$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft File: DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft (raw, json) Hash identifier: /x7R4+xA6dzlvMC0p2uRcCHoKZsqeH3sv24wOLukl3Q= Subject key identifier: 89:59:FA:16:ED:CD:9E:18:D4:36:7E:8F:DF:2A:93:6F:1E:90:B5:8F Authority key identifier: DD:AF:8D:65:28:C4:2D:5B:45:31:AC:E7:7D:6A:1C:BE:1F:04:66:41 Certificate issuer: /CN=DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641 Certificate serial: 3985660644DB30C5D1EFA02B72AB2DB24A3C2FCC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft Manifest number: EB Signing time: Sun 25 Oct 2026 02:32:09 +0000 Manifest this update: Sun 25 Oct 2026 02:27:09 +0000 Manifest next update: Mon 26 Oct 2026 03:17:09 +0000 Files and hashes: 1: 3130332e33312e3130392e302f32342d3234203d3e20313333333630.roa (hash: ohVHX4YN8ERE5ZaanIq+FJ4sj6xtkTx6fZFuzW5hCso=) 2: DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl (hash: ko3FHjUz+qubQ/c8A9apK+D8AoP0J3svXG6uBYXmXgQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 03:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:85:66:06:44:db:30:c5:d1:ef:a0:2b:72:ab:2d:b2:4a:3c:2f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641 Validity Not Before: Oct 25 02:27:09 2026 GMT Not After : Oct 26 03:17:09 2026 GMT Subject: CN=8959FA16EDCD9E18D4367E8FDF2A936F1E90B58F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bf:cf:29:be:39:62:c2:bf:fa:45:6a:62:0c: 60:80:54:fe:ca:ae:c0:e1:8b:ae:51:56:36:4f:8a: c6:5c:ca:1f:da:b2:52:b9:8a:1d:5d:50:e8:3e:f8: e6:18:5a:88:21:e9:49:96:7f:be:07:73:39:76:ec: 1b:1c:91:73:3c:e2:65:b9:2b:51:9d:63:c5:bc:e5: 04:57:8d:b7:c5:d2:5b:fb:97:ed:76:c5:34:27:73: 61:04:7d:55:a4:13:22:3d:6f:19:c5:db:ed:b9:5a: 7d:b1:4d:fb:bc:55:e7:3c:07:b2:3e:9b:75:3e:8b: ad:ff:7a:df:7a:53:a1:dd:98:8c:2a:90:d3:ff:df: 6d:8d:b2:49:1d:fc:5f:58:27:25:49:f7:8b:b9:fd: d7:9a:ea:70:8b:5c:1b:f5:d3:52:ad:22:1c:ba:9f: cc:4c:d1:85:f8:d2:80:27:6a:a4:a1:3f:44:9e:1a: b2:4f:f5:90:a7:e4:ab:f7:f6:a4:3d:ad:7f:25:6f: 62:b2:32:e5:c8:05:bc:88:17:f7:26:c0:c5:49:15: 6e:2b:77:2a:89:e5:44:fe:6e:e6:32:a7:eb:4f:ed: 09:41:98:31:19:72:c9:4e:bc:42:37:28:52:4f:01: 45:ee:a1:29:56:fd:b6:6b:98:44:cb:3c:ec:a4:d6: fe:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:59:FA:16:ED:CD:9E:18:D4:36:7E:8F:DF:2A:93:6F:1E:90:B5:8F X509v3 Authority Key Identifier: keyid:DD:AF:8D:65:28:C4:2D:5B:45:31:AC:E7:7D:6A:1C:BE:1F:04:66:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:f3:46:18:0e:2a:3f:58:39:07:fe:2d:d9:d8:04:bc:a4:e8: 51:38:95:9c:0c:46:06:ab:c3:e9:f0:f7:33:30:05:1b:d1:58: 39:7f:5c:05:3d:34:23:06:bd:fb:60:af:d9:98:db:d4:f3:9d: 58:dd:ba:bc:d0:7a:94:0f:75:84:dc:5c:2f:ee:bd:2a:22:0f: 2e:8d:ab:80:b5:96:57:71:cc:dc:10:0a:b3:85:0e:fd:c6:c1: 97:f9:f9:6a:dc:cd:a5:01:f8:09:39:82:92:ac:f5:dd:62:ff: 67:82:94:2b:16:0e:74:de:a1:0d:f6:99:29:49:21:e7:58:f4: 99:04:be:fd:ed:66:c5:53:84:bd:fd:82:79:cd:14:9d:94:b8: 27:9a:ed:19:57:35:af:c8:31:72:c2:4f:1a:31:7d:65:72:0b: a9:01:02:4d:e3:05:d3:c9:10:3e:0a:e6:b6:d4:b1:97:4c:98: 8c:7c:70:4b:f8:e2:f2:46:27:7c:4c:0f:08:36:31:c7:ee:47: bc:58:2d:ed:e9:f4:47:1f:a1:58:44:58:48:4a:be:c4:f5:55: cf:1c:0e:c0:fb:16:a2:03:93:56:9d:49:6e:d3:b1:cb:d7:15: a2:2b:3f:33:89:b7:83:9e:06:1a:09:86:27:c9:c4:fd:bf:20: e6:c6:f9:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOYVmBkTbMMXR76Arcqstsko8L8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjhENjUyOEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFDQkUx RjA0NjY0MTAeFw0yNjEwMjUwMjI3MDlaFw0yNjEwMjYwMzE3MDlaMDMxMTAvBgNV BAMTKDg5NTlGQTE2RURDRDlFMThENDM2N0U4RkRGMkE5MzZGMUU5MEI1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYv88pvjliwr/6RWpiDGCAVP7K rsDhi65RVjZPisZcyh/aslK5ih1dUOg++OYYWogh6UmWf74Hczl27BsckXM84mW5 K1GdY8W85QRXjbfF0lv7l+12xTQnc2EEfVWkEyI9bxnF2+25Wn2xTfu8Vec8B7I+ m3U+i63/et96U6HdmIwqkNP/322Nskkd/F9YJyVJ94u5/dea6nCLXBv101KtIhy6 n8xM0YX40oAnaqShP0SeGrJP9ZCn5Kv39qQ9rX8lb2KyMuXIBbyIF/cmwMVJFW4r dyqJ5UT+buYyp+tP7QlBmDEZcslOvEI3KFJPAUXuoSlW/bZrmETLPOyk1v5BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiVn6Fu3NnhjUNn6P3yqTbx6QtY8wHwYDVR0j BBgwFoAU3a+NZSjELVtFMaznfWocvh8EZkEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY2YWEzMWEtZGQwZC00YzEwLWI1ZGQtYjFhODNmYTU3NzYzLzAvRERBRjhENjUy OEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFDQkUxRjA0NjY0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREFGOEQ2NTI4QzQyRDVCNDUzMUFDRTc3RDZBMUNCRTFGMDQ2 NjQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY2YWEzMWEtZGQwZC00YzEwLWI1 ZGQtYjFhODNmYTU3NzYzLzAvRERBRjhENjUyOEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFD QkUxRjA0NjY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMLzRhgOKj9YOQf+LdnYBLyk6FE4lZwMRgar w+nw9zMwBRvRWDl/XAU9NCMGvftgr9mY29TznVjdurzQepQPdYTcXC/uvSoiDy6N q4C1lldxzNwQCrOFDv3GwZf5+WrczaUB+Ak5gpKs9d1i/2eClCsWDnTeoQ32mSlJ IedY9JkEvv3tZsVThL39gnnNFJ2UuCea7RlXNa/IMXLCTxoxfWVyC6kBAk3jBdPJ ED4K5rbUsZdMmIx8cEv44vJGJ3xMDwg2McfuR7xYLe3p9EcfoVhEWEhKvsT1Vc8c DsD7FqIDk1adSW7TscvXFaIrPzOJt4OeBhoJhifJxP2/IObG+VM= -----END CERTIFICATE-----Generated at Sun Oct 25 20:04:24 2026 by rpki-client