$ rpki-client -vvf rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft File: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft (raw, json) Hash identifier: WzoGYw2ux71QObU68TXg/n5VXl70T7DQd25xAzmO2Qk= Subject key identifier: E6:00:B7:CF:FB:29:12:FD:3A:16:D8:F3:41:9F:4C:D8:69:A5:1C:90 Authority key identifier: DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB Certificate issuer: /CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Certificate serial: 1F53A1457A1DB9AF070CB0DB1AB5D4FB9F89A0D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:34:04 +0000 Manifest this update: Tue 12 May 2026 18:29:04 +0000 Manifest next update: Wed 13 May 2026 20:01:04 +0000 Files and hashes: 1: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: 5SPmMH7FYGGF68tuvyYTcGmJM2nZRCHFWkVHY/HhGvw=) 2: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: 8nmjbXVGRgtW15sU+Nw25IOfD9ULS+LcKdXK12LUizs=) 3: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: raCtvjVmEJI55eIKeNiuVbv8oBn2bNkQd9Io9ytHzqU=) 4: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: dDeWtGREo/C+9RQAi+5KoHx0KqrltXLZhEwhJjs/H8A=) 5: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl (hash: 9VMeOCDOrqyJzCUe4bg/WTe41uxz5B21cIX3N0uRu+o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:53:a1:45:7a:1d:b9:af:07:0c:b0:db:1a:b5:d4:fb:9f:89:a0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Validity Not Before: May 12 18:29:04 2026 GMT Not After : May 13 20:01:04 2026 GMT Subject: CN=E600B7CFFB2912FD3A16D8F3419F4CD869A51C90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:70:f1:4a:55:e1:2e:a0:72:05:42:84:c7: bb:b7:65:5e:4a:d3:4b:6f:54:db:a5:31:01:bf:8f: 2a:b5:17:55:07:b9:9b:2c:e0:d3:cf:02:44:b9:54: 3d:48:86:82:e4:c1:bf:2f:28:45:55:2d:c4:a9:7f: 02:e2:33:d8:05:d9:e5:f0:60:7c:32:57:51:98:f2: c2:3f:2f:b5:99:85:52:98:3d:32:1c:dd:d7:62:f4: 15:3b:43:10:7b:90:4d:a7:a2:a1:a1:b3:58:7b:4f: a3:48:85:d4:c1:e9:7a:99:1b:c7:26:ee:1f:d7:8b: 8c:f1:5c:f3:f8:56:3d:4e:fc:84:d9:fa:8a:2e:a2: 18:17:da:ae:c5:e5:1e:b6:72:f7:67:dd:d6:0c:34: 37:6a:f1:7a:f7:d6:20:14:b1:01:cf:c7:d0:97:ee: f0:1c:b5:cf:82:cc:99:5b:b8:40:b0:88:00:cf:1b: 9d:fc:10:bd:1a:a3:27:e6:d8:c5:21:94:64:5e:e3: e8:a0:8a:18:9c:8b:16:f6:b1:ac:2d:71:ec:39:63: a4:ed:28:40:2c:1a:de:9c:51:d7:5b:9e:9f:a8:16: 01:55:0b:49:54:e9:f7:16:73:31:f9:04:ee:54:ee: d4:9c:06:bf:ea:4b:d6:fe:1d:0f:96:a0:43:b9:27: 95:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:00:B7:CF:FB:29:12:FD:3A:16:D8:F3:41:9F:4C:D8:69:A5:1C:90 X509v3 Authority Key Identifier: keyid:DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:da:da:b3:19:5f:11:25:82:c4:9b:5c:e8:4a:2c:29:51:d9: e8:d9:86:79:93:46:cf:ad:70:a6:19:de:25:b2:20:9e:a1:e3: 36:db:62:70:7a:26:a0:1e:1e:d0:7d:ac:e3:33:32:41:53:68: ba:8e:3a:68:9a:98:2b:1b:bc:40:f0:a0:b2:e8:ee:72:92:9e: d0:fb:d4:74:94:54:2c:8b:7e:fa:59:41:c7:53:29:96:b3:03: 47:5d:dd:1e:1e:f3:5d:24:e7:9e:53:e8:dc:d7:76:50:a9:af: b0:06:cd:b9:7c:d6:e3:ed:79:10:b1:4e:e8:22:bb:bc:af:24: e3:ad:58:53:a1:92:b0:6e:78:fd:a4:2f:f0:6a:14:9b:70:69: c3:f1:b1:e0:3f:3a:39:d5:50:f9:e4:c2:47:4b:77:d4:5f:f2: 5a:23:a0:9d:25:5b:37:ac:47:7d:13:3a:d1:eb:85:7a:17:00: 4c:6b:c8:78:5d:9e:8e:47:5b:3c:bd:09:11:dd:61:5e:5c:30: de:f9:a5:3e:1d:73:84:5a:8c:da:60:fa:89:aa:c9:fd:8e:9a: de:4b:32:4b:08:64:ef:4a:26:4f:35:62:f4:31:ff:64:e3:fc: ec:ed:3b:ba:9d:b4:c9:91:2f:57:2f:94:d7:f9:b9:78:f0:c6: 8e:af:ac:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH1OhRXodua8HDLDbGrXU+5+JoNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCRUVFODk3RkQ4NTU3MzA0QTJDMDIwREI4NkFEMkJB ODBCMDZGQjAeFw0yNjA1MTIxODI5MDRaFw0yNjA1MTMyMDAxMDRaMDMxMTAvBgNV BAMTKEU2MDBCN0NGRkIyOTEyRkQzQTE2RDhGMzQxOUY0Q0Q4NjlBNTFDOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBW3DxSlXhLqByBUKEx7u3ZV5K 00tvVNulMQG/jyq1F1UHuZss4NPPAkS5VD1IhoLkwb8vKEVVLcSpfwLiM9gF2eXw YHwyV1GY8sI/L7WZhVKYPTIc3ddi9BU7QxB7kE2noqGhs1h7T6NIhdTB6XqZG8cm 7h/Xi4zxXPP4Vj1O/ITZ+oouohgX2q7F5R62cvdn3dYMNDdq8Xr31iAUsQHPx9CX 7vActc+CzJlbuECwiADPG538EL0aoyfm2MUhlGRe4+igihicixb2sawtcew5Y6Tt KEAsGt6cUddbnp+oFgFVC0lU6fcWczH5BO5U7tScBr/qS9b+HQ+WoEO5J5XPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5gC3z/spEv06FtjzQZ9M2GmlHJAwHwYDVR0j BBgwFoAU3r7uiX/YVXMEosAg24atK6gLBvswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIyZjUxNTItYTI5NS00N2I3LWFkZGMtZmJmZWYzMjQ3ZTNiLzAvREVCRUVFODk3 RkQ4NTU3MzA0QTJDMDIwREI4NkFEMkJBODBCMDZGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUJFRUU4OTdGRDg1NTczMDRBMkMwMjBEQjg2QUQyQkE4MEIw NkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvREVCRUVFODk3RkQ4NTU3MzA0QTJDMDIwREI4NkFE MkJBODBCMDZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPa2rMZXxElgsSbXOhKLClR2ejZhnmTRs+t cKYZ3iWyIJ6h4zbbYnB6JqAeHtB9rOMzMkFTaLqOOmiamCsbvEDwoLLo7nKSntD7 1HSUVCyLfvpZQcdTKZazA0dd3R4e810k555T6NzXdlCpr7AGzbl81uPteRCxTugi u7yvJOOtWFOhkrBueP2kL/BqFJtwacPxseA/OjnVUPnkwkdLd9Rf8lojoJ0lWzes R30TOtHrhXoXAExryHhdno5HWzy9CRHdYV5cMN75pT4dc4RajNpg+omqyf2Omt5L MksIZO9KJk81YvQx/2Tj/OztO7qdtMmRL1cvlNf5uXjwxo6vrCs= -----END CERTIFICATE-----Generated at Tue May 12 22:49:57 2026 by rpki-client