$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft File: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft (raw, json) Hash identifier: wCrLTfLoK/5VZFPnNA+aceYUcyzR0v8vTSyqjVLxrxs= Subject key identifier: A6:30:2C:F9:07:19:93:32:20:00:85:63:E7:50:28:F8:51:CA:6E:4E Authority key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 Certificate issuer: /CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Certificate serial: 6EAE9E2EFE614FE539C2D3997B02CB6FFD711BB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft Manifest number: BC Signing time: Mon 21 Sep 2026 05:07:57 +0000 Manifest this update: Mon 21 Sep 2026 05:02:57 +0000 Manifest next update: Tue 22 Sep 2026 08:31:57 +0000 Files and hashes: 1: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: 3HAIIUys7Tc4LRT+YcRLOfjs2X6R/CDKgmkxni8LvLc=) 2: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: /N5wTnzqjzFsnj42mRLwrc4fGmzK+1uIwKiyAnk610A=) 3: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: UoG4R/fnzXCLLPhjnt97eVjW6Ux+f3m1mN0pOE9yqnE=) 4: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: dGdlLSEHAjcJ4pF+nJ/zA2guRtQM9WITw951OaaIjIY=) 5: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl (hash: iC6SCmk5C+r47U5O+45x8g4kmC1TKIz289rjjWMDOJg=) 6: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: mAMKTw9FxHeyHppx5JdFbSfkyfyGBYD9cH190RAyriA=) 7: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: Y9lsT2HQ5ICM+BicfmZcvwMhmuIC9lwWMF3PEUQBipo=) 8: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: 0DqNe75QOc3hGqgnlAm5b0fiz1fZsts/kBEvqeLylzQ=) 9: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: IkNdgsDaw78ogG3Aodj/Jzt/an3DS2wRm3jUm6iycMk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ae:9e:2e:fe:61:4f:e5:39:c2:d3:99:7b:02:cb:6f:fd:71:1b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Validity Not Before: Sep 21 05:02:57 2026 GMT Not After : Sep 22 08:31:57 2026 GMT Subject: CN=A6302CF90719933220008563E75028F851CA6E4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:aa:18:9f:57:d0:44:08:65:8e:ad:94:e5:0c: 3d:c9:5e:7e:e2:6f:1a:7c:2e:36:5e:54:44:54:ab: ad:7e:17:fa:7a:4e:51:08:ac:f5:32:81:59:22:fc: 41:19:f5:3c:30:5a:14:1d:95:02:e4:75:38:95:04: 17:5d:47:1b:94:dd:d4:16:6f:84:ab:11:48:01:49: 74:d8:40:d4:76:d2:e1:99:04:09:42:73:9c:f4:65: 39:ac:e1:60:bf:f1:2e:03:0c:46:55:ff:30:d5:de: 5c:6e:f7:20:bb:4e:dc:97:c6:99:75:3f:fb:95:a6: b2:fc:24:0e:d2:a4:2c:04:85:e5:28:23:62:40:f2: 56:e0:87:35:74:4a:8c:86:65:47:83:ba:d1:89:35: cf:cb:c5:54:1c:5d:50:f9:f1:84:b9:d0:43:75:96: e8:58:b2:9d:74:24:03:ea:e5:0f:bd:70:78:cc:9f: 80:5f:95:0f:91:0b:75:ba:83:2e:2f:56:33:97:03: e8:ff:da:3f:e8:bd:60:17:61:36:2e:93:f0:b8:f5: 86:53:6e:74:21:b8:93:38:b6:02:34:20:95:c1:f7: 07:9c:b8:78:07:c5:5e:0b:c0:2d:33:81:f6:f7:a8: 58:7e:82:23:4a:11:ee:1c:71:8b:54:c5:bf:75:d0: e9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:30:2C:F9:07:19:93:32:20:00:85:63:E7:50:28:F8:51:CA:6E:4E X509v3 Authority Key Identifier: keyid:DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:e5:e6:83:8c:53:4e:63:c4:51:d9:77:d1:77:94:c8:72:89: 8c:e0:e7:52:79:e1:6a:52:ad:c6:c3:54:80:cf:8b:b2:a6:a5: 13:75:8c:7a:b2:5c:e6:c3:44:76:d4:d4:f0:b4:b2:0f:d6:9f: 89:88:5f:bf:10:86:19:75:66:af:ef:59:c8:48:31:eb:a5:6c: 4c:4d:3d:1b:fa:da:35:0a:40:c4:25:c4:16:dc:5d:a2:a1:d5: bc:91:e4:12:f9:a0:f8:71:99:85:2f:be:78:dd:9e:50:48:00: 1f:38:9d:ec:5a:23:e4:d7:69:4f:69:b9:3f:e2:f9:f3:81:4f: d3:05:46:f9:0d:3e:06:61:f3:7f:39:7e:38:33:f2:55:37:2a: 48:d4:40:63:98:f4:f3:96:1a:f2:8b:93:d4:64:38:e9:44:a4: 22:e4:99:a9:46:af:3c:93:af:19:a1:0b:35:16:52:f4:9e:2e: d3:7b:d4:85:1d:5e:9f:92:10:43:f0:ce:98:36:4c:db:62:bc: 48:05:7e:8b:3a:49:fd:7e:f3:95:ce:99:a0:f2:39:d4:b8:bc: f0:cb:42:4f:c3:dc:84:a8:f6:1f:b5:25:71:cf:a6:58:2f:09: 5b:07:79:98:08:21:70:43:8d:f5:ac:ce:fb:e7:a8:6f:3d:99: e2:7f:78:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbq6eLv5hT+U5wtOZewLLb/1xG7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlD NDFFMzFDMjAeFw0yNjA5MjEwNTAyNTdaFw0yNjA5MjIwODMxNTdaMDMxMTAvBgNV BAMTKEE2MzAyQ0Y5MDcxOTkzMzIyMDAwODU2M0U3NTAyOEY4NTFDQTZFNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPqhifV9BECGWOrZTlDD3JXn7i bxp8LjZeVERUq61+F/p6TlEIrPUygVki/EEZ9TwwWhQdlQLkdTiVBBddRxuU3dQW b4SrEUgBSXTYQNR20uGZBAlCc5z0ZTms4WC/8S4DDEZV/zDV3lxu9yC7TtyXxpl1 P/uVprL8JA7SpCwEheUoI2JA8lbghzV0SoyGZUeDutGJNc/LxVQcXVD58YS50EN1 luhYsp10JAPq5Q+9cHjMn4BflQ+RC3W6gy4vVjOXA+j/2j/ovWAXYTYuk/C49YZT bnQhuJM4tgI0IJXB9wecuHgHxV4LwC0zgfb3qFh+giNKEe4ccYtUxb910OmDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpjAs+QcZkzIgAIVj51Ao+FHKbk4wHwYDVR0j BBgwFoAU2+tfyJHMCoYgpSUI5nuxKcQeMcIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFkMWUxNmEtMGE0ZC00NGIxLTk4NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5 MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlDNDFFMzFDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkVCNUZDODkxQ0MwQTg2MjBBNTI1MDhFNjdCQjEyOUM0MUUz MUMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIx MjlDNDFFMzFDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXl5oOMU05jxFHZd9F3lMhyiYzg51J54WpS rcbDVIDPi7KmpRN1jHqyXObDRHbU1PC0sg/Wn4mIX78Qhhl1Zq/vWchIMeulbExN PRv62jUKQMQlxBbcXaKh1byR5BL5oPhxmYUvvnjdnlBIAB84nexaI+TXaU9puT/i +fOBT9MFRvkNPgZh8385fjgz8lU3KkjUQGOY9POWGvKLk9RkOOlEpCLkmalGrzyT rxmhCzUWUvSeLtN71IUdXp+SEEPwzpg2TNtivEgFfos6Sf1+85XOmaDyOdS4vPDL Qk/D3ISo9h+1JXHPplgvCVsHeZgIIXBDjfWszvvnqG89meJ/eGk= -----END CERTIFICATE-----Generated at Mon Sep 21 17:45:01 2026 by rpki-client