$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft File: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft (raw, json) Hash identifier: loyfK53YYfuWxjKaHzcYri+EGMcc2zwfZbILjmCkGWg= Subject key identifier: 5E:71:FF:16:F4:D7:6F:4B:DD:CB:6A:22:96:A7:AD:B3:04:0E:2A:F9 Authority key identifier: DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 Certificate issuer: /CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Certificate serial: 24DAC651D8C64BE661C52BDC535E1A3E9776BD62 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 08:24:48 +0000 Manifest this update: Sat 20 Jun 2026 08:19:48 +0000 Manifest next update: Sun 21 Jun 2026 11:10:48 +0000 Files and hashes: 1: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl (hash: dmiGEYv4Huh1H9HNpL1fvumSPqJ1GkS4x2J/gPtITmI=) 2: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: qSXSAuCypxITbArcxADdWqHfhFT512uFXifXCq40Lkk=) 3: 3130332e3138392e3132322e302f32342d3234203d3e20313338383836.roa (hash: w/XB+eAcVCXSBvP5zeesaKGcdg6afVF0i1dOhvajHGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 10:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:da:c6:51:d8:c6:4b:e6:61:c5:2b:dc:53:5e:1a:3e:97:76:bd:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Validity Not Before: Jun 20 08:19:48 2026 GMT Not After : Jun 21 11:10:48 2026 GMT Subject: CN=5E71FF16F4D76F4BDDCB6A2296A7ADB3040E2AF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:ed:e5:3a:0d:20:87:e8:73:fb:8a:dc:f2: c6:f2:1a:c0:00:e4:a0:28:3d:95:5d:92:8f:d1:14: 02:25:0f:a7:31:b4:de:d7:dc:e9:34:a6:ad:d8:90: 73:c4:61:0b:83:11:5c:da:f6:d0:c4:5a:20:7c:40: 0f:ca:15:a3:9d:ff:54:7c:c9:0a:38:96:70:47:c7: c8:00:d6:07:67:a8:f5:b6:43:4d:f1:d9:88:ff:f3: fd:03:35:de:79:47:a1:27:f2:f0:9b:90:be:19:f0: 36:82:f0:83:b2:2a:25:1c:59:dc:76:91:7f:24:ae: 1f:a2:08:74:1f:e5:42:3b:35:e0:a4:4a:8f:2f:55: 1e:d0:15:c0:fa:1f:55:9a:07:69:ae:89:1a:5e:b8: 3b:7e:ca:7c:45:a7:2b:02:0e:96:36:b7:c8:23:57: 49:51:43:b7:93:e9:92:6a:91:bf:0a:27:85:a5:ff: 14:72:66:30:63:09:89:21:16:88:4a:f1:8f:ea:74: a4:92:ca:7a:d0:16:9b:c2:b5:66:2a:fe:31:1d:6f: 48:ba:38:d2:9d:f2:d3:e1:cc:22:08:a7:04:60:63: f5:f4:62:d5:16:30:03:9f:15:78:4a:b3:74:9b:e4: 83:c3:c8:e8:72:12:6d:fa:2e:34:e2:7a:a1:9f:7a: 41:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:71:FF:16:F4:D7:6F:4B:DD:CB:6A:22:96:A7:AD:B3:04:0E:2A:F9 X509v3 Authority Key Identifier: keyid:DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6f:88:bd:cb:75:b8:89:b2:83:90:24:e1:7e:2a:d2:a9:09: d0:df:b6:ed:2c:21:b4:e1:c0:6b:7e:c3:3b:04:c5:1c:2a:7c: e3:24:d3:0e:4b:6e:1e:f6:49:db:8e:8e:3f:51:0a:21:d9:f5: e2:78:8d:01:ca:59:61:5b:e9:0e:77:51:4e:ac:b9:e4:b2:bf: 47:68:4e:9c:d8:5e:71:3f:b8:cc:a5:b6:b6:09:38:3e:85:91: ba:79:a7:06:63:22:03:b4:a5:a4:6e:9d:e2:af:ae:d5:6d:98: ff:a8:25:38:97:8a:45:e8:fa:09:21:7e:91:c9:11:05:b0:74: 46:cd:7e:38:99:f2:fd:7c:a0:5e:1e:f6:8a:e4:35:b2:3c:61: b0:10:71:9d:2f:33:0f:9d:9a:16:06:41:94:c3:68:83:a5:e9: 38:08:20:8a:c0:2c:b3:23:63:47:55:b3:96:9b:82:1b:42:a9: e5:6a:ec:b4:22:fb:f9:78:57:d5:49:c1:02:d3:5c:1b:3a:de: fa:c4:81:05:bd:38:a0:c9:65:07:d6:aa:6d:67:5a:0b:62:50: 81:45:f5:91:b7:c5:3c:aa:bb:83:67:50:64:52:92:f7:76:19: ed:0b:93:74:df:c3:78:67:21:bd:41:34:68:31:51:fd:4a:85: 2e:29:6c:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJNrGUdjGS+ZhxSvcU14aPpd2vWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5 ODUxQTFCOTAeFw0yNjA2MjAwODE5NDhaFw0yNjA2MjExMTEwNDhaMDMxMTAvBgNV BAMTKDVFNzFGRjE2RjRENzZGNEJERENCNkEyMjk2QTdBREIzMDQwRTJBRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Mu3lOg0gh+hz+4rc8sbyGsAA 5KAoPZVdko/RFAIlD6cxtN7X3Ok0pq3YkHPEYQuDEVza9tDEWiB8QA/KFaOd/1R8 yQo4lnBHx8gA1gdnqPW2Q03x2Yj/8/0DNd55R6En8vCbkL4Z8DaC8IOyKiUcWdx2 kX8krh+iCHQf5UI7NeCkSo8vVR7QFcD6H1WaB2muiRpeuDt+ynxFpysCDpY2t8gj V0lRQ7eT6ZJqkb8KJ4Wl/xRyZjBjCYkhFohK8Y/qdKSSynrQFpvCtWYq/jEdb0i6 ONKd8tPhzCIIpwRgY/X0YtUWMAOfFXhKs3Sb5IPDyOhyEm36LjTieqGfekGFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXnH/FvTXb0vdy2oilqetswQOKvkwHwYDVR0j BBgwFoAU3U/+ysb7E8TxR2AvixgkQphRobkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJhMGI4ZjgtNGZjZi00YjliLTk3OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FD NkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5ODUxQTFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDRGRkVDQUM2RkIxM0M0RjE0NzYwMkY4QjE4MjQ0Mjk4NTFB MUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0 NDI5ODUxQTFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5viL3LdbiJsoOQJOF+KtKpCdDftu0sIbTh wGt+wzsExRwqfOMk0w5Lbh72SduOjj9RCiHZ9eJ4jQHKWWFb6Q53UU6sueSyv0do TpzYXnE/uMyltrYJOD6Fkbp5pwZjIgO0paRuneKvrtVtmP+oJTiXikXo+gkhfpHJ EQWwdEbNfjiZ8v18oF4e9orkNbI8YbAQcZ0vMw+dmhYGQZTDaIOl6TgIIIrALLMj Y0dVs5abghtCqeVq7LQi+/l4V9VJwQLTXBs63vrEgQW9OKDJZQfWqm1nWgtiUIFF 9ZG3xTyqu4NnUGRSkvd2Ge0Lk3Tfw3hnIb1BNGgxUf1KhS4pbJ8= -----END CERTIFICATE-----Generated at Sat Jun 20 11:12:03 2026 by rpki-client