$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft File: DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft (raw, json) Hash identifier: azEpmMiFlIdNxXCFghbvQG5BJpIUlw09YRC/uxGq78M= Subject key identifier: 66:A3:5C:9E:00:4E:E5:C2:D9:B8:08:51:CD:96:16:9E:5E:51:06:29 Authority key identifier: DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC Certificate issuer: /CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC Certificate serial: 0B5065E8F0B41F684CC3F728DD9D60D2EFDD7A25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft Manifest number: C5 Signing time: Sun 27 Sep 2026 00:50:21 +0000 Manifest this update: Sun 27 Sep 2026 00:45:21 +0000 Manifest next update: Mon 28 Sep 2026 04:19:21 +0000 Files and hashes: 1: 3130332e3138392e312e302f32342d3234203d3e20313439383830.roa (hash: 8bw4CbbPmgFdSPOl3wk5Lxb6WEH9Yu6WI8ZoRW3ng/U=) 2: DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl (hash: i9X2GkpA3MBOd3wuJlgzuLWk/1OWt6rPiF9AAl/aQdM=) 3: 3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (hash: 8lXuq/DeovKiTSw+1KX+GVyNFO7DCMSlCXzJz4jkGN8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:50:65:e8:f0:b4:1f:68:4c:c3:f7:28:dd:9d:60:d2:ef:dd:7a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC Validity Not Before: Sep 27 00:45:21 2026 GMT Not After : Sep 28 04:19:21 2026 GMT Subject: CN=66A35C9E004EE5C2D9B80851CD96169E5E510629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ae:be:4c:c9:37:c2:d6:b4:98:26:d7:2c:be: 30:25:82:fc:8c:02:37:a0:17:aa:09:d3:80:be:c5: 6a:b4:fb:0c:79:bb:52:4a:01:25:80:72:d5:b9:07: a3:d7:fb:e9:b4:0a:92:a6:bd:22:ac:d9:63:c3:2e: 17:2b:fc:0b:41:bf:6d:49:e8:e3:c2:ad:c0:ea:ec: 6e:7b:20:fe:d4:ca:6f:2c:7e:1c:c2:d6:e2:6f:8d: bb:3b:84:13:04:21:80:08:7c:4d:9f:ef:16:a5:05: 09:d4:64:33:7e:45:3c:54:b4:8b:00:a0:45:14:16: d3:dd:e6:e1:bd:7f:80:fd:c0:2a:15:67:20:37:05: 27:db:3d:e3:8d:b9:6e:5b:c0:1e:f8:b5:9c:0e:cd: 05:f5:89:35:78:66:4f:52:b0:f6:8a:2d:9a:95:c9: 8d:4a:8e:31:60:3f:1e:e7:bf:e7:94:83:c6:fe:54: 73:1c:0e:5d:f4:ae:5f:81:c6:d7:a4:89:53:f9:ed: b0:e0:20:3a:58:6c:e3:74:fd:12:34:92:a9:45:bb: b5:5d:df:b4:86:23:ee:0a:7e:42:f4:ac:4d:44:20: 47:75:91:ba:2e:b6:45:ac:18:6b:9e:d3:0b:c9:b9: ed:e1:4d:9b:4b:f0:62:57:80:35:af:36:7f:94:88: dc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A3:5C:9E:00:4E:E5:C2:D9:B8:08:51:CD:96:16:9E:5E:51:06:29 X509v3 Authority Key Identifier: keyid:DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:c2:07:e9:2a:56:a3:7f:c4:33:9f:12:07:79:65:ce:4d:81: 59:04:31:ec:bd:e6:da:43:ed:98:53:aa:9f:7c:25:a9:18:76: ca:65:16:f3:ba:e1:9a:83:ce:ba:06:f8:00:da:35:76:04:8a: 4c:eb:3b:f9:7d:9e:83:ef:b7:f1:28:c4:0b:19:76:31:54:9f: fa:47:9b:f0:83:9e:2f:ad:bb:95:d7:21:2f:19:f4:e6:4d:55: a4:a8:1d:9d:12:9c:7c:d2:f3:3b:97:d8:37:28:1f:33:f2:e6: 71:dc:c0:31:03:44:74:bf:ac:64:37:04:a6:5e:e8:60:5c:b7: 9b:b5:b2:d4:20:17:e8:1c:af:de:3c:c1:51:20:3a:28:7b:b6: 52:32:f8:85:5f:c5:6d:f5:ef:0f:66:4e:67:d4:de:d3:80:ec: de:78:fa:67:e5:c1:6d:f5:13:03:38:95:29:a6:bf:5a:60:b5: 1b:26:58:89:14:81:da:1e:36:5f:14:52:37:c7:13:2c:30:ac: 8b:f0:32:19:46:86:45:2b:9e:3d:46:2f:58:8a:2d:e1:d8:86: 3f:65:bb:8d:9a:08:c6:0f:51:60:93:2f:3e:66:ca:5f:97:66: 01:67:c6:2a:5e:49:f7:b5:70:9c:43:4a:91:dc:01:f0:96:2b: bd:80:4d:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC1Bl6PC0H2hMw/co3Z1g0u/deiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBQzkyMDM4MDJDMTc5Nzg5QjI0QzVBMzE2OUFBN0FB MTA0QUJGQzAeFw0yNjA5MjcwMDQ1MjFaFw0yNjA5MjgwNDE5MjFaMDMxMTAvBgNV BAMTKDY2QTM1QzlFMDA0RUU1QzJEOUI4MDg1MUNEOTYxNjlFNUU1MTA2MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrr5MyTfC1rSYJtcsvjAlgvyM AjegF6oJ04C+xWq0+wx5u1JKASWActW5B6PX++m0CpKmvSKs2WPDLhcr/AtBv21J 6OPCrcDq7G57IP7Uym8sfhzC1uJvjbs7hBMEIYAIfE2f7xalBQnUZDN+RTxUtIsA oEUUFtPd5uG9f4D9wCoVZyA3BSfbPeONuW5bwB74tZwOzQX1iTV4Zk9SsPaKLZqV yY1KjjFgPx7nv+eUg8b+VHMcDl30rl+BxtekiVP57bDgIDpYbON0/RI0kqlFu7Vd 37SGI+4KfkL0rE1EIEd1kboutkWsGGue0wvJue3hTZtL8GJXgDWvNn+UiNxRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZqNcngBO5cLZuAhRzZYWnl5RBikwHwYDVR0j BBgwFoAU3qySA4AsF5eJskxaMWmqeqEEq/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhNzRhYzktOGZhNS00MzliLThmMjEtMDhmMjg0Njc3YWEzLzAvREVBQzkyMDM4 MDJDMTc5Nzg5QjI0QzVBMzE2OUFBN0FBMTA0QUJGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUFDOTIwMzgwMkMxNzk3ODlCMjRDNUEzMTY5QUE3QUExMDRB QkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhNzRhYzktOGZhNS00MzliLThm MjEtMDhmMjg0Njc3YWEzLzAvREVBQzkyMDM4MDJDMTc5Nzg5QjI0QzVBMzE2OUFB N0FBMTA0QUJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnCB+kqVqN/xDOfEgd5Zc5NgVkEMey95tpD 7ZhTqp98JakYdsplFvO64ZqDzroG+ADaNXYEikzrO/l9noPvt/EoxAsZdjFUn/pH m/CDni+tu5XXIS8Z9OZNVaSoHZ0SnHzS8zuX2DcoHzPy5nHcwDEDRHS/rGQ3BKZe 6GBct5u1stQgF+gcr948wVEgOih7tlIy+IVfxW317w9mTmfU3tOA7N54+mflwW31 EwM4lSmmv1pgtRsmWIkUgdoeNl8UUjfHEywwrIvwMhlGhkUrnj1GL1iKLeHYhj9l u42aCMYPUWCTLz5myl+XZgFnxipeSfe1cJxDSpHcAfCWK72ATSs= -----END CERTIFICATE-----Generated at Sun Sep 27 21:25:23 2026 by rpki-client