$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft File: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft (raw, json) Hash identifier: LmANClm5BLpM8QjURwSKvBeUuHihvjq2soQCmxhtGc0= Subject key identifier: 4B:93:DA:CD:6C:67:D7:08:B8:15:7B:24:60:8D:A6:71:9D:62:42:DE Authority key identifier: DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 Certificate issuer: /CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Certificate serial: 06D8A7E5C88715E8B5CBEE88FCB69BE99E436738 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft Manifest number: 93 Signing time: Wed 19 Aug 2026 23:52:41 +0000 Manifest this update: Wed 19 Aug 2026 23:47:41 +0000 Manifest next update: Fri 21 Aug 2026 01:46:41 +0000 Files and hashes: 1: 3130332e3138392e3132322e302f32342d3234203d3e20313338383836.roa (hash: w/XB+eAcVCXSBvP5zeesaKGcdg6afVF0i1dOhvajHGI=) 2: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: qSXSAuCypxITbArcxADdWqHfhFT512uFXifXCq40Lkk=) 3: DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl (hash: f2HQ5l0PRujugpJ5d5b+9F7mBgnGS7Rg+JhlF/fenOI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 01:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d8:a7:e5:c8:87:15:e8:b5:cb:ee:88:fc:b6:9b:e9:9e:43:67:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FFECAC6FB13C4F147602F8B1824429851A1B9 Validity Not Before: Aug 19 23:47:41 2026 GMT Not After : Aug 21 01:46:41 2026 GMT Subject: CN=4B93DACD6C67D708B8157B24608DA6719D6242DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:36:82:19:d6:f0:18:d9:9c:b0:a9:24:65:58: 40:dc:df:7e:7b:90:4e:c0:11:32:11:c2:2b:a7:ac: b0:10:72:17:f5:d6:1a:5a:b8:f3:eb:71:9c:89:8a: 08:7e:2a:c9:b4:c5:23:e6:5d:5d:6d:02:f3:d9:c6: 8b:2e:a6:8b:82:af:13:8e:72:0d:db:7a:79:1c:88: 15:5f:bf:29:5c:60:e5:f8:64:91:5d:90:50:c4:28: 2e:a1:41:97:be:54:d6:6d:22:85:a4:d4:93:fb:c1: 8f:a9:7d:c8:53:0b:b7:fa:18:e2:a8:c7:c7:43:c3: 78:1b:ec:1c:8a:7e:79:89:71:49:70:01:6a:c7:15: 4f:2b:de:5d:0e:1e:0b:05:1e:2e:9c:7d:9f:be:83: 26:7f:36:0e:ee:62:96:e3:f4:c9:e5:05:14:c0:cd: ab:43:04:97:e4:2c:7d:ba:f3:26:7b:51:7b:b4:96: f2:63:d8:69:6b:3f:0d:9d:e6:36:87:17:e9:71:7e: 2e:ab:aa:68:a8:7f:d8:47:51:6a:80:58:99:54:33: 1a:f3:7b:d5:85:3b:a4:48:12:9a:6d:f8:7b:e4:e1: 85:df:81:b0:11:c2:33:67:54:5d:b4:cd:e5:94:ba: 31:11:f9:65:6f:48:ed:83:eb:5b:b3:12:89:cf:aa: 75:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:93:DA:CD:6C:67:D7:08:B8:15:7B:24:60:8D:A6:71:9D:62:42:DE X509v3 Authority Key Identifier: keyid:DD:4F:FE:CA:C6:FB:13:C4:F1:47:60:2F:8B:18:24:42:98:51:A1:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/DD4FFECAC6FB13C4F147602F8B1824429851A1B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:94:6e:4e:e8:a8:76:ab:32:7d:b8:4a:57:bc:73:9d:2b:f3: eb:fc:15:c6:ff:5a:bc:61:83:60:10:32:48:44:b1:e5:95:45: 45:e3:c7:15:7c:6e:61:1c:15:54:70:80:8b:76:d4:46:4e:20: 24:8b:63:1b:f7:83:b3:02:8a:ac:1e:31:d2:0d:ff:75:02:9e: 22:2f:2d:fa:79:de:33:51:0e:f0:14:0c:34:87:e9:1f:ed:e2: 8f:32:36:0c:06:62:5c:df:fa:ef:1d:a2:51:39:d5:2e:13:ae: f8:f4:00:50:35:95:a0:3c:e1:18:f1:5d:89:3c:82:fa:72:30: 9f:ad:78:bc:e8:8b:b3:3c:0a:4a:bc:d5:2c:2d:71:0a:2d:2d: 7a:6e:8a:8d:5e:3b:12:24:fe:36:b6:f2:5d:53:d8:a9:9a:a0: 68:25:0e:41:fd:20:64:e1:da:be:d3:85:b8:a3:8a:7b:d6:f1: 2f:5c:6a:32:b3:13:5d:74:2e:89:8e:73:f6:c1:f0:f6:52:64: 34:3e:25:fd:d2:8d:4c:44:a4:a6:da:24:ec:8d:11:e2:b4:0c: a0:e3:8b:35:e2:7a:25:26:2b:2e:85:93:f0:2a:9b:24:88:4f: 9f:05:79:a2:56:f6:c7:d6:55:aa:72:9b:3d:ec:46:f7:1b:00: 0d:21:88:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBtin5ciHFei1y+6I/Lab6Z5DZzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5 ODUxQTFCOTAeFw0yNjA4MTkyMzQ3NDFaFw0yNjA4MjEwMTQ2NDFaMDMxMTAvBgNV BAMTKDRCOTNEQUNENkM2N0Q3MDhCODE1N0IyNDYwOERBNjcxOUQ2MjQyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGNoIZ1vAY2ZywqSRlWEDc3357 kE7AETIRwiunrLAQchf11hpauPPrcZyJigh+Ksm0xSPmXV1tAvPZxosupouCrxOO cg3benkciBVfvylcYOX4ZJFdkFDEKC6hQZe+VNZtIoWk1JP7wY+pfchTC7f6GOKo x8dDw3gb7ByKfnmJcUlwAWrHFU8r3l0OHgsFHi6cfZ++gyZ/Ng7uYpbj9MnlBRTA zatDBJfkLH268yZ7UXu0lvJj2GlrPw2d5jaHF+lxfi6rqmiof9hHUWqAWJlUMxrz e9WFO6RIEppt+Hvk4YXfgbARwjNnVF20zeWUujER+WVvSO2D61uzEonPqnWrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS5PazWxn1wi4FXskYI2mcZ1iQt4wHwYDVR0j BBgwFoAU3U/+ysb7E8TxR2AvixgkQphRobkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJhMGI4ZjgtNGZjZi00YjliLTk3OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FD NkZCMTNDNEYxNDc2MDJGOEIxODI0NDI5ODUxQTFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDRGRkVDQUM2RkIxM0M0RjE0NzYwMkY4QjE4MjQ0Mjk4NTFB MUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvREQ0RkZFQ0FDNkZCMTNDNEYxNDc2MDJGOEIxODI0 NDI5ODUxQTFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+Ubk7oqHarMn24Sle8c50r8+v8Fcb/Wrxh g2AQMkhEseWVRUXjxxV8bmEcFVRwgIt21EZOICSLYxv3g7MCiqweMdIN/3UCniIv Lfp53jNRDvAUDDSH6R/t4o8yNgwGYlzf+u8dolE51S4Trvj0AFA1laA84RjxXYk8 gvpyMJ+teLzoi7M8Ckq81SwtcQotLXpuio1eOxIk/ja28l1T2KmaoGglDkH9IGTh 2r7ThbijinvW8S9cajKzE110LomOc/bB8PZSZDQ+Jf3SjUxEpKbaJOyNEeK0DKDj izXieiUmKy6Fk/AqmySIT58FeaJW9sfWVapymz3sRvcbAA0hiLg= -----END CERTIFICATE-----Generated at Thu Aug 20 13:14:15 2026 by rpki-client