$ rpki-client -vvf rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft File: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft (raw, json) Hash identifier: IjoAyfdOuPi0hseG66GMmeQ+69WyW8DLh7d2wXSmEVo= Subject key identifier: D0:79:40:0C:94:36:68:89:8F:EB:61:3C:28:2A:24:B6:C3:EB:65:27 Authority key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 Certificate issuer: /CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Certificate serial: 268346C1F07029B3712825ABD32A047B40496128 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:48:43 +0000 Manifest this update: Wed 17 Jun 2026 04:43:43 +0000 Manifest next update: Thu 18 Jun 2026 08:27:43 +0000 Files and hashes: 1: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: 0DqNe75QOc3hGqgnlAm5b0fiz1fZsts/kBEvqeLylzQ=) 2: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: mAMKTw9FxHeyHppx5JdFbSfkyfyGBYD9cH190RAyriA=) 3: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: /N5wTnzqjzFsnj42mRLwrc4fGmzK+1uIwKiyAnk610A=) 4: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: 3HAIIUys7Tc4LRT+YcRLOfjs2X6R/CDKgmkxni8LvLc=) 5: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl (hash: xaStnGoRZaK9of6vPnxx7PEMkTc00qzijqUNu/kA4xs=) 6: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: UoG4R/fnzXCLLPhjnt97eVjW6Ux+f3m1mN0pOE9yqnE=) 7: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: IkNdgsDaw78ogG3Aodj/Jzt/an3DS2wRm3jUm6iycMk=) 8: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: dGdlLSEHAjcJ4pF+nJ/zA2guRtQM9WITw951OaaIjIY=) 9: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: Y9lsT2HQ5ICM+BicfmZcvwMhmuIC9lwWMF3PEUQBipo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:83:46:c1:f0:70:29:b3:71:28:25:ab:d3:2a:04:7b:40:49:61:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Validity Not Before: Jun 17 04:43:43 2026 GMT Not After : Jun 18 08:27:43 2026 GMT Subject: CN=D079400C943668898FEB613C282A24B6C3EB6527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:4b:d5:0f:fb:59:5b:8b:2b:7a:bb:af:86:aa: d3:19:db:81:19:4f:66:e3:f4:55:55:37:41:7b:da: eb:70:b6:c0:e7:92:60:6f:3e:7e:89:78:cf:19:08: bc:50:68:2a:1e:97:d0:e2:73:e9:d6:db:57:93:f0: de:2d:ba:c1:7b:b0:67:ce:c4:14:4e:6a:8c:9d:44: 14:fc:03:52:8d:7e:a0:cf:0c:f9:67:09:99:d8:24: af:c8:21:b5:14:7e:42:d1:e3:a6:05:3d:a9:b4:1d: 1c:54:c6:25:7a:1b:9f:41:a9:ff:f5:09:6d:ae:9f: 00:b4:f8:21:7c:15:b1:ec:24:dc:64:c9:65:6a:4b: e7:95:c3:ab:c7:fa:59:c8:78:5d:73:59:e9:f2:18: 94:73:45:c4:75:d5:c0:0f:fc:c2:77:f0:a8:6a:0d: 57:be:43:2f:93:86:4b:fd:ab:86:58:c7:7d:b0:52: d9:64:7c:72:68:54:e4:06:8f:d1:2f:5e:3e:ff:02: d2:2c:cc:30:d7:03:aa:12:b3:7a:a6:0d:fb:ae:dd: 1e:fc:dc:d8:c2:2b:18:6b:56:d7:f8:12:91:19:51: 46:e0:a3:da:ef:ec:80:44:a5:13:0e:38:b9:72:37: 4e:53:39:41:bf:a5:e8:96:7f:e7:1b:36:45:30:08: 92:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:79:40:0C:94:36:68:89:8F:EB:61:3C:28:2A:24:B6:C3:EB:65:27 X509v3 Authority Key Identifier: keyid:DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:d3:9d:0b:51:dc:39:37:dc:c5:91:e1:70:b7:5a:ab:2d:1f: 36:a2:7f:dc:8b:13:fb:88:dc:44:cf:12:1e:c1:8f:6f:72:86: 34:df:79:a0:1a:44:02:4c:47:bd:53:c6:15:f7:65:a3:14:8e: f5:50:80:6e:d1:2f:d1:25:13:cf:71:d9:7a:91:15:98:bb:43: 07:60:09:19:03:e0:67:2d:b1:fa:d4:b0:1b:74:c4:9c:08:34: 24:88:8e:5e:22:d0:82:69:13:d9:33:8b:5f:16:52:69:1a:13: bd:c3:7e:e4:e2:dc:fd:2a:5e:fb:5f:20:c7:32:a9:d1:85:85: e3:be:30:a8:dc:b3:bd:56:ef:2e:5c:9a:e0:7d:85:31:e7:5e: 74:b8:d1:76:63:35:77:ee:42:50:f3:8d:fe:96:cf:b5:11:b9: 45:39:b8:d4:3d:94:46:89:d7:13:6d:f1:45:df:77:3f:57:15: 5c:be:4b:47:99:db:25:26:d9:41:9c:18:0b:6c:e7:a7:66:02: 06:91:88:cc:b0:e0:a9:3e:42:df:2f:05:7c:64:8e:ab:cd:67: 5b:75:55:24:70:be:fa:ff:f5:31:73:05:b3:06:6f:cd:10:ea: b4:5a:ac:63:9d:c6:45:a9:2c:19:b7:b0:bf:57:24:87:c9:c8: 60:5c:f4:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJoNGwfBwKbNxKCWr0yoEe0BJYSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlD NDFFMzFDMjAeFw0yNjA2MTcwNDQzNDNaFw0yNjA2MTgwODI3NDNaMDMxMTAvBgNV BAMTKEQwNzk0MDBDOTQzNjY4ODk4RkVCNjEzQzI4MkEyNEI2QzNFQjY1MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzS9UP+1lbiyt6u6+GqtMZ24EZ T2bj9FVVN0F72utwtsDnkmBvPn6JeM8ZCLxQaCoel9Dic+nW21eT8N4tusF7sGfO xBROaoydRBT8A1KNfqDPDPlnCZnYJK/IIbUUfkLR46YFPam0HRxUxiV6G59Bqf/1 CW2unwC0+CF8FbHsJNxkyWVqS+eVw6vH+lnIeF1zWenyGJRzRcR11cAP/MJ38Khq DVe+Qy+Thkv9q4ZYx32wUtlkfHJoVOQGj9EvXj7/AtIszDDXA6oSs3qmDfuu3R78 3NjCKxhrVtf4EpEZUUbgo9rv7IBEpRMOOLlyN05TOUG/peiWf+cbNkUwCJKpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0HlADJQ2aImP62E8KCoktsPrZScwHwYDVR0j BBgwFoAU2+tfyJHMCoYgpSUI5nuxKcQeMcIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFkMWUxNmEtMGE0ZC00NGIxLTk4NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5 MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlDNDFFMzFDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkVCNUZDODkxQ0MwQTg2MjBBNTI1MDhFNjdCQjEyOUM0MUUz MUMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIx MjlDNDFFMzFDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbTnQtR3Dk33MWR4XC3WqstHzaif9yLE/uI 3ETPEh7Bj29yhjTfeaAaRAJMR71TxhX3ZaMUjvVQgG7RL9ElE89x2XqRFZi7Qwdg CRkD4GctsfrUsBt0xJwINCSIjl4i0IJpE9kzi18WUmkaE73DfuTi3P0qXvtfIMcy qdGFheO+MKjcs71W7y5cmuB9hTHnXnS40XZjNXfuQlDzjf6Wz7URuUU5uNQ9lEaJ 1xNt8UXfdz9XFVy+S0eZ2yUm2UGcGAts56dmAgaRiMyw4Kk+Qt8vBXxkjqvNZ1t1 VSRwvvr/9TFzBbMGb80Q6rRarGOdxkWpLBm3sL9XJIfJyGBc9N4= -----END CERTIFICATE-----Generated at Wed Jun 17 12:18:44 2026 by rpki-client