$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft File: DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft (raw, json) Hash identifier: KvY73oX4cMicnyrKA06q1NSDICFnl7EaOHNDFtrCN4c= Subject key identifier: 1C:3D:A4:61:53:C6:92:0E:4B:FC:11:4C:93:CB:C6:67:67:00:3B:95 Authority key identifier: DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 Certificate issuer: /CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Certificate serial: 568B5CEC51F325AB08DA335A0C15E6E2C98D679C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft Manifest number: 43 Signing time: Sat 20 Jun 2026 05:36:36 +0000 Manifest this update: Sat 20 Jun 2026 05:31:36 +0000 Manifest next update: Sun 21 Jun 2026 07:00:36 +0000 Files and hashes: 1: DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl (hash: 0dgyivW0yaDZIjz8aBReBOd4KlNjCu7okSYiqMy5Y8Y=) 2: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: yIQlqFtzEyBabQj8ZV+fU4FgzaMPkBblM9AQE0hk6TU=) 3: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: /ucuML0e+8NVeub1h81o1HfhxHTujbKLgWAANxTlJqo=) 4: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: dYhK+jkniChfhicgSum73AYH3pvJ3PQYc3HjtlYfQRE=) 5: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: R2z9xaNaKZrL0Q1BTZoKmFOdkM+GucNCILqEsv6GHto=) 6: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: 3vdIVahG9RTfTLGTYsntjI3pmo9GulTq1yl7EBwWw9o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8b:5c:ec:51:f3:25:ab:08:da:33:5a:0c:15:e6:e2:c9:8d:67:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBE589E6A02B72D83086B3F5697DAB689A83BF0 Validity Not Before: Jun 20 05:31:36 2026 GMT Not After : Jun 21 07:00:36 2026 GMT Subject: CN=1C3DA46153C6920E4BFC114C93CBC66767003B95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d4:14:1a:18:a1:44:76:4a:5e:15:bf:93:e9: e8:96:a3:d2:6e:1d:7c:ac:63:f8:df:57:00:e5:88: 98:1d:5b:39:ba:c0:33:47:ec:49:87:2c:d2:02:85: 16:8b:4e:26:ef:e9:d8:85:08:90:48:fa:cf:b4:18: 65:48:65:37:84:ea:9b:04:3f:77:91:50:14:5e:54: a3:ac:d8:87:38:b8:93:b2:5f:dc:27:38:3c:6e:f3: db:5c:e6:e8:51:25:32:bb:e0:1c:60:9d:d3:bd:5c: d7:33:29:94:42:ad:20:79:ef:03:d6:e9:3d:3d:3b: 35:c0:6f:7d:a3:df:b5:dc:39:09:31:55:39:9e:fe: e7:0f:52:2f:e5:25:c2:31:91:91:d1:b4:f2:db:b8: 0b:43:d7:8a:3e:d1:84:29:68:ae:e9:e6:4c:28:80: a8:47:5e:97:43:bb:cb:b4:e8:45:1d:61:98:2c:6f: 91:24:70:87:6b:56:39:44:a3:f7:17:e4:e2:b1:ba: 9c:8d:3e:56:65:e4:2d:81:58:8b:36:d7:2d:02:e6: 62:2a:57:c6:a9:22:d8:5a:9d:19:ac:63:dc:88:74: 50:61:b6:9b:68:7d:a5:7c:ee:06:28:71:87:bb:eb: e1:cf:98:89:41:e4:fc:05:5a:29:7c:0c:9c:be:53: e8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3D:A4:61:53:C6:92:0E:4B:FC:11:4C:93:CB:C6:67:67:00:3B:95 X509v3 Authority Key Identifier: keyid:DD:BE:58:9E:6A:02:B7:2D:83:08:6B:3F:56:97:DA:B6:89:A8:3B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/DDBE589E6A02B72D83086B3F5697DAB689A83BF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4d:75:54:5b:6e:14:69:e7:18:d0:f5:1c:b2:58:fc:27:5a: 43:76:1e:1b:e0:a2:f3:93:82:29:2e:63:3f:95:fc:1e:a7:79: 64:46:8d:f0:1c:39:21:2a:e8:7e:25:ed:74:34:c9:00:a3:99: f1:88:70:a4:c9:f0:39:88:37:9c:a5:e7:f6:51:a1:59:0d:1b: d2:26:96:2e:35:5d:ee:e6:e0:0d:d7:71:aa:ca:38:e8:18:1f: 43:c7:4d:61:02:02:ca:09:b5:04:e7:ad:ae:f0:e7:a1:78:9e: ef:3c:25:c4:13:fb:b2:72:5d:0e:eb:00:be:76:43:e4:51:18: c6:cb:9e:17:98:d2:02:10:17:a1:fb:cb:ee:88:6b:dc:38:8d: ae:17:bc:f8:c1:7a:51:ee:50:6b:7e:aa:68:96:41:02:8a:0b: 64:36:37:00:81:16:7a:89:12:99:11:d9:79:27:20:72:ce:f1: ac:78:5f:cf:25:8d:ad:09:5c:a9:e0:fe:16:94:60:7d:47:a0: 47:e9:ae:a5:68:e7:c3:a2:8c:ed:a4:ff:04:76:ae:1f:55:b5: 5c:5c:18:18:41:3a:77:35:e4:80:63:65:9c:73:e7:e6:26:f8: de:de:76:8b:a2:f3:3c:1d:9a:33:45:44:2b:11:ee:06:29:3f: c7:d8:33:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVotc7FHzJasI2jNaDBXm4smNZ5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCRTU4OUU2QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4 OUE4M0JGMDAeFw0yNjA2MjAwNTMxMzZaFw0yNjA2MjEwNzAwMzZaMDMxMTAvBgNV BAMTKDFDM0RBNDYxNTNDNjkyMEU0QkZDMTE0QzkzQ0JDNjY3NjcwMDNCOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51BQaGKFEdkpeFb+T6eiWo9Ju HXysY/jfVwDliJgdWzm6wDNH7EmHLNIChRaLTibv6diFCJBI+s+0GGVIZTeE6psE P3eRUBReVKOs2Ic4uJOyX9wnODxu89tc5uhRJTK74BxgndO9XNczKZRCrSB57wPW 6T09OzXAb32j37XcOQkxVTme/ucPUi/lJcIxkZHRtPLbuAtD14o+0YQpaK7p5kwo gKhHXpdDu8u06EUdYZgsb5EkcIdrVjlEo/cX5OKxupyNPlZl5C2BWIs21y0C5mIq V8apIthanRmsY9yIdFBhtptofaV87gYocYe76+HPmIlB5PwFWil8DJy+U+gHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHD2kYVPGkg5L/BFMk8vGZ2cAO5UwHwYDVR0j BBgwFoAU3b5YnmoCty2DCGs/VpfatomoO/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmFlN2Q0NjEtMGUzMi00ZTY1LWJiODgtZDcyNDA1YjI0NDUxLzAvRERCRTU4OUU2 QTAyQjcyRDgzMDg2QjNGNTY5N0RBQjY4OUE4M0JGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREJFNTg5RTZBMDJCNzJEODMwODZCM0Y1Njk3REFCNjg5QTgz QkYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvRERCRTU4OUU2QTAyQjcyRDgzMDg2QjNGNTY5N0RB QjY4OUE4M0JGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtNdVRbbhRp5xjQ9RyyWPwnWkN2HhvgovOT gikuYz+V/B6neWRGjfAcOSEq6H4l7XQ0yQCjmfGIcKTJ8DmIN5yl5/ZRoVkNG9Im li41Xe7m4A3XcarKOOgYH0PHTWECAsoJtQTnra7w56F4nu88JcQT+7JyXQ7rAL52 Q+RRGMbLnheY0gIQF6H7y+6Ia9w4ja4XvPjBelHuUGt+qmiWQQKKC2Q2NwCBFnqJ EpkR2XknIHLO8ax4X88lja0JXKng/haUYH1HoEfprqVo58OijO2k/wR2rh9VtVxc GBhBOnc15IBjZZxz5+Ym+N7edoui8zwdmjNFRCsR7gYpP8fYM5s= -----END CERTIFICATE-----Generated at Sat Jun 20 08:47:17 2026 by rpki-client