$ rpki-client -vvf rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft File: DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft (raw, json) Hash identifier: orG1NF50jVq1IvIhXbsDleW4fo5t/AKWq70gbih8XHk= Subject key identifier: DB:BE:E2:05:9A:48:76:56:4D:FB:AC:6E:8F:18:4E:FD:40:37:DE:66 Authority key identifier: DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4 Certificate issuer: /CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4 Certificate serial: 5E4BA0FB272E6E5EAFEC10FC4F92C8F659D6DE6A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 06:42:11 +0000 Manifest this update: Sat 13 Jun 2026 06:37:11 +0000 Manifest next update: Sun 14 Jun 2026 07:04:11 +0000 Files and hashes: 1: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: 8pY7CX5C+z8Wdb/RykV2FDaB/r21Vc0UIOUPAUQlFnI=) 2: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: kO0czL3TN60s3A1dU0vSyh5gDjSRSVnVJULPxG64o8c=) 3: 3130332e3136362e32362e302f32332d3233203d3e20313431393334.roa (hash: KOwZSGqnrtZ75etXMGQpPSN15jiljiF6C7JF8Icyb+k=) 4: DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl (hash: 3dUfEAMRVNwluC0ZREwOf4zkETLLs3MssviHk0y3ZxM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 07:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4b:a0:fb:27:2e:6e:5e:af:ec:10:fc:4f:92:c8:f6:59:d6:de:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4 Validity Not Before: Jun 13 06:37:11 2026 GMT Not After : Jun 14 07:04:11 2026 GMT Subject: CN=DBBEE2059A4876564DFBAC6E8F184EFD4037DE66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2d:d6:15:47:19:ac:8f:bf:a5:6e:a7:ce:55: a2:15:06:94:c1:33:3f:ba:e1:5f:f4:3a:2f:08:de: 29:49:e0:34:b0:ce:8d:f7:fd:9c:6c:42:dd:b8:03: 35:89:d6:e8:29:7e:6e:fe:0a:f5:db:50:60:22:b5: 11:8d:9c:18:6f:44:2f:9a:6c:54:79:27:5b:f5:1b: fc:5a:34:b5:9e:9c:74:85:fb:ed:47:91:fb:64:33: 10:93:2e:37:1a:42:00:8a:63:7b:2a:99:ab:06:e3: 25:48:68:fb:63:d5:19:46:25:ec:ca:49:40:8e:23: 9e:7a:c0:d2:06:88:2f:cc:7e:46:45:b9:3f:c9:8f: 24:75:b7:bb:29:0e:ec:75:86:c8:5f:cf:6e:e9:2f: 6a:b2:1b:f6:0c:fd:66:da:cb:f9:56:c6:51:ef:7f: 10:44:61:73:a6:36:fb:7c:7b:e2:2f:7e:9c:28:a9: 41:9e:2b:0d:45:4b:3f:98:07:74:80:31:2f:f1:1e: b6:bb:de:7e:ba:d3:73:71:fd:ab:6e:a3:73:03:c9: 7c:dc:ab:98:4b:5b:28:41:ac:dd:eb:3b:e8:59:de: 6d:e7:36:1a:87:0a:d4:fd:f1:01:e9:af:e1:0f:b6: 3f:97:f8:74:4c:58:cf:56:f6:49:ea:fb:19:a2:46: a6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BE:E2:05:9A:48:76:56:4D:FB:AC:6E:8F:18:4E:FD:40:37:DE:66 X509v3 Authority Key Identifier: keyid:DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:00:ce:80:cb:95:4e:a2:a0:4b:f3:0e:2e:7f:5d:4a:e5:50: 68:94:3c:64:d5:f1:57:9c:76:f9:e9:1e:ca:c3:fc:ca:6b:2c: da:72:78:f0:d9:3b:82:b9:0a:a5:f7:0d:8a:aa:fc:d9:75:d8: a7:e7:8d:70:5b:a9:37:c3:c0:8d:c9:62:3b:57:90:96:f1:d2: e5:10:4f:cc:7b:b6:b4:58:6f:fb:72:93:cb:72:07:4a:26:c5: b5:1d:77:08:f0:61:ac:49:76:29:81:ec:22:b3:bc:ab:81:37: cd:ae:23:7c:6b:f0:cc:2f:97:f8:66:62:1e:11:ab:05:71:ce: 95:46:cc:fd:55:c5:a5:c3:b4:c6:9e:47:99:ad:b6:3f:c2:8a: 00:04:e3:9b:a6:c9:16:c3:68:18:26:7b:cb:12:65:06:a0:9c: 88:97:0c:c5:9d:62:37:48:ee:49:be:b4:ff:42:95:04:c6:ba: ab:7c:0c:fb:b0:2c:27:b8:15:fd:3f:47:a4:04:f8:53:e0:79: fa:ab:ff:90:cc:ff:d1:dd:89:97:60:ef:e2:6b:87:bc:06:46: 71:1f:62:69:28:43:43:1d:40:2c:18:40:dd:d2:8e:e4:97:33: e1:5f:db:f7:d1:40:bf:f9:ee:c1:f0:e1:b6:2d:61:9a:cb:ad: b8:ae:c6:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXkug+ycubl6v7BD8T5LI9lnW3mowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENDMTQyRTRCQzBBOTNEMjIyNzQ0RDc2NEJBMzFCMzFD NUY3MjFGNDAeFw0yNjA2MTMwNjM3MTFaFw0yNjA2MTQwNzA0MTFaMDMxMTAvBgNV BAMTKERCQkVFMjA1OUE0ODc2NTY0REZCQUM2RThGMTg0RUZENDAzN0RFNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXLdYVRxmsj7+lbqfOVaIVBpTB Mz+64V/0Oi8I3ilJ4DSwzo33/ZxsQt24AzWJ1ugpfm7+CvXbUGAitRGNnBhvRC+a bFR5J1v1G/xaNLWenHSF++1HkftkMxCTLjcaQgCKY3sqmasG4yVIaPtj1RlGJezK SUCOI556wNIGiC/MfkZFuT/JjyR1t7spDux1hshfz27pL2qyG/YM/Wbay/lWxlHv fxBEYXOmNvt8e+IvfpwoqUGeKw1FSz+YB3SAMS/xHra73n6603Nx/atuo3MDyXzc q5hLWyhBrN3rO+hZ3m3nNhqHCtT98QHpr+EPtj+X+HRMWM9W9knq+xmiRqYvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU277iBZpIdlZN+6xujxhO/UA33mYwHwYDVR0j BBgwFoAU3MFC5LwKk9IidE12S6MbMcX3IfQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmE0MTU0MzgtYWQwMS00MmRjLThjOTItMTUxYmM4YzI3MjFmLzAvRENDMTQyRTRC QzBBOTNEMjIyNzQ0RDc2NEJBMzFCMzFDNUY3MjFGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0MxNDJFNEJDMEE5M0QyMjI3NDRENzY0QkEzMUIzMUM1Rjcy MUY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvRENDMTQyRTRCQzBBOTNEMjIyNzQ0RDc2NEJBMzFC MzFDNUY3MjFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAAzoDLlU6ioEvzDi5/XUrlUGiUPGTV8Vec dvnpHsrD/MprLNpyePDZO4K5CqX3DYqq/Nl12KfnjXBbqTfDwI3JYjtXkJbx0uUQ T8x7trRYb/tyk8tyB0omxbUddwjwYaxJdimB7CKzvKuBN82uI3xr8Mwvl/hmYh4R qwVxzpVGzP1VxaXDtMaeR5mttj/CigAE45umyRbDaBgme8sSZQagnIiXDMWdYjdI 7km+tP9ClQTGuqt8DPuwLCe4Ff0/R6QE+FPgefqr/5DM/9HdiZdg7+Jrh7wGRnEf YmkoQ0MdQCwYQN3SjuSXM+Ff2/fRQL/57sHw4bYtYZrLrbiuxsw= -----END CERTIFICATE-----Generated at Sat Jun 13 19:55:05 2026 by rpki-client