$ rpki-client -vvf rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft File: DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft (raw, json) Hash identifier: Vld6FsRnylNvPKoY1rVjVLIAoBcWPL4ZsxUMjQ4l1ek= Subject key identifier: 7B:D4:83:B8:19:0E:60:AE:0B:97:2A:B0:C4:2E:74:95:1E:A1:A8:C5 Authority key identifier: DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC Certificate issuer: /CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC Certificate serial: 57DFC2963FCF21A9EB3B9FDAAE4ED4936AD6D61C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:56:33 +0000 Manifest this update: Tue 12 May 2026 22:51:33 +0000 Manifest next update: Thu 14 May 2026 00:16:33 +0000 Files and hashes: 1: 3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (hash: 8lXuq/DeovKiTSw+1KX+GVyNFO7DCMSlCXzJz4jkGN8=) 2: DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl (hash: tdHc/1mZE37lLt9RDz0+N4o7OuPWVOyJq9SLlWMfqR0=) 3: 3130332e3138392e312e302f32342d3234203d3e20313439383830.roa (hash: 8bw4CbbPmgFdSPOl3wk5Lxb6WEH9Yu6WI8ZoRW3ng/U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:df:c2:96:3f:cf:21:a9:eb:3b:9f:da:ae:4e:d4:93:6a:d6:d6:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC Validity Not Before: May 12 22:51:33 2026 GMT Not After : May 14 00:16:33 2026 GMT Subject: CN=7BD483B8190E60AE0B972AB0C42E74951EA1A8C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b9:45:52:59:15:d4:36:92:d7:3e:c4:ea:76: 81:27:42:e9:bf:c8:5f:78:65:dd:db:83:28:45:ad: 8a:aa:c5:a5:a9:87:59:f3:81:84:c4:40:4a:01:59: 13:f6:f1:29:21:50:e6:8c:61:05:fc:71:61:e5:50: 41:5a:d1:ca:62:98:ce:ab:57:8f:d5:8f:74:25:4a: 74:e3:a1:c6:2c:11:99:c9:c8:46:45:29:02:24:af: a0:3d:7a:56:a4:ca:71:8f:93:0d:f4:48:5a:14:08: 00:75:b2:3b:70:a5:bb:d0:05:66:2c:60:6f:26:d2: 3e:2d:9a:73:99:f3:83:26:a1:b7:34:83:d8:0e:ff: 02:d1:7b:20:29:c3:24:3d:3f:fd:b7:60:85:92:9a: b6:44:4b:b4:13:ef:aa:8d:b4:92:90:11:cf:d1:c0: ff:17:85:22:5a:61:6d:0c:ec:10:e4:8b:83:a6:a0: 56:6c:8e:01:4c:86:31:84:df:e3:c6:7b:5f:31:c9: 2f:1f:fc:45:81:3d:72:88:89:51:7a:87:a4:13:f8: 9d:05:dd:88:87:3a:93:87:1c:b8:eb:7c:cd:55:d5: a5:58:29:f4:94:76:e2:39:16:ff:dc:56:e7:90:d6: 95:82:0a:99:30:a6:74:1f:9e:99:48:f6:57:c0:8b: a4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D4:83:B8:19:0E:60:AE:0B:97:2A:B0:C4:2E:74:95:1E:A1:A8:C5 X509v3 Authority Key Identifier: keyid:DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e8:aa:17:1f:eb:ee:f4:e4:68:53:4b:8e:e8:5c:47:63:7e: 80:b1:b3:02:bc:b2:27:d2:4a:16:e0:5e:5e:b4:cf:d6:66:2b: f2:9b:05:72:d5:11:c7:b2:4e:d4:cf:5c:26:c1:8e:a0:ec:62: fd:a9:2d:0c:a5:6e:e8:55:57:fe:a9:4c:89:10:5f:48:75:3f: 26:89:bf:81:10:74:89:ce:0e:5a:22:2b:b7:40:fe:76:a9:a1: b7:2f:6b:c6:47:6c:e8:90:f1:1d:b8:ab:72:80:65:70:8b:82: 65:27:98:3b:fe:3f:48:64:fc:02:67:7e:a5:20:34:19:62:9b: 8c:2b:51:94:5c:bf:1c:b8:69:00:39:0d:d1:dc:b4:fa:2f:ea: 48:c5:e6:cd:dc:c0:de:5a:65:f0:34:af:26:d1:c3:69:d0:7d: 66:fc:ec:04:97:78:fe:bc:f4:b4:a3:22:61:57:eb:7e:14:d7: 82:97:0f:fa:a0:9b:41:f0:b9:07:d2:18:7e:9e:e9:15:97:00: 0a:fd:cd:ff:e4:85:21:66:c4:b4:02:ca:81:95:e9:95:ef:76: 31:5f:02:54:08:fc:23:2d:90:37:1b:51:56:98:9c:23:e1:cc: 70:3e:93:fa:1f:2d:65:84:5b:c2:ef:ee:48:14:7a:91:50:bb: 88:6f:3c:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV9/Clj/PIanrO5/ark7Uk2rW1hwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBQzkyMDM4MDJDMTc5Nzg5QjI0QzVBMzE2OUFBN0FB MTA0QUJGQzAeFw0yNjA1MTIyMjUxMzNaFw0yNjA1MTQwMDE2MzNaMDMxMTAvBgNV BAMTKDdCRDQ4M0I4MTkwRTYwQUUwQjk3MkFCMEM0MkU3NDk1MUVBMUE4QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUuUVSWRXUNpLXPsTqdoEnQum/ yF94Zd3bgyhFrYqqxaWph1nzgYTEQEoBWRP28SkhUOaMYQX8cWHlUEFa0cpimM6r V4/Vj3QlSnTjocYsEZnJyEZFKQIkr6A9elakynGPkw30SFoUCAB1sjtwpbvQBWYs YG8m0j4tmnOZ84Mmobc0g9gO/wLReyApwyQ9P/23YIWSmrZES7QT76qNtJKQEc/R wP8XhSJaYW0M7BDki4OmoFZsjgFMhjGE3+PGe18xyS8f/EWBPXKIiVF6h6QT+J0F 3YiHOpOHHLjrfM1V1aVYKfSUduI5Fv/cVueQ1pWCCpkwpnQfnplI9lfAi6S1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe9SDuBkOYK4LlyqwxC50lR6hqMUwHwYDVR0j BBgwFoAU3qySA4AsF5eJskxaMWmqeqEEq/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhNzRhYzktOGZhNS00MzliLThmMjEtMDhmMjg0Njc3YWEzLzAvREVBQzkyMDM4 MDJDMTc5Nzg5QjI0QzVBMzE2OUFBN0FBMTA0QUJGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUFDOTIwMzgwMkMxNzk3ODlCMjRDNUEzMTY5QUE3QUExMDRB QkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhNzRhYzktOGZhNS00MzliLThm MjEtMDhmMjg0Njc3YWEzLzAvREVBQzkyMDM4MDJDMTc5Nzg5QjI0QzVBMzE2OUFB N0FBMTA0QUJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjoqhcf6+705GhTS47oXEdjfoCxswK8sifS ShbgXl60z9ZmK/KbBXLVEceyTtTPXCbBjqDsYv2pLQylbuhVV/6pTIkQX0h1PyaJ v4EQdInODloiK7dA/napobcva8ZHbOiQ8R24q3KAZXCLgmUnmDv+P0hk/AJnfqUg NBlim4wrUZRcvxy4aQA5DdHctPov6kjF5s3cwN5aZfA0rybRw2nQfWb87ASXeP68 9LSjImFX634U14KXD/qgm0HwuQfSGH6e6RWXAAr9zf/khSFmxLQCyoGV6ZXvdjFf AlQI/CMtkDcbUVaYnCPhzHA+k/ofLWWEW8Lv7kgUepFQu4hvPBo= -----END CERTIFICATE-----Generated at Wed May 13 06:11:50 2026 by rpki-client