$ rpki-client -vvf rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft File: DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft (raw, json) Hash identifier: jgEmg5IR3591xn0VH4k0Wry/vdn46/QcBielUsx2EV4= Subject key identifier: 92:45:5A:4D:F9:AE:B5:F4:F2:66:5B:6F:38:2C:E4:78:71:90:18:F9 Authority key identifier: DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA Certificate issuer: /CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA Certificate serial: 270BB0BE9642EF6AA203EEFAB98BFF13545B13F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 01:52:01 +0000 Manifest this update: Sat 20 Jun 2026 01:47:01 +0000 Manifest next update: Sun 21 Jun 2026 03:11:01 +0000 Files and hashes: 1: DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl (hash: HIiJws4+pcB2fE9mK2AYHXXDHlTZs85cU9pKb5Zf1lA=) 2: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (hash: /I/1xW7rsK7gJcZw8w0G3A5/hDeO0oqDDXrZo6p7Qtc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:0b:b0:be:96:42:ef:6a:a2:03:ee:fa:b9:8b:ff:13:54:5b:13:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA Validity Not Before: Jun 20 01:47:01 2026 GMT Not After : Jun 21 03:11:01 2026 GMT Subject: CN=92455A4DF9AEB5F4F2665B6F382CE478719018F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fc:0e:72:9c:28:cc:68:91:87:b6:8e:9e:ff: 2a:e2:dd:1d:15:a8:d5:14:38:d2:a4:a9:92:19:bb: fd:c0:8f:ab:a1:c7:db:8d:f3:a8:25:da:1d:43:df: 42:0b:2c:88:64:88:ad:02:b3:73:8d:ee:17:52:a0: 03:d5:d4:f5:0f:bc:e8:70:7f:28:c2:50:29:7c:4d: 49:5a:12:cd:b2:dc:70:89:d7:6c:50:4d:45:fc:b7: 81:ac:3f:fc:06:94:af:e0:ed:31:f9:c1:83:40:a7: 01:b6:86:8f:22:a7:20:b3:c4:fc:ff:dd:d4:00:c0: 91:d4:b3:93:fc:ce:a3:b8:4c:94:9c:0b:4e:37:95: b2:3c:43:31:e5:48:e1:45:2b:5d:6d:96:7d:07:c7: 20:74:30:f2:27:7a:e3:e3:3b:0e:af:d3:e3:45:fb: 7f:d0:38:58:43:cb:11:ea:f1:7f:d2:e3:e2:86:61: 46:5c:d6:a1:c3:ed:17:46:b6:b7:da:bb:06:6e:9f: 16:72:bf:1d:35:da:23:3d:cf:33:46:5d:20:f2:2d: 06:48:94:45:92:66:17:ed:e2:10:66:a8:c7:d1:fa: ca:71:c3:4a:36:13:33:13:d1:33:b7:78:e1:cf:67: e1:1b:f0:20:66:b0:a0:fa:6e:ac:25:0a:94:42:f7: 38:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:45:5A:4D:F9:AE:B5:F4:F2:66:5B:6F:38:2C:E4:78:71:90:18:F9 X509v3 Authority Key Identifier: keyid:DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:55:17:d5:8e:04:ac:fe:3f:fb:c9:c3:fb:8c:c6:2e:17:14: ae:09:d3:bd:62:d9:5e:20:e5:3d:d4:26:1b:35:9e:82:f4:fc: dc:82:95:05:13:3f:63:05:ce:22:09:4e:8b:b3:e5:66:6b:bf: 53:ac:b6:cb:1b:f1:b0:fc:26:a1:c4:77:be:60:1f:db:46:83: 79:fb:15:70:7b:05:4e:b6:6d:4f:8f:27:c6:11:1b:0f:a8:88: 9e:4d:17:47:85:04:ec:3c:0b:05:14:47:78:94:6a:a4:a3:36: 9c:63:59:9d:c4:69:bd:80:ae:3e:40:c9:b7:b3:45:2b:1a:de: c7:4e:6b:6f:fc:00:ac:e6:41:7f:36:82:09:ca:8f:ec:1b:2e: 79:16:eb:e6:0b:a6:31:12:95:60:d1:15:a6:2a:ba:72:1e:5e: 5f:85:e1:9c:03:75:22:9e:9e:5c:a9:73:a2:ba:4a:a9:92:6e: 9d:b9:60:a7:56:31:73:10:7d:98:77:22:64:bb:5b:05:46:64: 6c:b9:80:55:3c:41:87:3c:f6:b7:89:1d:23:1c:9a:b8:53:a4: 5e:ed:59:e6:8c:42:9c:46:5c:30:99:7e:11:6a:71:53:b5:0f: 62:55:0d:55:94:21:8b:38:d9:65:8d:64:d8:a9:c5:48:86:06: 56:cc:b3:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJwuwvpZC72qiA+76uYv/E1RbE/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFQzA3MkE5Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYxRDkw NzkyQzRCQTAeFw0yNjA2MjAwMTQ3MDFaFw0yNjA2MjEwMzExMDFaMDMxMTAvBgNV BAMTKDkyNDU1QTRERjlBRUI1RjRGMjY2NUI2RjM4MkNFNDc4NzE5MDE4RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp/A5ynCjMaJGHto6e/yri3R0V qNUUONKkqZIZu/3Aj6uhx9uN86gl2h1D30ILLIhkiK0Cs3ON7hdSoAPV1PUPvOhw fyjCUCl8TUlaEs2y3HCJ12xQTUX8t4GsP/wGlK/g7TH5wYNApwG2ho8ipyCzxPz/ 3dQAwJHUs5P8zqO4TJScC043lbI8QzHlSOFFK11tln0HxyB0MPIneuPjOw6v0+NF +3/QOFhDyxHq8X/S4+KGYUZc1qHD7RdGtrfauwZunxZyvx012iM9zzNGXSDyLQZI lEWSZhft4hBmqMfR+spxw0o2EzMT0TO3eOHPZ+Eb8CBmsKD6bqwlCpRC9zgfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkkVaTfmutfTyZltvOCzkeHGQGPkwHwYDVR0j BBgwFoAU3ewHKpJ3UdzItpRMpGDx2QeSxLowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY1ZmE1NGQtMjQ4ZS00MjNjLTllNDktZDZlNmJmYmJmNzhiLzAvRERFQzA3MkE5 Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYxRDkwNzkyQzRCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREVDMDcyQTkyNzc1MURDQzhCNjk0NENBNDYwRjFEOTA3OTJD NEJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY1ZmE1NGQtMjQ4ZS00MjNjLTll NDktZDZlNmJmYmJmNzhiLzAvRERFQzA3MkE5Mjc3NTFEQ0M4QjY5NDRDQTQ2MEYx RDkwNzkyQzRCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZVF9WOBKz+P/vJw/uMxi4XFK4J071i2V4g 5T3UJhs1noL0/NyClQUTP2MFziIJTouz5WZrv1Ostssb8bD8JqHEd75gH9tGg3n7 FXB7BU62bU+PJ8YRGw+oiJ5NF0eFBOw8CwUUR3iUaqSjNpxjWZ3Eab2Arj5Aybez RSsa3sdOa2/8AKzmQX82ggnKj+wbLnkW6+YLpjESlWDRFaYqunIeXl+F4ZwDdSKe nlypc6K6SqmSbp25YKdWMXMQfZh3ImS7WwVGZGy5gFU8QYc89reJHSMcmrhTpF7t WeaMQpxGXDCZfhFqcVO1D2JVDVWUIYs42WWNZNipxUiGBlbMs7A= -----END CERTIFICATE-----Generated at Sat Jun 20 09:15:33 2026 by rpki-client