$ rpki-client -vvf rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft File: DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft (raw, json) Hash identifier: 48pr9plsMSHiUMleSUuSrEg+gYTmDrguz/yJd6mBORM= Subject key identifier: A3:8D:1D:86:B9:18:61:A3:A8:38:5D:C1:2B:B3:F8:6C:E6:F3:53:83 Authority key identifier: DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B Certificate issuer: /CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B Certificate serial: 0BD00F5B6B9038CF93BBD06FAA270D2CE1C3D2D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 12:31:05 +0000 Manifest this update: Fri 19 Jun 2026 12:26:05 +0000 Manifest next update: Sat 20 Jun 2026 14:58:05 +0000 Files and hashes: 1: DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl (hash: DjawRO3aOMo2YEYMLRcf5feAATKvVr3FYmqQp7RYuEc=) 2: 3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (hash: Je+1Z3JPlfN1SueLjZhyMHWstp3IWlu0F41bg1IrLNI=) 3: 3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (hash: DmsqerRTCfleWC17bgPmpGYVL2XXTPf5hE4dywrXO3g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 14:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d0:0f:5b:6b:90:38:cf:93:bb:d0:6f:aa:27:0d:2c:e1:c3:d2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B Validity Not Before: Jun 19 12:26:05 2026 GMT Not After : Jun 20 14:58:05 2026 GMT Subject: CN=A38D1D86B91861A3A8385DC12BB3F86CE6F35383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:88:c7:23:68:60:07:31:3d:d9:71:fb:8e:47: 56:b4:95:cb:c3:36:b0:69:1a:2a:9b:71:5c:41:fe: 09:4b:32:75:65:f1:22:80:2c:95:9f:79:6d:9a:25: 52:6e:14:c4:70:17:8c:3c:02:6b:0b:da:e1:81:c2: e0:b9:4f:2d:6f:e2:c3:04:f1:21:ed:d2:16:4a:31: 92:69:b8:d7:75:9c:05:46:f5:90:f3:a4:3a:de:ac: 70:b9:7b:5f:7e:8a:8d:c6:97:1d:c4:66:c2:01:43: c2:04:e8:6a:58:28:92:ca:a4:78:83:1f:5a:e1:e2: 21:8e:e4:97:fd:f5:8e:16:d3:be:0c:eb:97:0c:3f: 4e:cc:7a:10:6e:ea:14:e8:23:87:08:ad:4d:f1:55: e0:e5:e0:82:d1:fc:6d:df:94:54:91:6f:da:6c:48: 43:ec:24:af:04:c6:3b:93:94:74:52:92:14:bd:22: 76:db:ff:ef:87:d7:f3:d9:59:fe:d6:7d:d1:f1:b7: 3f:fd:d6:c8:0c:0c:08:20:6c:ae:ed:10:7c:40:71: 16:01:1f:1f:f8:fd:56:d1:a4:e2:09:b9:b7:60:eb: 6d:2e:27:06:d5:20:07:5b:ab:42:01:d3:8f:db:23: 37:63:b2:c6:23:f9:11:5c:1d:7e:ac:82:0a:97:c4: 89:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8D:1D:86:B9:18:61:A3:A8:38:5D:C1:2B:B3:F8:6C:E6:F3:53:83 X509v3 Authority Key Identifier: keyid:DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:12:91:f1:dc:d1:88:92:82:15:2e:48:c6:ed:54:34:a3:79: 57:c2:bf:07:25:41:ae:de:8a:b0:7c:30:ab:11:00:df:4c:a7: d2:8f:03:b7:86:29:bc:15:d7:c1:fa:7f:7e:44:33:e4:ab:a3: ac:f2:3d:a5:9a:9c:75:9c:9b:5d:46:7f:56:d5:6c:be:24:08: 18:ff:52:ad:30:e7:33:29:07:9e:3e:17:10:9c:fd:1a:4c:53: f0:1f:ee:0c:e4:b5:b0:a8:c7:13:eb:a2:e5:a6:85:0f:46:08: ed:f5:ed:55:65:eb:03:ca:be:d1:90:bb:c1:4b:11:e4:fc:c7: 88:ee:bb:c3:c7:42:9a:27:62:4b:1f:72:8b:09:9d:37:cd:97: 23:0f:ab:bf:c4:3d:e2:30:b6:72:75:2a:3d:8f:48:ea:1f:02: f4:30:ff:95:db:01:2d:41:52:a1:ca:b6:cb:86:68:c4:fd:9c: cb:39:c3:25:07:d8:17:59:cf:cd:d0:39:f6:7e:e2:6f:f0:13: 90:78:29:19:fd:e1:91:5d:80:f6:db:de:ab:88:6e:12:66:26: 39:c1:72:c5:98:bd:78:6b:d0:c5:62:b6:b6:bd:22:c4:c7:39: 15:1e:a9:c3:4f:cb:bc:e8:7e:aa:cc:4e:cf:50:41:1c:c7:ac: 55:e4:db:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC9APW2uQOM+Tu9BvqicNLOHD0tAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERENTQ4REE0RTJFRDY4ODAxOEMxNzhGRjZCMURCNkFC NDBBQUQ2QjAeFw0yNjA2MTkxMjI2MDVaFw0yNjA2MjAxNDU4MDVaMDMxMTAvBgNV BAMTKEEzOEQxRDg2QjkxODYxQTNBODM4NURDMTJCQjNGODZDRTZGMzUzODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRiMcjaGAHMT3ZcfuOR1a0lcvD NrBpGiqbcVxB/glLMnVl8SKALJWfeW2aJVJuFMRwF4w8AmsL2uGBwuC5Ty1v4sME 8SHt0hZKMZJpuNd1nAVG9ZDzpDrerHC5e19+io3Glx3EZsIBQ8IE6GpYKJLKpHiD H1rh4iGO5Jf99Y4W074M65cMP07MehBu6hToI4cIrU3xVeDl4ILR/G3flFSRb9ps SEPsJK8ExjuTlHRSkhS9Inbb/++H1/PZWf7WfdHxtz/91sgMDAggbK7tEHxAcRYB Hx/4/VbRpOIJubdg620uJwbVIAdbq0IB04/bIzdjssYj+RFcHX6sggqXxImXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo40dhrkYYaOoOF3BK7P4bObzU4MwHwYDVR0j BBgwFoAU3dVI2k4u1ogBjBeP9rHbarQKrWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI1ZTg4YmQtNzVlMi00NWRmLTg4NjctNDU0MDJmYzdjNGIxLzAvRERENTQ4REE0 RTJFRDY4ODAxOEMxNzhGRjZCMURCNkFCNDBBQUQ2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREQ1NDhEQTRFMkVENjg4MDE4QzE3OEZGNkIxREI2QUI0MEFB RDZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI1ZTg4YmQtNzVlMi00NWRmLTg4 NjctNDU0MDJmYzdjNGIxLzAvRERENTQ4REE0RTJFRDY4ODAxOEMxNzhGRjZCMURC NkFCNDBBQUQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIESkfHc0YiSghUuSMbtVDSjeVfCvwclQa7e irB8MKsRAN9Mp9KPA7eGKbwV18H6f35EM+Sro6zyPaWanHWcm11Gf1bVbL4kCBj/ Uq0w5zMpB54+FxCc/RpMU/Af7gzktbCoxxProuWmhQ9GCO317VVl6wPKvtGQu8FL EeT8x4juu8PHQponYksfcosJnTfNlyMPq7/EPeIwtnJ1Kj2PSOofAvQw/5XbAS1B UqHKtsuGaMT9nMs5wyUH2BdZz83QOfZ+4m/wE5B4KRn94ZFdgPbb3quIbhJmJjnB csWYvXhr0MVitra9IsTHORUeqcNPy7zofqrMTs9QQRzHrFXk2+M= -----END CERTIFICATE-----Generated at Sat Jun 20 09:16:07 2026 by rpki-client