$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft File: DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft (raw, json) Hash identifier: LIC/tFsu8GzRb7pDOh0axmthPIoRyYY4HxHBriAE3xg= Subject key identifier: 76:11:64:55:7E:01:90:2A:73:15:FE:CC:2D:FE:78:B4:C3:82:32:63 Authority key identifier: DE:E1:9A:96:E6:FA:5B:36:0F:C8:BF:1C:E5:AC:9B:14:8D:0E:87:4C Certificate issuer: /CN=DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C Certificate serial: 2DB7B3139605487A1AD689D740F6AE8BFCC24368 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 12:01:33 +0000 Manifest this update: Tue 28 Jul 2026 11:56:33 +0000 Manifest next update: Wed 29 Jul 2026 13:42:33 +0000 Files and hashes: 1: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: rwg483/d/uW8MM/6Hs4Vo767LHO7cJke91zFFG533K4=) 2: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: TRjfg68H1cvqa28w3D+TRkRhD92nBMq1k+4HcpA2+sQ=) 3: DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.crl (hash: /KGs/+2NKSs0kPKfQ1hUqwcCun/F9DVnQweGt53RqUI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.crl rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b7:b3:13:96:05:48:7a:1a:d6:89:d7:40:f6:ae:8b:fc:c2:43:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C Validity Not Before: Jul 28 11:56:33 2026 GMT Not After : Jul 29 13:42:33 2026 GMT Subject: CN=761164557E01902A7315FECC2DFE78B4C3823263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:9b:44:02:d4:6f:e9:70:e7:91:22:d2:75: 4b:27:f8:23:17:35:be:fc:41:de:cd:3a:bd:83:4d: 6b:94:98:40:a6:d0:29:75:f2:b9:e2:cb:8a:9d:47: 69:f4:e2:da:80:de:58:15:b7:2c:ac:a6:34:51:be: 69:c1:64:2a:62:a3:19:5d:cc:f9:68:44:9a:96:27: 3c:36:be:0b:3a:e2:a1:65:bb:c2:e9:d6:18:6c:ae: 65:f6:b9:30:35:1d:3e:9c:45:89:ae:ec:25:bc:1e: 5f:4b:a4:b4:89:8a:2f:83:44:6e:24:31:81:a3:6a: bd:de:59:dd:16:d0:a1:a9:eb:01:1d:8d:44:ad:ed: b5:f1:a4:43:6e:60:72:5c:86:d6:f8:20:12:4a:de: 09:d1:f9:39:5a:af:f4:83:6f:5c:e0:46:5e:eb:1c: a7:03:6f:0a:55:b0:71:fd:b6:3f:71:26:20:f2:b8: 7e:bb:4d:15:45:ed:2f:f8:ae:1b:7c:53:fc:24:ee: 93:67:f7:12:a7:ae:96:0e:8e:a4:8f:9b:0f:a8:71: d2:ac:1c:54:13:c9:be:f2:7f:3c:57:52:72:9a:91: a2:e1:f9:89:35:09:3c:c0:9c:8f:0e:2b:84:1a:85: 12:56:2a:e3:b0:4f:b2:9c:33:ef:71:6b:21:71:17: 2e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:11:64:55:7E:01:90:2A:73:15:FE:CC:2D:FE:78:B4:C3:82:32:63 X509v3 Authority Key Identifier: keyid:DE:E1:9A:96:E6:FA:5B:36:0F:C8:BF:1C:E5:AC:9B:14:8D:0E:87:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:21:c9:a3:87:80:13:db:bf:31:1f:b7:0f:71:76:27:a0:d1: 23:33:c5:a7:de:93:f4:ad:92:5e:3c:c4:ab:cb:1c:89:c5:fd: b4:c1:66:a8:f0:f8:36:6b:57:af:09:91:c4:4b:6f:9c:a0:e9: 11:c1:ac:72:fd:1b:b3:95:5a:40:cc:7f:8b:72:e5:ff:5f:7f: da:c5:e1:68:2e:07:f6:9d:9a:ab:80:50:d7:03:06:64:d2:38: dc:77:37:aa:21:f6:97:ce:34:9f:a4:29:21:75:13:3b:5e:1e: 3a:4d:18:ab:94:bf:01:9f:ed:d0:b1:71:c0:be:2c:9d:e9:71: 8e:7d:62:7d:03:e4:e4:43:7e:a4:65:ce:05:0f:15:3d:31:2a: dc:0b:a3:68:0b:f4:2d:4a:c0:23:8e:82:21:bf:83:e2:a1:53: d2:b9:35:31:37:dc:78:c1:c4:4e:dd:fc:0c:d3:6b:8a:54:fa: 78:fa:bd:a1:ac:f6:e4:35:11:ef:e6:71:7a:9c:a9:fb:2a:ec: 83:9a:48:7e:8c:df:25:86:5f:73:45:a5:0d:6d:10:1b:aa:cb: 71:7e:42:a6:76:18:a4:9f:15:b9:4f:8a:23:cc:cf:97:29:d1: 2b:c6:00:bb:7d:8a:f4:24:84:c4:83:8a:72:1e:98:1a:23:a3: 1c:d6:08:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULbezE5YFSHoa1onXQPaui/zCQ2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVFMTlBOTZFNkZBNUIzNjBGQzhCRjFDRTVBQzlCMTQ4 RDBFODc0QzAeFw0yNjA3MjgxMTU2MzNaFw0yNjA3MjkxMzQyMzNaMDMxMTAvBgNV BAMTKDc2MTE2NDU1N0UwMTkwMkE3MzE1RkVDQzJERkU3OEI0QzM4MjMyNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwyptEAtRv6XDnkSLSdUsn+CMX Nb78Qd7NOr2DTWuUmECm0Cl18rniy4qdR2n04tqA3lgVtyyspjRRvmnBZCpioxld zPloRJqWJzw2vgs64qFlu8Lp1hhsrmX2uTA1HT6cRYmu7CW8Hl9LpLSJii+DRG4k MYGjar3eWd0W0KGp6wEdjUSt7bXxpENuYHJchtb4IBJK3gnR+Tlar/SDb1zgRl7r HKcDbwpVsHH9tj9xJiDyuH67TRVF7S/4rht8U/wk7pNn9xKnrpYOjqSPmw+ocdKs HFQTyb7yfzxXUnKakaLh+Yk1CTzAnI8OK4QahRJWKuOwT7KcM+9xayFxFy61AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdhFkVX4BkCpzFf7MLf54tMOCMmMwHwYDVR0j BBgwFoAU3uGalub6WzYPyL8c5aybFI0Oh0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY0ZmE3YjgtNTMwMi00OTBiLTkyZTQtMjdmMjhjNjY1NzVjLzAvREVFMTlBOTZF NkZBNUIzNjBGQzhCRjFDRTVBQzlCMTQ4RDBFODc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUUxOUE5NkU2RkE1QjM2MEZDOEJGMUNFNUFDOUIxNDhEMEU4 NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvREVFMTlBOTZFNkZBNUIzNjBGQzhCRjFDRTVBQzlC MTQ4RDBFODc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKghyaOHgBPbvzEftw9xdieg0SMzxafek/St kl48xKvLHInF/bTBZqjw+DZrV68JkcRLb5yg6RHBrHL9G7OVWkDMf4ty5f9ff9rF 4WguB/admquAUNcDBmTSONx3N6oh9pfONJ+kKSF1EzteHjpNGKuUvwGf7dCxccC+ LJ3pcY59Yn0D5ORDfqRlzgUPFT0xKtwLo2gL9C1KwCOOgiG/g+KhU9K5NTE33HjB xE7d/AzTa4pU+nj6vaGs9uQ1Ee/mcXqcqfsq7IOaSH6M3yWGX3NFpQ1tEBuqy3F+ QqZ2GKSfFblPiiPMz5cp0SvGALt9ivQkhMSDinIemBojoxzWCCk= -----END CERTIFICATE-----Generated at Tue Jul 28 22:18:51 2026 by rpki-client