$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft File: DDF88B435837261B13DE2248E2A856AB45CECC0B.mft (raw, json) Hash identifier: E74jg4QjegyIYEfFHxGj5gM/CfiC9GoC2H3Mnj7dYcg= Subject key identifier: 2E:73:76:38:4A:01:A5:ED:55:D8:16:CB:D3:20:68:E3:52:E4:EB:6E Authority key identifier: DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B Certificate issuer: /CN=DDF88B435837261B13DE2248E2A856AB45CECC0B Certificate serial: 5F80F715DD4C6843C9BCEF6F86B8806EABF7BBC4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 04:03:30 +0000 Manifest this update: Thu 17 Sep 2026 03:58:30 +0000 Manifest next update: Fri 18 Sep 2026 07:32:30 +0000 Files and hashes: 1: DDF88B435837261B13DE2248E2A856AB45CECC0B.crl (hash: 6YpkTdyBLlCVwAZJsJSIgcm81+aoaRiv27qEKy7JcMs=) 2: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: edm1TV/7umFF7e1kNKXURZcIakqU8CWQ1lkJU/ljN7I=) 3: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: yfH9V+v7CqjVW6BwpLw/uKH0EvFG6umOPa6WyO7b7X0=) 4: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: fhnpPa+v9pVR6utlcEhHmU/vCyGDDmaJK9JqRPVVGlI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:80:f7:15:dd:4c:68:43:c9:bc:ef:6f:86:b8:80:6e:ab:f7:bb:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDF88B435837261B13DE2248E2A856AB45CECC0B Validity Not Before: Sep 17 03:58:30 2026 GMT Not After : Sep 18 07:32:30 2026 GMT Subject: CN=2E7376384A01A5ED55D816CBD32068E352E4EB6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4d:94:3e:96:4e:03:2c:0f:0a:fa:0d:31:93: ef:dc:0c:ac:34:ce:d1:78:7b:cf:82:05:a3:c8:c1: 4b:55:42:d6:17:01:ac:95:a6:82:0c:5e:c3:63:1f: 26:0b:3c:08:10:45:8a:92:b7:9f:61:9f:2b:6d:49: 5d:52:14:37:c6:6f:f9:e5:9f:e1:4f:60:ce:3b:f4: fe:94:ff:34:53:97:dd:8a:d5:ef:8a:b3:05:9a:7a: 07:4e:91:2f:8e:dc:6b:7d:e5:e5:78:2e:44:c2:11: 45:d3:5b:5b:d3:7f:08:04:58:67:a7:9f:be:39:29: ad:ed:e5:ab:fd:c8:59:1c:b9:4d:26:56:e7:67:5e: 73:26:e8:18:45:29:ba:8e:a4:8e:5b:e3:99:5e:26: 43:63:14:d4:31:9b:4e:e7:d1:78:d1:5f:4e:23:50: f1:53:6d:3a:b8:94:1e:62:e4:9d:b7:fd:45:cf:f1: fd:18:8c:c7:38:7b:92:b2:6d:03:3a:0e:8a:c1:d0: cb:94:3e:4f:58:7e:6c:0f:93:3d:4c:77:13:55:15: c3:63:04:3c:df:f4:53:a2:4c:88:0e:65:f4:d7:d1: 60:a8:9a:ef:62:29:1c:46:57:eb:2d:59:3a:c6:a8: 39:5e:d1:9c:dc:b0:a9:62:8a:88:30:17:ce:6a:44: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:73:76:38:4A:01:A5:ED:55:D8:16:CB:D3:20:68:E3:52:E4:EB:6E X509v3 Authority Key Identifier: keyid:DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:13:04:40:3b:b1:d5:78:d5:b7:14:a7:99:7a:86:e4:3c:08: 54:62:a5:b2:3a:eb:a0:10:63:65:87:bd:04:23:98:e0:51:27: 97:49:e0:3a:b2:6b:4c:cf:cc:a7:08:6c:8b:4d:86:18:ff:1c: 93:4e:b1:be:db:ee:25:e0:10:3c:f7:bd:4b:8c:5c:56:36:55: 5b:1b:90:39:72:25:b1:be:e9:52:ed:33:82:a5:e0:a7:0b:93: 2c:80:a7:ba:9c:e5:91:4c:3c:93:b3:d5:63:59:37:f7:04:37: 8c:3e:3b:fb:dc:ef:b7:a6:fe:e3:f1:f2:a9:d6:82:84:f6:02: 02:ab:ee:3b:38:9b:3c:11:47:2a:6e:44:e8:1f:82:f6:5d:32: 8c:85:76:49:b5:02:6b:4d:0b:82:92:31:23:41:8e:58:b3:0f: 4c:9b:5b:99:9b:4e:fd:1a:4c:33:cf:ca:ef:06:4f:eb:d7:6d: e3:d1:2b:44:fe:6b:b7:09:23:8f:08:3f:47:23:4d:c9:08:69: 4c:6f:72:7d:49:50:89:a0:c4:4c:43:3e:4c:ba:7a:3d:8f:88: 01:19:b0:ac:35:40:c9:eb:f9:71:62:d7:6d:27:24:5a:1e:4b: ce:f1:ef:53:f3:59:40:d5:50:77:8a:a5:be:f9:62:88:06:9d: 5c:fc:41:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX4D3Fd1MaEPJvO9vhriAbqv3u8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGODhCNDM1ODM3MjYxQjEzREUyMjQ4RTJBODU2QUI0 NUNFQ0MwQjAeFw0yNjA5MTcwMzU4MzBaFw0yNjA5MTgwNzMyMzBaMDMxMTAvBgNV BAMTKDJFNzM3NjM4NEEwMUE1RUQ1NUQ4MTZDQkQzMjA2OEUzNTJFNEVCNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfTZQ+lk4DLA8K+g0xk+/cDKw0 ztF4e8+CBaPIwUtVQtYXAayVpoIMXsNjHyYLPAgQRYqSt59hnyttSV1SFDfGb/nl n+FPYM479P6U/zRTl92K1e+KswWaegdOkS+O3Gt95eV4LkTCEUXTW1vTfwgEWGen n745Ka3t5av9yFkcuU0mVudnXnMm6BhFKbqOpI5b45leJkNjFNQxm07n0XjRX04j UPFTbTq4lB5i5J23/UXP8f0YjMc4e5KybQM6DorB0MuUPk9YfmwPkz1MdxNVFcNj BDzf9FOiTIgOZfTX0WComu9iKRxGV+stWTrGqDle0ZzcsKliiogwF85qRONxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULnN2OEoBpe1V2BbL0yBo41Lk624wHwYDVR0j BBgwFoAU3fiLQ1g3JhsT3iJI4qhWq0XOzAswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUzNGQyZDgtMzRhZi00NzU3LThhZDktOTJkYTM1ZDkyMTY4LzAvRERGODhCNDM1 ODM3MjYxQjEzREUyMjQ4RTJBODU2QUI0NUNFQ0MwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREY4OEI0MzU4MzcyNjFCMTNERTIyNDhFMkE4NTZBQjQ1Q0VD QzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvRERGODhCNDM1ODM3MjYxQjEzREUyMjQ4RTJBODU2 QUI0NUNFQ0MwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4TBEA7sdV41bcUp5l6huQ8CFRipbI666AQ Y2WHvQQjmOBRJ5dJ4Dqya0zPzKcIbItNhhj/HJNOsb7b7iXgEDz3vUuMXFY2VVsb kDlyJbG+6VLtM4Kl4KcLkyyAp7qc5ZFMPJOz1WNZN/cEN4w+O/vc77em/uPx8qnW goT2AgKr7js4mzwRRypuROgfgvZdMoyFdkm1AmtNC4KSMSNBjlizD0ybW5mbTv0a TDPPyu8GT+vXbePRK0T+a7cJI48IP0cjTckIaUxvcn1JUImgxExDPky6ej2PiAEZ sKw1QMnr+XFi120nJFoeS87x71PzWUDVUHeKpb75YogGnVz8Qaw= -----END CERTIFICATE-----Generated at Thu Sep 17 10:57:20 2026 by rpki-client