$ rpki-client -vvf rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft File: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft (raw, json) Hash identifier: bYurRpBM1Jvw99MOynCSgrm72hOCEgHZ1+BtrSJt2q0= Subject key identifier: EA:90:37:30:1B:6F:F7:AF:AF:4E:00:AC:1B:84:BC:E6:A7:E5:C2:65 Authority key identifier: DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB Certificate issuer: /CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Certificate serial: 16CBAB1376A56C8B04DCEC80DC9362AC9D8A1A99 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 14:17:27 +0000 Manifest this update: Thu 23 Jul 2026 14:12:27 +0000 Manifest next update: Fri 24 Jul 2026 16:44:27 +0000 Files and hashes: 1: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: 8nmjbXVGRgtW15sU+Nw25IOfD9ULS+LcKdXK12LUizs=) 2: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: dDeWtGREo/C+9RQAi+5KoHx0KqrltXLZhEwhJjs/H8A=) 3: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: 5SPmMH7FYGGF68tuvyYTcGmJM2nZRCHFWkVHY/HhGvw=) 4: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: raCtvjVmEJI55eIKeNiuVbv8oBn2bNkQd9Io9ytHzqU=) 5: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl (hash: /Psbo9SnFgHcjEw0mheCgLiEQcPVGQi1Bbf3wCIbqKE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:cb:ab:13:76:a5:6c:8b:04:dc:ec:80:dc:93:62:ac:9d:8a:1a:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Validity Not Before: Jul 23 14:12:27 2026 GMT Not After : Jul 24 16:44:27 2026 GMT Subject: CN=EA9037301B6FF7AFAF4E00AC1B84BCE6A7E5C265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:eb:da:bf:26:3c:5c:b3:e5:88:83:8a:69:ff: 8d:cf:06:4d:e3:84:dc:74:3d:25:93:04:36:9f:00: 67:b5:e0:de:d2:2d:4b:07:4b:3a:1e:84:df:30:68: 57:20:e2:85:a4:f0:c9:52:8f:d0:b9:b4:7b:ef:f3: 80:6f:67:68:c2:2b:fa:2c:a1:19:1c:46:87:82:d2: 2f:41:7c:63:9a:b3:11:ca:00:9c:45:00:c1:cf:d1: ac:55:d1:56:cc:00:c2:dc:71:03:4a:71:43:dd:6e: 31:1e:42:5d:9b:7c:d8:90:b2:92:05:09:24:4c:81: 36:63:b3:68:ed:b6:fa:59:70:ca:fa:67:f0:37:0c: 99:82:74:d8:54:62:b7:91:36:00:ee:89:25:95:08: 02:29:cb:b6:e4:c5:a5:69:bb:39:a3:f0:0a:f8:7d: 83:52:47:00:14:24:5a:8e:e1:67:84:71:24:0f:ed: 2d:29:b3:4e:2b:2a:07:b4:a7:72:c4:18:67:99:19: fa:ad:89:33:75:64:dc:9c:c9:e4:f5:38:d8:78:0e: 92:9d:68:90:93:cd:f2:25:68:49:0f:f6:0a:91:bc: 62:b8:e8:b1:de:82:50:95:af:9e:c4:6d:18:d2:0c: b0:f5:d6:ad:30:c9:09:ea:5f:e3:57:d8:e5:0a:24: b5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:90:37:30:1B:6F:F7:AF:AF:4E:00:AC:1B:84:BC:E6:A7:E5:C2:65 X509v3 Authority Key Identifier: keyid:DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:70:08:43:7e:2d:0c:2d:58:ac:b0:2d:58:f9:24:42:7c:78: ab:19:e6:ea:3e:ff:bd:90:02:d6:14:9e:b8:a5:04:86:be:78: 7d:e7:cd:a1:d0:32:4b:33:54:37:c5:0b:67:7c:c2:b2:6d:2d: 31:6f:d0:a6:b0:3e:ac:e4:4b:5c:3f:68:63:a0:f1:76:3a:d9: 4e:40:d7:d6:04:ed:85:26:df:6c:2c:ee:c1:cd:6a:6d:f2:ac: 9d:32:11:8c:9a:0d:51:37:03:d2:05:fa:12:df:31:9d:c6:17: 05:14:d0:7d:1c:eb:92:4c:2c:20:90:4d:2d:2e:80:ca:61:d9: e9:9f:58:4a:ec:ca:b5:11:0b:39:ef:93:3f:80:f8:f9:21:aa: 39:f1:01:e8:7a:01:15:30:a0:96:8b:bc:51:68:18:1d:49:05: ba:34:de:5c:62:59:0c:41:aa:12:99:0d:fe:76:7a:d1:7a:0a: 6a:5e:17:81:3f:71:75:37:ea:18:23:81:b8:c0:2c:52:1c:58: b8:28:69:e0:51:0c:9e:61:ca:13:66:2b:8d:27:e7:cf:9a:d1: a7:5c:ab:93:d7:df:a7:78:6b:8e:73:82:52:77:86:1f:7d:eb: 48:40:c1:f9:5d:37:36:f1:f7:a7:58:b0:50:9e:4d:b3:00:51: 09:63:dc:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFsurE3albIsE3OyA3JNirJ2KGpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCRUVFODk3RkQ4NTU3MzA0QTJDMDIwREI4NkFEMkJB ODBCMDZGQjAeFw0yNjA3MjMxNDEyMjdaFw0yNjA3MjQxNjQ0MjdaMDMxMTAvBgNV BAMTKEVBOTAzNzMwMUI2RkY3QUZBRjRFMDBBQzFCODRCQ0U2QTdFNUMyNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC69q/Jjxcs+WIg4pp/43PBk3j hNx0PSWTBDafAGe14N7SLUsHSzoehN8waFcg4oWk8MlSj9C5tHvv84BvZ2jCK/os oRkcRoeC0i9BfGOasxHKAJxFAMHP0axV0VbMAMLccQNKcUPdbjEeQl2bfNiQspIF CSRMgTZjs2jttvpZcMr6Z/A3DJmCdNhUYreRNgDuiSWVCAIpy7bkxaVpuzmj8Ar4 fYNSRwAUJFqO4WeEcSQP7S0ps04rKge0p3LEGGeZGfqtiTN1ZNycyeT1ONh4DpKd aJCTzfIlaEkP9gqRvGK46LHeglCVr57EbRjSDLD11q0wyQnqX+NX2OUKJLX/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6pA3MBtv96+vTgCsG4S85qflwmUwHwYDVR0j BBgwFoAU3r7uiX/YVXMEosAg24atK6gLBvswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIyZjUxNTItYTI5NS00N2I3LWFkZGMtZmJmZWYzMjQ3ZTNiLzAvREVCRUVFODk3 RkQ4NTU3MzA0QTJDMDIwREI4NkFEMkJBODBCMDZGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUJFRUU4OTdGRDg1NTczMDRBMkMwMjBEQjg2QUQyQkE4MEIw NkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvREVCRUVFODk3RkQ4NTU3MzA0QTJDMDIwREI4NkFE MkJBODBCMDZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtwCEN+LQwtWKywLVj5JEJ8eKsZ5uo+/72Q AtYUnrilBIa+eH3nzaHQMkszVDfFC2d8wrJtLTFv0KawPqzkS1w/aGOg8XY62U5A 19YE7YUm32ws7sHNam3yrJ0yEYyaDVE3A9IF+hLfMZ3GFwUU0H0c65JMLCCQTS0u gMph2emfWErsyrURCznvkz+A+PkhqjnxAeh6ARUwoJaLvFFoGB1JBbo03lxiWQxB qhKZDf52etF6CmpeF4E/cXU36hgjgbjALFIcWLgoaeBRDJ5hyhNmK40n58+a0adc q5PX36d4a45zglJ3hh9960hAwfldNzbx96dYsFCeTbMAUQlj3KU= -----END CERTIFICATE-----Generated at Fri Jul 24 01:24:24 2026 by rpki-client