$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft File: DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft (raw, json) Hash identifier: 6q/PbXjAePTs7fJNiWo6QnmrN2d6U5vEiIA2t1fFO1E= Subject key identifier: 40:89:5E:EC:C3:C4:76:C4:E6:52:32:01:60:EF:0B:D0:89:74:53:A3 Authority key identifier: DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B Certificate issuer: /CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B Certificate serial: 026E375CCD1DB696A60CDD629E413E8E4F8F1435 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft Manifest number: 9C Signing time: Thu 27 Aug 2026 03:50:14 +0000 Manifest this update: Thu 27 Aug 2026 03:45:14 +0000 Manifest next update: Fri 28 Aug 2026 07:02:14 +0000 Files and hashes: 1: DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl (hash: f3TjWyKRCCZZYpI8Wdh2C+8usWvXcqWU6FlG5lMDg7c=) 2: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: 5L5io7waITJzSQf8m8FETlwgIknoTsA9vUH70jmgDog=) 3: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: UGzAJ2L7c0+3TG5jr3kCTMBiqyH8xnVKmBzm3Kbw5NI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 02:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6e:37:5c:cd:1d:b6:96:a6:0c:dd:62:9e:41:3e:8e:4f:8f:14:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B Validity Not Before: Aug 27 03:45:14 2026 GMT Not After : Aug 28 07:02:14 2026 GMT Subject: CN=40895EECC3C476C4E652320160EF0BD0897453A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:9a:9e:66:3d:33:3c:3f:68:fa:52:23:8a: cc:7b:ed:ef:eb:5c:83:f9:66:ca:cf:be:c3:38:62: a9:80:82:1b:38:ca:a9:38:fa:5a:e2:30:01:e2:e4: cb:6d:88:24:96:11:3c:38:22:3a:08:79:c4:c9:35: 32:35:16:8b:10:5d:76:72:71:5b:84:30:b5:0e:e9: 7a:11:00:62:2d:3c:27:30:15:e9:fe:27:ca:74:76: e1:39:b8:8a:14:d6:0d:8b:c0:ea:eb:70:9e:9e:a7: 81:fa:50:c4:d3:fe:f9:fd:f3:ef:cc:c8:ee:a0:22: 84:98:78:7f:bf:ca:b9:45:05:e0:23:b2:c4:e7:06: 28:49:00:a1:1f:93:87:1a:c8:af:ee:3b:1b:a6:e1: e9:d7:f6:62:da:cb:86:e8:55:b2:9e:8c:e5:9b:f7: bb:51:a9:eb:a9:a9:01:e1:6d:c8:a9:c5:97:1e:88: f0:a8:71:05:4d:03:1c:09:05:67:ae:7f:90:02:29: d2:6e:cb:07:74:af:13:01:f0:d6:0d:45:87:52:03: 6c:73:97:90:99:6e:56:cc:42:bb:16:18:00:8f:3f: cb:b8:d7:37:ea:25:04:2b:e5:28:9a:4a:ca:72:64: 11:43:ec:bf:16:00:ad:34:97:49:8b:92:36:80:cb: db:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:89:5E:EC:C3:C4:76:C4:E6:52:32:01:60:EF:0B:D0:89:74:53:A3 X509v3 Authority Key Identifier: keyid:DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:eb:ab:d7:83:43:ef:c0:32:d7:20:64:8d:87:59:9d:c0:ee: cf:6c:8c:30:84:3f:48:63:05:8e:35:df:6f:51:78:18:f5:89: 38:2c:79:96:e9:9e:ad:66:52:33:4e:96:bf:95:35:fb:47:74: 72:32:56:71:d9:4b:43:fe:93:4f:a2:c9:5b:b9:41:65:02:c2: 89:9e:c1:b1:ae:77:1e:c5:6c:6a:23:bd:e7:e8:c8:fa:f1:83: 91:84:76:b1:82:2e:ba:00:7a:a2:aa:26:06:68:b1:28:13:0c: 89:27:16:3a:ef:42:95:ac:a7:59:52:47:4a:c1:23:7b:e8:fd: a1:ea:2e:35:98:46:98:89:c1:f1:88:db:66:a0:14:3c:63:6d: 13:1e:f2:21:cb:e4:1e:8c:26:75:f8:f0:b0:4f:0a:b9:5a:2f: e2:77:e0:94:08:5a:0f:7b:e2:44:2d:98:b2:c9:26:77:45:98: 05:38:e0:8d:e1:ca:a6:9a:f9:9d:01:e7:23:6a:ae:fe:16:17: e8:3e:a9:8d:8c:d6:50:40:45:63:8f:39:04:5b:05:a7:99:25: c8:3e:b0:7a:59:84:21:4d:31:cd:02:f3:71:25:76:0f:e9:56: 5d:73:40:bf:4a:52:bf:27:be:eb:e3:07:2d:ba:c1:5a:78:45: 0e:52:a1:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAm43XM0dtpamDN1inkE+jk+PFDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3RjAyQzI5OTA1NThFNTE0REMzQjFCN0E3RTJCQUUw MzFBM0Y1QjAeFw0yNjA4MjcwMzQ1MTRaFw0yNjA4MjgwNzAyMTRaMDMxMTAvBgNV BAMTKDQwODk1RUVDQzNDNDc2QzRFNjUyMzIwMTYwRUYwQkQwODk3NDUzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/5qeZj0zPD9o+lIjisx77e/r XIP5ZsrPvsM4YqmAghs4yqk4+lriMAHi5MttiCSWETw4IjoIecTJNTI1FosQXXZy cVuEMLUO6XoRAGItPCcwFen+J8p0duE5uIoU1g2LwOrrcJ6ep4H6UMTT/vn98+/M yO6gIoSYeH+/yrlFBeAjssTnBihJAKEfk4cayK/uOxum4enX9mLay4boVbKejOWb 97tRqeupqQHhbcipxZceiPCocQVNAxwJBWeuf5ACKdJuywd0rxMB8NYNRYdSA2xz l5CZblbMQrsWGACPP8u41zfqJQQr5SiaSspyZBFD7L8WAK00l0mLkjaAy9uhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQIle7MPEdsTmUjIBYO8L0Il0U6MwHwYDVR0j BBgwFoAU3X8CwpkFWOUU3Dsben4rrgMaP1swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWIzNzg0ZmUtZjlmZS00Y2JlLTg3NjgtMjYzYTc2OTg2YTNhLzAvREQ3RjAyQzI5 OTA1NThFNTE0REMzQjFCN0E3RTJCQUUwMzFBM0Y1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDdGMDJDMjk5MDU1OEU1MTREQzNCMUI3QTdFMkJBRTAzMUEz RjVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvREQ3RjAyQzI5OTA1NThFNTE0REMzQjFCN0E3RTJC QUUwMzFBM0Y1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXrq9eDQ+/AMtcgZI2HWZ3A7s9sjDCEP0hj BY41329ReBj1iTgseZbpnq1mUjNOlr+VNftHdHIyVnHZS0P+k0+iyVu5QWUCwome wbGudx7FbGojvefoyPrxg5GEdrGCLroAeqKqJgZosSgTDIknFjrvQpWsp1lSR0rB I3vo/aHqLjWYRpiJwfGI22agFDxjbRMe8iHL5B6MJnX48LBPCrlaL+J34JQIWg97 4kQtmLLJJndFmAU44I3hyqaa+Z0B5yNqrv4WF+g+qY2M1lBARWOPOQRbBaeZJcg+ sHpZhCFNMc0C83Eldg/pVl1zQL9KUr8nvuvjBy26wVp4RQ5SoUs= -----END CERTIFICATE-----Generated at Thu Aug 27 18:23:26 2026 by rpki-client