$ rpki-client -vvvf rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft File: DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft (raw, json) Hash identifier: lDhjKqhaR4eWKfvBTq58k99QGqt/SBDT07407pAwgro= Subject key identifier: DE:11:65:7A:7F:1C:C2:D8:2F:34:AE:D7:A8:CC:D9:E9:43:44:1A:82 Authority key identifier: DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B Certificate issuer: /CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B Certificate serial: 034F7627971EE098E8EFE1B6B4BCF131C570D9E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft Manifest number: EC Signing time: Sun 25 Oct 2026 21:28:37 +0000 Manifest this update: Sun 25 Oct 2026 21:23:37 +0000 Manifest next update: Mon 26 Oct 2026 22:18:37 +0000 Files and hashes: 1: 3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (hash: DmsqerRTCfleWC17bgPmpGYVL2XXTPf5hE4dywrXO3g=) 2: 3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (hash: Je+1Z3JPlfN1SueLjZhyMHWstp3IWlu0F41bg1IrLNI=) 3: DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl (hash: H6pAG8uEOmU0UrpDdYoFWVi3t7a9nZH5kO/HSaA2Ncw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:4f:76:27:97:1e:e0:98:e8:ef:e1:b6:b4:bc:f1:31:c5:70:d9:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B Validity Not Before: Oct 25 21:23:37 2026 GMT Not After : Oct 26 22:18:37 2026 GMT Subject: CN=DE11657A7F1CC2D82F34AED7A8CCD9E943441A82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ec:d7:a9:db:59:05:c5:8f:58:88:fb:93:f3: 11:1b:0f:e9:4a:59:03:62:4e:12:c2:ce:19:35:dd: fa:4f:78:76:0b:68:ab:36:28:b2:12:77:ad:a5:dc: 54:88:8b:0c:98:7b:fc:a7:3a:20:e4:f4:ba:5a:0b: 53:3b:1f:b3:93:fd:9c:1a:dd:32:13:b4:59:98:04: a1:00:bd:8e:a3:35:37:cf:9f:28:fb:0f:b7:bd:07: 2c:bc:6f:c6:1a:c6:8e:0f:9f:c4:d8:cb:55:3d:47: 4f:5a:ea:e6:68:f4:8c:74:1f:5d:41:e0:2d:91:8b: 98:87:dc:9f:f3:65:1f:e2:5b:ca:b5:1f:80:79:a0: 5c:eb:0e:ef:90:45:69:00:32:3c:86:81:51:01:94: 16:ac:eb:b2:1f:5c:fb:70:54:d4:7f:6d:4d:9e:9d: 32:32:c6:58:16:5b:0a:ed:42:43:d9:f6:91:94:0d: 99:de:fa:77:b6:0b:c1:b7:d9:de:fa:91:30:07:0b: cb:75:cb:87:67:aa:05:12:5d:cc:2b:c8:2b:36:1e: ee:92:e7:5f:60:b8:bd:24:1f:e8:f1:a3:29:a0:1f: 72:09:08:ea:c2:4b:36:20:29:e4:a1:62:24:fc:1b: 6e:c6:a4:cd:f8:7c:55:1c:b5:a2:79:6b:06:b5:59: 71:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:11:65:7A:7F:1C:C2:D8:2F:34:AE:D7:A8:CC:D9:E9:43:44:1A:82 X509v3 Authority Key Identifier: keyid:DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ed:18:24:af:c7:92:96:6f:19:eb:c7:c9:4f:a8:2f:57:b8: d1:01:f6:b7:e7:1c:34:4b:f3:83:41:c9:9d:cb:a4:a9:79:72: bc:42:ff:f8:1c:a4:ca:17:dd:d0:63:b8:d6:1a:c7:a0:bd:28: 07:3d:11:6c:93:48:f9:a1:3e:7d:d4:8c:c3:a5:a9:c3:3e:85: 2a:80:84:03:73:58:41:17:f2:e4:08:cd:cd:b2:19:d1:94:dc: a6:b4:35:9c:4c:19:0a:96:40:be:38:93:66:60:34:d9:e6:d3: 8c:40:18:92:c8:c6:10:23:e1:40:49:b4:1f:b7:92:73:d4:d1: 29:1a:1e:d7:cf:50:c2:15:be:f0:ae:15:7d:7f:2a:7e:ab:12: ff:33:20:38:8d:99:f1:03:f6:f8:1a:9a:09:72:6b:64:2e:8f: 82:55:f9:49:e3:7c:de:64:79:28:30:55:60:06:e6:a9:06:4c: a9:72:21:b3:02:3d:ff:e2:cf:99:76:b0:50:c3:70:11:32:67: 69:9d:09:a9:d9:cc:27:1b:3d:24:eb:32:bc:9f:d8:ac:9e:e7: 79:fe:13:45:4e:99:c2:90:7c:59:56:c5:a5:7f:8e:36:c3:93: ce:a0:29:1b:53:38:bc:94:94:73:b0:51:bd:d0:4d:14:0b:4f: bb:a0:5f:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA092J5ce4Jjo7+G2tLzxMcVw2ekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERENTQ4REE0RTJFRDY4ODAxOEMxNzhGRjZCMURCNkFC NDBBQUQ2QjAeFw0yNjEwMjUyMTIzMzdaFw0yNjEwMjYyMjE4MzdaMDMxMTAvBgNV BAMTKERFMTE2NTdBN0YxQ0MyRDgyRjM0QUVEN0E4Q0NEOUU5NDM0NDFBODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw7Nep21kFxY9YiPuT8xEbD+lK WQNiThLCzhk13fpPeHYLaKs2KLISd62l3FSIiwyYe/ynOiDk9LpaC1M7H7OT/Zwa 3TITtFmYBKEAvY6jNTfPnyj7D7e9Byy8b8Yaxo4Pn8TYy1U9R09a6uZo9Ix0H11B 4C2Ri5iH3J/zZR/iW8q1H4B5oFzrDu+QRWkAMjyGgVEBlBas67IfXPtwVNR/bU2e nTIyxlgWWwrtQkPZ9pGUDZne+ne2C8G32d76kTAHC8t1y4dnqgUSXcwryCs2Hu6S 519guL0kH+jxoymgH3IJCOrCSzYgKeShYiT8G27GpM34fFUctaJ5awa1WXGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3hFlen8cwtgvNK7XqMzZ6UNEGoIwHwYDVR0j BBgwFoAU3dVI2k4u1ogBjBeP9rHbarQKrWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI1ZTg4YmQtNzVlMi00NWRmLTg4NjctNDU0MDJmYzdjNGIxLzAvRERENTQ4REE0 RTJFRDY4ODAxOEMxNzhGRjZCMURCNkFCNDBBQUQ2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREQ1NDhEQTRFMkVENjg4MDE4QzE3OEZGNkIxREI2QUI0MEFB RDZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI1ZTg4YmQtNzVlMi00NWRmLTg4 NjctNDU0MDJmYzdjNGIxLzAvRERENTQ4REE0RTJFRDY4ODAxOEMxNzhGRjZCMURC NkFCNDBBQUQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABftGCSvx5KWbxnrx8lPqC9XuNEB9rfnHDRL 84NByZ3LpKl5crxC//gcpMoX3dBjuNYax6C9KAc9EWyTSPmhPn3UjMOlqcM+hSqA hANzWEEX8uQIzc2yGdGU3Ka0NZxMGQqWQL44k2ZgNNnm04xAGJLIxhAj4UBJtB+3 knPU0SkaHtfPUMIVvvCuFX1/Kn6rEv8zIDiNmfED9vgamglya2Quj4JV+UnjfN5k eSgwVWAG5qkGTKlyIbMCPf/iz5l2sFDDcBEyZ2mdCanZzCcbPSTrMryf2Kye53n+ E0VOmcKQfFlWxaV/jjbDk86gKRtTOLyUlHOwUb3QTRQLT7ugXyQ= -----END CERTIFICATE-----Generated at Mon Oct 26 00:38:15 2026 by rpki-client