$ rpki-client -vvf rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft File: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft (raw, json) Hash identifier: uP/5QzaBhxZPrh/QT+uG7EPOIIfk1LfBY3rZrGkKG6M= Subject key identifier: 63:2E:68:26:AC:D4:CE:D9:77:BC:D6:F7:8C:81:98:E7:3C:F5:1A:CB Authority key identifier: DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A Certificate issuer: /CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A Certificate serial: 5A549C2AF3A6280256C0E33BC67352B4328C0FE6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:40:50 +0000 Manifest this update: Tue 12 May 2026 19:35:50 +0000 Manifest next update: Wed 13 May 2026 19:52:50 +0000 Files and hashes: 1: 3130332e3137312e3138352e302f32342d3234203d3e20313432333734.roa (hash: KJ7p2DQB9uLZReoNNtXLeW/ntHP0ly/9EgDzYMeS9tA=) 2: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (hash: SJt1SBaXEP9+A3/U6mnd55r9+cQvaamR3U/aBvUPC3E=) 3: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl (hash: 1O9w2/NNG/F+X/htioJD3g1/1o7SzqAL601/GbOS1rs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:54:9c:2a:f3:a6:28:02:56:c0:e3:3b:c6:73:52:b4:32:8c:0f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A Validity Not Before: May 12 19:35:50 2026 GMT Not After : May 13 19:52:50 2026 GMT Subject: CN=632E6826ACD4CED977BCD6F78C8198E73CF51ACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6d:18:62:3b:af:c2:67:1d:e7:7b:e6:d4:8a: 7f:a7:78:19:06:17:8d:82:79:63:9c:dd:57:86:d7: b5:33:97:25:47:70:c1:44:d4:ae:84:68:69:c5:4e: 0e:5d:ed:78:7c:75:30:8a:0a:d0:ec:12:d3:c7:b0: c9:6d:84:08:a4:63:8e:eb:75:4e:e8:9c:a3:e4:23: 66:6a:e2:ff:c4:91:aa:16:2f:08:30:3d:53:6f:01: 75:7f:67:67:39:4e:14:ad:18:b4:16:1e:8d:62:8e: e0:6d:b7:da:bd:f8:b1:d4:05:19:af:c5:23:14:62: 15:e2:0d:6b:59:91:29:c3:51:2d:40:c5:f8:2d:cb: f4:06:2c:ab:21:2b:f2:b6:ff:b3:c0:5a:4e:d2:2f: ba:87:fc:52:b8:bf:5a:47:87:52:3c:68:4a:50:9b: 1b:82:66:de:df:f4:d6:c2:c3:d8:1d:fb:39:40:21: f4:3a:21:15:70:aa:fd:bc:f8:c7:e4:8e:50:7c:b1: 65:9c:42:d2:62:e8:ae:3c:98:96:ea:4c:dd:07:f6: bf:fa:96:5e:03:ef:69:84:9b:61:a8:cf:ad:38:55: c2:15:3a:5c:70:38:87:04:8b:e9:f0:7c:13:2b:9b: e0:98:66:db:85:54:74:52:d0:50:cc:2f:3d:03:ad: 0f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2E:68:26:AC:D4:CE:D9:77:BC:D6:F7:8C:81:98:E7:3C:F5:1A:CB X509v3 Authority Key Identifier: keyid:DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:53:4f:05:4a:68:01:dd:ee:2f:75:0e:8d:a5:a1:87:29:26: 0a:5a:66:73:c9:ba:99:cf:af:0d:ae:97:b0:a5:3f:ef:7f:67: c3:3a:3c:69:d8:fd:f6:d2:44:20:8b:97:f2:15:ce:3a:6d:90: a5:60:76:2d:20:70:34:4c:8d:a2:92:fb:7a:55:e2:31:3f:98: 36:f0:5d:b8:75:24:6d:fb:d0:f9:68:76:53:7a:22:0c:bf:2e: a0:e3:36:14:cb:b4:23:6b:19:39:3f:06:15:ec:1e:66:6b:e2: f2:8a:2a:45:38:31:17:56:43:fb:2a:e2:31:41:59:e4:b7:45: 74:5d:b8:a4:a9:05:b0:57:f0:6f:ce:db:cf:5b:bc:3d:49:f0: 67:9f:9a:dd:f1:2b:94:da:6f:78:ed:5b:f5:6a:6d:68:e7:41: d3:ab:da:da:e2:90:3e:c2:fb:30:93:e3:95:e4:da:a0:95:25: ea:05:ae:c2:f2:5d:fb:3e:4b:94:e9:dc:7a:d8:6f:4d:d6:75: 35:b2:40:a6:d5:0c:b3:1a:11:1a:4b:2b:f0:26:43:50:48:4f: 95:25:80:15:74:0a:54:fe:cb:b6:8a:46:a9:0f:cd:60:61:dd: d7:f5:38:ad:1e:c5:c6:c4:18:99:15:b2:b5:6d:c8:05:fd:e6: 40:3a:5a:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWlScKvOmKAJWwOM7xnNStDKMD+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3Q0RFMUVBQjlCMEVGQkU4MEUwNzg3NDdFRTYwRkRB RUY4RkUyQTAeFw0yNjA1MTIxOTM1NTBaFw0yNjA1MTMxOTUyNTBaMDMxMTAvBgNV BAMTKDYzMkU2ODI2QUNENENFRDk3N0JDRDZGNzhDODE5OEU3M0NGNTFBQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bRhiO6/CZx3ne+bUin+neBkG F42CeWOc3VeG17UzlyVHcMFE1K6EaGnFTg5d7Xh8dTCKCtDsEtPHsMlthAikY47r dU7onKPkI2Zq4v/EkaoWLwgwPVNvAXV/Z2c5ThStGLQWHo1ijuBtt9q9+LHUBRmv xSMUYhXiDWtZkSnDUS1Axfgty/QGLKshK/K2/7PAWk7SL7qH/FK4v1pHh1I8aEpQ mxuCZt7f9NbCw9gd+zlAIfQ6IRVwqv28+MfkjlB8sWWcQtJi6K48mJbqTN0H9r/6 ll4D72mEm2Goz604VcIVOlxwOIcEi+nwfBMrm+CYZtuFVHRS0FDMLz0DrQ9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYy5oJqzUztl3vNb3jIGY5zz1GsswHwYDVR0j BBgwFoAU3nzeHqubDvvoDgeHR+5g/a74/iowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg1NWY0NTAtZWI3Zi00YTI2LWE2YzQtZjk4MjdlZTBhNWI4LzAvREU3Q0RFMUVB QjlCMEVGQkU4MEUwNzg3NDdFRTYwRkRBRUY4RkUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTdDREUxRUFCOUIwRUZCRTgwRTA3ODc0N0VFNjBGREFFRjhG RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg1NWY0NTAtZWI3Zi00YTI2LWE2 YzQtZjk4MjdlZTBhNWI4LzAvREU3Q0RFMUVBQjlCMEVGQkU4MEUwNzg3NDdFRTYw RkRBRUY4RkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNTTwVKaAHd7i91Do2loYcpJgpaZnPJupnP rw2ul7ClP+9/Z8M6PGnY/fbSRCCLl/IVzjptkKVgdi0gcDRMjaKS+3pV4jE/mDbw Xbh1JG370PlodlN6Igy/LqDjNhTLtCNrGTk/BhXsHmZr4vKKKkU4MRdWQ/sq4jFB WeS3RXRduKSpBbBX8G/O289bvD1J8Gefmt3xK5Tab3jtW/VqbWjnQdOr2trikD7C +zCT45Xk2qCVJeoFrsLyXfs+S5Tp3HrYb03WdTWyQKbVDLMaERpLK/AmQ1BIT5Ul gBV0ClT+y7aKRqkPzWBh3df1OK0excbEGJkVsrVtyAX95kA6Wv4= -----END CERTIFICATE-----Generated at Wed May 13 04:47:25 2026 by rpki-client