$ rpki-client -vvf rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft File: DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft (raw, json) Hash identifier: 2MEY00REryeeHHBIYqjOgN12vBv4A41XYI3m1+V6nsU= Subject key identifier: 2B:7B:4F:36:F4:5A:45:AB:0E:81:6A:51:80:4E:AC:C0:DF:36:88:1F Authority key identifier: DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC Certificate issuer: /CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC Certificate serial: 32C3325ACD84412CA136892B1EE50E75BC0EA199 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 08:29:52 +0000 Manifest this update: Fri 24 Jul 2026 08:24:52 +0000 Manifest next update: Sat 25 Jul 2026 10:16:52 +0000 Files and hashes: 1: 3130332e3138392e312e302f32342d3234203d3e20313439383830.roa (hash: 8bw4CbbPmgFdSPOl3wk5Lxb6WEH9Yu6WI8ZoRW3ng/U=) 2: DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl (hash: BKgyqSjoaWRSPFr6X2ymCHpC5KHFJnOXR/3vsT5B0xM=) 3: 3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (hash: 8lXuq/DeovKiTSw+1KX+GVyNFO7DCMSlCXzJz4jkGN8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c3:32:5a:cd:84:41:2c:a1:36:89:2b:1e:e5:0e:75:bc:0e:a1:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC Validity Not Before: Jul 24 08:24:52 2026 GMT Not After : Jul 25 10:16:52 2026 GMT Subject: CN=2B7B4F36F45A45AB0E816A51804EACC0DF36881F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:9d:26:e6:d9:71:24:d9:17:76:4d:20:e1: 4f:63:a8:e9:4c:87:74:14:6e:fc:2e:e2:bf:b0:ad: e7:06:9e:3f:69:39:53:3b:c3:a8:5d:67:66:1b:2b: 8f:c2:45:2d:61:10:99:24:6c:28:e8:f8:40:df:64: e6:eb:e2:44:55:b5:e4:ec:7b:1f:ad:ae:87:24:5c: 20:4a:53:3a:f2:42:dd:76:34:a2:af:12:54:4b:66: 3c:28:df:2f:1c:88:74:2f:ef:91:d3:54:53:af:e3: 67:32:69:5e:76:16:a3:89:be:46:aa:bd:1c:ea:27: ba:3b:f6:46:40:f9:9b:45:69:69:ae:3d:c4:94:e8: 6e:43:42:39:73:80:34:84:96:c5:b2:b6:da:be:4b: 9f:cc:14:64:86:29:2e:5f:9d:0f:f3:31:1f:bb:9b: 15:95:b4:fc:1a:1c:79:ae:31:c4:ed:d5:01:27:00: cf:74:03:ca:71:c7:3c:8f:8c:6e:b0:72:5f:82:db: 67:f9:26:83:cf:c1:fe:56:4d:8d:24:98:04:4f:92: 37:ab:92:cc:71:26:7a:ad:f5:7c:09:00:95:2f:cb: fb:9d:89:bc:89:5f:47:e4:dd:01:89:59:b4:4f:b6: 34:c0:6e:90:d7:15:4f:cf:e1:c4:57:6a:34:1b:4d: 28:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7B:4F:36:F4:5A:45:AB:0E:81:6A:51:80:4E:AC:C0:DF:36:88:1F X509v3 Authority Key Identifier: keyid:DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:3d:a3:42:5f:03:fa:fd:ab:3b:e6:d0:ba:98:b9:37:61:f2: 2a:f7:69:9b:64:dc:96:ce:82:41:5d:a6:8d:1c:78:ae:5f:2d: 79:d7:7f:04:be:57:b7:46:32:9d:be:a0:13:e4:8f:7c:df:d8: 12:77:12:cc:b2:e8:df:9c:8a:be:9b:43:49:05:c7:72:b6:75: a1:ce:19:22:fe:77:c1:44:8c:3e:58:ab:5a:6f:87:b9:41:77: 2a:dc:66:24:b3:86:aa:94:72:1b:31:b0:2b:a2:a8:61:11:93: 03:f0:1c:d0:f8:95:76:1c:d4:de:f9:5f:1e:7f:57:f7:39:6f: 82:ae:cc:7e:74:a5:32:40:88:c9:bd:9f:8d:a5:29:58:cf:e2: 94:ac:b4:3b:09:68:54:3b:be:71:16:a5:c7:53:10:71:12:29: 0b:0c:a9:f7:0f:cd:f1:93:ed:f0:cf:44:82:9f:65:03:7e:68: 8f:4d:16:ad:c1:51:69:eb:38:3f:09:5f:32:2d:3c:34:95:c9: 48:52:0d:1a:99:7e:38:16:5d:59:5a:c3:81:a7:79:3b:4a:6f: c5:56:4b:3a:51:11:9e:e3:c4:6f:0d:b2:ac:63:e1:d4:44:d4: 82:55:33:04:49:47:fd:b2:40:68:94:76:c7:74:b8:a4:58:9e: c2:38:53:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMsMyWs2EQSyhNokrHuUOdbwOoZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBQzkyMDM4MDJDMTc5Nzg5QjI0QzVBMzE2OUFBN0FB MTA0QUJGQzAeFw0yNjA3MjQwODI0NTJaFw0yNjA3MjUxMDE2NTJaMDMxMTAvBgNV BAMTKDJCN0I0RjM2RjQ1QTQ1QUIwRTgxNkE1MTgwNEVBQ0MwREYzNjg4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1z50m5tlxJNkXdk0g4U9jqOlM h3QUbvwu4r+wrecGnj9pOVM7w6hdZ2YbK4/CRS1hEJkkbCjo+EDfZObr4kRVteTs ex+trockXCBKUzryQt12NKKvElRLZjwo3y8ciHQv75HTVFOv42cyaV52FqOJvkaq vRzqJ7o79kZA+ZtFaWmuPcSU6G5DQjlzgDSElsWyttq+S5/MFGSGKS5fnQ/zMR+7 mxWVtPwaHHmuMcTt1QEnAM90A8pxxzyPjG6wcl+C22f5JoPPwf5WTY0kmARPkjer ksxxJnqt9XwJAJUvy/udibyJX0fk3QGJWbRPtjTAbpDXFU/P4cRXajQbTShlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK3tPNvRaRasOgWpRgE6swN82iB8wHwYDVR0j BBgwFoAU3qySA4AsF5eJskxaMWmqeqEEq/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhNzRhYzktOGZhNS00MzliLThmMjEtMDhmMjg0Njc3YWEzLzAvREVBQzkyMDM4 MDJDMTc5Nzg5QjI0QzVBMzE2OUFBN0FBMTA0QUJGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUFDOTIwMzgwMkMxNzk3ODlCMjRDNUEzMTY5QUE3QUExMDRB QkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhNzRhYzktOGZhNS00MzliLThm MjEtMDhmMjg0Njc3YWEzLzAvREVBQzkyMDM4MDJDMTc5Nzg5QjI0QzVBMzE2OUFB N0FBMTA0QUJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB09o0JfA/r9qzvm0LqYuTdh8ir3aZtk3JbO gkFdpo0ceK5fLXnXfwS+V7dGMp2+oBPkj3zf2BJ3Esyy6N+cir6bQ0kFx3K2daHO GSL+d8FEjD5Yq1pvh7lBdyrcZiSzhqqUchsxsCuiqGERkwPwHND4lXYc1N75Xx5/ V/c5b4KuzH50pTJAiMm9n42lKVjP4pSstDsJaFQ7vnEWpcdTEHESKQsMqfcPzfGT 7fDPRIKfZQN+aI9NFq3BUWnrOD8JXzItPDSVyUhSDRqZfjgWXVlaw4GneTtKb8VW SzpREZ7jxG8Nsqxj4dRE1IJVMwRJR/2yQGiUdsd0uKRYnsI4U7E= -----END CERTIFICATE-----Generated at Fri Jul 24 12:14:19 2026 by rpki-client