$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft File: DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft (raw, json) Hash identifier: r7Fo68JzUWekZjmcK/GkQvXUilBEEyiCNXH0c7k8w5Q= Subject key identifier: 9D:9E:3D:31:10:CC:A2:35:58:09:BF:D4:58:17:90:15:88:85:AC:CB Authority key identifier: DD:C8:46:A2:41:57:1E:1F:CF:5D:F5:39:AD:EE:44:F9:B1:68:48:AC Certificate issuer: /CN=DDC846A241571E1FCF5DF539ADEE44F9B16848AC Certificate serial: 507F1267BCAB3A3C9BCDF2943A360571F5877D64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 18:47:23 +0000 Manifest this update: Wed 16 Sep 2026 18:42:23 +0000 Manifest next update: Thu 17 Sep 2026 20:18:23 +0000 Files and hashes: 1: DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl (hash: oxPF48lqcrjsBceX0N5STyolrH90UjmQgaQQKVNSCDk=) 2: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: a0hNIi6O+sVqt42fhC5LTpjPNLA3CmOlEpxa01bnEUs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:7f:12:67:bc:ab:3a:3c:9b:cd:f2:94:3a:36:05:71:f5:87:7d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC846A241571E1FCF5DF539ADEE44F9B16848AC Validity Not Before: Sep 16 18:42:23 2026 GMT Not After : Sep 17 20:18:23 2026 GMT Subject: CN=9D9E3D3110CCA2355809BFD4581790158885ACCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:71:20:39:cb:0e:a4:6d:63:34:10:51:09: 06:f1:78:78:61:29:68:bf:0d:37:78:07:6a:f5:5f: 39:65:41:cc:5f:06:c9:4e:e6:ea:26:07:42:c7:75: 72:06:d8:68:e0:f1:b6:1b:5d:e4:05:61:f0:13:b6: b9:18:f7:6c:c3:fe:1c:84:73:a8:d6:cb:a2:0a:1e: 46:0b:8d:cb:84:7d:8a:88:56:53:48:3e:6f:ad:29: 98:1b:eb:76:ec:b6:e0:2f:fe:cc:b9:a3:be:02:24: a7:95:0d:3c:4d:43:2f:dc:91:b1:c5:38:66:bc:d0: fc:c6:18:c1:1f:d2:f0:78:93:b0:c7:df:12:b4:28: 76:20:50:c5:96:31:fc:50:d7:b7:b6:74:94:d7:49: 90:b5:67:83:79:77:2a:94:30:77:45:b7:16:e0:53: f9:fe:89:aa:30:9d:b9:69:59:85:14:ae:c5:34:de: 55:1b:e8:95:3b:0d:c6:ba:51:71:76:ef:6d:de:f5: 31:78:29:a7:89:f4:24:cb:bd:6b:7f:c7:ff:3c:d6: 12:3e:9f:1f:99:d1:1e:a5:4c:9f:a5:3d:6d:35:92: 2c:69:ad:47:ef:53:de:e9:1b:c4:83:0f:2d:de:5f: 3c:a7:3c:d8:be:cd:f5:d4:0b:dd:c0:8c:d7:40:82: d5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9E:3D:31:10:CC:A2:35:58:09:BF:D4:58:17:90:15:88:85:AC:CB X509v3 Authority Key Identifier: keyid:DD:C8:46:A2:41:57:1E:1F:CF:5D:F5:39:AD:EE:44:F9:B1:68:48:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:12:26:20:28:58:93:60:46:f0:37:40:2d:0e:91:2f:d6:71: ba:57:9d:61:f7:7e:82:ff:5f:e4:91:89:48:4e:c6:45:06:17: 55:29:7e:9e:3c:87:d8:d8:b1:1a:10:7d:2d:28:4d:72:a9:2a: 39:99:fe:e9:90:cb:f7:be:46:22:f5:a0:95:ad:aa:17:d2:cb: 99:53:c0:04:ac:06:01:6e:6b:76:08:76:2f:68:a1:3a:a5:6c: ee:7c:21:c7:e0:9b:17:84:0f:ac:20:a7:a5:02:6e:02:d8:cc: 24:aa:b5:98:d4:99:a7:d8:45:e5:5b:75:53:97:3f:0f:62:2b: ec:2c:38:5b:62:95:3f:41:b8:88:48:23:11:22:0a:d2:dd:6d: fc:96:51:c0:5a:a0:af:7c:6f:0a:95:83:93:0b:68:ee:cf:9c: 20:86:6a:09:d3:12:24:6a:c9:5c:78:d0:c9:16:d1:7a:21:09: 5c:4a:b9:e9:35:b8:00:ed:51:96:29:bf:c0:04:29:47:98:cd: 34:ee:bf:e6:1c:89:fb:66:85:08:49:27:e0:c1:e4:11:3b:6e: 77:39:b3:28:6b:cc:12:7f:85:b7:9d:c8:a3:a8:a5:2f:c1:c0: cf:8f:5d:3e:bf:60:ad:33:18:6e:6f:44:71:df:1c:18:66:c1: a3:49:a2:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUH8SZ7yrOjybzfKUOjYFcfWHfWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDODQ2QTI0MTU3MUUxRkNGNURGNTM5QURFRTQ0RjlC MTY4NDhBQzAeFw0yNjA5MTYxODQyMjNaFw0yNjA5MTcyMDE4MjNaMDMxMTAvBgNV BAMTKDlEOUUzRDMxMTBDQ0EyMzU1ODA5QkZENDU4MTc5MDE1ODg4NUFDQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+E3EgOcsOpG1jNBBRCQbxeHhh KWi/DTd4B2r1XzllQcxfBslO5uomB0LHdXIG2Gjg8bYbXeQFYfATtrkY92zD/hyE c6jWy6IKHkYLjcuEfYqIVlNIPm+tKZgb63bstuAv/sy5o74CJKeVDTxNQy/ckbHF OGa80PzGGMEf0vB4k7DH3xK0KHYgUMWWMfxQ17e2dJTXSZC1Z4N5dyqUMHdFtxbg U/n+iaownblpWYUUrsU03lUb6JU7Dca6UXF2723e9TF4KaeJ9CTLvWt/x/881hI+ nx+Z0R6lTJ+lPW01kixprUfvU97pG8SDDy3eXzynPNi+zfXUC93AjNdAgtVpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnZ49MRDMojVYCb/UWBeQFYiFrMswHwYDVR0j BBgwFoAU3chGokFXHh/PXfU5re5E+bFoSKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYmRkYmYtZDExOS00YzgwLTg4MjctN2E4ODhhOTNjZTAzLzAvRERDODQ2QTI0 MTU3MUUxRkNGNURGNTM5QURFRTQ0RjlCMTY4NDhBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREM4NDZBMjQxNTcxRTFGQ0Y1REY1MzlBREVFNDRGOUIxNjg0 OEFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvRERDODQ2QTI0MTU3MUUxRkNGNURGNTM5QURFRTQ0 RjlCMTY4NDhBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIASJiAoWJNgRvA3QC0OkS/WcbpXnWH3foL/ X+SRiUhOxkUGF1Upfp48h9jYsRoQfS0oTXKpKjmZ/umQy/e+RiL1oJWtqhfSy5lT wASsBgFua3YIdi9ooTqlbO58IcfgmxeED6wgp6UCbgLYzCSqtZjUmafYReVbdVOX Pw9iK+wsOFtilT9BuIhIIxEiCtLdbfyWUcBaoK98bwqVg5MLaO7PnCCGagnTEiRq yVx40MkW0XohCVxKuek1uADtUZYpv8AEKUeYzTTuv+YciftmhQhJJ+DB5BE7bnc5 syhrzBJ/hbedyKOopS/BwM+PXT6/YK0zGG5vRHHfHBhmwaNJops= -----END CERTIFICATE-----Generated at Thu Sep 17 10:12:46 2026 by rpki-client