$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft File: DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft (raw, json) Hash identifier: oKjwJVwedNn+I42ViiPIqrUHTCePpJ/A2RjsJftSqbU= Subject key identifier: D7:20:8F:0A:B3:96:3F:BC:64:43:D4:1E:5D:D8:46:06:B0:62:36:DF Authority key identifier: DE:E1:9A:96:E6:FA:5B:36:0F:C8:BF:1C:E5:AC:9B:14:8D:0E:87:4C Certificate issuer: /CN=DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C Certificate serial: 26688840BE7554AD01210226CA93EA7105811867 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 04:41:26 +0000 Manifest this update: Thu 24 Sep 2026 04:36:26 +0000 Manifest next update: Fri 25 Sep 2026 06:00:26 +0000 Files and hashes: 1: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: TRjfg68H1cvqa28w3D+TRkRhD92nBMq1k+4HcpA2+sQ=) 2: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: rwg483/d/uW8MM/6Hs4Vo767LHO7cJke91zFFG533K4=) 3: DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.crl (hash: M6NUMOnk/zpUIOZTWyBqsgSMpBu9X5QQrrFihlXGDs0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.crl rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:68:88:40:be:75:54:ad:01:21:02:26:ca:93:ea:71:05:81:18:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C Validity Not Before: Sep 24 04:36:26 2026 GMT Not After : Sep 25 06:00:26 2026 GMT Subject: CN=D7208F0AB3963FBC6443D41E5DD84606B06236DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:74:8d:a7:5b:b5:ab:ec:70:0c:40:2b:e1:7f: cb:77:47:7c:3b:7c:db:66:c1:7e:14:a2:98:70:6f: eb:69:b4:83:b9:29:91:6d:ae:2f:be:e2:b2:08:ad: e2:2d:de:6d:16:c4:4e:6e:24:6c:16:23:0c:18:d7: 57:e2:28:2c:f8:5b:4c:5d:8d:ca:8e:9f:06:ef:bd: f5:7d:34:b4:28:83:fd:24:78:96:5f:df:9d:15:ab: c1:31:84:a8:8b:09:e3:a8:ef:d0:50:a5:32:61:7d: 76:a4:f3:d9:f3:1e:90:4e:2e:66:57:a1:1c:c2:92: 6d:cb:f9:9f:8b:e8:87:24:12:fa:19:50:91:d9:41: b9:8d:f3:09:72:46:31:d0:7c:6c:cb:cd:13:94:e9: 71:2a:47:83:a3:ec:04:81:8f:85:09:73:02:b2:c7: a2:8f:2c:cf:3e:65:52:dc:14:5d:17:73:17:8b:71: c4:07:d3:1d:dd:f2:f6:b8:0e:fa:a7:aa:93:82:15: 6b:cc:c5:5a:b6:b6:f2:8a:6e:f7:6c:9c:30:ad:8f: b3:df:ed:02:47:fb:0b:fc:be:44:36:85:13:27:b4: 64:c5:d5:bd:bd:92:9d:a4:16:2a:db:af:cf:b9:59: 02:04:23:78:86:d5:4d:06:b2:6d:34:56:cc:a9:31: 3e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:20:8F:0A:B3:96:3F:BC:64:43:D4:1E:5D:D8:46:06:B0:62:36:DF X509v3 Authority Key Identifier: keyid:DE:E1:9A:96:E6:FA:5B:36:0F:C8:BF:1C:E5:AC:9B:14:8D:0E:87:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:ea:5a:4b:18:c7:49:20:ee:11:1b:b6:f2:30:b0:33:05:3a: 23:6a:c4:03:9a:c8:ba:00:87:1c:0e:c2:2c:9b:2d:2c:b8:0e: d2:f3:92:52:0f:be:e6:6f:7d:4b:56:8a:0a:d0:5e:91:32:76: 3c:29:9e:a1:02:3b:5d:3f:51:b7:01:34:e7:a4:b1:55:3b:f4: dd:f0:13:7b:77:ab:56:cd:45:f5:44:a2:5e:b9:53:43:ea:10: 58:37:60:dc:0f:b8:8e:ca:aa:da:98:54:f0:b8:f8:8e:c6:ec: 4d:2b:9f:42:92:ae:a2:71:de:45:54:a7:09:ac:08:3f:2f:55: 8b:db:e5:e8:e8:e8:7c:07:2c:54:3d:57:9c:7f:ad:b3:e7:cd: 5b:3f:aa:19:2a:1d:39:53:11:b7:13:81:4c:41:ae:bf:92:74: 11:d1:8e:01:84:b0:76:2d:23:1a:55:a0:4b:5a:02:fd:d5:78: 6e:84:8f:08:61:cf:20:b5:2b:43:04:e3:41:45:15:e5:4d:de: b1:63:5a:82:aa:83:41:f0:bf:c6:14:f7:cc:1f:f6:cf:bf:1d: be:e6:21:0d:ab:b4:af:84:9b:4c:0b:3e:a3:52:90:8a:5a:ce: 91:8d:e8:10:ac:e9:31:2a:65:8c:f3:a2:c3:b2:85:6b:6e:49: d7:ff:36:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJmiIQL51VK0BIQImypPqcQWBGGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVFMTlBOTZFNkZBNUIzNjBGQzhCRjFDRTVBQzlCMTQ4 RDBFODc0QzAeFw0yNjA5MjQwNDM2MjZaFw0yNjA5MjUwNjAwMjZaMDMxMTAvBgNV BAMTKEQ3MjA4RjBBQjM5NjNGQkM2NDQzRDQxRTVERDg0NjA2QjA2MjM2REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+dI2nW7Wr7HAMQCvhf8t3R3w7 fNtmwX4Uophwb+tptIO5KZFtri++4rIIreIt3m0WxE5uJGwWIwwY11fiKCz4W0xd jcqOnwbvvfV9NLQog/0keJZf350Vq8ExhKiLCeOo79BQpTJhfXak89nzHpBOLmZX oRzCkm3L+Z+L6IckEvoZUJHZQbmN8wlyRjHQfGzLzROU6XEqR4Oj7ASBj4UJcwKy x6KPLM8+ZVLcFF0XcxeLccQH0x3d8va4DvqnqpOCFWvMxVq2tvKKbvdsnDCtj7Pf 7QJH+wv8vkQ2hRMntGTF1b29kp2kFirbr8+5WQIEI3iG1U0Gsm00VsypMT5xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1yCPCrOWP7xkQ9QeXdhGBrBiNt8wHwYDVR0j BBgwFoAU3uGalub6WzYPyL8c5aybFI0Oh0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY0ZmE3YjgtNTMwMi00OTBiLTkyZTQtMjdmMjhjNjY1NzVjLzAvREVFMTlBOTZF NkZBNUIzNjBGQzhCRjFDRTVBQzlCMTQ4RDBFODc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUUxOUE5NkU2RkE1QjM2MEZDOEJGMUNFNUFDOUIxNDhEMEU4 NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvREVFMTlBOTZFNkZBNUIzNjBGQzhCRjFDRTVBQzlC MTQ4RDBFODc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPqWksYx0kg7hEbtvIwsDMFOiNqxAOayLoA hxwOwiybLSy4DtLzklIPvuZvfUtWigrQXpEydjwpnqECO10/UbcBNOeksVU79N3w E3t3q1bNRfVEol65U0PqEFg3YNwPuI7KqtqYVPC4+I7G7E0rn0KSrqJx3kVUpwms CD8vVYvb5ejo6HwHLFQ9V5x/rbPnzVs/qhkqHTlTEbcTgUxBrr+SdBHRjgGEsHYt IxpVoEtaAv3VeG6EjwhhzyC1K0ME40FFFeVN3rFjWoKqg0Hwv8YU98wf9s+/Hb7m IQ2rtK+Em0wLPqNSkIpazpGN6BCs6TEqZYzzosOyhWtuSdf/NtA= -----END CERTIFICATE-----Generated at Thu Sep 24 08:46:03 2026 by rpki-client