$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft File: DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft (raw, json) Hash identifier: 87exCGmsvsfZPYvf19k65MSHiYsJYsCCICyny3Pykmg= Subject key identifier: 8D:DE:88:FA:CD:39:29:7E:52:54:E8:DF:83:08:9A:56:C6:08:FC:0B Authority key identifier: DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3 Certificate issuer: /CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3 Certificate serial: 62C2D1EF886EB462594652E38FE64B9E15E23232 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 12:37:18 +0000 Manifest this update: Tue 28 Jul 2026 12:32:18 +0000 Manifest next update: Wed 29 Jul 2026 15:00:18 +0000 Files and hashes: 1: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: lZy/D3zEI+V1zNnvBB6OJZ7BzAoFD7HSvYryTbhRU2s=) 2: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: BDfl1ljAlzUeNiFgOAogNvfZpmtNq6Kp37cGWuK0R5E=) 3: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: D8gdQFYf8NnWhum3Srq97Jkm5hnXUuKFuTsge2OROqA=) 4: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: zZohFjEfg5KbgTKUDn03P4ViER6I84zu0tvUUBWCbms=) 5: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d26NLF/sKVXadNSIsUNq9koHjOM/iTFNcX1v1zkyxRU=) 6: DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl (hash: gdKaJ1+qXsaRW61iFAs30AZeunfvDvI6y/LjjbweIKg=) 7: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: f+1xV3V7eIo4yjJqos+xUQVvX1GIUuOZUCoIKtF+llo=) 8: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: zkjugBCGR1RTN3rv+4fVMMpCR+DjhaqSm22RICfrfmA=) 9: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: ovVBKtJH+Wixf+bjFfGN0BaqhZuS+FBdLYnDH3wV8vw=) 10: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: 2xJo8vO5RtzGv7BkUmxulZhOANWhCfhuYoau31MaZh0=) 11: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: 7Jy3y4ltltsmzNhSvINfLmQPgIpSxy3LDWGrSnNQ3Zk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c2:d1:ef:88:6e:b4:62:59:46:52:e3:8f:e6:4b:9e:15:e2:32:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3 Validity Not Before: Jul 28 12:32:18 2026 GMT Not After : Jul 29 15:00:18 2026 GMT Subject: CN=8DDE88FACD39297E5254E8DF83089A56C608FC0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8f:3d:52:07:1a:59:a8:75:77:92:4b:fa:b1: e2:f2:f9:45:7d:70:be:4b:5c:93:6c:5d:22:e1:03: 0e:a2:19:7d:e3:cb:f1:66:e6:7b:62:34:6b:42:5f: 1d:8d:d6:f4:6f:fe:35:f9:91:c5:fc:29:e5:be:c7: ac:13:bb:ee:87:de:a2:31:d3:60:89:25:21:bc:6a: 2a:5d:98:06:06:c4:bb:d6:f2:d3:eb:00:a6:d6:21: 5d:fa:bf:9f:d9:93:6f:6f:0b:39:fa:0f:05:c2:b9: b1:6f:07:95:20:4b:8b:f3:aa:c5:cb:86:b5:51:26: fc:83:4e:44:4a:8d:09:9a:81:d3:f5:e9:58:22:69: 38:0e:c8:89:cf:ca:d4:cb:91:9a:ff:d0:d0:49:c0: 5b:f7:91:69:d6:da:67:ce:cc:d1:8a:b6:7b:a6:ed: 3b:e7:e6:aa:8d:b6:ee:1b:87:76:08:b5:69:e8:33: be:2f:c5:55:24:0f:23:a8:20:7b:33:10:0b:f1:9c: 50:33:f8:22:3d:e9:f2:f2:1f:e8:36:9e:9a:45:d9: b9:a5:cb:e0:45:57:dd:48:c3:13:a9:2d:af:4f:5c: 97:71:c2:68:e2:10:20:72:dc:25:2e:f7:c0:3f:d7: 33:e3:0a:41:1f:12:c9:d1:5e:d5:0b:86:61:7e:d5: bf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DE:88:FA:CD:39:29:7E:52:54:E8:DF:83:08:9A:56:C6:08:FC:0B X509v3 Authority Key Identifier: keyid:DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:1b:20:15:e7:88:6e:95:27:98:33:75:2b:6d:8a:c4:20:08: 66:ab:d9:de:af:ca:63:7e:6f:79:b6:d5:44:2a:9e:f4:da:a3: 17:26:39:44:67:46:e1:17:cb:41:6b:65:3c:3d:d3:db:ba:5d: 93:b0:37:2c:a8:8f:63:74:10:1e:75:4d:27:fd:1d:84:01:33: 59:1e:6a:d9:fa:76:fc:3e:7a:85:9f:5a:db:ae:e9:55:56:ed: 05:b1:a4:81:20:f2:95:28:60:3b:ba:14:33:b1:71:35:25:24: ea:0e:3f:d1:a2:c5:b5:a1:8e:f8:1d:02:35:58:0b:1e:f3:8f: 2b:13:3a:ed:ff:44:97:cd:71:21:65:75:1f:9a:59:f9:b3:fc: 38:6e:23:99:d2:5e:9d:a8:ba:85:52:d2:c4:56:96:99:6f:26: 66:56:52:50:aa:44:ef:f6:c3:06:db:df:e9:59:af:d7:7f:78: 3f:01:b2:eb:2c:bb:d7:79:56:04:d5:0c:6c:d2:af:c2:2a:05: dc:b1:db:2f:05:cd:37:b3:11:2d:7f:7b:75:0c:c8:11:4f:1c: b7:ef:c1:76:7f:59:af:f4:82:ad:7b:bc:35:be:c5:7e:92:89: 8d:d5:86:53:e0:ea:30:d8:f4:34:1e:2c:e8:62:a6:51:3e:0f: 36:34:61:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYsLR74hutGJZRlLjj+ZLnhXiMjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RTk5RUEwMzBBRjhBRUJGQjdCNkE3QTBFOTE2NzRE REIyOUFDMzAeFw0yNjA3MjgxMjMyMThaFw0yNjA3MjkxNTAwMThaMDMxMTAvBgNV BAMTKDhEREU4OEZBQ0QzOTI5N0U1MjU0RThERjgzMDg5QTU2QzYwOEZDMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjz1SBxpZqHV3kkv6seLy+UV9 cL5LXJNsXSLhAw6iGX3jy/Fm5ntiNGtCXx2N1vRv/jX5kcX8KeW+x6wTu+6H3qIx 02CJJSG8aipdmAYGxLvW8tPrAKbWIV36v5/Zk29vCzn6DwXCubFvB5UgS4vzqsXL hrVRJvyDTkRKjQmagdP16VgiaTgOyInPytTLkZr/0NBJwFv3kWnW2mfOzNGKtnum 7Tvn5qqNtu4bh3YItWnoM74vxVUkDyOoIHszEAvxnFAz+CI96fLyH+g2nppF2bml y+BFV91IwxOpLa9PXJdxwmjiECBy3CUu98A/1zPjCkEfEsnRXtULhmF+1b+3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjd6I+s05KX5SVOjfgwiaVsYI/AswHwYDVR0j BBgwFoAU3k6Z6gMK+K6/t7anoOkWdN2ymsMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyNTQ0MTktNTNiZS00YWQ0LWJmN2YtMjlmODkxMjUyM2QwLzAvREU0RTk5RUEw MzBBRjhBRUJGQjdCNkE3QTBFOTE2NzREREIyOUFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTRFOTlFQTAzMEFGOEFFQkZCN0I2QTdBMEU5MTY3NEREQjI5 QUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm N2YtMjlmODkxMjUyM2QwLzAvREU0RTk5RUEwMzBBRjhBRUJGQjdCNkE3QTBFOTE2 NzREREIyOUFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYbIBXniG6VJ5gzdSttisQgCGar2d6vymN+ b3m21UQqnvTaoxcmOURnRuEXy0FrZTw909u6XZOwNyyoj2N0EB51TSf9HYQBM1ke atn6dvw+eoWfWtuu6VVW7QWxpIEg8pUoYDu6FDOxcTUlJOoOP9GixbWhjvgdAjVY Cx7zjysTOu3/RJfNcSFldR+aWfmz/DhuI5nSXp2ouoVS0sRWlplvJmZWUlCqRO/2 wwbb3+lZr9d/eD8Bsussu9d5VgTVDGzSr8IqBdyx2y8FzTezES1/e3UMyBFPHLfv wXZ/Wa/0gq17vDW+xX6SiY3VhlPg6jDY9DQeLOhiplE+DzY0Yc0= -----END CERTIFICATE-----Generated at Wed Jul 29 02:34:46 2026 by rpki-client