$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft File: DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft (raw, json) Hash identifier: Y5EL0Vqcfxp0xPKwXLhWvTOCvzkOaDOeP/slGYWbRQ4= Subject key identifier: 44:44:AF:B4:94:1C:0B:8A:C1:A7:2D:55:FD:8C:BA:19:44:52:1A:68 Authority key identifier: DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 Certificate issuer: /CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Certificate serial: 5D62FC94EF65C094F5333B1C98B59DC7B80A81A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft Manifest number: EA Signing time: Sat 24 Oct 2026 13:46:18 +0000 Manifest this update: Sat 24 Oct 2026 13:41:18 +0000 Manifest next update: Sun 25 Oct 2026 16:28:18 +0000 Files and hashes: 1: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: yIQlqFtzEyBabQj8ZV+fU4FgzaMPkBblM9AQE0hk6TU=) 2: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: R2z9xaNaKZrL0Q1BTZoKmFOdkM+GucNCILqEsv6GHto=) 3: DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl (hash: e+U2xFhG6Ryf5eEiILy6o+nGOpDMfYrOIFmAEkiezPY=) 4: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: 3vdIVahG9RTfTLGTYsntjI3pmo9GulTq1yl7EBwWw9o=) 5: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: /ucuML0e+8NVeub1h81o1HfhxHTujbKLgWAANxTlJqo=) 6: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: dYhK+jkniChfhicgSum73AYH3pvJ3PQYc3HjtlYfQRE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 16:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:62:fc:94:ef:65:c0:94:f5:33:3b:1c:98:b5:9d:c7:b8:0a:81:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Validity Not Before: Oct 24 13:41:18 2026 GMT Not After : Oct 25 16:28:18 2026 GMT Subject: CN=4444AFB4941C0B8AC1A72D55FD8CBA1944521A68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:81:e6:e0:0c:7b:ba:f5:67:3e:f7:a3:1d: da:b3:29:e7:80:25:7b:3b:5f:52:b7:7e:3d:5c:3a: 47:35:e7:72:4f:b1:af:4e:15:c0:62:5b:fc:e4:95: e0:c2:0b:df:57:5f:22:a8:d3:23:50:3f:73:3f:23: ee:02:5d:92:86:fd:f9:f6:cd:33:5a:77:ab:26:fa: 63:b3:e1:b4:6c:9f:c7:5a:dc:b9:15:03:2f:50:77: 63:51:62:12:43:43:bb:07:5e:33:40:16:7a:a5:fe: 16:ee:2d:9d:11:f1:dc:19:9f:f0:92:1e:94:71:92: af:b5:48:0c:6b:a5:20:b6:ab:1e:1f:14:2c:27:8f: 97:53:2d:4d:1e:fd:1a:73:80:05:33:eb:92:a6:54: b5:09:40:56:4c:8e:8c:9f:da:57:50:6f:ef:27:ad: de:75:be:17:5c:d7:55:4d:dd:87:e3:cf:d9:04:7e: bb:b9:6a:20:94:32:f3:db:14:2f:c0:f4:40:3d:8e: 4b:53:09:36:6a:d2:d5:d9:25:a0:c9:7a:58:dc:2c: c3:78:f7:21:be:51:6c:f5:03:8f:93:fc:5b:3b:90: dd:cf:da:72:0b:96:53:b9:f1:ed:d7:6e:d3:48:54: 8c:04:af:d8:f9:77:48:d1:65:48:06:19:8e:10:fb: 47:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:44:AF:B4:94:1C:0B:8A:C1:A7:2D:55:FD:8C:BA:19:44:52:1A:68 X509v3 Authority Key Identifier: keyid:DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:26:d6:8a:04:b2:48:95:9b:16:a6:22:46:16:36:bb:7e:d3: cd:6e:4f:ab:21:75:c5:a5:dc:5b:85:81:39:9c:98:a6:0f:01: d9:6e:60:fa:dd:15:a5:d5:53:9f:0e:36:c9:48:46:72:0c:09: b7:a3:f3:45:ac:a9:8e:68:9c:a5:3f:c2:12:4d:dd:20:22:ab: c9:73:29:f1:ce:4d:51:50:24:ff:de:17:fb:79:c1:6e:28:95: 56:8c:a6:01:12:a9:7c:6c:c0:21:96:85:d0:61:59:5b:54:7e: 04:a7:1f:60:18:6a:3b:86:17:0a:9e:9e:b3:c0:82:69:92:0a: 34:4a:ed:e1:98:ce:43:b8:09:2f:3f:ff:6e:ec:5f:c1:b0:f9: 84:18:a4:6c:76:01:0b:e3:17:d4:46:07:38:5f:89:0b:10:da: 22:b0:cf:74:a6:8f:67:e0:e4:46:d4:e5:bb:b6:b5:b8:ac:01: b9:3c:2f:ca:8e:59:ca:6a:6d:52:9e:3a:4d:44:5d:6f:41:79: 27:a9:ae:da:bc:5f:21:5c:a8:4e:e8:75:98:fc:31:0d:31:ce: 48:e1:0f:cc:5d:91:47:dd:bc:26:6a:54:90:6f:26:76:72:21: ea:7a:28:bc:cd:ba:21:7b:64:7b:32:1a:72:20:39:12:4e:15: 34:88:2e:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWL8lO9lwJT1MzscmLWdx7gKgaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCRTU4OUU2QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4 OUE4M0JGMDAeFw0yNjEwMjQxMzQxMThaFw0yNjEwMjUxNjI4MThaMDMxMTAvBgNV BAMTKDQ0NDRBRkI0OTQxQzBCOEFDMUE3MkQ1NUZEOENCQTE5NDQ1MjFBNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6UYHm4Ax7uvVnPvejHdqzKeeA JXs7X1K3fj1cOkc153JPsa9OFcBiW/zkleDCC99XXyKo0yNQP3M/I+4CXZKG/fn2 zTNad6sm+mOz4bRsn8da3LkVAy9Qd2NRYhJDQ7sHXjNAFnql/hbuLZ0R8dwZn/CS HpRxkq+1SAxrpSC2qx4fFCwnj5dTLU0e/RpzgAUz65KmVLUJQFZMjoyf2ldQb+8n rd51vhdc11VN3Yfjz9kEfru5aiCUMvPbFC/A9EA9jktTCTZq0tXZJaDJeljcLMN4 9yG+UWz1A4+T/Fs7kN3P2nILllO58e3XbtNIVIwEr9j5d0jRZUgGGY4Q+0e5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURESvtJQcC4rBpy1V/Yy6GURSGmgwHwYDVR0j BBgwFoAU3b5YnmoCty2DCGs/VpfatomoO/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmFlN2Q0NjEtMGUzMi00ZTY1LWJiODgtZDcyNDA1YjI0NDUxLzAvRERCRTU4OUU2 QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4OUE4M0JGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREJFNTg5RTZBMDJCNzJEODMwODZCM0Y1Njk3REFCNjg5QTgz QkYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvRERCRTU4OUU2QTAyQjcyRDgzMDg2QjNGNTY5N0RB QjY4OUE4M0JGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4m1ooEskiVmxamIkYWNrt+081uT6shdcWl 3FuFgTmcmKYPAdluYPrdFaXVU58ONslIRnIMCbej80WsqY5onKU/whJN3SAiq8lz KfHOTVFQJP/eF/t5wW4olVaMpgESqXxswCGWhdBhWVtUfgSnH2AYajuGFwqenrPA gmmSCjRK7eGYzkO4CS8//27sX8Gw+YQYpGx2AQvjF9RGBzhfiQsQ2iKwz3Smj2fg 5EbU5bu2tbisAbk8L8qOWcpqbVKeOk1EXW9BeSeprtq8XyFcqE7odZj8MQ0xzkjh D8xdkUfdvCZqVJBvJnZyIep6KLzNuiF7ZHsyGnIgORJOFTSILuo= -----END CERTIFICATE-----Generated at Sun Oct 25 06:06:18 2026 by rpki-client