$ rpki-client -vvf rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft File: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft (raw, json) Hash identifier: E0/XQNHuLhaTx9OBJdy/OBQ154k/wIlXg3TdGfimo3U= Subject key identifier: E4:F3:23:8D:5C:52:85:09:D9:2C:B9:0F:68:96:6B:B3:0E:FB:C2:C9 Authority key identifier: DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A Certificate issuer: /CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A Certificate serial: 14E2A87A1FEA37934AB40291784957797765A9A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:16:13 +0000 Manifest this update: Thu 23 Jul 2026 13:11:13 +0000 Manifest next update: Fri 24 Jul 2026 14:03:13 +0000 Files and hashes: 1: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl (hash: sbMDzpw2QfBsfQztJtz+oHH9n3H9iKg52dSW5YMV4Rg=) 2: 3130332e3137312e3138352e302f32342d3234203d3e20313432333734.roa (hash: KJ7p2DQB9uLZReoNNtXLeW/ntHP0ly/9EgDzYMeS9tA=) 3: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (hash: SJt1SBaXEP9+A3/U6mnd55r9+cQvaamR3U/aBvUPC3E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e2:a8:7a:1f:ea:37:93:4a:b4:02:91:78:49:57:79:77:65:a9:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A Validity Not Before: Jul 23 13:11:13 2026 GMT Not After : Jul 24 14:03:13 2026 GMT Subject: CN=E4F3238D5C528509D92CB90F68966BB30EFBC2C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:47:2d:86:01:9d:33:62:bc:d9:6d:a2:96: 55:62:72:a3:24:6e:01:e2:da:38:56:22:e2:0a:59: b8:5c:6a:86:70:32:02:70:97:f3:af:c3:bf:25:bc: 13:8f:2e:83:b4:9b:24:9d:eb:19:65:c5:3e:b1:a3: 1c:81:f1:f1:9a:65:ac:0f:c3:24:31:2a:0f:69:42: c8:e8:cc:30:f4:df:8e:f0:70:53:17:6d:a1:69:c2: ee:ea:42:e8:a7:61:5c:07:48:39:51:5d:03:08:30: d4:4f:47:2f:b7:7d:fe:9c:57:3e:27:92:61:89:53: 7b:ef:59:46:3f:38:ec:0b:a2:4a:3c:d2:85:df:77: 23:82:c5:c8:02:fe:26:f7:87:23:65:f9:0d:be:21: 88:d8:07:90:b0:4a:cb:e0:e5:18:c3:01:0f:d5:ff: 43:61:67:5a:a5:e7:f8:7a:b2:ae:be:ab:5f:0b:d1: f0:70:99:1b:41:d6:a7:bd:f7:38:93:16:6a:19:4e: fc:b7:ed:9c:12:e2:db:4b:5d:76:b3:ca:b6:e7:14: b7:69:28:a5:31:07:cf:dd:73:6f:0f:77:4f:73:7d: f0:f0:2e:d7:e2:a2:42:02:e8:70:b9:d6:77:1a:79: a6:06:78:d5:1d:75:25:0b:e9:34:d0:c7:c9:c6:be: 87:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F3:23:8D:5C:52:85:09:D9:2C:B9:0F:68:96:6B:B3:0E:FB:C2:C9 X509v3 Authority Key Identifier: keyid:DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:8c:18:c6:27:bb:4d:9a:a1:e4:46:a8:05:74:eb:79:41:96: 0c:08:b9:9f:05:5b:55:14:fd:18:a1:58:4d:65:46:d7:a1:71: 9f:0c:88:ff:47:e0:1f:8f:66:fc:77:a5:0f:2f:99:72:98:c8: 72:4a:3c:8b:15:02:7a:99:2d:e1:0a:10:9e:e2:c1:07:e4:b2: 78:f3:df:75:48:f5:1f:9d:42:8e:d8:1a:83:fe:08:3b:82:cb: 3e:02:df:c5:5f:b5:28:dd:b6:97:76:bf:a3:2c:61:15:f0:34: 36:14:3a:76:cd:93:d1:de:5b:98:94:90:a3:ce:8d:cb:96:f0: 5b:59:b2:4c:fc:05:27:3c:9c:88:28:4e:47:9b:ec:2e:c0:9a: 54:9e:0b:8c:60:a5:7d:f5:9c:0c:0c:70:91:af:a2:72:c1:f0: c4:8e:f5:3e:a9:c9:c9:1b:31:ac:26:da:7e:5c:cc:b0:66:fd: 08:3c:f8:00:54:c9:b2:bb:7f:0c:6b:26:33:54:d1:bb:c4:b8: e2:60:d4:5c:5c:c5:79:85:46:c7:1b:ee:53:62:27:0f:1d:31: 1e:8e:04:79:60:fe:d2:d0:8d:98:d6:4a:fd:13:73:e8:4e:04: 7b:43:8b:7b:89:07:20:bd:ac:98:47:06:7d:5f:6a:85:12:9a: d4:ad:de:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFOKoeh/qN5NKtAKReElXeXdlqaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3Q0RFMUVBQjlCMEVGQkU4MEUwNzg3NDdFRTYwRkRB RUY4RkUyQTAeFw0yNjA3MjMxMzExMTNaFw0yNjA3MjQxNDAzMTNaMDMxMTAvBgNV BAMTKEU0RjMyMzhENUM1Mjg1MDlEOTJDQjkwRjY4OTY2QkIzMEVGQkMyQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuCUcthgGdM2K82W2illVicqMk bgHi2jhWIuIKWbhcaoZwMgJwl/Ovw78lvBOPLoO0mySd6xllxT6xoxyB8fGaZawP wyQxKg9pQsjozDD0347wcFMXbaFpwu7qQuinYVwHSDlRXQMIMNRPRy+3ff6cVz4n kmGJU3vvWUY/OOwLoko80oXfdyOCxcgC/ib3hyNl+Q2+IYjYB5CwSsvg5RjDAQ/V /0NhZ1ql5/h6sq6+q18L0fBwmRtB1qe99ziTFmoZTvy37ZwS4ttLXXazyrbnFLdp KKUxB8/dc28Pd09zffDwLtfiokIC6HC51ncaeaYGeNUddSUL6TTQx8nGvoczAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5PMjjVxShQnZLLkPaJZrsw77wskwHwYDVR0j BBgwFoAU3nzeHqubDvvoDgeHR+5g/a74/iowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg1NWY0NTAtZWI3Zi00YTI2LWE2YzQtZjk4MjdlZTBhNWI4LzAvREU3Q0RFMUVB QjlCMEVGQkU4MEUwNzg3NDdFRTYwRkRBRUY4RkUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTdDREUxRUFCOUIwRUZCRTgwRTA3ODc0N0VFNjBGREFFRjhG RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg1NWY0NTAtZWI3Zi00YTI2LWE2 YzQtZjk4MjdlZTBhNWI4LzAvREU3Q0RFMUVBQjlCMEVGQkU4MEUwNzg3NDdFRTYw RkRBRUY4RkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOMGMYnu02aoeRGqAV063lBlgwIuZ8FW1UU /RihWE1lRtehcZ8MiP9H4B+PZvx3pQ8vmXKYyHJKPIsVAnqZLeEKEJ7iwQfksnjz 33VI9R+dQo7YGoP+CDuCyz4C38VftSjdtpd2v6MsYRXwNDYUOnbNk9HeW5iUkKPO jcuW8FtZskz8BSc8nIgoTkeb7C7AmlSeC4xgpX31nAwMcJGvonLB8MSO9T6pyckb Mawm2n5czLBm/Qg8+ABUybK7fwxrJjNU0bvEuOJg1FxcxXmFRscb7lNiJw8dMR6O BHlg/tLQjZjWSv0Tc+hOBHtDi3uJByC9rJhHBn1faoUSmtSt3iQ= -----END CERTIFICATE-----Generated at Fri Jul 24 03:17:03 2026 by rpki-client