$ rpki-client -vvf rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft File: DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft (raw, json) Hash identifier: aL0ComuE4iEDErcgQzBS7jHAovYVBosEsJt9ZSruTBw= Subject key identifier: F4:65:49:B4:9D:7F:5C:53:D2:59:43:0A:BA:D0:79:8D:B0:37:95:FD Authority key identifier: DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC Certificate issuer: /CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC Certificate serial: 701B18E1BBF2C0DA265223B88584FDE3EAF4883A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 08:48:37 +0000 Manifest this update: Wed 17 Jun 2026 08:43:37 +0000 Manifest next update: Thu 18 Jun 2026 11:15:37 +0000 Files and hashes: 1: 3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (hash: 8lXuq/DeovKiTSw+1KX+GVyNFO7DCMSlCXzJz4jkGN8=) 2: 3130332e3138392e312e302f32342d3234203d3e20313439383830.roa (hash: 8bw4CbbPmgFdSPOl3wk5Lxb6WEH9Yu6WI8ZoRW3ng/U=) 3: DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl (hash: rvENPdqL3AKO82+dr12d5lPFvr4vlN+gGTxWD0pasUw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1b:18:e1:bb:f2:c0:da:26:52:23:b8:85:84:fd:e3:ea:f4:88:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC Validity Not Before: Jun 17 08:43:37 2026 GMT Not After : Jun 18 11:15:37 2026 GMT Subject: CN=F46549B49D7F5C53D259430ABAD0798DB03795FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0d:70:81:58:d3:35:3c:24:db:8c:f3:fd:d6: 3a:23:1b:f1:6b:a8:5f:dd:c4:d2:90:b4:31:24:59: af:72:ce:58:3c:35:68:c4:54:87:09:b8:a0:81:4e: 60:eb:16:63:91:3c:83:74:3f:0d:af:9e:71:b9:71: 94:03:31:ed:af:b5:47:d8:e8:d9:0b:09:bb:58:3b: 35:05:56:ad:52:41:77:19:62:89:ab:72:d1:b3:41: 79:4c:82:eb:bf:89:15:23:c3:5d:bf:b5:4d:76:1f: 93:4c:00:cb:67:6b:25:96:1e:c4:61:3a:41:c2:dd: 81:14:68:72:64:11:2a:29:56:9f:12:21:c0:02:75: 53:47:22:2f:35:7c:0b:a0:ef:da:be:91:c4:0b:0e: e9:8d:59:78:8b:95:41:f8:bb:6a:4d:c3:a4:24:93: 8a:98:cb:cd:79:55:c6:d9:f0:2d:75:c8:d1:56:03: 35:13:34:2f:01:0c:8e:e9:77:96:ce:a4:b0:d1:36: a6:8a:7d:05:0a:fe:3e:2b:f3:54:8f:c2:62:35:5c: bd:9c:ac:a8:32:20:55:93:32:37:ca:7e:93:a6:92: 39:a0:0b:41:c6:12:00:b1:ed:8a:72:65:0a:0e:46: 60:21:69:a4:fb:80:78:d7:de:3e:9b:cf:86:a5:23: 77:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:65:49:B4:9D:7F:5C:53:D2:59:43:0A:BA:D0:79:8D:B0:37:95:FD X509v3 Authority Key Identifier: keyid:DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:0a:b4:a9:c3:c2:e1:cc:4f:81:00:67:5a:4d:32:b8:26:2a: 26:d8:5b:11:63:fc:02:21:5b:d2:02:6a:a0:44:d3:f4:69:c8: 0a:b6:5b:76:9f:ca:34:b7:c1:11:51:e8:2f:6f:86:ff:92:bc: 5d:cf:85:3c:64:c0:fb:cd:59:3a:22:01:d2:66:91:37:80:ad: 4d:80:61:b8:2d:ab:bf:6d:47:cc:0e:d2:a9:39:30:b0:02:da: 0a:56:91:07:90:a3:bc:2d:53:8f:99:72:58:eb:da:ef:75:cd: 0e:34:11:03:70:96:61:5f:dd:30:26:87:d9:91:ea:82:d0:59: 0c:ed:12:95:b2:60:92:c6:1b:7d:83:3b:b8:7d:d7:7f:f9:d2: 7e:64:04:ac:5f:03:44:fa:52:57:28:ed:72:10:51:bd:cd:22: 89:63:77:41:d4:66:ae:88:59:37:a5:24:6e:63:75:b6:40:31: d3:5a:45:01:81:13:be:1e:a6:52:d5:a0:87:81:90:5b:18:46: 3c:1c:eb:47:62:71:44:69:ce:0f:78:90:f5:1e:01:5f:0c:62: 51:81:45:06:63:b8:24:a3:0b:a2:39:31:6d:d0:5a:64:9b:4b: c7:91:6e:a1:3b:22:45:65:95:ab:55:f4:a8:d2:c7:b8:3d:ad: ac:4b:33:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBsY4bvywNomUiO4hYT94+r0iDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBQzkyMDM4MDJDMTc5Nzg5QjI0QzVBMzE2OUFBN0FB MTA0QUJGQzAeFw0yNjA2MTcwODQzMzdaFw0yNjA2MTgxMTE1MzdaMDMxMTAvBgNV BAMTKEY0NjU0OUI0OUQ3RjVDNTNEMjU5NDMwQUJBRDA3OThEQjAzNzk1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDXCBWNM1PCTbjPP91jojG/Fr qF/dxNKQtDEkWa9yzlg8NWjEVIcJuKCBTmDrFmORPIN0Pw2vnnG5cZQDMe2vtUfY 6NkLCbtYOzUFVq1SQXcZYomrctGzQXlMguu/iRUjw12/tU12H5NMAMtnayWWHsRh OkHC3YEUaHJkESopVp8SIcACdVNHIi81fAug79q+kcQLDumNWXiLlUH4u2pNw6Qk k4qYy815VcbZ8C11yNFWAzUTNC8BDI7pd5bOpLDRNqaKfQUK/j4r81SPwmI1XL2c rKgyIFWTMjfKfpOmkjmgC0HGEgCx7YpyZQoORmAhaaT7gHjX3j6bz4alI3d3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9GVJtJ1/XFPSWUMKutB5jbA3lf0wHwYDVR0j BBgwFoAU3qySA4AsF5eJskxaMWmqeqEEq/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhNzRhYzktOGZhNS00MzliLThmMjEtMDhmMjg0Njc3YWEzLzAvREVBQzkyMDM4 MDJDMTc5Nzg5QjI0QzVBMzE2OUFBN0FBMTA0QUJGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUFDOTIwMzgwMkMxNzk3ODlCMjRDNUEzMTY5QUE3QUExMDRB QkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhNzRhYzktOGZhNS00MzliLThm MjEtMDhmMjg0Njc3YWEzLzAvREVBQzkyMDM4MDJDMTc5Nzg5QjI0QzVBMzE2OUFB N0FBMTA0QUJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAKtKnDwuHMT4EAZ1pNMrgmKibYWxFj/AIh W9ICaqBE0/RpyAq2W3afyjS3wRFR6C9vhv+SvF3PhTxkwPvNWToiAdJmkTeArU2A Ybgtq79tR8wO0qk5MLAC2gpWkQeQo7wtU4+Zcljr2u91zQ40EQNwlmFf3TAmh9mR 6oLQWQztEpWyYJLGG32DO7h913/50n5kBKxfA0T6Ulco7XIQUb3NIoljd0HUZq6I WTelJG5jdbZAMdNaRQGBE74eplLVoIeBkFsYRjwc60dicURpzg94kPUeAV8MYlGB RQZjuCSjC6I5MW3QWmSbS8eRbqE7IkVllatV9KjSx7g9raxLMxk= -----END CERTIFICATE-----Generated at Wed Jun 17 12:42:38 2026 by rpki-client