$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft File: DDF88B435837261B13DE2248E2A856AB45CECC0B.mft (raw, json) Hash identifier: 0NZvdjgJQgEpjt6ZZjLVAWjkiMG/wFtC7x0tlUKrt5g= Subject key identifier: 7D:CA:E1:6C:93:EA:C4:3C:9A:CB:08:91:51:42:C1:D8:F8:E4:AD:BF Authority key identifier: DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B Certificate issuer: /CN=DDF88B435837261B13DE2248E2A856AB45CECC0B Certificate serial: 3E52944FC5824FA6041A22E90190330A65193165 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:44:36 +0000 Manifest this update: Tue 02 Jun 2026 23:39:36 +0000 Manifest next update: Thu 04 Jun 2026 02:06:36 +0000 Files and hashes: 1: DDF88B435837261B13DE2248E2A856AB45CECC0B.crl (hash: uAN/yQXh9AdwamUsisWQRI2jC1fhzSM8/jko5Z/fATM=) 2: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: yfH9V+v7CqjVW6BwpLw/uKH0EvFG6umOPa6WyO7b7X0=) 3: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: fhnpPa+v9pVR6utlcEhHmU/vCyGDDmaJK9JqRPVVGlI=) 4: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: edm1TV/7umFF7e1kNKXURZcIakqU8CWQ1lkJU/ljN7I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:52:94:4f:c5:82:4f:a6:04:1a:22:e9:01:90:33:0a:65:19:31:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDF88B435837261B13DE2248E2A856AB45CECC0B Validity Not Before: Jun 2 23:39:36 2026 GMT Not After : Jun 4 02:06:36 2026 GMT Subject: CN=7DCAE16C93EAC43C9ACB08915142C1D8F8E4ADBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4d:9b:32:55:d1:2d:75:aa:48:13:40:9e:4a: 1e:79:ae:9b:e3:00:c9:96:09:2c:47:4c:6d:bd:1b: c9:42:fb:18:c6:68:42:f1:a1:9d:d2:7c:a9:38:a1: fa:d3:c0:35:2a:ba:de:b1:04:de:20:98:f7:8d:c2: 7e:bc:72:60:6a:d3:2a:05:16:fc:ba:02:dc:95:41: 0f:5b:af:70:43:65:48:0b:b5:db:05:56:d4:0e:7a: 1b:d9:8b:5d:e9:a8:0c:16:46:3c:6b:27:da:30:8d: c1:c7:6a:ed:37:50:02:e4:bb:c1:8f:76:1a:b3:9a: 84:ab:68:85:47:53:9b:bb:3d:8f:19:ba:47:23:42: a3:df:58:d8:4c:c0:f9:00:e3:01:24:3f:9b:41:00: 1b:92:28:27:66:7f:85:0b:c1:ad:c9:fb:d5:2a:aa: 02:b9:37:fa:2a:f4:46:e5:76:43:a7:0c:80:fc:c4: 73:8a:f4:45:ae:8d:ef:36:71:6b:7b:33:52:7d:67: 82:d5:90:29:3a:23:0c:0e:d8:e9:e2:c8:f6:34:c4: 66:39:32:50:07:eb:f7:ad:79:39:f8:87:ea:ae:f2: 65:24:88:bb:63:fd:5d:0e:18:73:c4:17:fd:e3:31: f1:53:ee:e6:46:c6:a3:46:f5:59:ab:2a:2e:27:12: e9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CA:E1:6C:93:EA:C4:3C:9A:CB:08:91:51:42:C1:D8:F8:E4:AD:BF X509v3 Authority Key Identifier: keyid:DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:76:ed:e0:3e:b9:9c:f1:41:48:f2:ef:65:bb:d8:5b:f5:28: 18:1d:75:8d:35:79:8e:be:01:c1:a3:c7:26:f4:3a:27:1c:f5: 8f:25:a8:c5:27:ce:36:43:b4:77:3c:5f:f5:3b:0e:5f:3e:c5: 08:2e:de:3f:72:3b:f5:d1:84:a7:df:bf:2a:5b:46:20:fd:51: 1e:c1:59:39:46:c4:9b:a0:a4:32:18:9f:73:ff:19:f2:2d:f6: 71:32:08:e6:5e:84:20:85:55:ef:cc:66:5e:87:02:23:db:fe: a0:23:de:50:ec:49:cc:9a:53:66:24:1b:32:35:8e:c7:71:dc: e5:78:03:d3:cb:1b:7b:fe:26:e5:f0:b7:d0:c9:fa:e3:9f:13: 1e:88:98:97:33:eb:5e:17:b7:05:71:ba:9c:e5:c7:fe:69:af: c9:b1:7e:e8:94:60:94:cd:b3:3b:fe:04:b8:53:5c:e0:87:09: 6b:be:f6:a0:d1:af:c7:3a:04:b2:cc:7c:cd:1a:1a:65:f0:46: 9d:53:70:78:0e:fd:2b:08:5e:af:1b:2b:b0:2b:b9:f9:5a:f0: 03:17:60:d9:0a:c9:49:2d:be:4e:d1:39:96:bf:c9:ae:36:d6: e4:be:93:2d:cf:b2:78:0d:24:40:1a:da:be:a4:11:d0:a7:96: b1:ac:32:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPlKUT8WCT6YEGiLpAZAzCmUZMWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGODhCNDM1ODM3MjYxQjEzREUyMjQ4RTJBODU2QUI0 NUNFQ0MwQjAeFw0yNjA2MDIyMzM5MzZaFw0yNjA2MDQwMjA2MzZaMDMxMTAvBgNV BAMTKDdEQ0FFMTZDOTNFQUM0M0M5QUNCMDg5MTUxNDJDMUQ4RjhFNEFEQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChTZsyVdEtdapIE0CeSh55rpvj AMmWCSxHTG29G8lC+xjGaELxoZ3SfKk4ofrTwDUqut6xBN4gmPeNwn68cmBq0yoF Fvy6AtyVQQ9br3BDZUgLtdsFVtQOehvZi13pqAwWRjxrJ9owjcHHau03UALku8GP dhqzmoSraIVHU5u7PY8ZukcjQqPfWNhMwPkA4wEkP5tBABuSKCdmf4ULwa3J+9Uq qgK5N/oq9EbldkOnDID8xHOK9EWuje82cWt7M1J9Z4LVkCk6IwwO2OniyPY0xGY5 MlAH6/eteTn4h+qu8mUkiLtj/V0OGHPEF/3jMfFT7uZGxqNG9VmrKi4nEul7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfcrhbJPqxDyaywiRUULB2Pjkrb8wHwYDVR0j BBgwFoAU3fiLQ1g3JhsT3iJI4qhWq0XOzAswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUzNGQyZDgtMzRhZi00NzU3LThhZDktOTJkYTM1ZDkyMTY4LzAvRERGODhCNDM1 ODM3MjYxQjEzREUyMjQ4RTJBODU2QUI0NUNFQ0MwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREY4OEI0MzU4MzcyNjFCMTNERTIyNDhFMkE4NTZBQjQ1Q0VD QzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvRERGODhCNDM1ODM3MjYxQjEzREUyMjQ4RTJBODU2 QUI0NUNFQ0MwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADl27eA+uZzxQUjy72W72Fv1KBgddY01eY6+ AcGjxyb0Oicc9Y8lqMUnzjZDtHc8X/U7Dl8+xQgu3j9yO/XRhKffvypbRiD9UR7B WTlGxJugpDIYn3P/GfIt9nEyCOZehCCFVe/MZl6HAiPb/qAj3lDsScyaU2YkGzI1 jsdx3OV4A9PLG3v+JuXwt9DJ+uOfEx6ImJcz614XtwVxupzlx/5pr8mxfuiUYJTN szv+BLhTXOCHCWu+9qDRr8c6BLLMfM0aGmXwRp1TcHgO/SsIXq8bK7Arufla8AMX YNkKyUktvk7ROZa/ya421uS+ky3PsngNJEAa2r6kEdCnlrGsMn0= -----END CERTIFICATE-----Generated at Wed Jun 3 03:50:22 2026 by rpki-client