$ rpki-client -vvvf rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft File: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft (raw, json) Hash identifier: 5IXoRfzUT6ITxOXGvBGOtPd8axstkXQNlSexXMHRRaU= Subject key identifier: 15:FA:48:22:A0:E0:CD:46:A4:EC:DA:87:23:1F:A6:5E:9B:9B:84:17 Authority key identifier: DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB Certificate issuer: /CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Certificate serial: 466178FB7A6D80EE502A6ED2F6AC4EAFA80186F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 19:30:04 +0000 Manifest this update: Wed 23 Sep 2026 19:25:04 +0000 Manifest next update: Thu 24 Sep 2026 19:48:04 +0000 Files and hashes: 1: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl (hash: nFcQ0Za8e2xDqGL7l3W44yYmaesPuSjHeysngGCuJNk=) 2: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: 8nmjbXVGRgtW15sU+Nw25IOfD9ULS+LcKdXK12LUizs=) 3: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: 5SPmMH7FYGGF68tuvyYTcGmJM2nZRCHFWkVHY/HhGvw=) 4: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: dDeWtGREo/C+9RQAi+5KoHx0KqrltXLZhEwhJjs/H8A=) 5: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: raCtvjVmEJI55eIKeNiuVbv8oBn2bNkQd9Io9ytHzqU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:61:78:fb:7a:6d:80:ee:50:2a:6e:d2:f6:ac:4e:af:a8:01:86:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Validity Not Before: Sep 23 19:25:04 2026 GMT Not After : Sep 24 19:48:04 2026 GMT Subject: CN=15FA4822A0E0CD46A4ECDA87231FA65E9B9B8417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2d:98:7f:52:e5:4d:28:6d:6a:42:79:1c:3a: b3:b0:e5:16:2c:2a:3e:e1:1c:80:47:f3:80:ec:64: 7a:09:38:1d:d1:ab:53:1e:37:87:d1:90:16:f2:dc: 39:1c:dc:84:b0:eb:a3:5f:45:00:52:47:e9:8f:a8: 67:2c:17:21:78:fe:23:f7:28:ec:f9:a7:7c:d6:2d: eb:b1:5a:41:e2:e7:e2:2a:2a:ec:4c:a3:59:46:03: 83:9a:ca:ff:83:5e:7c:1a:04:a7:4b:b6:52:0a:8a: 0b:4a:19:37:25:a4:04:cf:e2:3b:1d:b7:b9:93:03: 64:28:ad:a4:40:d1:65:bb:d8:15:6e:48:b2:24:b7: b7:a2:5c:76:61:b7:a5:5e:34:04:1f:54:58:b6:19: 2f:73:3f:ba:07:51:9b:60:83:f5:be:fc:9d:6c:e4: b7:01:e3:a4:db:b5:03:9b:b0:65:59:d9:cd:f4:6c: 69:05:be:86:19:09:3b:db:05:01:86:5a:1e:d7:5b: 68:78:89:52:af:9e:5e:a3:f2:5c:ad:53:7f:83:c8: 83:a7:e2:55:8e:83:2b:90:a5:95:16:eb:f7:68:55: d4:1e:0f:b0:76:cf:1d:27:7e:04:56:9e:6c:9b:98: 21:40:19:99:33:49:cb:49:da:35:80:66:6b:b4:6c: 67:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FA:48:22:A0:E0:CD:46:A4:EC:DA:87:23:1F:A6:5E:9B:9B:84:17 X509v3 Authority Key Identifier: keyid:DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:3c:d8:ed:0b:c0:0e:cd:f7:27:07:f6:c7:ca:c5:1a:75:fb: 99:1a:3c:6f:44:05:f8:ab:1b:b5:61:1e:66:d8:55:14:3d:2c: 8f:ee:8d:64:eb:33:6b:41:bb:e4:7f:80:fb:7a:87:db:c9:0a: 6c:bc:db:b1:7a:1b:07:d6:3f:4e:c6:78:4e:af:0a:c2:5c:d9: 84:ca:b2:77:43:16:53:b2:15:78:4c:27:cf:8b:68:10:31:49: 95:3c:8d:60:bb:3f:53:21:5b:5f:1f:ed:e9:95:5d:64:23:0d: 26:30:84:70:cc:48:23:aa:a7:1d:a6:66:1d:86:99:4d:89:48: 4f:57:51:1b:6d:a5:f9:79:b7:b3:51:8e:6a:2e:ca:79:ef:cc: 53:ce:31:df:ab:93:94:50:64:97:d7:4f:e7:59:2e:39:dd:e3: ec:62:ce:71:2e:27:17:a3:d1:b6:f6:ad:b1:46:4c:db:64:2a: fb:57:13:12:ef:4e:70:cb:6d:f1:bf:90:81:91:a6:43:16:68: 22:89:91:e0:5c:df:61:38:bc:cc:61:b0:e9:69:50:0f:11:29: ec:38:5f:b9:5f:62:7a:53:a0:1f:7f:ab:44:49:27:d0:bf:e3: 85:5c:c6:07:14:b0:7f:37:84:2f:c7:3a:26:dc:82:1d:06:02: ce:42:91:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURmF4+3ptgO5QKm7S9qxOr6gBhvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCRUVFODk3RkQ4NTU3MzA0QTJDMDIwREI4NkFEMkJB ODBCMDZGQjAeFw0yNjA5MjMxOTI1MDRaFw0yNjA5MjQxOTQ4MDRaMDMxMTAvBgNV BAMTKDE1RkE0ODIyQTBFMENENDZBNEVDREE4NzIzMUZBNjVFOUI5Qjg0MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbLZh/UuVNKG1qQnkcOrOw5RYs Kj7hHIBH84DsZHoJOB3Rq1MeN4fRkBby3Dkc3ISw66NfRQBSR+mPqGcsFyF4/iP3 KOz5p3zWLeuxWkHi5+IqKuxMo1lGA4Oayv+DXnwaBKdLtlIKigtKGTclpATP4jsd t7mTA2QoraRA0WW72BVuSLIkt7eiXHZht6VeNAQfVFi2GS9zP7oHUZtgg/W+/J1s 5LcB46TbtQObsGVZ2c30bGkFvoYZCTvbBQGGWh7XW2h4iVKvnl6j8lytU3+DyIOn 4lWOgyuQpZUW6/doVdQeD7B2zx0nfgRWnmybmCFAGZkzSctJ2jWAZmu0bGeTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFfpIIqDgzUak7NqHIx+mXpubhBcwHwYDVR0j BBgwFoAU3r7uiX/YVXMEosAg24atK6gLBvswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIyZjUxNTItYTI5NS00N2I3LWFkZGMtZmJmZWYzMjQ3ZTNiLzAvREVCRUVFODk3 RkQ4NTU3MzA0QTJDMDIwREI4NkFEMkJBODBCMDZGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUJFRUU4OTdGRDg1NTczMDRBMkMwMjBEQjg2QUQyQkE4MEIw NkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvREVCRUVFODk3RkQ4NTU3MzA0QTJDMDIwREI4NkFE MkJBODBCMDZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJU82O0LwA7N9ycH9sfKxRp1+5kaPG9EBfir G7VhHmbYVRQ9LI/ujWTrM2tBu+R/gPt6h9vJCmy827F6GwfWP07GeE6vCsJc2YTK sndDFlOyFXhMJ8+LaBAxSZU8jWC7P1MhW18f7emVXWQjDSYwhHDMSCOqpx2mZh2G mU2JSE9XURttpfl5t7NRjmouynnvzFPOMd+rk5RQZJfXT+dZLjnd4+xiznEuJxej 0bb2rbFGTNtkKvtXExLvTnDLbfG/kIGRpkMWaCKJkeBc32E4vMxhsOlpUA8RKew4 X7lfYnpToB9/q0RJJ9C/44VcxgcUsH83hC/HOibcgh0GAs5Ckac= -----END CERTIFICATE-----Generated at Thu Sep 24 10:16:18 2026 by rpki-client