$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft File: DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft (raw, json) Hash identifier: O/VD+gWt/NT4mEVTqpAhCKQI+1FoPEcR+d/kpA7QsCE= Subject key identifier: E3:D3:1F:04:53:B3:1D:6D:0F:18:5D:BB:F5:C2:B8:EA:91:34:70:85 Authority key identifier: DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA Certificate issuer: /CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA Certificate serial: 667874339427874A7F090A93E925BBADB511230F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft Manifest number: EA Signing time: Sat 24 Oct 2026 03:08:05 +0000 Manifest this update: Sat 24 Oct 2026 03:03:05 +0000 Manifest next update: Sun 25 Oct 2026 04:16:05 +0000 Files and hashes: 1: DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl (hash: U0v1+IPpK/2IQoyvWuKLFO+9eeKqWgyqKBp6XQBTc/M=) 2: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (hash: /I/1xW7rsK7gJcZw8w0G3A5/hDeO0oqDDXrZo6p7Qtc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:78:74:33:94:27:87:4a:7f:09:0a:93:e9:25:bb:ad:b5:11:23:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA Validity Not Before: Oct 24 03:03:05 2026 GMT Not After : Oct 25 04:16:05 2026 GMT Subject: CN=E3D31F0453B31D6D0F185DBBF5C2B8EA91347085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a8:1d:e1:c1:99:e0:ed:2e:aa:1b:39:b3:a8: 5e:9a:e2:63:07:fe:a6:ce:42:ef:13:0c:35:9e:44: 3b:e7:a5:86:0e:e0:a7:89:62:0d:fb:22:21:f6:b7: 7a:e4:d7:46:ef:db:42:2f:f8:19:48:bd:29:78:96: 98:31:f3:1c:57:b2:10:99:0c:d7:82:c5:ac:79:c2: 2f:13:5b:8a:0c:0c:ab:cc:3a:71:55:8d:25:eb:73: 7a:49:00:ef:e8:c1:af:5d:0d:96:88:0b:e7:88:78: e5:fd:0c:5f:cb:e5:fc:15:af:1d:93:f5:54:7b:5b: 6b:00:03:8c:de:15:2b:85:76:11:ec:4d:f3:b7:84: ca:b6:45:c0:72:6e:ae:fc:56:08:1e:1d:f3:87:d8: 28:39:0a:20:ee:0b:65:16:06:89:a4:63:15:01:1f: a9:01:79:00:82:67:ea:d7:10:dd:c0:bc:37:59:13: 41:8a:d9:9b:07:e9:71:c6:5a:85:77:24:36:b9:9a: 25:f7:8c:c0:4a:85:18:cc:df:c6:8d:19:3a:b3:75: 1a:28:fe:51:7c:1a:17:0e:a9:4c:32:76:95:9b:3f: 4b:57:12:0b:e5:12:dd:fc:e6:9c:d3:af:b5:28:39: 6a:60:80:2a:59:9e:42:83:43:59:10:ad:27:a8:f8: ab:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D3:1F:04:53:B3:1D:6D:0F:18:5D:BB:F5:C2:B8:EA:91:34:70:85 X509v3 Authority Key Identifier: keyid:DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b6:2f:5f:0a:35:17:e5:8e:f9:98:e5:25:5d:82:7f:31:46: cf:7b:10:05:0f:ac:b8:52:48:79:80:80:57:c8:2d:77:18:0c: a5:91:ba:aa:84:df:ff:fb:22:7f:03:01:ff:f6:53:4c:b4:fc: c8:00:d6:37:ae:21:99:19:dd:03:38:c8:75:43:39:83:a8:fe: ee:d4:fa:0b:a5:6b:5a:f1:52:93:18:d5:b6:e5:47:4e:dc:4e: 6a:ea:f0:cf:68:94:8c:8b:b6:93:6d:41:f8:86:71:cd:23:8f: a9:47:cc:64:16:c0:5c:02:cb:e7:d0:07:30:f1:35:ad:4e:8b: 03:87:1e:a4:7f:3b:03:73:0d:76:6c:6b:b8:58:5b:26:96:85: fb:e7:f4:d0:b5:1a:86:a3:ea:6d:fb:37:34:7c:11:84:0d:5c: 47:f7:fb:33:54:f5:8d:d3:e4:5d:44:4b:68:c9:1a:e1:2f:3b: 3c:4b:06:79:a5:3f:71:46:d8:53:64:3e:47:44:29:51:e1:29: 42:98:a5:54:19:a3:92:c5:08:30:17:e9:8d:d4:76:e7:f2:06: 59:d8:8d:30:e5:5a:cb:11:d9:d0:8a:1f:3e:49:56:a5:48:dd: 20:58:a0:92:61:6a:43:27:7b:e8:49:19:82:09:ce:7a:28:ce: 37:9a:d5:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZnh0M5Qnh0p/CQqT6SW7rbURIw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFQzA3MkE5Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYxRDkw NzkyQzRCQTAeFw0yNjEwMjQwMzAzMDVaFw0yNjEwMjUwNDE2MDVaMDMxMTAvBgNV BAMTKEUzRDMxRjA0NTNCMzFENkQwRjE4NURCQkY1QzJCOEVBOTEzNDcwODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQqB3hwZng7S6qGzmzqF6a4mMH /qbOQu8TDDWeRDvnpYYO4KeJYg37IiH2t3rk10bv20Iv+BlIvSl4lpgx8xxXshCZ DNeCxax5wi8TW4oMDKvMOnFVjSXrc3pJAO/owa9dDZaIC+eIeOX9DF/L5fwVrx2T 9VR7W2sAA4zeFSuFdhHsTfO3hMq2RcBybq78VggeHfOH2Cg5CiDuC2UWBomkYxUB H6kBeQCCZ+rXEN3AvDdZE0GK2ZsH6XHGWoV3JDa5miX3jMBKhRjM38aNGTqzdRoo /lF8GhcOqUwydpWbP0tXEgvlEt385pzTr7UoOWpggCpZnkKDQ1kQrSeo+KuNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU49MfBFOzHW0PGF279cK46pE0cIUwHwYDVR0j BBgwFoAU3ewHKpJ3UdzItpRMpGDx2QeSxLowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY1ZmE1NGQtMjQ4ZS00MjNjLTllNDktZDZlNmJmYmJmNzhiLzAvRERFQzA3MkE5 Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYxRDkwNzkyQzRCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREVDMDcyQTkyNzc1MURDQzhCNjk0NENBNDYwRjFEOTA3OTJD NEJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY1ZmE1NGQtMjQ4ZS00MjNjLTll NDktZDZlNmJmYmJmNzhiLzAvRERFQzA3MkE5Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYx RDkwNzkyQzRCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABy2L18KNRfljvmY5SVdgn8xRs97EAUPrLhS SHmAgFfILXcYDKWRuqqE3//7In8DAf/2U0y0/MgA1jeuIZkZ3QM4yHVDOYOo/u7U +gula1rxUpMY1bblR07cTmrq8M9olIyLtpNtQfiGcc0jj6lHzGQWwFwCy+fQBzDx Na1OiwOHHqR/OwNzDXZsa7hYWyaWhfvn9NC1Goaj6m37NzR8EYQNXEf3+zNU9Y3T 5F1ES2jJGuEvOzxLBnmlP3FG2FNkPkdEKVHhKUKYpVQZo5LFCDAX6Y3UdufyBlnY jTDlWssR2dCKHz5JVqVI3SBYoJJhakMne+hJGYIJznoozjea1Z0= -----END CERTIFICATE-----Generated at Sat Oct 24 15:46:46 2026 by rpki-client