$ rpki-client -vvf rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft File: DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft (raw, json) Hash identifier: tYwLYRnwIuGxNIeRqz6DfxDBlYXyAYjL1A1ndiYXgPI= Subject key identifier: C2:4D:89:93:47:7C:F2:77:7E:66:52:08:C0:89:4F:00:B2:11:75:41 Authority key identifier: DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18 Certificate issuer: /CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618 Certificate serial: 556AE62CC8C22D15721FB9BAEBD7F7E0B998E691 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:53:35 +0000 Manifest this update: Tue 16 Jun 2026 15:48:35 +0000 Manifest next update: Wed 17 Jun 2026 16:05:35 +0000 Files and hashes: 1: DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl (hash: C2NRnpaeiXX6VfXdcgKS5p1oB+tN0afNXkAJnf7XxW0=) 2: 3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa (hash: J7DIB6hfPPTu3E2KzBH8yAsIGJFne3bOrj0Y9GAdcDc=) 3: 3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (hash: MrbeRL/3NlCVWGAvenapRPN6GCB6X5UzgLlN8P6C5B4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 16:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:6a:e6:2c:c8:c2:2d:15:72:1f:b9:ba:eb:d7:f7:e0:b9:98:e6:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618 Validity Not Before: Jun 16 15:48:35 2026 GMT Not After : Jun 17 16:05:35 2026 GMT Subject: CN=C24D8993477CF2777E665208C0894F00B2117541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:e5:6e:2f:ba:fc:52:1d:31:69:ea:42:6a: 87:d2:b4:e0:2c:ea:fd:ef:45:80:bb:38:79:36:bd: 35:25:27:56:02:35:02:12:6c:e1:12:f7:85:99:78: e8:9b:f1:9c:43:52:fe:84:98:71:58:76:e5:5a:61: 71:8f:0e:25:06:82:f5:61:72:d9:f8:4d:80:ce:c1: 92:5d:38:c9:d6:74:10:a6:1e:4f:58:c9:9d:64:8c: 1e:e5:7d:d4:ff:9f:bc:a2:16:61:17:4e:8a:d2:2e: fd:bc:ee:56:00:0f:07:10:7c:91:2b:be:ec:de:bf: a7:a3:36:36:13:10:62:cf:ce:7a:77:77:bc:1c:8a: 37:c1:fb:55:c7:66:bb:b9:f8:6a:5c:31:20:9c:1b: b4:68:73:82:af:fa:ca:12:10:4a:a8:c7:ed:48:b1: 5c:3d:31:5a:da:0c:cb:c6:a2:04:4f:c2:b0:fc:5c: 83:e1:39:44:19:42:c6:e8:79:ec:5b:8a:93:7a:e7: f9:9c:00:55:59:88:6d:42:86:89:6f:4b:62:81:9c: 26:4b:9e:a2:2f:09:41:d7:e5:63:63:d2:fe:21:7b: 48:fe:14:dc:62:08:07:1c:dc:19:e9:95:4f:cb:63: cf:a0:40:02:96:81:bd:be:32:b8:d7:5c:ee:4b:35: 43:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4D:89:93:47:7C:F2:77:7E:66:52:08:C0:89:4F:00:B2:11:75:41 X509v3 Authority Key Identifier: keyid:DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:74:78:bc:1c:ca:b5:4b:56:88:d5:66:f7:6f:93:c0:9d:98: b6:73:3f:57:40:25:ab:ca:46:bf:ca:32:0d:5d:2c:5a:66:9e: bf:77:9c:3e:ae:5a:51:17:cf:82:1e:7f:c0:65:a6:72:75:e0: 74:19:7e:32:f3:7c:2e:a2:eb:5d:ec:fc:f2:40:7c:bd:ba:c1: a4:b5:a5:64:6d:51:fb:65:42:b9:ee:54:76:66:1f:7f:17:bf: 39:bd:8e:36:f6:1f:43:38:45:f9:c6:19:ac:ad:5c:0e:4b:74: 5c:18:da:a3:87:0b:11:c3:d3:a9:51:c1:3d:bb:78:8e:81:f7: 2a:ed:48:56:6a:c9:01:a7:7b:d5:47:e0:22:3a:2d:80:84:5e: f2:7a:59:e0:9a:17:e6:af:34:67:f2:94:55:2f:23:27:ff:a8: 99:48:0c:b3:52:b0:83:f2:70:ed:4a:e5:c9:2a:32:ee:5a:2e: ac:b1:16:d0:c4:ed:79:8f:88:3d:b0:7f:6c:2a:89:ef:e1:5e: 66:69:70:8d:b8:3e:00:8b:27:25:fe:2b:b7:3f:fd:f8:83:8e: 5d:2f:ba:41:12:c2:e6:7e:7d:eb:f4:6e:17:91:1d:a0:f0:d2: 83:cb:b2:a1:5e:f9:57:1c:9b:03:f6:5c:45:58:c8:d0:51:e2: 00:1b:7c:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWrmLMjCLRVyH7m669f34LmY5pEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZE NkE3NzYxODAeFw0yNjA2MTYxNTQ4MzVaFw0yNjA2MTcxNjA1MzVaMDMxMTAvBgNV BAMTKEMyNEQ4OTkzNDc3Q0YyNzc3RTY2NTIwOEMwODk0RjAwQjIxMTc1NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBquVuL7r8Uh0xaepCaofStOAs 6v3vRYC7OHk2vTUlJ1YCNQISbOES94WZeOib8ZxDUv6EmHFYduVaYXGPDiUGgvVh ctn4TYDOwZJdOMnWdBCmHk9YyZ1kjB7lfdT/n7yiFmEXTorSLv287lYADwcQfJEr vuzev6ejNjYTEGLPznp3d7wcijfB+1XHZru5+GpcMSCcG7Roc4Kv+soSEEqox+1I sVw9MVraDMvGogRPwrD8XIPhOUQZQsboeexbipN65/mcAFVZiG1CholvS2KBnCZL nqIvCUHX5WNj0v4he0j+FNxiCAcc3BnplU/LY8+gQAKWgb2+MrjXXO5LNUMxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwk2Jk0d88nd+ZlIIwIlPALIRdUEwHwYDVR0j BBgwFoAU2/gpC6zyrZbbsCQ2SMxqxtandhgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2MDA0ODYtOTc4MC00M2VlLWJiMmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJB Q0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZENkE3NzYxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkY4MjkwQkFDRjJBRDk2REJCMDI0MzY0OENDNkFDNkQ2QTc3 NjE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2MDA0ODYtOTc4MC00M2VlLWJi MmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZB QzZENkE3NzYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACt0eLwcyrVLVojVZvdvk8CdmLZzP1dAJavK Rr/KMg1dLFpmnr93nD6uWlEXz4Ief8BlpnJ14HQZfjLzfC6i613s/PJAfL26waS1 pWRtUftlQrnuVHZmH38Xvzm9jjb2H0M4RfnGGaytXA5LdFwY2qOHCxHD06lRwT27 eI6B9yrtSFZqyQGne9VH4CI6LYCEXvJ6WeCaF+avNGfylFUvIyf/qJlIDLNSsIPy cO1K5ckqMu5aLqyxFtDE7XmPiD2wf2wqie/hXmZpcI24PgCLJyX+K7c//fiDjl0v ukESwuZ+fev0bheRHaDw0oPLsqFe+VccmwP2XEVYyNBR4gAbfO4= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:24 2026 by rpki-client