$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft File: DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft (raw, json) Hash identifier: Nti8ACMTRU8XXmKb9kDNH9WNyi3zHH/Q9ifSdoYnR8M= Subject key identifier: B1:8C:12:7D:B3:C7:AB:3A:CB:8F:42:A5:40:58:D4:E3:8E:2D:CE:E5 Authority key identifier: DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B Certificate issuer: /CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B Certificate serial: 2D25B37BA32F2B5065796BB74222E9BA660E1FB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 20:15:26 +0000 Manifest this update: Fri 19 Jun 2026 20:10:26 +0000 Manifest next update: Sat 20 Jun 2026 23:55:26 +0000 Files and hashes: 1: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: 5L5io7waITJzSQf8m8FETlwgIknoTsA9vUH70jmgDog=) 2: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: UGzAJ2L7c0+3TG5jr3kCTMBiqyH8xnVKmBzm3Kbw5NI=) 3: DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl (hash: VPdgqW/4GARdBGPAEpFc4C3aAH6dTylqWtaPLN3GPGs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:25:b3:7b:a3:2f:2b:50:65:79:6b:b7:42:22:e9:ba:66:0e:1f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B Validity Not Before: Jun 19 20:10:26 2026 GMT Not After : Jun 20 23:55:26 2026 GMT Subject: CN=B18C127DB3C7AB3ACB8F42A54058D4E38E2DCEE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:e0:af:2f:9d:c7:bf:6c:98:d9:03:04:69: 53:56:af:b0:29:52:a4:38:23:af:b7:aa:99:f8:bf: c0:2f:d3:10:d0:5f:0a:80:ec:3e:5f:18:05:31:c7: 70:0f:51:ff:4a:27:21:10:0e:e7:c3:1e:4b:5b:59: 6e:b4:a7:bf:2e:1c:99:35:c8:fd:10:cf:ac:78:a8: 7e:92:6c:e2:e7:ea:0f:1e:56:78:dd:37:2c:6a:11: 2b:6f:90:60:fa:21:1b:5d:16:bb:ba:3d:9f:25:5d: e2:9f:6b:96:53:23:f5:ae:bf:51:d2:24:30:fb:2a: b2:f9:e8:80:e0:5f:2e:eb:c0:1e:68:d9:57:b1:01: 10:78:c3:cc:8f:ce:46:43:7d:89:91:e3:22:fa:5e: 11:8b:dc:b4:4a:d3:00:6a:1f:57:7d:70:57:6c:9f: 8a:be:54:3a:3b:e7:41:e6:bf:29:e6:61:8c:7b:48: b9:ca:8d:55:26:83:6c:11:fb:94:c2:70:cc:55:5b: 70:00:4a:44:18:d9:7a:67:cb:db:2a:8b:d6:8c:3e: d6:f7:63:99:15:c3:02:2a:79:3c:3c:25:2b:73:b1: e9:0f:d5:fa:87:cd:07:37:83:d1:10:2e:e6:9d:70: 56:af:a5:b7:e1:8f:ee:86:0e:4e:ab:9f:0f:93:b2: 87:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8C:12:7D:B3:C7:AB:3A:CB:8F:42:A5:40:58:D4:E3:8E:2D:CE:E5 X509v3 Authority Key Identifier: keyid:DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:52:55:7d:be:39:f9:1a:81:56:4c:74:7b:12:72:24:ad:5f: 86:9d:31:b7:d0:36:07:dc:82:7d:8a:5c:d4:ef:cb:01:bb:93: 76:d6:e4:98:b1:ec:d4:74:58:dd:c8:3a:86:7b:a1:66:ad:cb: 40:66:22:66:e2:bb:28:8f:a2:76:74:01:9b:ca:95:45:f4:65: bf:3b:b4:21:12:63:c8:15:69:2b:2d:f1:4b:23:58:b6:4c:63: 87:c9:86:aa:31:ed:96:df:01:fd:b6:32:2f:c0:cc:98:e9:0a: 95:a1:e7:2c:c3:ea:e3:a3:fb:b1:79:e4:b9:16:30:06:88:00: d2:bf:bc:4a:f0:5b:c9:5e:1e:7e:db:e6:48:f1:88:18:65:66: 19:6b:4d:d1:01:9e:ae:6f:09:3f:71:b0:f6:4f:eb:f6:2f:06: 68:54:1c:1a:9a:94:19:a5:43:7d:fa:26:8f:e9:90:92:ff:8e: 0e:f2:e5:62:2b:d7:19:da:bc:b9:e6:a0:1b:a3:b7:1b:62:8c: 1d:40:a2:cf:d6:59:f9:db:89:6c:96:36:9d:6d:de:e1:e2:a9: 9f:ac:3f:1f:fc:73:00:8a:f2:09:08:6d:61:5c:5b:43:23:ac: ee:1c:71:91:50:05:b5:f6:a7:03:46:51:6e:9b:be:64:54:a1: 0a:ba:4c:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSWze6MvK1BleWu3QiLpumYOH7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3RjAyQzI5OTA1NThFNTE0REMzQjFCN0E3RTJCQUUw MzFBM0Y1QjAeFw0yNjA2MTkyMDEwMjZaFw0yNjA2MjAyMzU1MjZaMDMxMTAvBgNV BAMTKEIxOEMxMjdEQjNDN0FCM0FDQjhGNDJBNTQwNThENEUzOEUyRENFRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqnOCvL53Hv2yY2QMEaVNWr7Ap UqQ4I6+3qpn4v8Av0xDQXwqA7D5fGAUxx3APUf9KJyEQDufDHktbWW60p78uHJk1 yP0Qz6x4qH6SbOLn6g8eVnjdNyxqEStvkGD6IRtdFru6PZ8lXeKfa5ZTI/Wuv1HS JDD7KrL56IDgXy7rwB5o2VexARB4w8yPzkZDfYmR4yL6XhGL3LRK0wBqH1d9cFds n4q+VDo750HmvynmYYx7SLnKjVUmg2wR+5TCcMxVW3AASkQY2Xpny9sqi9aMPtb3 Y5kVwwIqeTw8JStzsekP1fqHzQc3g9EQLuadcFavpbfhj+6GDk6rnw+TsofhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsYwSfbPHqzrLj0KlQFjU444tzuUwHwYDVR0j BBgwFoAU3X8CwpkFWOUU3Dsben4rrgMaP1swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWIzNzg0ZmUtZjlmZS00Y2JlLTg3NjgtMjYzYTc2OTg2YTNhLzAvREQ3RjAyQzI5 OTA1NThFNTE0REMzQjFCN0E3RTJCQUUwMzFBM0Y1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDdGMDJDMjk5MDU1OEU1MTREQzNCMUI3QTdFMkJBRTAzMUEz RjVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvREQ3RjAyQzI5OTA1NThFNTE0REMzQjFCN0E3RTJC QUUwMzFBM0Y1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJSVX2+OfkagVZMdHsSciStX4adMbfQNgfc gn2KXNTvywG7k3bW5Jix7NR0WN3IOoZ7oWaty0BmImbiuyiPonZ0AZvKlUX0Zb87 tCESY8gVaSst8UsjWLZMY4fJhqox7ZbfAf22Mi/AzJjpCpWh5yzD6uOj+7F55LkW MAaIANK/vErwW8leHn7b5kjxiBhlZhlrTdEBnq5vCT9xsPZP6/YvBmhUHBqalBml Q336Jo/pkJL/jg7y5WIr1xnavLnmoBujtxtijB1Aos/WWfnbiWyWNp1t3uHiqZ+s Px/8cwCK8gkIbWFcW0MjrO4ccZFQBbX2pwNGUW6bvmRUoQq6TF8= -----END CERTIFICATE-----Generated at Sat Jun 20 08:51:42 2026 by rpki-client