$ rpki-client -vvvf rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft File: DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft (raw, json) Hash identifier: KvpopFtyZoYAgRoeZzH600zWrBIQ3L/3//b18bmMCWk= Subject key identifier: 04:77:AB:47:94:DC:BE:A2:E9:B8:56:80:44:1F:6D:83:75:58:26:A4 Authority key identifier: DD:34:AC:E6:27:4D:2C:13:A1:B4:23:EC:1A:9C:D7:5E:ED:F1:8D:24 Certificate issuer: /CN=DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24 Certificate serial: 6E3C89F16086B3E4B432DE8D4D91F661CEA23725 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 15:33:23 +0000 Manifest this update: Wed 16 Sep 2026 15:28:23 +0000 Manifest next update: Thu 17 Sep 2026 19:04:23 +0000 Files and hashes: 1: DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl (hash: fV0d12IJrR0wShL8WNmwcR5lcZ5TBPBtSE4NKZqIsA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:3c:89:f1:60:86:b3:e4:b4:32:de:8d:4d:91:f6:61:ce:a2:37:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24 Validity Not Before: Sep 16 15:28:23 2026 GMT Not After : Sep 17 19:04:23 2026 GMT Subject: CN=0477AB4794DCBEA2E9B85680441F6D83755826A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:4a:f1:5a:0a:24:6b:5d:46:fe:af:1e:0d: 3e:ee:a5:32:96:69:0e:52:d5:40:98:b3:ba:1c:8c: ea:8f:42:d4:41:8a:b4:6d:35:20:23:bb:00:d2:54: b0:e7:eb:52:3e:d3:72:2e:4c:af:78:a2:86:bf:a2: 68:9b:87:22:7b:30:03:10:88:ce:1b:82:7e:8d:c7: 2a:71:5e:df:ce:03:cd:19:3d:61:df:21:ee:21:6b: bd:6b:14:25:55:79:1e:92:59:e5:30:3b:69:0d:8d: 26:33:42:79:e5:f1:b6:bf:dc:6e:11:62:21:a9:60: a8:45:6b:37:05:71:e6:76:07:75:13:30:4b:97:d8: 82:b2:cf:04:4c:1b:c6:32:a8:7d:36:9e:24:57:cd: f1:fa:c2:95:e9:1f:e5:aa:b0:d4:13:51:09:53:e3: b7:6d:85:54:c7:36:3a:de:6c:05:09:af:7e:84:18: 4f:2a:57:17:9c:c9:f9:b1:7f:4c:fc:0c:45:61:70: 56:5d:6f:a9:79:0c:d0:e7:38:9a:63:af:d3:6d:d5: f2:74:b1:3c:06:63:e5:f6:ae:d3:47:7c:eb:49:e9: 9c:01:fa:81:bb:6c:26:24:f9:24:ec:38:13:16:d6: ec:75:4e:3c:ae:69:03:23:74:f4:10:39:e8:a5:74: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:77:AB:47:94:DC:BE:A2:E9:B8:56:80:44:1F:6D:83:75:58:26:A4 X509v3 Authority Key Identifier: keyid:DD:34:AC:E6:27:4D:2C:13:A1:B4:23:EC:1A:9C:D7:5E:ED:F1:8D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/DD34ACE6274D2C13A1B423EC1A9CD75EEDF18D24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:9a:0c:f7:8f:ed:ea:c8:cf:16:d6:1a:23:cb:b9:01:0c:d7: c3:6a:04:e5:ab:ab:0d:c9:f8:d0:07:4a:3f:e4:08:64:ff:b3: b8:ad:0a:89:76:f6:49:9d:e5:b0:09:c5:50:53:2c:01:c8:b0: 9a:6e:95:17:0e:8c:93:cf:94:a7:11:0e:0e:53:a5:33:9a:24: 3e:de:96:70:55:7c:36:ff:82:3e:4c:b5:c2:61:5e:8d:dc:1b: 1b:2c:e5:27:65:e4:b2:01:32:98:fd:2f:4f:b9:3e:27:9d:fb: 51:41:2a:18:6b:11:d6:fe:be:5f:47:e6:e2:91:3f:3b:eb:16: aa:16:d7:2e:c8:75:65:f7:cd:68:fe:cf:39:55:ff:3c:8e:6a: e1:28:fd:c7:35:48:e8:6d:5f:01:25:fa:ff:d1:9f:b2:e6:29: 32:26:e9:70:7f:ca:40:ec:0c:79:94:f9:10:c2:d8:c8:0a:a9: 4f:2a:39:76:79:7d:49:fb:2b:b6:b0:af:7b:27:e2:a4:00:3d: 4e:a5:f4:14:90:25:3a:fe:e4:80:ba:b7:77:8d:0e:46:c1:e9: dc:86:86:aa:c9:04:1c:11:07:3f:52:11:4d:60:b2:b4:f4:15: 08:43:67:f3:87:73:eb:ac:d2:cd:ac:c9:99:be:02:cf:1d:be: 2c:f7:8e:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbjyJ8WCGs+S0Mt6NTZH2Yc6iNyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQzNEFDRTYyNzREMkMxM0ExQjQyM0VDMUE5Q0Q3NUVF REYxOEQyNDAeFw0yNjA5MTYxNTI4MjNaFw0yNjA5MTcxOTA0MjNaMDMxMTAvBgNV BAMTKDA0NzdBQjQ3OTREQ0JFQTJFOUI4NTY4MDQ0MUY2RDgzNzU1ODI2QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDg0rxWgoka11G/q8eDT7upTKW aQ5S1UCYs7ocjOqPQtRBirRtNSAjuwDSVLDn61I+03IuTK94ooa/omibhyJ7MAMQ iM4bgn6NxypxXt/OA80ZPWHfIe4ha71rFCVVeR6SWeUwO2kNjSYzQnnl8ba/3G4R YiGpYKhFazcFceZ2B3UTMEuX2IKyzwRMG8YyqH02niRXzfH6wpXpH+WqsNQTUQlT 47dthVTHNjrebAUJr36EGE8qVxecyfmxf0z8DEVhcFZdb6l5DNDnOJpjr9Nt1fJ0 sTwGY+X2rtNHfOtJ6ZwB+oG7bCYk+STsOBMW1ux1TjyuaQMjdPQQOeildJLRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBHerR5TcvqLpuFaARB9tg3VYJqQwHwYDVR0j BBgwFoAU3TSs5idNLBOhtCPsGpzXXu3xjSQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWZjYWYyN2QtNjRlOS00NzRiLWE3M2ItMzVhZGJlOWIyZjAxLzAvREQzNEFDRTYy NzREMkMxM0ExQjQyM0VDMUE5Q0Q3NUVFREYxOEQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERDM0QUNFNjI3NEQyQzEzQTFCNDIzRUMxQTlDRDc1RUVERjE4 RDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvREQzNEFDRTYyNzREMkMxM0ExQjQyM0VDMUE5Q0Q3 NUVFREYxOEQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaaDPeP7erIzxbWGiPLuQEM18NqBOWrqw3J +NAHSj/kCGT/s7itCol29kmd5bAJxVBTLAHIsJpulRcOjJPPlKcRDg5TpTOaJD7e lnBVfDb/gj5MtcJhXo3cGxss5Sdl5LIBMpj9L0+5Pied+1FBKhhrEdb+vl9H5uKR PzvrFqoW1y7IdWX3zWj+zzlV/zyOauEo/cc1SOhtXwEl+v/Rn7LmKTIm6XB/ykDs DHmU+RDC2MgKqU8qOXZ5fUn7K7awr3sn4qQAPU6l9BSQJTr+5IC6t3eNDkbB6dyG hqrJBBwRBz9SEU1gsrT0FQhDZ/OHc+us0s2syZm+As8dviz3jmo= -----END CERTIFICATE-----Generated at Thu Sep 17 10:44:27 2026 by rpki-client