$ rpki-client -vvf rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft File: DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft (raw, json) Hash identifier: q4fp9J9rXDw0lK7wdg7Y+hHKWyFCW3GbJM+fSRUesZ8= Subject key identifier: 1A:05:16:6F:D6:0C:4D:32:5F:25:21:2F:76:C5:56:9B:33:27:72:C4 Authority key identifier: DC:DF:EB:9B:30:70:53:1B:D7:F0:16:67:76:A9:BD:79:0D:81:56:F3 Certificate issuer: /CN=DCDFEB9B3070531BD7F0166776A9BD790D8156F3 Certificate serial: 3B799974C3421FE2C83A8FB0734AAD230A67F29D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 20:44:16 +0000 Manifest this update: Tue 16 Jun 2026 20:39:16 +0000 Manifest next update: Wed 17 Jun 2026 22:50:16 +0000 Files and hashes: 1: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: WosTloIyziln5PL7ehnM5NRi5lB1Tbc4uPNxmDzbd8Y=) 2: DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl (hash: DNmNHHAdNxvNoe+GCcjK6ya7mDJfdMnzGqNKTeRQz6U=) 3: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: xTYeiw6tD9ub4a6qX/XD5duOKCOoUSMBMj8/IYpDd/U=) 4: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: Yc1lRGNv0/ivQZsDhjeb4Ll2thmzxFFCqYVkWRBmzS0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:79:99:74:c3:42:1f:e2:c8:3a:8f:b0:73:4a:ad:23:0a:67:f2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCDFEB9B3070531BD7F0166776A9BD790D8156F3 Validity Not Before: Jun 16 20:39:16 2026 GMT Not After : Jun 17 22:50:16 2026 GMT Subject: CN=1A05166FD60C4D325F25212F76C5569B332772C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:f2:24:9c:09:53:44:74:13:2c:81:6b:cb: a4:1e:04:27:74:8b:14:32:62:da:27:a9:48:8c:5a: ce:b8:0c:1f:a8:dc:27:6d:c2:1b:16:0f:81:b2:3a: 4c:90:6f:b9:f6:58:8e:82:e0:5d:b9:c6:6c:fc:f2: b9:1e:04:0c:25:a4:8b:a1:2e:2a:37:cf:be:95:31: b1:11:aa:08:77:44:f8:b5:7b:a7:55:a3:e3:af:a2: c0:92:94:82:8b:fd:eb:88:cf:16:02:23:fd:c4:0b: ae:bf:93:3c:a3:8a:51:06:d7:26:7f:1d:8b:12:59: a6:70:43:ab:b3:5f:0c:26:dd:f2:77:f8:df:67:d4: a7:a1:7f:52:ef:2e:84:7e:fc:40:5b:3c:c0:c4:12: 09:6f:0b:74:d8:98:c1:f1:aa:0c:55:71:0b:23:ce: c6:a2:7e:d4:f5:58:9a:8f:37:1a:af:8a:20:24:41: a8:24:00:ea:92:6e:91:9f:47:e5:d7:ad:7d:8d:79: e6:36:5b:d5:f7:22:f9:2a:35:62:b5:23:52:40:3c: 74:d1:1e:38:77:c3:01:9f:ca:8c:f2:1d:a8:e2:e4: fc:e8:08:c0:0e:5a:cd:88:d8:32:67:aa:4b:ad:93: a4:48:b1:1f:40:a1:4d:d9:f1:7d:1a:3d:6b:f1:af: 05:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:05:16:6F:D6:0C:4D:32:5F:25:21:2F:76:C5:56:9B:33:27:72:C4 X509v3 Authority Key Identifier: keyid:DC:DF:EB:9B:30:70:53:1B:D7:F0:16:67:76:A9:BD:79:0D:81:56:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:3f:7b:65:13:16:61:d6:78:04:b4:15:cb:b3:d8:9f:a4:14: 87:d5:cf:98:4c:16:d8:38:8c:49:8b:93:d3:67:20:ef:cb:00: 20:37:e8:fc:79:68:3d:8f:c7:93:d3:d8:45:50:f4:d4:47:77: 05:ce:54:e0:22:1c:81:79:02:2b:6f:98:f7:a2:bd:00:1a:1c: 4c:7d:c3:6b:12:43:80:8a:d8:3b:3b:d9:67:53:9f:3d:71:d8: 67:ef:f9:56:c9:67:70:57:68:38:5e:df:69:d5:b2:b5:b3:45: 2f:d1:80:af:b8:6c:7b:29:8a:85:77:e9:bc:bf:11:21:a0:ad: f7:7e:fc:73:6e:fd:81:35:2a:0a:a4:06:bc:51:d1:5d:23:d9: 4d:65:82:15:4d:a0:dd:a9:ac:9c:a7:46:41:12:90:09:05:d2: 87:50:75:df:f0:2a:21:52:46:69:1a:1a:9b:43:39:03:80:17: 54:c5:8f:cd:4a:1e:00:e6:82:ce:92:3e:6f:a1:51:0a:d8:e3: d4:69:3b:b4:d0:bc:9e:76:20:ad:ca:12:ce:88:a1:bb:7c:4f: 44:40:27:8f:6d:2c:13:59:17:17:1a:4a:72:f1:9c:f7:b4:e4: 7d:91:b6:8a:c8:c8:ec:06:86:95:4a:92:80:91:e9:ae:f5:33: 16:1c:89:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3mZdMNCH+LIOo+wc0qtIwpn8p0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENERkVCOUIzMDcwNTMxQkQ3RjAxNjY3NzZBOUJENzkw RDgxNTZGMzAeFw0yNjA2MTYyMDM5MTZaFw0yNjA2MTcyMjUwMTZaMDMxMTAvBgNV BAMTKDFBMDUxNjZGRDYwQzREMzI1RjI1MjEyRjc2QzU1NjlCMzMyNzcyQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6p/IknAlTRHQTLIFry6QeBCd0 ixQyYtonqUiMWs64DB+o3CdtwhsWD4GyOkyQb7n2WI6C4F25xmz88rkeBAwlpIuh Lio3z76VMbERqgh3RPi1e6dVo+OvosCSlIKL/euIzxYCI/3EC66/kzyjilEG1yZ/ HYsSWaZwQ6uzXwwm3fJ3+N9n1Kehf1LvLoR+/EBbPMDEEglvC3TYmMHxqgxVcQsj zsaiftT1WJqPNxqviiAkQagkAOqSbpGfR+XXrX2NeeY2W9X3IvkqNWK1I1JAPHTR Hjh3wwGfyozyHaji5PzoCMAOWs2I2DJnqkutk6RIsR9AoU3Z8X0aPWvxrwU3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGgUWb9YMTTJfJSEvdsVWmzMncsQwHwYDVR0j BBgwFoAU3N/rmzBwUxvX8BZndqm9eQ2BVvMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGViOGI4ODktM2IzZC00ZWY1LWFkNzAtNWIxMDQ1ZWZmMzkzLzAvRENERkVCOUIz MDcwNTMxQkQ3RjAxNjY3NzZBOUJENzkwRDgxNTZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0RGRUI5QjMwNzA1MzFCRDdGMDE2Njc3NkE5QkQ3OTBEODE1 NkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvRENERkVCOUIzMDcwNTMxQkQ3RjAxNjY3NzZBOUJE NzkwRDgxNTZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFc/e2UTFmHWeAS0Fcuz2J+kFIfVz5hMFtg4 jEmLk9NnIO/LACA36Px5aD2Px5PT2EVQ9NRHdwXOVOAiHIF5AitvmPeivQAaHEx9 w2sSQ4CK2Ds72WdTnz1x2Gfv+VbJZ3BXaDhe32nVsrWzRS/RgK+4bHspioV36by/ ESGgrfd+/HNu/YE1KgqkBrxR0V0j2U1lghVNoN2prJynRkESkAkF0odQdd/wKiFS RmkaGptDOQOAF1TFj81KHgDmgs6SPm+hUQrY49RpO7TQvJ52IK3KEs6Iobt8T0RA J49tLBNZFxcaSnLxnPe05H2RtorIyOwGhpVKkoCR6a71MxYcib4= -----END CERTIFICATE-----Generated at Wed Jun 17 12:40:18 2026 by rpki-client