$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft File: DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft (raw, json) Hash identifier: vwvcqQxa2woVzoImBrfhIXNip5jy9CovnXfm/WymODA= Subject key identifier: CD:52:5B:05:AF:92:20:C8:A9:99:E2:6B:47:49:8B:89:3F:EF:D4:68 Authority key identifier: DD:AF:8D:65:28:C4:2D:5B:45:31:AC:E7:7D:6A:1C:BE:1F:04:66:41 Certificate issuer: /CN=DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641 Certificate serial: 6EBC041B5BA032282723827D5C46E105FDC0252E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 15:03:57 +0000 Manifest this update: Fri 19 Jun 2026 14:58:57 +0000 Manifest next update: Sat 20 Jun 2026 16:13:57 +0000 Files and hashes: 1: 3130332e33312e3130392e302f32342d3234203d3e20313333333630.roa (hash: ohVHX4YN8ERE5ZaanIq+FJ4sj6xtkTx6fZFuzW5hCso=) 2: DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl (hash: i3rBdpcVu5ioPnXnHEuRxooPwUs39g/QuLZaie73y9s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 16:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:bc:04:1b:5b:a0:32:28:27:23:82:7d:5c:46:e1:05:fd:c0:25:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641 Validity Not Before: Jun 19 14:58:57 2026 GMT Not After : Jun 20 16:13:57 2026 GMT Subject: CN=CD525B05AF9220C8A999E26B47498B893FEFD468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:ff:fa:a5:56:de:50:9e:2f:a8:75:8f:a4: 9c:1e:05:12:4f:34:09:54:21:dd:04:9f:83:ca:da: 6e:0f:e1:28:a9:7b:c0:69:cf:67:4e:e9:bc:5a:09: c8:fb:dd:fa:e2:a8:69:ae:4f:b3:50:3b:8f:d0:76: d7:c5:3b:c0:0b:77:15:45:c7:83:de:28:eb:3f:11: 96:6f:6c:40:ef:47:9e:35:15:3e:40:8d:0d:10:34: df:6b:09:83:e7:dd:e1:63:f1:3d:75:f1:3f:19:14: 61:a3:2a:86:e6:15:b6:16:f8:0f:61:9e:fd:9e:b7: b2:46:30:af:64:e3:13:ee:8f:00:7a:35:ad:4f:40: 45:2b:f4:f9:5d:29:74:0d:3a:f4:26:d1:ae:bd:0d: 03:79:24:56:85:d6:e6:13:69:55:6a:2d:fb:07:8d: e6:34:57:61:e6:9d:58:97:60:00:cd:4a:c0:3a:49: d2:b3:ab:2f:2e:01:95:e4:e7:2a:8d:5b:bd:87:c3: b1:61:1f:6f:cf:8f:a8:e4:89:2e:3a:67:66:7e:cf: 73:31:54:0a:63:be:bd:6b:8e:f9:0d:56:df:67:2f: d6:31:d9:c1:85:ea:0c:0a:05:15:2f:5e:03:4f:dd: 55:e8:e3:05:4e:1a:da:bf:73:ee:a5:9f:d6:2c:7b: 9a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:52:5B:05:AF:92:20:C8:A9:99:E2:6B:47:49:8B:89:3F:EF:D4:68 X509v3 Authority Key Identifier: keyid:DD:AF:8D:65:28:C4:2D:5B:45:31:AC:E7:7D:6A:1C:BE:1F:04:66:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/DDAF8D6528C42D5B4531ACE77D6A1CBE1F046641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:a2:ef:37:ec:5e:7c:47:50:33:dd:2e:39:c3:53:d5:f6:b3: 6d:9e:18:d5:f8:f7:b8:f5:43:6e:97:80:44:ec:19:ef:ef:08: 26:66:b9:8e:e5:6c:3f:e0:3b:03:fd:3c:de:d3:1a:9a:a7:41: e4:32:6b:e5:00:9e:86:c2:bf:ff:32:b7:f3:ab:9d:44:1c:8b: 1d:9c:42:66:45:7d:f5:98:85:08:d0:51:83:24:12:1f:41:7e: 33:58:94:67:33:cb:27:01:78:01:50:36:1c:e1:c7:de:d9:f3: b1:b5:20:69:76:25:c7:a2:91:7b:6c:f4:20:8d:9e:e1:55:b1: f0:24:95:f8:c7:53:ab:3c:a7:67:49:e6:bc:8e:0a:67:be:6a: 42:0c:0f:f8:04:18:cd:41:e1:4a:03:28:6a:de:83:d0:ca:97: 5f:67:27:82:19:4c:26:7b:f6:32:9d:68:d4:36:88:cf:ef:33: 39:ba:b6:d1:4f:e4:c9:cb:53:06:58:ba:f3:81:6d:d3:b9:b8: d1:b6:b8:9e:6a:b6:f1:7f:1e:d5:a8:d4:2f:1c:3b:8c:d6:4f: 1e:04:48:e0:b5:7d:33:22:fb:e6:a1:fc:95:68:d8:92:12:10: 77:63:6c:9e:5a:b2:8f:0e:e3:4f:60:da:0d:db:b3:06:75:52: ce:63:ba:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbrwEG1ugMignI4J9XEbhBf3AJS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjhENjUyOEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFDQkUx RjA0NjY0MTAeFw0yNjA2MTkxNDU4NTdaFw0yNjA2MjAxNjEzNTdaMDMxMTAvBgNV BAMTKENENTI1QjA1QUY5MjIwQzhBOTk5RTI2QjQ3NDk4Qjg5M0ZFRkQ0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDT//6pVbeUJ4vqHWPpJweBRJP NAlUId0En4PK2m4P4Sipe8Bpz2dO6bxaCcj73friqGmuT7NQO4/QdtfFO8ALdxVF x4PeKOs/EZZvbEDvR541FT5AjQ0QNN9rCYPn3eFj8T118T8ZFGGjKobmFbYW+A9h nv2et7JGMK9k4xPujwB6Na1PQEUr9PldKXQNOvQm0a69DQN5JFaF1uYTaVVqLfsH jeY0V2HmnViXYADNSsA6SdKzqy8uAZXk5yqNW72Hw7FhH2/Pj6jkiS46Z2Z+z3Mx VApjvr1rjvkNVt9nL9Yx2cGF6gwKBRUvXgNP3VXo4wVOGtq/c+6ln9Yse5qNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzVJbBa+SIMipmeJrR0mLiT/v1GgwHwYDVR0j BBgwFoAU3a+NZSjELVtFMaznfWocvh8EZkEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY2YWEzMWEtZGQwZC00YzEwLWI1ZGQtYjFhODNmYTU3NzYzLzAvRERBRjhENjUy OEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFDQkUxRjA0NjY0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREFGOEQ2NTI4QzQyRDVCNDUzMUFDRTc3RDZBMUNCRTFGMDQ2 NjQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY2YWEzMWEtZGQwZC00YzEwLWI1 ZGQtYjFhODNmYTU3NzYzLzAvRERBRjhENjUyOEM0MkQ1QjQ1MzFBQ0U3N0Q2QTFD QkUxRjA0NjY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWi7zfsXnxHUDPdLjnDU9X2s22eGNX497j1 Q26XgETsGe/vCCZmuY7lbD/gOwP9PN7TGpqnQeQya+UAnobCv/8yt/OrnUQcix2c QmZFffWYhQjQUYMkEh9BfjNYlGczyycBeAFQNhzhx97Z87G1IGl2JceikXts9CCN nuFVsfAklfjHU6s8p2dJ5ryOCme+akIMD/gEGM1B4UoDKGreg9DKl19nJ4IZTCZ7 9jKdaNQ2iM/vMzm6ttFP5MnLUwZYuvOBbdO5uNG2uJ5qtvF/HtWo1C8cO4zWTx4E SOC1fTMi++ah/JVo2JISEHdjbJ5aso8O409g2g3bswZ1Us5jum0= -----END CERTIFICATE-----Generated at Sat Jun 20 09:15:34 2026 by rpki-client