$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft File: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft (raw, json) Hash identifier: NxsqbwXIJlJj1ttG40rT+i2t1GjZ1bz4sw1AwT1qDEs= Subject key identifier: 4C:E1:0B:63:11:A6:A9:98:85:11:39:43:04:AB:59:D3:78:CC:D5:FA Authority key identifier: DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 Certificate issuer: /CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Certificate serial: 304D6052037ADFECA8E598C5DEC43E0BF747AC21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft Manifest number: DA Signing time: Mon 12 Oct 2026 14:39:20 +0000 Manifest this update: Mon 12 Oct 2026 14:34:20 +0000 Manifest next update: Tue 13 Oct 2026 16:43:20 +0000 Files and hashes: 1: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl (hash: 9/Et5b4ht4TFpa3K5MglRXaqOym8osBHcZC7rtn7Wro=) 2: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: qSXSAuCypxITbArcxADdWqHfhFT512uFXifXCq40Lkk=) 3: 3130332e3138392e3132322e302f32342d3234203d3e20313338383836.roa (hash: w/XB+eAcVCXSBvP5zeesaKGcdg6afVF0i1dOhvajHGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 16:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:4d:60:52:03:7a:df:ec:a8:e5:98:c5:de:c4:3e:0b:f7:47:ac:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Validity Not Before: Oct 12 14:34:20 2026 GMT Not After : Oct 13 16:43:20 2026 GMT Subject: CN=4CE10B6311A6A9988511394304AB59D378CCD5FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:99:d2:ad:ba:3a:e2:f0:e8:08:9a:bd:cd: 0f:0b:fd:4a:f5:ac:7c:74:33:fb:2e:eb:37:15:00: fe:00:d5:0c:5d:9a:24:a7:14:10:94:e2:99:a8:f5: fb:d7:c4:fa:88:23:8d:df:75:d1:ef:b2:ab:26:15: 58:31:69:d1:db:a8:5b:7e:4c:48:ec:fd:fa:66:20: eb:b5:5c:a4:a7:8a:3f:fb:91:4a:b2:bf:5f:56:87: f2:94:c8:26:9f:ec:ff:a0:98:96:20:95:22:69:b3: d6:85:89:d9:a0:2b:e0:ad:5a:a3:2d:03:11:4b:e9: 6c:b4:68:dc:7f:62:ac:b6:e0:3b:75:c6:6a:9a:f9: e4:72:46:04:c8:4e:8d:26:fa:c1:6e:b6:cd:23:dc: dd:ae:0c:63:f1:75:21:55:6c:06:ed:7d:96:fd:b4: 33:e0:38:aa:ef:65:00:45:cb:01:0c:b7:47:ef:01: 96:fe:3d:ad:ee:64:a7:c6:0a:ba:bd:51:60:45:ef: f7:fd:36:34:a0:02:d3:e8:ae:8b:83:38:48:18:81: 4e:db:1f:c6:25:38:2a:49:58:91:fe:05:10:3c:e1: ec:91:f3:6c:61:35:f0:8d:78:5a:b3:f6:13:e6:42: 3b:a8:08:e3:ba:b5:f4:0c:74:0c:a6:e6:68:e5:7c: 0a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E1:0B:63:11:A6:A9:98:85:11:39:43:04:AB:59:D3:78:CC:D5:FA X509v3 Authority Key Identifier: keyid:DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:15:82:da:a5:91:de:35:00:53:12:dc:eb:bf:2d:ea:a7:7e: f0:f3:55:66:71:4e:dd:51:c2:60:67:0f:fd:27:d9:5e:3a:9b: 12:77:de:71:82:18:76:bc:7c:e7:31:f6:e2:be:a5:97:21:2a: 63:db:73:6d:e4:5e:4a:aa:6a:79:36:8d:f0:97:10:ea:e5:5f: ba:b6:57:01:29:51:58:da:33:5f:44:46:9b:87:25:1e:86:81: f9:aa:ca:b3:0b:8d:b7:84:e6:33:9e:1b:96:bc:78:c2:a1:4d: 2c:9b:ef:dc:b3:57:a5:36:bf:83:b8:45:37:6f:44:9f:d8:fc: e1:78:16:b2:35:c2:53:e5:57:74:f9:33:e7:65:32:79:71:e5: 10:a7:95:af:04:71:0e:cb:c9:5d:1d:8f:7c:14:48:da:40:e2: 2a:37:58:77:a1:21:40:08:b4:57:7f:4e:5e:89:1a:a1:b8:cc: f4:f4:62:5f:51:ba:50:b8:06:85:f9:c7:aa:85:b3:a7:e1:da: 54:df:3c:2a:a2:f7:b2:53:d2:78:ad:d6:60:09:45:e5:3b:31: 16:da:5d:88:5f:36:60:c1:97:9a:36:6b:90:4b:71:77:d6:23: 23:79:4e:82:7f:78:99:e0:18:b4:f2:be:13:18:6e:be:20:64: c1:31:29:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUME1gUgN63+yo5ZjF3sQ+C/dHrCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5 ODUxQTFCOTAeFw0yNjEwMTIxNDM0MjBaFw0yNjEwMTMxNjQzMjBaMDMxMTAvBgNV BAMTKDRDRTEwQjYzMTFBNkE5OTg4NTExMzk0MzA0QUI1OUQzNzhDQ0Q1RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr85nSrbo64vDoCJq9zQ8L/Ur1 rHx0M/su6zcVAP4A1QxdmiSnFBCU4pmo9fvXxPqII43fddHvsqsmFVgxadHbqFt+ TEjs/fpmIOu1XKSnij/7kUqyv19Wh/KUyCaf7P+gmJYglSJps9aFidmgK+CtWqMt AxFL6Wy0aNx/Yqy24Dt1xmqa+eRyRgTITo0m+sFuts0j3N2uDGPxdSFVbAbtfZb9 tDPgOKrvZQBFywEMt0fvAZb+Pa3uZKfGCrq9UWBF7/f9NjSgAtPorouDOEgYgU7b H8YlOCpJWJH+BRA84eyR82xhNfCNeFqz9hPmQjuoCOO6tfQMdAym5mjlfApzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTOELYxGmqZiFETlDBKtZ03jM1fowHwYDVR0j BBgwFoAU3U/+ysb7E8TxR2AvixgkQphRobkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJhMGI4ZjgtNGZjZi00YjliLTk3OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FD NkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5ODUxQTFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDRGRkVDQUM2RkIxM0M0RjE0NzYwMkY4QjE4MjQ0Mjk4NTFB MUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0 NDI5ODUxQTFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMUVgtqlkd41AFMS3Ou/LeqnfvDzVWZxTt1R wmBnD/0n2V46mxJ33nGCGHa8fOcx9uK+pZchKmPbc23kXkqqank2jfCXEOrlX7q2 VwEpUVjaM19ERpuHJR6GgfmqyrMLjbeE5jOeG5a8eMKhTSyb79yzV6U2v4O4RTdv RJ/Y/OF4FrI1wlPlV3T5M+dlMnlx5RCnla8EcQ7LyV0dj3wUSNpA4io3WHehIUAI tFd/Tl6JGqG4zPT0Yl9RulC4BoX5x6qFs6fh2lTfPCqi97JT0nit1mAJReU7MRba XYhfNmDBl5o2a5BLcXfWIyN5ToJ/eJngGLTyvhMYbr4gZMExKWE= -----END CERTIFICATE-----Generated at Tue Oct 13 06:15:42 2026 by rpki-client