Fri 04 Sep 2026 00:09:29 +0000 Files and hashes: 1: DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl (hash: mq8dp2kAoIiXGbRyuAa86pgiE3sbRZ7MyxGvZwHX1TM=) 2: 3130332e3230352e36322e302f32332d3234203d3e20313530393932.roa (hash: 7auAs3JZetQc2Zih3zy94WvlM7s/oo6N4QlMSA+A3AA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:6c:d2:8d:51:8e:94:60:52:d6:36:15:eb:1a:9f:92:04:2c:37:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027 Validity Not Before: Sep 2 23:37:29 2026 GMT Not After : Sep 4 00:09:29 2026 GMT Subject: CN=C4F92DA9C79A3621745E34D5DB2D088FB5A18AA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:f7:50:ad:2e:c6:39:4d:5b:9c:df:02:81: 63:71:55:ff:5d:17:8e:09:15:e2:de:cf:49:6c:ac: 8a:ff:d5:98:0a:c6:65:17:3c:a7:1c:c8:f3:2c:5e: 0f:09:20:8a:0f:87:2f:23:25:7f:8d:97:ad:b4:39: 0b:80:3c:73:5e:42:a7:7d:f5:7f:62:ad:88:88:24: 91:47:7c:ad:9d:74:4c:08:7e:18:59:99:bd:53:cc: 2c:12:66:c6:4a:cf:04:de:05:88:25:f6:79:32:75: 84:ac:2b:38:e0:f2:6f:ee:39:39:9e:10:c0:80:f4: ac:31:ab:a4:84:79:2d:13:73:e7:48:a7:46:38:c8: 06:ee:31:49:ef:4e:ce:f0:9f:06:ea:0e:51:17:13: 09:1f:e9:da:08:ed:fb:dd:33:33:bd:fa:6e:61:e1: 14:00:56:68:7d:74:30:45:e5:d9:83:6e:b0:80:88: c7:b0:26:e8:d3:c6:7d:98:3a:b5:aa:d4:a1:bc:14: f4:be:33:b8:96:91:70:99:29:23:30:f0:4a:cf:d4: 12:b3:ac:a4:fe:a9:eb:81:f2:a6:38:f3:83:44:6d: ab:fd:01:78:1e:57:d7:33:5b:84:f9:09:d4:65:dd: 4d:c4:91:ae:c2:6c:6e:97:4d:88:2e:5c:f9:22:09: d8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F9:2D:A9:C7:9A:36:21:74:5E:34:D5:DB:2D:08:8F:B5:A1:8A:A1 X509v3 Authority Key Identifier: keyid:DD:DD:B3:9C:4F:26:5C:9D:4C:FC:C3:CB:FF:83:4B:12:F4:92:80:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:21:bb:60:65:e3:04:ee:a9:42:e7:13:e2:1f:0c:24:ce:0b: 06:46:bc:db:11:f6:8b:63:a7:06:a9:c9:0c:bc:c4:37:02:57: 0e:80:86:24:1c:c3:76:6d:65:7a:ee:b6:a5:98:3b:d3:a0:ed: 1d:96:49:38:35:2e:9f:91:b2:0f:e2:18:dd:4a:56:e1:ae:96: 8e:0c:88:39:40:61:49:1b:7c:dc:28:21:62:3f:77:71:2d:83: 87:f2:48:2f:3c:4a:27:2e:16:75:78:83:62:f3:8b:bc:2a:54: b8:81:77:66:72:7b:bf:d1:30:5b:76:18:ec:e1:1d:cf:45:0f: 78:f4:d7:ce:35:bb:4a:79:2c:13:d1:ff:9c:01:4d:10:6d:10: fc:9b:ab:ae:ec:c5:23:07:1f:79:6f:28:1c:2c:05:3e:20:f9: 1f:f2:4e:27:27:83:6d:21:5c:be:16:4e:a8:46:a0:0e:4a:aa: 57:7d:32:36:11:a5:2f:23:4c:e0:dd:b8:fe:8d:59:63:ef:4b: b2:62:e8:a4:d4:5f:c6:7a:ae:84:6a:8a:56:40:6e:8f:54:e0: b5:33:d4:97:c8:76:25:62:0d:e2:58:70:37:97:e2:be:0f:18: 29:f7:cb:b9:13:56:af:70:de:34:7e:61:bc:98:fa:86:1b:c2: 4c:79:44:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBWzSjVGOlGBS1jYV6xqfkgQsN/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREREREIzOUM0RjI2NUM5RDRDRkNDM0NCRkY4MzRCMTJG NDkyODAyNzAeFw0yNjA5MDIyMzM3MjlaFw0yNjA5MDQwMDA5MjlaMDMxMTAvBgNV BAMTKEM0RjkyREE5Qzc5QTM2MjE3NDVFMzRENURCMkQwODhGQjVBMThBQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5t/dQrS7GOU1bnN8CgWNxVf9d F44JFeLez0lsrIr/1ZgKxmUXPKccyPMsXg8JIIoPhy8jJX+Nl620OQuAPHNeQqd9 9X9irYiIJJFHfK2ddEwIfhhZmb1TzCwSZsZKzwTeBYgl9nkydYSsKzjg8m/uOTme EMCA9Kwxq6SEeS0Tc+dIp0Y4yAbuMUnvTs7wnwbqDlEXEwkf6doI7fvdMzO9+m5h 4RQAVmh9dDBF5dmDbrCAiMewJujTxn2YOrWq1KG8FPS+M7iWkXCZKSMw8ErP1BKz rKT+qeuB8qY484NEbav9AXgeV9czW4T5CdRl3U3Eka7CbG6XTYguXPkiCdhTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxPktqceaNiF0XjTV2y0Ij7WhiqEwHwYDVR0j BBgwFoAU3d2znE8mXJ1M/MPL/4NLEvSSgCcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQwNzliZWYtN2Y3ZC00M2NkLTkyN2YtZDVjZjU5YTBiMGZiLzAvREREREIzOUM0 RjI2NUM5RDRDRkNDM0NCRkY4MzRCMTJGNDkyODAyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREREQjM5QzRGMjY1QzlENENGQ0MzQ0JGRjgzNEIxMkY0OTI4 MDI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQwNzliZWYtN2Y3ZC00M2NkLTky N2YtZDVjZjU5YTBiMGZiLzAvREREREIzOUM0RjI2NUM5RDRDRkNDM0NCRkY4MzRC MTJGNDkyODAyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0hu2Bl4wTuqULnE+IfDCTOCwZGvNsR9otj pwapyQy8xDcCVw6AhiQcw3ZtZXrutqWYO9Og7R2WSTg1Lp+Rsg/iGN1KVuGulo4M iDlAYUkbfNwoIWI/d3Etg4fySC88SicuFnV4g2Lzi7wqVLiBd2Zye7/RMFt2GOzh Hc9FD3j01841u0p5LBPR/5wBTRBtEPybq67sxSMHH3lvKBwsBT4g+R/yTicng20h XL4WTqhGoA5Kqld9MjYRpS8jTODduP6NWWPvS7Ji6KTUX8Z6roRqilZAbo9U4LUz 1JfIdiViDeJYcDeX4r4PGCn3y7kTVq9w3jR+YbyY+oYbwkx5RL8= -----END CERTIFICATE-----Generated at Thu Sep 3 09:24:34 2026 by rpki-client