$ rpki-client -vvvf rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft File: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft (raw, json) Hash identifier: k5TSyDb6mKuK+sheu2/BAnQHWm2wMeUnh7ICzR2lRT8= Subject key identifier: B9:D9:63:C6:A9:63:38:A7:50:C1:26:3C:25:79:A4:FE:2D:DC:18:50 Authority key identifier: DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB Certificate issuer: /CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Certificate serial: 7AE3C0A74FBFFA825C9C981A98091265BC8B76F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft Manifest number: BF Signing time: Sun 20 Sep 2026 22:45:04 +0000 Manifest this update: Sun 20 Sep 2026 22:40:04 +0000 Manifest next update: Tue 22 Sep 2026 00:43:04 +0000 Files and hashes: 1: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: 8nmjbXVGRgtW15sU+Nw25IOfD9ULS+LcKdXK12LUizs=) 2: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: raCtvjVmEJI55eIKeNiuVbv8oBn2bNkQd9Io9ytHzqU=) 3: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: 5SPmMH7FYGGF68tuvyYTcGmJM2nZRCHFWkVHY/HhGvw=) 4: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl (hash: 8xaoG/Xw5gUQbN5ysUCRk7hlw+ZjVmAFliod5ag5Yoc=) 5: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: dDeWtGREo/C+9RQAi+5KoHx0KqrltXLZhEwhJjs/H8A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e3:c0:a7:4f:bf:fa:82:5c:9c:98:1a:98:09:12:65:bc:8b:76:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Validity Not Before: Sep 20 22:40:04 2026 GMT Not After : Sep 22 00:43:04 2026 GMT Subject: CN=B9D963C6A96338A750C1263C2579A4FE2DDC1850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:64:79:98:2d:57:f2:04:7d:b3:e5:82:6b: b5:d1:b0:e2:12:96:85:3c:4b:0c:5a:47:75:58:e9: 31:03:a7:08:7c:eb:80:f6:85:62:23:3c:76:b6:79: 88:8a:c7:f3:2a:4f:6f:df:53:1a:fb:64:85:0f:5f: 93:df:e9:bc:dc:b3:84:72:14:a9:18:80:91:5f:57: 4a:66:b1:47:43:0b:35:2c:f2:09:f7:05:52:e7:b4: 2f:4a:9e:eb:d7:03:e5:a1:e2:a7:34:75:d1:aa:d1: d9:cf:0c:1b:48:0d:c6:29:a1:1a:e3:a1:75:ad:ef: a6:8e:b6:f2:73:84:20:2e:38:9b:45:8c:90:ae:21: 91:14:a1:6b:de:26:86:e5:fe:01:ca:fa:aa:c4:a1: 77:c1:a6:0d:84:7b:cc:82:ad:22:69:bb:c4:c5:81: 26:b3:2a:de:af:36:fc:e9:60:a8:da:4b:63:f9:b1: 10:80:10:ba:5c:2c:34:02:66:9a:e6:ac:f2:07:fd: 63:11:5b:df:c3:a7:3f:2b:61:28:bb:9c:98:4d:67: 8a:0f:fd:ab:9c:1f:f6:c0:1b:ab:03:4e:63:ee:6b: 9c:62:cc:26:04:3c:0b:d2:2f:37:39:70:02:7c:50: 11:35:86:2a:2a:38:74:bd:d1:3b:86:5b:9b:a7:6e: 20:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D9:63:C6:A9:63:38:A7:50:C1:26:3C:25:79:A4:FE:2D:DC:18:50 X509v3 Authority Key Identifier: keyid:DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:c4:07:64:c5:ba:72:09:c2:21:b6:7c:22:55:bb:5e:c9:51: 98:a1:93:5a:10:39:64:c0:86:8d:a3:4d:43:d0:bf:8f:4e:69: a1:c7:0b:0a:0b:af:92:82:65:81:90:8a:c6:4d:02:d0:f5:ae: 5c:60:ee:78:94:d1:72:85:05:61:73:05:48:2e:89:10:a6:47: 39:ff:4c:29:9c:0b:e0:44:a5:24:43:08:10:87:2b:b7:df:64: 96:9d:98:55:26:5f:0b:ac:c6:29:e8:a1:1a:ae:77:0e:8d:6c: 4c:50:e8:9c:8a:fc:26:d2:8d:fa:85:eb:b2:44:cc:08:43:90: a7:d5:bd:db:59:fa:52:d1:96:32:9e:37:0b:e3:29:ef:01:a9: 1d:70:11:a9:a0:49:c7:57:ab:8a:d0:1e:50:95:7a:8d:a6:40: 06:c4:fe:b5:23:45:a0:74:cb:21:85:76:cf:24:36:14:e1:4f: 2f:58:b4:fa:b8:64:7a:bf:3b:b3:57:7f:bf:fb:e3:28:d0:71: ef:20:19:96:a1:9b:0f:52:d7:2f:8a:f5:7c:11:da:2b:1d:5e: 20:c4:4a:24:eb:2d:34:97:60:27:bf:92:9c:c3:72:0f:48:79: 26:b2:64:db:18:ea:92:1a:d4:9b:37:57:fe:17:07:24:4a:9e: f8:3b:eb:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeuPAp0+/+oJcnJgamAkSZbyLdvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCRUVFODk3RkQ4NTU3MzA0QTJDMDIwREI4NkFEMkJB ODBCMDZGQjAeFw0yNjA5MjAyMjQwMDRaFw0yNjA5MjIwMDQzMDRaMDMxMTAvBgNV BAMTKEI5RDk2M0M2QTk2MzM4QTc1MEMxMjYzQzI1NzlBNEZFMkREQzE4NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlmR5mC1X8gR9s+WCa7XRsOIS loU8SwxaR3VY6TEDpwh864D2hWIjPHa2eYiKx/MqT2/fUxr7ZIUPX5Pf6bzcs4Ry FKkYgJFfV0pmsUdDCzUs8gn3BVLntC9KnuvXA+Wh4qc0ddGq0dnPDBtIDcYpoRrj oXWt76aOtvJzhCAuOJtFjJCuIZEUoWveJobl/gHK+qrEoXfBpg2Ee8yCrSJpu8TF gSazKt6vNvzpYKjaS2P5sRCAELpcLDQCZprmrPIH/WMRW9/Dpz8rYSi7nJhNZ4oP /aucH/bAG6sDTmPua5xizCYEPAvSLzc5cAJ8UBE1hioqOHS90TuGW5unbiAzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUudljxqljOKdQwSY8JXmk/i3cGFAwHwYDVR0j BBgwFoAU3r7uiX/YVXMEosAg24atK6gLBvswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIyZjUxNTItYTI5NS00N2I3LWFkZGMtZmJmZWYzMjQ3ZTNiLzAvREVCRUVFODk3 RkQ4NTU3MzA0QTJDMDIwREI4NkFEMkJBODBCMDZGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUJFRUU4OTdGRDg1NTczMDRBMkMwMjBEQjg2QUQyQkE4MEIw NkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvREVCRUVFODk3RkQ4NTU3MzA0QTJDMDIwREI4NkFE MkJBODBCMDZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfEB2TFunIJwiG2fCJVu17JUZihk1oQOWTA ho2jTUPQv49OaaHHCwoLr5KCZYGQisZNAtD1rlxg7niU0XKFBWFzBUguiRCmRzn/ TCmcC+BEpSRDCBCHK7ffZJadmFUmXwusxinooRqudw6NbExQ6JyK/CbSjfqF67JE zAhDkKfVvdtZ+lLRljKeNwvjKe8BqR1wEamgScdXq4rQHlCVeo2mQAbE/rUjRaB0 yyGFds8kNhThTy9YtPq4ZHq/O7NXf7/74yjQce8gGZahmw9S1y+K9XwR2isdXiDE SiTrLTSXYCe/kpzDcg9IeSayZNsY6pIa1Js3V/4XByRKnvg76yg= -----END CERTIFICATE-----Generated at Mon Sep 21 14:28:33 2026 by rpki-client