$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft File: DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft (raw, json) Hash identifier: B75lX7zYuBStHr6FBLleU3a2yC1coEfRNJg+AdztsFU= Subject key identifier: A2:6B:02:C4:87:2E:A3:31:46:31:3B:A0:62:BC:06:DB:4D:FB:53:8F Authority key identifier: DD:4A:D6:DE:56:A2:26:7F:C5:F2:7E:4A:EA:ED:44:4B:28:71:57:22 Certificate issuer: /CN=DD4AD6DE56A2267FC5F27E4AEAED444B28715722 Certificate serial: 4854232C6C588AA05F1BB4A803F56598D171DD4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 07:58:21 +0000 Manifest this update: Wed 02 Sep 2026 07:53:21 +0000 Manifest next update: Thu 03 Sep 2026 11:39:21 +0000 Files and hashes: 1: DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl (hash: PlKbyRHmnffiFViGXAR6QkyKn8j4WVGB2UuhT4ciLn0=) 2: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: tmRs1+AlBzBvmjJrjjc0kMDSK7a2kwnxBLvtC10ciHE=) 3: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: 2aIQ3QBHP7J+Ky6wBfEPSC4GdD2wiOq9JYf33DaTyyo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 11:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:54:23:2c:6c:58:8a:a0:5f:1b:b4:a8:03:f5:65:98:d1:71:dd:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4AD6DE56A2267FC5F27E4AEAED444B28715722 Validity Not Before: Sep 2 07:53:21 2026 GMT Not After : Sep 3 11:39:21 2026 GMT Subject: CN=A26B02C4872EA33146313BA062BC06DB4DFB538F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:14:a9:9a:91:dc:3a:fd:d3:e7:b4:5b:72:03: 38:02:82:9c:cc:5f:2f:ec:82:f7:84:e2:83:54:d0: 6d:1a:70:7e:b2:d5:33:a8:b4:4b:19:77:69:cb:b1: 8a:45:22:48:9c:90:f9:57:18:d8:dd:76:1c:13:ac: 62:a4:2b:86:17:cc:6c:41:14:98:a5:5c:00:08:f2: 6a:fc:d3:5c:c7:00:75:f3:ac:84:37:a5:d7:34:e9: a6:49:84:1e:31:37:d0:68:85:71:43:68:34:2b:0e: 50:af:9c:58:ab:63:80:a8:08:60:33:12:04:eb:a5: 0a:aa:71:96:d7:f1:ad:15:2c:8d:9e:48:bd:cb:8b: 48:a6:1a:51:94:21:b0:f3:f7:76:42:68:0c:03:58: a0:55:9f:54:8a:31:5e:f4:83:3b:85:62:bb:5f:7d: 7e:c5:89:b4:47:01:1a:80:e7:65:d9:08:27:90:fa: 64:68:f9:d3:58:c6:34:0b:df:20:9a:81:61:42:5e: e2:9e:81:76:b1:1d:e5:c0:ec:d8:fd:96:c2:10:2a: e4:93:b1:9f:a1:7a:0f:9a:51:3a:1b:d6:c9:4d:ff: a9:bb:10:b4:c4:0a:b7:d1:08:b2:21:5f:68:f4:1b: 66:bc:9a:8f:50:bd:ad:9c:ac:53:46:15:5d:27:4e: da:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6B:02:C4:87:2E:A3:31:46:31:3B:A0:62:BC:06:DB:4D:FB:53:8F X509v3 Authority Key Identifier: keyid:DD:4A:D6:DE:56:A2:26:7F:C5:F2:7E:4A:EA:ED:44:4B:28:71:57:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:aa:9d:94:d1:81:92:78:a9:2f:15:c0:fd:35:bd:15:89:81: 3d:b1:c2:93:54:51:17:8a:01:e1:5a:b1:5f:25:48:30:57:f1: 50:26:de:d7:3c:d0:91:8a:bc:90:53:0b:50:75:e0:a2:9a:58: fc:30:61:31:db:b0:83:41:e0:05:b4:4a:65:f6:45:8a:c6:f6: d0:c1:af:7a:c0:3f:8e:18:dc:0b:4a:93:b6:72:2f:74:7d:fd: f6:02:c0:35:f2:ee:a5:aa:07:0a:5d:41:66:f1:d1:c3:87:ab: 95:a8:ca:59:13:0a:94:9f:2d:9b:09:be:d0:4e:8a:01:62:4a: 9f:b5:10:41:5a:4e:6e:65:06:98:e3:ab:a0:bd:0f:75:b7:0c: 59:ef:08:fc:3b:ad:fd:f2:a4:45:3f:26:81:4f:58:5a:53:51: 42:3b:f7:e3:db:a9:b6:e3:18:02:c3:fd:59:79:cd:9d:0d:23: 45:3a:fb:51:10:98:c3:26:8e:a4:14:ad:d2:c6:84:3d:8c:22: 14:a7:a4:6e:14:bd:85:de:55:af:c8:e6:7c:7e:20:4d:2a:55: b7:0b:d3:fb:c9:1b:af:55:43:74:fc:e1:16:3f:04:a0:f4:ef: 99:f4:d8:29:77:2f:35:51:87:fc:d7:6a:70:e3:3d:c8:39:bf: 2b:54:aa:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSFQjLGxYiqBfG7SoA/VlmNFx3UowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0QUQ2REU1NkEyMjY3RkM1RjI3RTRBRUFFRDQ0NEIy ODcxNTcyMjAeFw0yNjA5MDIwNzUzMjFaFw0yNjA5MDMxMTM5MjFaMDMxMTAvBgNV BAMTKEEyNkIwMkM0ODcyRUEzMzE0NjMxM0JBMDYyQkMwNkRCNERGQjUzOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgFKmakdw6/dPntFtyAzgCgpzM Xy/sgveE4oNU0G0acH6y1TOotEsZd2nLsYpFIkickPlXGNjddhwTrGKkK4YXzGxB FJilXAAI8mr801zHAHXzrIQ3pdc06aZJhB4xN9BohXFDaDQrDlCvnFirY4CoCGAz EgTrpQqqcZbX8a0VLI2eSL3Li0imGlGUIbDz93ZCaAwDWKBVn1SKMV70gzuFYrtf fX7FibRHARqA52XZCCeQ+mRo+dNYxjQL3yCagWFCXuKegXaxHeXA7Nj9lsIQKuST sZ+heg+aUTob1slN/6m7ELTECrfRCLIhX2j0G2a8mo9Qva2crFNGFV0nTtozAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUomsCxIcuozFGMTugYrwG2037U48wHwYDVR0j BBgwFoAU3UrW3laiJn/F8n5K6u1ESyhxVyIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU4OWU4NTktM2MyYy00YTA5LWE0YTktMzczMjNlYTVkZTIyLzAvREQ0QUQ2REU1 NkEyMjY3RkM1RjI3RTRBRUFFRDQ0NEIyODcxNTcyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDRBRDZERTU2QTIyNjdGQzVGMjdFNEFFQUVENDQ0QjI4NzE1 NzIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU4OWU4NTktM2MyYy00YTA5LWE0 YTktMzczMjNlYTVkZTIyLzAvREQ0QUQ2REU1NkEyMjY3RkM1RjI3RTRBRUFFRDQ0 NEIyODcxNTcyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+qnZTRgZJ4qS8VwP01vRWJgT2xwpNUUReK AeFasV8lSDBX8VAm3tc80JGKvJBTC1B14KKaWPwwYTHbsINB4AW0SmX2RYrG9tDB r3rAP44Y3AtKk7ZyL3R9/fYCwDXy7qWqBwpdQWbx0cOHq5WoylkTCpSfLZsJvtBO igFiSp+1EEFaTm5lBpjjq6C9D3W3DFnvCPw7rf3ypEU/JoFPWFpTUUI79+Pbqbbj GALD/Vl5zZ0NI0U6+1EQmMMmjqQUrdLGhD2MIhSnpG4UvYXeVa/I5nx+IE0qVbcL 0/vJG69VQ3T84RY/BKD075n02Cl3LzVRh/zXanDjPcg5vytUqlk= -----END CERTIFICATE-----Generated at Thu Sep 3 05:11:12 2026 by rpki-client