$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft File: DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft (raw, json) Hash identifier: pLpLE/PUfw8ZYKikGWfnTNLKF0/WSsPza7/QE1Tibcs= Subject key identifier: 58:E9:75:5F:8C:15:32:8F:FD:9C:7D:01:40:AD:08:35:6C:3B:17:25 Authority key identifier: DE:E1:9A:96:E6:FA:5B:36:0F:C8:BF:1C:E5:AC:9B:14:8D:0E:87:4C Certificate issuer: /CN=DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C Certificate serial: 7F5ED0E3EB57821138C075A278ACF7D15561C68F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft Manifest number: BF Signing time: Mon 21 Sep 2026 21:17:56 +0000 Manifest this update: Mon 21 Sep 2026 21:12:56 +0000 Manifest next update: Tue 22 Sep 2026 21:50:56 +0000 Files and hashes: 1: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: TRjfg68H1cvqa28w3D+TRkRhD92nBMq1k+4HcpA2+sQ=) 2: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: rwg483/d/uW8MM/6Hs4Vo767LHO7cJke91zFFG533K4=) 3: DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.crl (hash: CflbSMWGNN7XyIblz/zSEyHrK0CdFcylZbHyX8QjpEo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.crl rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:5e:d0:e3:eb:57:82:11:38:c0:75:a2:78:ac:f7:d1:55:61:c6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C Validity Not Before: Sep 21 21:12:56 2026 GMT Not After : Sep 22 21:50:56 2026 GMT Subject: CN=58E9755F8C15328FFD9C7D0140AD08356C3B1725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:78:57:9c:a8:da:ab:a5:e0:31:df:98:ed:42: 06:2d:9e:64:4b:dc:ee:86:26:ca:e9:60:05:04:c1: 10:72:9f:57:0b:a9:44:de:d8:c1:ac:c2:9e:4d:94: c6:44:8c:01:e5:e7:6f:a6:e0:7f:64:8d:e3:37:4c: f6:b0:26:ba:63:51:03:18:93:90:ee:d1:b6:d6:15: 20:09:47:3a:26:43:69:be:6c:17:16:73:2b:5f:e0: 61:8f:03:70:c1:d1:39:bd:44:cf:6d:49:cc:18:23: 92:cb:b5:5c:f4:f3:4c:7f:26:38:99:03:39:cf:c5: 70:bd:1a:18:22:2e:a4:3b:b3:fd:5e:b0:a8:18:fb: 58:2e:e3:b3:66:64:f0:96:92:ea:26:d2:03:3d:ec: 11:13:5f:14:8b:4f:08:93:8b:09:f3:e3:cc:f2:6b: 74:88:d0:5e:fc:40:39:2e:7f:d0:c5:ed:f3:ac:e0: 01:30:7c:b3:c2:97:70:8d:be:3e:b8:b7:35:1b:b1: 0b:26:db:ef:db:13:4f:3c:ec:3e:59:4b:1f:3d:60: 82:cf:40:f7:f7:75:79:1a:5b:03:aa:88:f0:27:6c: 49:cb:df:c0:c6:c7:9e:77:cb:94:4b:b5:b0:57:a0: f3:72:59:33:a7:6f:45:1f:14:60:02:86:00:83:be: a7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E9:75:5F:8C:15:32:8F:FD:9C:7D:01:40:AD:08:35:6C:3B:17:25 X509v3 Authority Key Identifier: keyid:DE:E1:9A:96:E6:FA:5B:36:0F:C8:BF:1C:E5:AC:9B:14:8D:0E:87:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:06:8f:24:a1:98:98:be:9d:d6:17:bd:45:2c:29:5d:07:3f: de:23:b7:fb:11:ce:62:b9:55:5d:6f:22:9b:8e:26:06:e3:d7: 2f:70:05:0d:08:68:0e:53:6b:ac:81:d1:7a:6c:b6:c1:d1:ae: 1d:69:3e:bc:5c:a1:67:99:03:ad:0b:01:aa:e6:0e:7e:a5:15: db:d3:94:68:c7:2c:2a:ab:0f:65:15:8c:55:fa:2b:df:08:a8: a8:0a:09:eb:a6:08:80:eb:5b:68:4d:2d:49:8b:70:9e:75:ac: cd:42:04:9f:06:ea:39:ee:2b:65:da:54:9f:fe:41:5e:ac:93: 98:e2:7c:af:2c:8e:a2:21:f8:85:c8:86:2e:60:a7:1c:f7:30: 88:f6:07:c5:6b:12:bd:ca:21:c2:2d:ae:50:80:c6:ff:3f:27: ec:4b:fc:53:4e:8f:f0:94:dd:8c:c4:95:2d:26:3e:2e:ef:dd: a7:8e:54:cc:f5:3e:34:b7:cd:95:b3:89:f1:30:59:ac:ae:7f: ea:f0:53:78:77:61:fc:2d:66:1d:e9:48:0b:b2:1a:c1:ff:1c: 1b:96:92:4c:03:76:dc:d2:93:7e:f6:14:bf:74:17:ce:88:e9: 61:9b:32:01:0a:e6:38:b5:bd:69:f8:94:d0:c1:69:ea:be:dc: 23:b5:fd:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf17Q4+tXghE4wHWieKz30VVhxo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVFMTlBOTZFNkZBNUIzNjBGQzhCRjFDRTVBQzlCMTQ4 RDBFODc0QzAeFw0yNjA5MjEyMTEyNTZaFw0yNjA5MjIyMTUwNTZaMDMxMTAvBgNV BAMTKDU4RTk3NTVGOEMxNTMyOEZGRDlDN0QwMTQwQUQwODM1NkMzQjE3MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpeFecqNqrpeAx35jtQgYtnmRL 3O6GJsrpYAUEwRByn1cLqUTe2MGswp5NlMZEjAHl52+m4H9kjeM3TPawJrpjUQMY k5Du0bbWFSAJRzomQ2m+bBcWcytf4GGPA3DB0Tm9RM9tScwYI5LLtVz080x/JjiZ AznPxXC9GhgiLqQ7s/1esKgY+1gu47NmZPCWkuom0gM97BETXxSLTwiTiwnz48zy a3SI0F78QDkuf9DF7fOs4AEwfLPCl3CNvj64tzUbsQsm2+/bE0887D5ZSx89YILP QPf3dXkaWwOqiPAnbEnL38DGx553y5RLtbBXoPNyWTOnb0UfFGAChgCDvqfvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWOl1X4wVMo/9nH0BQK0INWw7FyUwHwYDVR0j BBgwFoAU3uGalub6WzYPyL8c5aybFI0Oh0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY0ZmE3YjgtNTMwMi00OTBiLTkyZTQtMjdmMjhjNjY1NzVjLzAvREVFMTlBOTZF NkZBNUIzNjBGQzhCRjFDRTVBQzlCMTQ4RDBFODc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUUxOUE5NkU2RkE1QjM2MEZDOEJGMUNFNUFDOUIxNDhEMEU4 NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvREVFMTlBOTZFNkZBNUIzNjBGQzhCRjFDRTVBQzlC MTQ4RDBFODc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAGjyShmJi+ndYXvUUsKV0HP94jt/sRzmK5 VV1vIpuOJgbj1y9wBQ0IaA5Ta6yB0XpstsHRrh1pPrxcoWeZA60LAarmDn6lFdvT lGjHLCqrD2UVjFX6K98IqKgKCeumCIDrW2hNLUmLcJ51rM1CBJ8G6jnuK2XaVJ/+ QV6sk5jifK8sjqIh+IXIhi5gpxz3MIj2B8VrEr3KIcItrlCAxv8/J+xL/FNOj/CU 3YzElS0mPi7v3aeOVMz1PjS3zZWzifEwWayuf+rwU3h3YfwtZh3pSAuyGsH/HBuW kkwDdtzSk372FL90F86I6WGbMgEK5ji1vWn4lNDBaeq+3CO1/bE= -----END CERTIFICATE-----Generated at Tue Sep 22 04:18:05 2026 by rpki-client