$ rpki-client -vvf rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft File: DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft (raw, json) Hash identifier: f121BrSBUVPTWGFX+uoo2RQeQo+ZLZqalKraVobcBo4= Subject key identifier: 66:95:EA:A2:A1:4B:B2:D3:B8:8A:03:DD:20:78:FE:92:51:44:7C:7E Authority key identifier: DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4 Certificate issuer: /CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4 Certificate serial: 5D19DA31F93086A093698FD53090BEAF84EFE2CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:27:14 +0000 Manifest this update: Tue 12 May 2026 17:22:14 +0000 Manifest next update: Wed 13 May 2026 21:04:14 +0000 Files and hashes: 1: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: e4+bi848oD/+O01Mx0cjiGiYFl4mEZMFhTrqMTZt/js=) 2: DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl (hash: w3o1Fs5BcGmZoXphyjUWLs4xOqiXtKJjyxCh+yjysFs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:19:da:31:f9:30:86:a0:93:69:8f:d5:30:90:be:af:84:ef:e2:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4 Validity Not Before: May 12 17:22:14 2026 GMT Not After : May 13 21:04:14 2026 GMT Subject: CN=6695EAA2A14BB2D3B88A03DD2078FE9251447C7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:8f:46:e4:a8:0f:b1:7b:0e:b5:95:4d:c4: 49:74:30:db:8a:e1:df:9a:d1:c1:db:10:69:c3:97: 44:0f:c5:17:56:36:58:97:1f:9a:77:00:63:f0:82: ab:17:fb:5d:d6:e4:45:25:e8:8a:12:6e:0f:63:39: 88:d6:d3:65:36:83:a9:60:98:d5:e4:24:ec:47:8e: 52:be:aa:d3:1d:ce:e5:49:c5:a1:49:e4:1a:ec:cd: 74:13:94:82:5e:28:02:f5:1d:d1:7e:8f:8d:65:28: e1:94:b9:c2:19:c7:0f:12:ca:cd:d7:ee:ee:dd:5a: cb:2a:1f:dc:5a:96:7f:f0:a7:9f:e7:da:59:f8:40: 22:9a:8b:94:d0:b8:31:00:53:f4:5f:c7:c3:c2:f8: 5d:b2:2f:82:e5:28:9b:ba:be:f9:3e:86:ed:2d:54: 61:e6:bb:21:78:09:a9:bd:7e:9f:2a:96:14:dd:89: 57:73:b5:fd:da:f3:ed:7a:35:e5:2e:55:55:06:f3: e4:31:83:6a:4d:78:39:3a:9a:1e:a3:b6:44:d6:0d: a4:c0:79:61:20:21:c4:b5:c1:93:bc:b2:e4:7e:92: 8e:25:7e:14:01:a8:c8:41:2a:f5:2f:ac:ac:46:94: 94:f4:11:99:cc:7f:ec:f5:35:a1:b5:d6:61:b6:1d: 08:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:95:EA:A2:A1:4B:B2:D3:B8:8A:03:DD:20:78:FE:92:51:44:7C:7E X509v3 Authority Key Identifier: keyid:DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:cc:62:fc:39:f7:ed:3d:97:e0:a7:c9:dd:5a:33:79:d0:8a: 51:02:8b:77:e3:20:e5:90:1f:8d:61:67:54:67:26:39:7d:06: 70:37:9e:8d:66:4f:de:7b:67:39:73:10:a8:32:84:44:ec:7b: cf:3b:6a:99:6b:5e:db:bb:d5:4e:4c:e1:2e:64:26:6e:bf:83: 23:81:77:88:ad:f6:67:08:88:8d:bf:cd:7a:97:14:c9:bd:ef: 85:04:26:40:e5:a2:cd:54:92:c1:0a:39:43:55:07:a9:c7:30: 7d:49:bd:4b:b2:ab:a1:77:36:19:ca:1a:e6:a8:18:45:46:e2: 53:b0:c6:5a:a4:d1:2e:40:15:54:3a:8f:fb:69:e1:a2:9d:a8: 6b:d7:26:1a:2c:5a:67:3b:8f:48:1d:d2:d0:6f:8d:eb:a7:48: ee:31:5a:f9:75:a7:51:ff:69:be:ff:8f:8d:b7:6b:46:18:0f: a7:42:c2:85:53:d9:9d:b0:b0:32:99:39:09:0b:c6:ae:72:bf: 2f:e6:fb:ee:a5:2f:d1:0d:30:b1:2a:a7:08:83:88:5f:21:6f: 53:03:a9:9d:93:7d:47:1c:6e:9b:6f:d1:64:c9:13:4b:b0:f5: d5:00:a9:2f:49:f2:31:8e:66:45:2b:aa:4a:32:4b:80:36:87: 30:65:a3:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXRnaMfkwhqCTaY/VMJC+r4Tv4s8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZFQkUyNjMwQ0MwQTQ0NTMwQTU0NDIxMjQ0RDRCOENF RDJDOEFDNDAeFw0yNjA1MTIxNzIyMTRaFw0yNjA1MTMyMTA0MTRaMDMxMTAvBgNV BAMTKDY2OTVFQUEyQTE0QkIyRDNCODhBMDNERDIwNzhGRTkyNTE0NDdDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxqo9G5KgPsXsOtZVNxEl0MNuK 4d+a0cHbEGnDl0QPxRdWNliXH5p3AGPwgqsX+13W5EUl6IoSbg9jOYjW02U2g6lg mNXkJOxHjlK+qtMdzuVJxaFJ5BrszXQTlIJeKAL1HdF+j41lKOGUucIZxw8Sys3X 7u7dWssqH9xaln/wp5/n2ln4QCKai5TQuDEAU/Rfx8PC+F2yL4LlKJu6vvk+hu0t VGHmuyF4Cam9fp8qlhTdiVdztf3a8+16NeUuVVUG8+Qxg2pNeDk6mh6jtkTWDaTA eWEgIcS1wZO8suR+ko4lfhQBqMhBKvUvrKxGlJT0EZnMf+z1NaG11mG2HQixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZpXqoqFLstO4igPdIHj+klFEfH4wHwYDVR0j BBgwFoAU3+viYwzApEUwpUQhJE1LjO0sisQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJmYTQyNjUtYmI1OC00NmUyLTgzMDktM2FkMzk4MWEzNTE2LzAvREZFQkUyNjMw Q0MwQTQ0NTMwQTU0NDIxMjQ0RDRCOENFRDJDOEFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERkVCRTI2MzBDQzBBNDQ1MzBBNTQ0MjEyNDRENEI4Q0VEMkM4 QUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmJmYTQyNjUtYmI1OC00NmUyLTgz MDktM2FkMzk4MWEzNTE2LzAvREZFQkUyNjMwQ0MwQTQ0NTMwQTU0NDIxMjQ0RDRC OENFRDJDOEFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvMYvw59+09l+Cnyd1aM3nQilECi3fjIOWQ H41hZ1RnJjl9BnA3no1mT957ZzlzEKgyhETse887aplrXtu71U5M4S5kJm6/gyOB d4it9mcIiI2/zXqXFMm974UEJkDlos1UksEKOUNVB6nHMH1JvUuyq6F3NhnKGuao GEVG4lOwxlqk0S5AFVQ6j/tp4aKdqGvXJhosWmc7j0gd0tBvjeunSO4xWvl1p1H/ ab7/j423a0YYD6dCwoVT2Z2wsDKZOQkLxq5yvy/m++6lL9ENMLEqpwiDiF8hb1MD qZ2TfUccbptv0WTJE0uw9dUAqS9J8jGOZkUrqkoyS4A2hzBlo4c= -----END CERTIFICATE-----Generated at Wed May 13 02:13:18 2026 by rpki-client