$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft File: DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft (raw, json) Hash identifier: PcbPeFqWBKVJ7Rx+zi0H39umtbY0/gf7xPyFlH+ug9Q= Subject key identifier: C5:C7:8E:09:20:C3:F4:A7:84:B6:39:7F:7D:BB:31:C3:E4:03:21:B5 Authority key identifier: DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC Certificate issuer: /CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC Certificate serial: 211A8D5F934708B6B90A8BC32A3CC464CD6AF2C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft Manifest number: C6 Signing time: Sun 27 Sep 2026 20:24:13 +0000 Manifest this update: Sun 27 Sep 2026 20:19:13 +0000 Manifest next update: Mon 28 Sep 2026 21:40:13 +0000 Files and hashes: 1: 3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (hash: 8lXuq/DeovKiTSw+1KX+GVyNFO7DCMSlCXzJz4jkGN8=) 2: DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl (hash: 25yPPU6jsVjETJ6gGcfpn7IUKixlzksxWzEW0/4Zrh8=) 3: 3130332e3138392e312e302f32342d3234203d3e20313439383830.roa (hash: 8bw4CbbPmgFdSPOl3wk5Lxb6WEH9Yu6WI8ZoRW3ng/U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 21:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:1a:8d:5f:93:47:08:b6:b9:0a:8b:c3:2a:3c:c4:64:cd:6a:f2:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC Validity Not Before: Sep 27 20:19:13 2026 GMT Not After : Sep 28 21:40:13 2026 GMT Subject: CN=C5C78E0920C3F4A784B6397F7DBB31C3E40321B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1d:bf:32:5b:01:f9:17:8b:27:46:1b:d6:8c: f5:c7:cf:24:67:f7:38:82:0b:87:3c:29:a6:1c:94: 8d:6a:5b:80:00:87:99:b4:bc:82:26:82:be:87:0e: 4e:22:4c:54:02:87:b8:0b:0e:34:b8:82:5b:23:58: cd:42:9b:c6:b6:bf:07:8b:8f:5c:6b:1f:73:44:91: e9:13:4d:1c:af:e9:89:99:94:23:67:de:af:04:f2: c2:47:1c:9d:8c:88:45:3e:ab:09:f1:0e:85:6a:1d: 9c:ce:32:98:29:88:b3:4b:fb:fa:9c:2a:d0:a9:72: 37:88:e8:2e:d0:01:54:b2:85:75:0a:4e:da:7f:f1: 98:03:f2:b9:05:59:bc:ea:7a:98:fa:71:71:f1:a6: d3:f2:02:c4:04:37:95:d4:4f:ba:60:b0:d3:45:71: fa:d2:ef:d8:0e:e7:ae:d0:38:80:da:e3:e3:dc:6b: ba:19:bd:43:11:ee:7e:70:8a:8d:a3:84:8c:77:9a: 0f:17:ea:40:79:95:45:5a:46:61:87:e0:e2:79:73: 26:d1:e0:9d:be:2a:dd:68:34:c2:9d:fe:35:b6:23: 5c:30:09:09:1c:b5:68:dc:d2:c1:f0:cb:d0:a2:ed: bb:bd:7d:55:81:83:90:cb:d8:56:ad:49:24:a2:77: 4f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C7:8E:09:20:C3:F4:A7:84:B6:39:7F:7D:BB:31:C3:E4:03:21:B5 X509v3 Authority Key Identifier: keyid:DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e6:8a:0f:b0:7b:22:66:32:f1:d6:2c:ed:82:89:43:41:1a: 66:47:15:dc:d7:ae:8e:a4:d6:ed:41:4c:e6:2c:a6:e5:79:a7: be:ec:39:02:34:d8:61:c8:5f:15:f3:42:41:23:91:b7:82:5d: 51:2f:74:05:f2:0d:b1:df:b0:00:c5:8f:a3:24:e3:a7:6f:cd: 14:34:0c:b8:75:97:1f:29:47:7b:b8:d1:bc:1e:1e:87:02:d3: 48:62:2d:96:e1:38:de:1c:d6:95:1d:09:fa:df:75:49:e0:24: 0d:8e:bd:fa:8d:00:48:52:43:5a:4d:a6:ae:67:f3:c0:0f:1f: 47:6a:e3:13:10:92:84:6c:a0:48:9b:5a:69:c6:c2:bd:1d:35: ac:9c:4d:9e:31:3b:61:e8:0e:d7:0c:41:85:89:5e:68:29:7e: d7:8d:fb:76:3e:aa:cd:af:4b:58:3e:ab:81:a2:5e:e3:ba:cb: 0f:6a:36:8f:6f:a9:80:f3:30:7a:a0:a0:f4:61:a1:f0:88:0b: 7b:d3:01:cd:ae:29:72:85:f0:c0:82:33:ad:62:8c:76:45:d1: 04:d8:62:6b:84:df:d4:1d:b3:6f:4a:c3:e7:5d:7b:3a:87:ce: 79:88:a5:8b:9f:46:4b:a7:a9:18:5e:5a:e6:2f:64:c9:aa:e7: b8:c1:ed:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIRqNX5NHCLa5CovDKjzEZM1q8scwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBQzkyMDM4MDJDMTc5Nzg5QjI0QzVBMzE2OUFBN0FB MTA0QUJGQzAeFw0yNjA5MjcyMDE5MTNaFw0yNjA5MjgyMTQwMTNaMDMxMTAvBgNV BAMTKEM1Qzc4RTA5MjBDM0Y0QTc4NEI2Mzk3RjdEQkIzMUMzRTQwMzIxQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiHb8yWwH5F4snRhvWjPXHzyRn 9ziCC4c8KaYclI1qW4AAh5m0vIImgr6HDk4iTFQCh7gLDjS4glsjWM1Cm8a2vweL j1xrH3NEkekTTRyv6YmZlCNn3q8E8sJHHJ2MiEU+qwnxDoVqHZzOMpgpiLNL+/qc KtCpcjeI6C7QAVSyhXUKTtp/8ZgD8rkFWbzqepj6cXHxptPyAsQEN5XUT7pgsNNF cfrS79gO567QOIDa4+Pca7oZvUMR7n5wio2jhIx3mg8X6kB5lUVaRmGH4OJ5cybR 4J2+Kt1oNMKd/jW2I1wwCQkctWjc0sHwy9Ci7bu9fVWBg5DL2FatSSSid0+RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxceOCSDD9KeEtjl/fbsxw+QDIbUwHwYDVR0j BBgwFoAU3qySA4AsF5eJskxaMWmqeqEEq/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhNzRhYzktOGZhNS00MzliLThmMjEtMDhmMjg0Njc3YWEzLzAvREVBQzkyMDM4 MDJDMTc5Nzg5QjI0QzVBMzE2OUFBN0FBMTA0QUJGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUFDOTIwMzgwMkMxNzk3ODlCMjRDNUEzMTY5QUE3QUExMDRB QkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhNzRhYzktOGZhNS00MzliLThm MjEtMDhmMjg0Njc3YWEzLzAvREVBQzkyMDM4MDJDMTc5Nzg5QjI0QzVBMzE2OUFB N0FBMTA0QUJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDmig+weyJmMvHWLO2CiUNBGmZHFdzXro6k 1u1BTOYspuV5p77sOQI02GHIXxXzQkEjkbeCXVEvdAXyDbHfsADFj6Mk46dvzRQ0 DLh1lx8pR3u40bweHocC00hiLZbhON4c1pUdCfrfdUngJA2OvfqNAEhSQ1pNpq5n 88APH0dq4xMQkoRsoEibWmnGwr0dNaycTZ4xO2HoDtcMQYWJXmgpfteN+3Y+qs2v S1g+q4GiXuO6yw9qNo9vqYDzMHqgoPRhofCIC3vTAc2uKXKF8MCCM61ijHZF0QTY YmuE39Qds29Kw+ddezqHznmIpYufRkunqRheWuYvZMmq57jB7ao= -----END CERTIFICATE-----Generated at Mon Sep 28 12:17:57 2026 by rpki-client