$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft File: DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft (raw, json) Hash identifier: 1BPwflhR4E2DuafinC+5Ej/oHArR/PZ3jmBoXNKvpkI= Subject key identifier: D9:AD:44:E0:5A:E4:31:36:7F:7D:46:DD:F8:68:7E:A3:0E:B4:E9:4B Authority key identifier: DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA Certificate issuer: /CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA Certificate serial: 7AA6B6A392E67AF5928B8BB838B4539CCFC426FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 03:47:30 +0000 Manifest this update: Thu 03 Sep 2026 03:42:30 +0000 Manifest next update: Fri 04 Sep 2026 04:49:30 +0000 Files and hashes: 1: DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl (hash: EXzgyWEkOsPWyvDfcWig0lfBSkAcz5gaeDcmelnrW6Q=) 2: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (hash: /I/1xW7rsK7gJcZw8w0G3A5/hDeO0oqDDXrZo6p7Qtc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 04:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:a6:b6:a3:92:e6:7a:f5:92:8b:8b:b8:38:b4:53:9c:cf:c4:26:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA Validity Not Before: Sep 3 03:42:30 2026 GMT Not After : Sep 4 04:49:30 2026 GMT Subject: CN=D9AD44E05AE431367F7D46DDF8687EA30EB4E94B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c4:e0:bb:8a:63:13:be:b8:5a:11:71:45:54: ff:6b:ad:64:b7:e3:9b:01:22:33:37:37:5a:71:90: 89:65:09:01:20:e3:58:cb:4c:e7:24:9a:5a:62:aa: e7:fe:dc:85:f0:ae:2f:c2:fc:0b:65:56:a0:41:e1: 26:b4:68:79:b3:76:48:64:5d:08:de:1d:db:db:9d: 18:a2:7c:93:1c:cc:7c:1c:3b:78:8d:89:bd:49:72: f2:65:a1:c7:60:bc:5a:44:0b:93:0f:cc:a6:36:00: c4:88:e9:dd:b5:90:16:40:7a:4b:21:46:12:65:7d: 39:b2:aa:e9:30:c0:ee:6a:9f:97:dd:49:03:6b:d8: 67:bc:f7:59:d2:4d:e7:ed:72:d9:3e:42:97:53:ab: 81:58:4e:ac:5b:6a:41:51:aa:93:39:cf:8d:25:19: 93:b8:97:fd:69:d9:c1:e3:d5:6f:ce:ea:97:12:59: e7:36:66:42:25:cd:9f:13:37:92:c8:66:bd:12:96: a4:09:fd:04:b9:e4:4b:6d:77:bc:01:95:d7:8e:b1: 2d:b7:a4:7c:e1:d8:0d:85:fb:78:7e:6a:7a:c5:d7: 3c:3e:3d:1e:f1:7a:f1:25:5f:1f:cb:d6:eb:6d:c7: e4:84:58:21:6c:a3:92:19:9d:90:18:e2:86:21:cf: a2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AD:44:E0:5A:E4:31:36:7F:7D:46:DD:F8:68:7E:A3:0E:B4:E9:4B X509v3 Authority Key Identifier: keyid:DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cd:5e:a2:19:0a:94:14:6f:28:54:fd:61:a6:f8:ef:ae:42: f2:64:61:74:ed:dc:68:e3:ea:4c:e3:11:b1:6f:81:1b:bd:4d: 54:97:80:84:9d:1f:bf:09:51:03:c6:17:d6:82:49:2d:0d:21: ab:20:4e:f6:6c:86:dd:fe:c5:e2:44:9c:76:20:38:c5:71:d5: f6:09:f4:7e:18:e0:4c:ba:a1:ab:08:a2:67:81:8f:0d:2c:a5: 9c:db:ab:b6:0c:bf:91:0e:19:ce:32:1d:e6:9a:f7:5c:1c:7d: 79:8e:60:0e:82:91:94:4a:71:d8:f6:b4:60:67:a4:92:1c:ee: 06:e2:dc:36:29:f8:38:ec:22:2a:05:cc:f3:1d:de:79:f0:90: f2:85:26:8c:65:35:99:7b:30:eb:aa:75:05:f4:d7:cf:52:c5: c7:20:10:e2:a9:f3:53:82:b1:ee:a9:2f:db:9f:cd:29:67:3e: fb:9b:2f:59:e5:28:ed:61:50:d8:d2:15:71:33:00:a4:96:d2: 5c:b0:14:65:22:0e:93:29:71:43:a9:db:c8:64:d5:8e:39:5f: be:fe:56:12:d2:8f:1c:3d:f2:6c:e8:64:69:31:50:b8:2b:55: d4:4e:55:0c:e0:2e:54:29:06:1d:77:78:1a:21:94:3d:02:a9: ef:f4:f5:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeqa2o5LmevWSi4u4OLRTnM/EJv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFQzA3MkE5Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYxRDkw NzkyQzRCQTAeFw0yNjA5MDMwMzQyMzBaFw0yNjA5MDQwNDQ5MzBaMDMxMTAvBgNV BAMTKEQ5QUQ0NEUwNUFFNDMxMzY3RjdENDZEREY4Njg3RUEzMEVCNEU5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAxOC7imMTvrhaEXFFVP9rrWS3 45sBIjM3N1pxkIllCQEg41jLTOckmlpiquf+3IXwri/C/AtlVqBB4Sa0aHmzdkhk XQjeHdvbnRiifJMczHwcO3iNib1JcvJlocdgvFpEC5MPzKY2AMSI6d21kBZAeksh RhJlfTmyqukwwO5qn5fdSQNr2Ge891nSTeftctk+QpdTq4FYTqxbakFRqpM5z40l GZO4l/1p2cHj1W/O6pcSWec2ZkIlzZ8TN5LIZr0SlqQJ/QS55Ettd7wBldeOsS23 pHzh2A2F+3h+anrF1zw+PR7xevElXx/L1uttx+SEWCFso5IZnZAY4oYhz6LRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2a1E4FrkMTZ/fUbd+Gh+ow606UswHwYDVR0j BBgwFoAU3ewHKpJ3UdzItpRMpGDx2QeSxLowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY1ZmE1NGQtMjQ4ZS00MjNjLTllNDktZDZlNmJmYmJmNzhiLzAvRERFQzA3MkE5 Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYxRDkwNzkyQzRCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREVDMDcyQTkyNzc1MURDQzhCNjk0NENBNDYwRjFEOTA3OTJD NEJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY1ZmE1NGQtMjQ4ZS00MjNjLTll NDktZDZlNmJmYmJmNzhiLzAvRERFQzA3MkE5Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYx RDkwNzkyQzRCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvNXqIZCpQUbyhU/WGm+O+uQvJkYXTt3Gjj 6kzjEbFvgRu9TVSXgISdH78JUQPGF9aCSS0NIasgTvZsht3+xeJEnHYgOMVx1fYJ 9H4Y4Ey6oasIomeBjw0spZzbq7YMv5EOGc4yHeaa91wcfXmOYA6CkZRKcdj2tGBn pJIc7gbi3DYp+DjsIioFzPMd3nnwkPKFJoxlNZl7MOuqdQX0189SxccgEOKp81OC se6pL9ufzSlnPvubL1nlKO1hUNjSFXEzAKSW0lywFGUiDpMpcUOp28hk1Y45X77+ VhLSjxw98mzoZGkxULgrVdROVQzgLlQpBh13eBohlD0Cqe/09UY= -----END CERTIFICATE-----Generated at Thu Sep 3 12:36:08 2026 by rpki-client