$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft File: DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft (raw, json) Hash identifier: 9O/VEugxmsBFf3k+V0ZOT3VLBoyNYeIrSzJWeBeeJTM= Subject key identifier: 18:1E:6F:52:34:75:86:B1:A0:03:C8:93:CB:F8:0B:D0:88:01:D5:0D Authority key identifier: DD:4A:D6:DE:56:A2:26:7F:C5:F2:7E:4A:EA:ED:44:4B:28:71:57:22 Certificate issuer: /CN=DD4AD6DE56A2267FC5F27E4AEAED444B28715722 Certificate serial: 57510B5D694011C8E8E369487DE7329A53AEE9F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 02:32:13 +0000 Manifest this update: Sat 24 Oct 2026 02:27:13 +0000 Manifest next update: Sun 25 Oct 2026 05:27:13 +0000 Files and hashes: 1: DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl (hash: qWFk0ITw7OwRaEVTbmSvl/KntZB7DsHy2iRes8P14gY=) 2: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: tmRs1+AlBzBvmjJrjjc0kMDSK7a2kwnxBLvtC10ciHE=) 3: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: 2aIQ3QBHP7J+Ky6wBfEPSC4GdD2wiOq9JYf33DaTyyo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 05:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:51:0b:5d:69:40:11:c8:e8:e3:69:48:7d:e7:32:9a:53:ae:e9:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4AD6DE56A2267FC5F27E4AEAED444B28715722 Validity Not Before: Oct 24 02:27:13 2026 GMT Not After : Oct 25 05:27:13 2026 GMT Subject: CN=181E6F52347586B1A003C893CBF80BD08801D50D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7d:a7:74:f1:86:ed:a1:ce:bc:6b:5e:e4:1a: d9:55:04:37:6d:b2:23:1f:b2:36:77:f5:6d:7a:c6: 00:f9:68:5b:51:a2:d3:3f:03:27:40:97:72:0d:5a: 9a:61:63:ba:d4:eb:1e:55:48:f4:f4:27:8e:bf:ae: 3b:38:33:fa:6f:58:bb:fa:24:17:b8:69:61:d3:d9: b2:62:cd:d0:97:7e:16:4e:e6:f3:d5:c6:47:8c:42: ab:e5:2a:6e:4f:4c:9a:26:86:21:b5:91:8e:53:6f: 46:8f:75:54:18:49:48:e2:9c:17:54:97:a8:50:61: 86:c3:33:1b:e2:ef:f4:f1:e5:84:23:d3:27:26:6a: 14:cd:89:15:d4:c5:7a:1c:b3:43:94:e1:2c:ef:81: 98:46:0d:11:0b:3b:64:8c:f9:ec:1f:0b:f9:c6:51: 3e:d3:ed:a2:65:65:ce:29:9f:6f:bb:4f:35:53:ac: 6a:a8:68:95:26:12:1f:15:c8:8a:73:d9:93:0e:02: bc:a0:e1:2b:0e:1d:bc:f1:91:6b:e4:7e:90:a3:7d: af:f9:79:31:38:fe:86:4f:fa:e2:4e:41:34:45:2e: f1:b5:1d:a2:7e:e0:e4:10:bd:ab:72:f0:ff:c2:1a: 3c:46:07:cd:9b:34:f2:f7:e1:8f:c9:5e:3d:98:88: aa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1E:6F:52:34:75:86:B1:A0:03:C8:93:CB:F8:0B:D0:88:01:D5:0D X509v3 Authority Key Identifier: keyid:DD:4A:D6:DE:56:A2:26:7F:C5:F2:7E:4A:EA:ED:44:4B:28:71:57:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/DD4AD6DE56A2267FC5F27E4AEAED444B28715722.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:f2:d4:e3:76:56:6c:a3:4c:27:23:09:bc:0f:6a:16:1c:7d: 1d:f2:cb:06:c3:22:7f:3c:15:8c:93:9e:5e:bb:65:31:8c:61: 55:2f:ce:a7:d0:ee:26:03:0a:91:ef:d3:a4:e7:72:f4:18:1e: 85:06:fa:4e:9f:f5:6a:d3:53:9b:b1:cf:16:de:70:a0:f5:34: 86:f0:0e:42:20:82:5b:7a:0a:f4:a3:06:3a:bc:fc:e9:aa:49: 7d:62:d0:b9:e2:cc:30:66:37:cc:3b:da:b4:07:0c:b9:fb:7f: 44:b8:a1:e8:13:bd:c4:04:5b:c3:dc:24:03:6c:a7:7a:a4:f2: a9:07:d0:88:2e:ff:88:64:dc:4b:6b:0f:a6:e5:ba:92:3b:54: 5c:4b:42:59:28:45:e0:05:73:d2:b9:66:96:38:b2:7c:e5:25: 74:cf:1d:8b:70:a2:a8:42:5d:5b:b1:cb:7f:48:38:2e:1d:c3: d9:cf:78:0b:54:1a:e0:d2:65:be:d5:c8:5b:ba:a7:29:cf:14: da:7a:4d:1e:e2:55:a1:5c:40:29:84:67:13:be:a2:48:77:d1: a2:2f:3d:4d:8f:67:e3:ad:c0:2a:ec:c2:ab:53:e9:fb:35:1f: ff:9d:eb:51:f1:87:23:87:1b:c5:3f:e1:5f:bc:1d:ed:6e:31: 9d:34:cc:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1ELXWlAEcjo42lIfecymlOu6fEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0QUQ2REU1NkEyMjY3RkM1RjI3RTRBRUFFRDQ0NEIy ODcxNTcyMjAeFw0yNjEwMjQwMjI3MTNaFw0yNjEwMjUwNTI3MTNaMDMxMTAvBgNV BAMTKDE4MUU2RjUyMzQ3NTg2QjFBMDAzQzg5M0NCRjgwQkQwODgwMUQ1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCofad08Ybtoc68a17kGtlVBDdt siMfsjZ39W16xgD5aFtRotM/AydAl3INWpphY7rU6x5VSPT0J46/rjs4M/pvWLv6 JBe4aWHT2bJizdCXfhZO5vPVxkeMQqvlKm5PTJomhiG1kY5Tb0aPdVQYSUjinBdU l6hQYYbDMxvi7/Tx5YQj0ycmahTNiRXUxXocs0OU4SzvgZhGDRELO2SM+ewfC/nG UT7T7aJlZc4pn2+7TzVTrGqoaJUmEh8VyIpz2ZMOAryg4SsOHbzxkWvkfpCjfa/5 eTE4/oZP+uJOQTRFLvG1HaJ+4OQQvaty8P/CGjxGB82bNPL34Y/JXj2YiKpzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGB5vUjR1hrGgA8iTy/gL0IgB1Q0wHwYDVR0j BBgwFoAU3UrW3laiJn/F8n5K6u1ESyhxVyIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU4OWU4NTktM2MyYy00YTA5LWE0YTktMzczMjNlYTVkZTIyLzAvREQ0QUQ2REU1 NkEyMjY3RkM1RjI3RTRBRUFFRDQ0NEIyODcxNTcyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDRBRDZERTU2QTIyNjdGQzVGMjdFNEFFQUVENDQ0QjI4NzE1 NzIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU4OWU4NTktM2MyYy00YTA5LWE0 YTktMzczMjNlYTVkZTIyLzAvREQ0QUQ2REU1NkEyMjY3RkM1RjI3RTRBRUFFRDQ0 NEIyODcxNTcyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjy1ON2VmyjTCcjCbwPahYcfR3yywbDIn88 FYyTnl67ZTGMYVUvzqfQ7iYDCpHv06TncvQYHoUG+k6f9WrTU5uxzxbecKD1NIbw DkIgglt6CvSjBjq8/OmqSX1i0LnizDBmN8w72rQHDLn7f0S4oegTvcQEW8PcJANs p3qk8qkH0Igu/4hk3EtrD6blupI7VFxLQlkoReAFc9K5ZpY4snzlJXTPHYtwoqhC XVuxy39IOC4dw9nPeAtUGuDSZb7VyFu6pynPFNp6TR7iVaFcQCmEZxO+okh30aIv PU2PZ+OtwCrswqtT6fs1H/+d61HxhyOHG8U/4V+8He1uMZ00zDM= -----END CERTIFICATE-----Generated at Sat Oct 24 20:44:57 2026 by rpki-client