$ rpki-client -vvf rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft File: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft (raw, json) Hash identifier: p9HCw24WxXBUTdQCaGkV6GewEpxQiW+bOwVfJCABmJ8= Subject key identifier: ED:F0:6F:2D:1C:24:95:F4:AF:21:1E:F7:94:73:6E:C7:45:DA:15:66 Authority key identifier: DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB Certificate issuer: /CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Certificate serial: 5010D675422F665F1D111ADE26DE9C2DD4C102AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 19:48:17 +0000 Manifest this update: Sat 13 Jun 2026 19:43:17 +0000 Manifest next update: Sun 14 Jun 2026 23:29:17 +0000 Files and hashes: 1: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: 5SPmMH7FYGGF68tuvyYTcGmJM2nZRCHFWkVHY/HhGvw=) 2: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: dDeWtGREo/C+9RQAi+5KoHx0KqrltXLZhEwhJjs/H8A=) 3: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl (hash: RHjuJ1JvbBcEERQJuNrrAko/jkFnpkD+XR7bcORMjDw=) 4: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: raCtvjVmEJI55eIKeNiuVbv8oBn2bNkQd9Io9ytHzqU=) 5: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: 8nmjbXVGRgtW15sU+Nw25IOfD9ULS+LcKdXK12LUizs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:10:d6:75:42:2f:66:5f:1d:11:1a:de:26:de:9c:2d:d4:c1:02:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Validity Not Before: Jun 13 19:43:17 2026 GMT Not After : Jun 14 23:29:17 2026 GMT Subject: CN=EDF06F2D1C2495F4AF211EF794736EC745DA1566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b7:8f:a6:75:b8:f9:8b:35:97:07:f2:6e:de: 1d:6a:fa:82:14:d9:1c:45:c8:cf:55:33:84:0c:c9: 18:a6:01:95:c4:24:9f:04:72:e4:a8:b6:ff:2c:7b: 54:86:32:a4:10:19:99:7c:4d:00:84:87:ab:03:95: 9d:72:ed:74:83:10:02:ac:17:11:f0:67:16:13:ec: c5:57:07:18:fc:e4:c3:23:f1:50:82:0f:cd:9f:1c: c4:a3:a9:fa:cc:fc:72:94:d1:34:14:66:34:7f:e4: 86:65:9f:d8:94:18:7a:26:f6:25:e2:20:51:e9:41: 7f:41:4f:72:d9:bd:d9:e8:a1:34:ca:e6:05:59:fc: 2d:8c:63:6a:f2:c6:09:35:35:0d:f7:a9:31:f9:48: c8:03:2c:7a:96:dd:a4:65:25:08:b4:a6:b9:09:6f: e2:a6:35:dc:40:ff:b6:8b:9c:67:97:4f:f9:77:41: 1d:b6:ea:75:88:9d:9d:58:93:fc:02:1c:60:65:1c: 61:28:5c:ab:74:ff:1e:eb:f2:71:ee:56:3b:5f:d9: 19:04:97:12:fa:3e:87:98:7e:c2:5b:30:0d:3e:70: dc:49:a2:65:0d:e7:6c:a8:26:dd:d6:5f:fd:c0:bd: 79:24:87:40:60:61:65:73:63:64:e1:e1:de:62:b3: 2c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F0:6F:2D:1C:24:95:F4:AF:21:1E:F7:94:73:6E:C7:45:DA:15:66 X509v3 Authority Key Identifier: keyid:DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:27:44:6a:e6:f1:d9:ae:66:b8:d6:a3:72:c0:1d:74:ad:5b: 33:68:3d:14:af:f9:91:7e:7f:fc:5b:89:7d:3c:a3:78:f3:26: 77:56:f5:77:5a:ef:37:e6:1e:03:16:df:6b:96:5a:26:82:32: b9:a0:ee:09:de:7b:38:48:ed:07:48:52:7f:64:c6:9b:cc:54: 69:e5:3a:4d:54:38:3d:e5:f9:5b:95:c4:06:00:24:4c:05:17: 0b:2b:97:53:0d:1e:2d:43:ad:06:bc:d0:76:b0:e3:91:10:55: df:94:a1:0e:a3:de:af:24:23:64:50:14:41:e2:1a:de:57:73: bc:d8:28:0c:2e:03:7a:49:61:0f:3a:09:a2:04:1c:be:b0:c7: 9e:38:18:80:2b:db:e6:76:fe:d2:7c:2d:b4:56:92:3f:22:73: 9d:03:e9:40:95:e5:7b:c6:e5:03:c6:4b:12:e7:c8:e6:9f:bc: a8:20:f0:4d:1a:19:64:1a:2f:6e:16:39:f3:0d:71:de:9c:67: 82:5c:d5:9f:16:2e:cb:d9:5f:7b:db:1d:00:93:15:2a:fd:2f: 0a:45:21:38:e7:c7:69:10:a1:ae:c4:ad:99:29:b9:f6:28:58: 7d:f8:bb:18:61:ec:2d:3c:75:ff:3f:73:0e:1f:eb:a8:d4:ae: 6c:c2:7f:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUBDWdUIvZl8dERreJt6cLdTBAq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCRUVFODk3RkQ4NTU3MzA0QTJDMDIwREI4NkFEMkJB ODBCMDZGQjAeFw0yNjA2MTMxOTQzMTdaFw0yNjA2MTQyMzI5MTdaMDMxMTAvBgNV BAMTKEVERjA2RjJEMUMyNDk1RjRBRjIxMUVGNzk0NzM2RUM3NDVEQTE1NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDct4+mdbj5izWXB/Ju3h1q+oIU 2RxFyM9VM4QMyRimAZXEJJ8EcuSotv8se1SGMqQQGZl8TQCEh6sDlZ1y7XSDEAKs FxHwZxYT7MVXBxj85MMj8VCCD82fHMSjqfrM/HKU0TQUZjR/5IZln9iUGHom9iXi IFHpQX9BT3LZvdnooTTK5gVZ/C2MY2ryxgk1NQ33qTH5SMgDLHqW3aRlJQi0prkJ b+KmNdxA/7aLnGeXT/l3QR226nWInZ1Yk/wCHGBlHGEoXKt0/x7r8nHuVjtf2RkE lxL6PoeYfsJbMA0+cNxJomUN52yoJt3WX/3AvXkkh0BgYWVzY2Th4d5isyz7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7fBvLRwklfSvIR73lHNux0XaFWYwHwYDVR0j BBgwFoAU3r7uiX/YVXMEosAg24atK6gLBvswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIyZjUxNTItYTI5NS00N2I3LWFkZGMtZmJmZWYzMjQ3ZTNiLzAvREVCRUVFODk3 RkQ4NTU3MzA0QTJDMDIwREI4NkFEMkJBODBCMDZGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUJFRUU4OTdGRDg1NTczMDRBMkMwMjBEQjg2QUQyQkE4MEIw NkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvREVCRUVFODk3RkQ4NTU3MzA0QTJDMDIwREI4NkFE MkJBODBCMDZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8nRGrm8dmuZrjWo3LAHXStWzNoPRSv+ZF+ f/xbiX08o3jzJndW9Xda7zfmHgMW32uWWiaCMrmg7gneezhI7QdIUn9kxpvMVGnl Ok1UOD3l+VuVxAYAJEwFFwsrl1MNHi1DrQa80Haw45EQVd+UoQ6j3q8kI2RQFEHi Gt5Xc7zYKAwuA3pJYQ86CaIEHL6wx544GIAr2+Z2/tJ8LbRWkj8ic50D6UCV5XvG 5QPGSxLnyOafvKgg8E0aGWQaL24WOfMNcd6cZ4Jc1Z8WLsvZX3vbHQCTFSr9LwpF ITjnx2kQoa7ErZkpufYoWH34uxhh7C08df8/cw4f66jUrmzCf6s= -----END CERTIFICATE-----Generated at Sat Jun 13 23:25:49 2026 by rpki-client