$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft File: DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft (raw, json) Hash identifier: owa9VVy9gimDQOT7GL9zHdk3kG/WLGs7NUXUr9pfjtE= Subject key identifier: 5E:03:73:7D:2B:E5:EB:9B:0B:AE:7B:45:B2:ED:AE:11:27:D2:69:98 Authority key identifier: DE:E1:9A:96:E6:FA:5B:36:0F:C8:BF:1C:E5:AC:9B:14:8D:0E:87:4C Certificate issuer: /CN=DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C Certificate serial: 44205E422AED75FD0EE707556F1E7C656205FEA9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:15:49 +0000 Manifest this update: Tue 12 May 2026 16:10:49 +0000 Manifest next update: Wed 13 May 2026 17:23:49 +0000 Files and hashes: 1: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: rwg483/d/uW8MM/6Hs4Vo767LHO7cJke91zFFG533K4=) 2: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: TRjfg68H1cvqa28w3D+TRkRhD92nBMq1k+4HcpA2+sQ=) 3: DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.crl (hash: dNI2+k0Na/23fBzBKTr/OPxTZCROTgTNyK0Cis3LCNc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.crl rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:20:5e:42:2a:ed:75:fd:0e:e7:07:55:6f:1e:7c:65:62:05:fe:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C Validity Not Before: May 12 16:10:49 2026 GMT Not After : May 13 17:23:49 2026 GMT Subject: CN=5E03737D2BE5EB9B0BAE7B45B2EDAE1127D26998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ec:43:8d:f2:16:87:8b:b0:1d:60:0d:86:8f: 90:56:9f:51:d6:94:75:b3:ab:12:6f:bb:86:32:14: 6e:67:3f:9e:e8:2d:0f:bd:4a:81:07:2f:9f:8c:d4: bd:d6:16:ed:09:b6:99:bd:db:bf:11:ba:79:08:24: 95:1c:33:2a:e4:b6:cd:fb:a2:e5:c9:0a:0d:2f:6e: 55:d5:04:66:f3:48:47:00:93:e6:4d:e5:0e:a1:81: 9c:eb:72:06:32:26:54:70:e9:a3:1c:f0:bb:a3:c1: 47:3a:f3:da:21:7b:c9:a6:7d:b4:ba:be:13:ec:d5: 19:4f:27:bb:04:9e:a3:a9:f1:f6:e8:e1:f6:17:78: a7:a2:f4:aa:26:1d:b5:4d:fb:8c:9e:b4:ce:01:59: c2:7f:28:1b:4a:83:bb:14:37:70:86:ba:f7:1b:4b: 58:c1:f6:d5:c2:ac:30:c7:9b:ca:00:2c:e6:55:81: 61:88:c5:74:68:7d:82:31:2e:7c:4d:26:12:58:14: f9:8e:35:36:bb:c6:2f:3d:17:1c:81:a6:32:9e:f2: 9a:7e:81:97:d1:d2:12:f3:61:93:83:d0:61:45:7f: ef:c3:8a:6c:78:be:55:60:cc:24:c0:54:74:66:5b: a8:b8:48:a9:91:9a:c5:c5:73:4d:fb:42:9e:c5:b0: 60:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:03:73:7D:2B:E5:EB:9B:0B:AE:7B:45:B2:ED:AE:11:27:D2:69:98 X509v3 Authority Key Identifier: keyid:DE:E1:9A:96:E6:FA:5B:36:0F:C8:BF:1C:E5:AC:9B:14:8D:0E:87:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:d6:80:8d:be:30:5a:5d:c2:b2:aa:78:cc:46:c5:63:c8:a6: 5c:59:e5:72:68:f2:e3:06:e3:a4:be:f7:23:a8:a6:3b:75:b9: c5:dd:ea:37:c9:d3:d2:d9:27:a5:05:f7:ce:e5:14:03:8e:d5: 43:30:01:83:d4:7e:45:06:98:fc:c0:64:10:9c:8a:c0:cb:07: 8a:09:7c:b6:e7:59:4a:5c:05:f9:d0:39:dc:bf:47:f3:e3:6e: 40:87:c3:25:b0:fe:45:e3:a4:39:75:0e:0c:bb:6e:3b:7e:96: 94:d1:48:ec:e5:84:37:05:af:87:6f:7d:16:74:59:a7:27:fd: 5c:8d:0c:1f:09:d8:89:d9:2f:c3:48:bc:d5:7a:60:46:8d:cb: 63:2a:92:e2:e5:8a:a1:71:79:4f:bf:da:fa:3c:c0:17:7a:f5: e1:e9:a4:fb:4b:79:3b:1d:14:f2:20:23:c3:8e:92:a7:d5:2f: 09:8e:96:e4:16:65:4a:88:ae:e8:45:9d:83:d2:6d:11:e5:10: 0a:4c:41:ff:10:e5:f6:f8:d6:23:fc:94:fe:ad:fd:96:41:65: e4:b1:75:ec:4c:57:9f:76:19:4b:fe:7a:db:43:a6:a6:02:e7: 0c:c4:4c:3c:f0:43:11:22:b5:69:7b:e9:d5:46:3c:4f:3c:22: f9:81:5d:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURCBeQirtdf0O5wdVbx58ZWIF/qkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVFMTlBOTZFNkZBNUIzNjBGQzhCRjFDRTVBQzlCMTQ4 RDBFODc0QzAeFw0yNjA1MTIxNjEwNDlaFw0yNjA1MTMxNzIzNDlaMDMxMTAvBgNV BAMTKDVFMDM3MzdEMkJFNUVCOUIwQkFFN0I0NUIyRURBRTExMjdEMjY5OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7EON8haHi7AdYA2Gj5BWn1HW lHWzqxJvu4YyFG5nP57oLQ+9SoEHL5+M1L3WFu0Jtpm9278RunkIJJUcMyrkts37 ouXJCg0vblXVBGbzSEcAk+ZN5Q6hgZzrcgYyJlRw6aMc8LujwUc689ohe8mmfbS6 vhPs1RlPJ7sEnqOp8fbo4fYXeKei9KomHbVN+4yetM4BWcJ/KBtKg7sUN3CGuvcb S1jB9tXCrDDHm8oALOZVgWGIxXRofYIxLnxNJhJYFPmONTa7xi89FxyBpjKe8pp+ gZfR0hLzYZOD0GFFf+/Dimx4vlVgzCTAVHRmW6i4SKmRmsXFc037Qp7FsGAvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXgNzfSvl65sLrntFsu2uESfSaZgwHwYDVR0j BBgwFoAU3uGalub6WzYPyL8c5aybFI0Oh0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY0ZmE3YjgtNTMwMi00OTBiLTkyZTQtMjdmMjhjNjY1NzVjLzAvREVFMTlBOTZF NkZBNUIzNjBGQzhCRjFDRTVBQzlCMTQ4RDBFODc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUUxOUE5NkU2RkE1QjM2MEZDOEJGMUNFNUFDOUIxNDhEMEU4 NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvREVFMTlBOTZFNkZBNUIzNjBGQzhCRjFDRTVBQzlC MTQ4RDBFODc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/WgI2+MFpdwrKqeMxGxWPIplxZ5XJo8uMG 46S+9yOopjt1ucXd6jfJ09LZJ6UF987lFAOO1UMwAYPUfkUGmPzAZBCcisDLB4oJ fLbnWUpcBfnQOdy/R/PjbkCHwyWw/kXjpDl1Dgy7bjt+lpTRSOzlhDcFr4dvfRZ0 Wacn/VyNDB8J2InZL8NIvNV6YEaNy2MqkuLliqFxeU+/2vo8wBd69eHppPtLeTsd FPIgI8OOkqfVLwmOluQWZUqIruhFnYPSbRHlEApMQf8Q5fb41iP8lP6t/ZZBZeSx dexMV592GUv+ettDpqYC5wzETDzwQxEitWl76dVGPE88IvmBXbs= -----END CERTIFICATE-----Generated at Wed May 13 02:12:10 2026 by rpki-client