$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft File: DDF88B435837261B13DE2248E2A856AB45CECC0B.mft (raw, json) Hash identifier: Jzsl/vSDg3onYY8lN3gDh1BvHxOr9Q87N9yVIbiq5rM= Subject key identifier: 29:03:87:6B:14:53:39:99:48:1E:5F:15:46:4E:57:53:A1:A5:9F:F0 Authority key identifier: DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B Certificate issuer: /CN=DDF88B435837261B13DE2248E2A856AB45CECC0B Certificate serial: 7D2B19B69A1B4F061469270FDC07F8A4A7BB3096 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 19:00:22 +0000 Manifest this update: Sun 19 Jul 2026 18:55:22 +0000 Manifest next update: Mon 20 Jul 2026 22:50:22 +0000 Files and hashes: 1: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: yfH9V+v7CqjVW6BwpLw/uKH0EvFG6umOPa6WyO7b7X0=) 2: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: edm1TV/7umFF7e1kNKXURZcIakqU8CWQ1lkJU/ljN7I=) 3: DDF88B435837261B13DE2248E2A856AB45CECC0B.crl (hash: eI8PKXG2mAM6tmlt/krJXMsSFqiYYlkkL4rErXAlJnA=) 4: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: fhnpPa+v9pVR6utlcEhHmU/vCyGDDmaJK9JqRPVVGlI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 22:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2b:19:b6:9a:1b:4f:06:14:69:27:0f:dc:07:f8:a4:a7:bb:30:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDF88B435837261B13DE2248E2A856AB45CECC0B Validity Not Before: Jul 19 18:55:22 2026 GMT Not After : Jul 20 22:50:22 2026 GMT Subject: CN=2903876B14533999481E5F15464E5753A1A59FF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:12:23:25:f8:82:0b:53:6e:57:5b:89:e8:5c: 68:11:8e:14:78:9f:74:5f:95:41:61:76:bc:fc:01: 16:56:13:cc:e2:9d:90:ac:7c:6d:75:bb:9b:c6:9c: a5:87:63:9e:6e:59:72:2e:9d:32:07:c8:1d:30:eb: ed:95:a0:9c:b0:42:76:14:5f:8e:9c:ff:b4:26:ad: a3:40:56:47:11:09:02:d3:01:64:84:b6:bc:c3:9e: 50:de:ec:90:6b:1d:8a:f3:46:a2:f2:12:b4:85:83: aa:b1:3a:86:47:2a:6d:f6:58:30:cf:9a:f8:a9:aa: 10:6e:34:84:47:25:81:e0:99:e4:75:d2:2d:99:17: 5e:8e:f3:4f:d3:91:66:ad:c7:d3:8f:22:a6:cb:e1: 14:75:54:04:c6:2e:27:9a:5b:72:58:9f:77:33:c7: 23:e8:24:0c:9c:e3:12:29:ae:39:63:f5:c3:f6:36: ab:3e:b2:20:95:c8:4d:6c:18:57:a5:20:25:5d:27: c7:a7:1e:c6:fe:7f:2a:ee:d5:d3:61:5b:63:74:9a: 53:7b:52:19:76:b5:66:b1:87:88:20:ff:ed:8b:e5: 6b:fd:3e:da:8d:ad:56:28:fc:75:1a:4c:02:24:fe: 92:f1:56:18:c3:a6:28:5f:0d:38:9c:8c:f4:f1:6b: 35:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:03:87:6B:14:53:39:99:48:1E:5F:15:46:4E:57:53:A1:A5:9F:F0 X509v3 Authority Key Identifier: keyid:DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d8:d2:6b:ce:09:df:20:1d:d7:a9:8c:4b:00:61:1f:1a:c2: 0c:a2:32:13:9f:7c:be:7d:5b:d9:73:50:b1:80:e8:89:2f:7a: ad:40:d5:4e:1a:8a:de:db:a4:cd:ff:6a:8f:43:01:22:b2:1b: c0:31:f9:be:5e:d9:e9:1b:44:a8:86:77:05:09:8a:eb:d2:01: 06:df:77:f1:19:57:1b:d3:48:37:be:2d:9b:df:21:05:88:4f: 7e:e5:48:83:a8:52:2f:e5:7e:6d:67:77:17:64:68:60:0f:45: 3f:b0:f5:ab:df:9f:e3:b4:7d:18:10:cc:a3:77:36:fc:36:ff: ac:e4:7d:70:3a:1a:c6:73:7a:f2:18:23:ad:ea:f6:5c:a3:a4: 71:85:8b:fa:1f:60:56:9e:b0:4d:b5:2f:ab:83:26:63:fb:42: b5:be:36:cc:68:cd:d9:89:50:eb:e5:ca:a0:01:7d:ee:27:ca: b1:4c:09:0a:25:87:d3:5a:4d:c3:1b:0b:69:f5:a0:24:5c:71: 08:bf:4f:79:09:d5:d7:35:40:ce:ea:3a:27:9a:5a:3b:5d:3e: f3:63:5f:b0:77:cd:c8:33:c0:ca:65:76:48:dc:a4:6f:7a:db: 73:81:f7:d9:9c:d3:5d:76:75:fa:1b:10:b4:a2:a0:eb:73:96: 66:57:3a:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfSsZtpobTwYUaScP3Af4pKe7MJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGODhCNDM1ODM3MjYxQjEzREUyMjQ4RTJBODU2QUI0 NUNFQ0MwQjAeFw0yNjA3MTkxODU1MjJaFw0yNjA3MjAyMjUwMjJaMDMxMTAvBgNV BAMTKDI5MDM4NzZCMTQ1MzM5OTk0ODFFNUYxNTQ2NEU1NzUzQTFBNTlGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzEiMl+IILU25XW4noXGgRjhR4 n3RflUFhdrz8ARZWE8zinZCsfG11u5vGnKWHY55uWXIunTIHyB0w6+2VoJywQnYU X46c/7QmraNAVkcRCQLTAWSEtrzDnlDe7JBrHYrzRqLyErSFg6qxOoZHKm32WDDP mvipqhBuNIRHJYHgmeR10i2ZF16O80/TkWatx9OPIqbL4RR1VATGLieaW3JYn3cz xyPoJAyc4xIprjlj9cP2Nqs+siCVyE1sGFelICVdJ8enHsb+fyru1dNhW2N0mlN7 Uhl2tWaxh4gg/+2L5Wv9PtqNrVYo/HUaTAIk/pLxVhjDpihfDTicjPTxazWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKQOHaxRTOZlIHl8VRk5XU6Gln/AwHwYDVR0j BBgwFoAU3fiLQ1g3JhsT3iJI4qhWq0XOzAswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUzNGQyZDgtMzRhZi00NzU3LThhZDktOTJkYTM1ZDkyMTY4LzAvRERGODhCNDM1 ODM3MjYxQjEzREUyMjQ4RTJBODU2QUI0NUNFQ0MwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREY4OEI0MzU4MzcyNjFCMTNERTIyNDhFMkE4NTZBQjQ1Q0VD QzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvRERGODhCNDM1ODM3MjYxQjEzREUyMjQ4RTJBODU2 QUI0NUNFQ0MwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzY0mvOCd8gHdepjEsAYR8awgyiMhOffL59 W9lzULGA6Ikveq1A1U4ait7bpM3/ao9DASKyG8Ax+b5e2ekbRKiGdwUJiuvSAQbf d/EZVxvTSDe+LZvfIQWIT37lSIOoUi/lfm1ndxdkaGAPRT+w9avfn+O0fRgQzKN3 Nvw2/6zkfXA6GsZzevIYI63q9lyjpHGFi/ofYFaesE21L6uDJmP7QrW+NsxozdmJ UOvlyqABfe4nyrFMCQolh9NaTcMbC2n1oCRccQi/T3kJ1dc1QM7qOieaWjtdPvNj X7B3zcgzwMpldkjcpG9623OB99mc0112dfobELSioOtzlmZXOvQ= -----END CERTIFICATE-----Generated at Mon Jul 20 04:31:33 2026 by rpki-client