$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft File: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft (raw, json) Hash identifier: 2sG57NnNS4TXmSP+n4Ywmrw0/IdTy2mNlbUS4LVKT0M= Subject key identifier: 87:E3:19:D9:0D:B0:97:E7:32:9B:F3:52:10:9D:69:98:0A:E8:18:7F Authority key identifier: DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A Certificate issuer: /CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A Certificate serial: 7548A8A929821345F802535632450726B32E4F6B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 10:13:16 +0000 Manifest this update: Thu 24 Sep 2026 10:08:16 +0000 Manifest next update: Fri 25 Sep 2026 11:15:16 +0000 Files and hashes: 1: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl (hash: x/UeB0mGo1u/zcYG64HAqecsPXeuBN41ZhtOqSjk3n4=) 2: 3130332e3137312e3138352e302f32342d3234203d3e20313432333734.roa (hash: KJ7p2DQB9uLZReoNNtXLeW/ntHP0ly/9EgDzYMeS9tA=) 3: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (hash: SJt1SBaXEP9+A3/U6mnd55r9+cQvaamR3U/aBvUPC3E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:48:a8:a9:29:82:13:45:f8:02:53:56:32:45:07:26:b3:2e:4f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A Validity Not Before: Sep 24 10:08:16 2026 GMT Not After : Sep 25 11:15:16 2026 GMT Subject: CN=87E319D90DB097E7329BF352109D69980AE8187F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c8:90:c6:64:17:7a:41:99:ca:d2:62:dd:a4: fb:49:de:5c:df:9d:2c:b4:5e:4e:08:ca:56:82:43: 78:54:44:0e:b7:ea:b2:2c:84:85:a7:fd:67:48:35: 51:c1:70:fb:3f:f8:2e:cd:b0:65:30:0d:d3:bc:6c: 14:5f:f1:70:36:07:ba:b4:49:dd:1d:24:17:ee:ca: 43:f5:ee:ea:fb:af:c6:52:df:ef:4b:00:47:58:19: c6:b5:eb:7d:22:54:fe:4c:2e:33:55:04:0d:c2:86: 33:77:c8:dd:d4:a4:55:88:bc:fe:e9:3b:71:b0:97: 04:24:53:dd:d8:67:a8:71:31:1a:74:91:aa:ff:54: c2:82:f3:5e:35:2b:b5:ad:f7:05:7c:7a:55:57:95: fd:db:67:95:64:e6:9b:30:12:57:30:c0:ec:0e:e2: 95:bc:81:0b:73:e6:5f:de:ac:36:1f:fc:02:6a:64: c6:3c:cb:3d:bf:06:5b:45:3e:2f:28:f2:c9:07:8c: 38:1a:53:6e:92:e1:3a:5f:fd:87:0a:42:42:bf:0c: 74:82:ce:da:e5:30:10:d9:d4:09:ad:ca:0d:7f:50: 6d:53:09:18:f3:bc:fb:b4:56:1e:51:1b:36:3e:99: 53:b5:46:72:5a:cf:f7:99:66:96:19:50:7b:53:fe: 82:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E3:19:D9:0D:B0:97:E7:32:9B:F3:52:10:9D:69:98:0A:E8:18:7F X509v3 Authority Key Identifier: keyid:DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:32:fe:7b:b6:b3:66:17:a6:60:43:8b:77:f5:36:64:46:74: ca:18:c9:c3:21:8e:32:3e:89:51:53:f5:29:9d:d9:39:fb:0d: 1c:94:07:f5:56:75:c0:88:26:3a:66:fe:01:6f:5f:56:e1:00: ce:f0:85:6c:7d:45:81:e3:33:e0:54:e5:c6:3f:1a:00:e0:2d: 06:0a:5a:25:03:d3:40:42:2b:f3:af:89:9c:ba:92:02:19:33: f3:d3:fd:94:74:f5:93:27:54:78:43:a3:8b:46:e0:41:a5:ba: 16:3e:14:71:c9:d0:cc:d6:f1:9a:99:c2:73:90:d0:34:ec:4c: 0a:f5:e4:52:88:38:0b:b7:8a:2a:d4:a3:11:06:d6:9b:92:b8: 78:7c:f7:34:af:82:c3:16:35:59:a2:da:cf:11:1e:51:a0:28: ed:8a:0d:3a:1d:f9:59:36:e4:a0:2b:85:98:b0:5a:fd:d4:7e: 9b:00:83:75:4c:be:25:53:49:60:1e:06:3c:30:6a:54:66:6b: 92:21:84:74:2a:5d:3a:23:33:b8:8d:5f:b1:54:e6:52:19:81: 8a:c3:23:e0:71:e5:f4:00:29:87:ce:76:d0:01:55:ed:24:f6: 36:a3:00:ce:07:80:12:bc:b1:b5:68:c0:01:cc:8e:74:d5:c1: 2a:a4:31:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdUioqSmCE0X4AlNWMkUHJrMuT2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3Q0RFMUVBQjlCMEVGQkU4MEUwNzg3NDdFRTYwRkRB RUY4RkUyQTAeFw0yNjA5MjQxMDA4MTZaFw0yNjA5MjUxMTE1MTZaMDMxMTAvBgNV BAMTKDg3RTMxOUQ5MERCMDk3RTczMjlCRjM1MjEwOUQ2OTk4MEFFODE4N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgyJDGZBd6QZnK0mLdpPtJ3lzf nSy0Xk4IylaCQ3hURA636rIshIWn/WdINVHBcPs/+C7NsGUwDdO8bBRf8XA2B7q0 Sd0dJBfuykP17ur7r8ZS3+9LAEdYGca1630iVP5MLjNVBA3ChjN3yN3UpFWIvP7p O3GwlwQkU93YZ6hxMRp0kar/VMKC8141K7Wt9wV8elVXlf3bZ5Vk5pswElcwwOwO 4pW8gQtz5l/erDYf/AJqZMY8yz2/BltFPi8o8skHjDgaU26S4Tpf/YcKQkK/DHSC ztrlMBDZ1Amtyg1/UG1TCRjzvPu0Vh5RGzY+mVO1RnJaz/eZZpYZUHtT/oK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh+MZ2Q2wl+cym/NSEJ1pmAroGH8wHwYDVR0j BBgwFoAU3nzeHqubDvvoDgeHR+5g/a74/iowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg1NWY0NTAtZWI3Zi00YTI2LWE2YzQtZjk4MjdlZTBhNWI4LzAvREU3Q0RFMUVB QjlCMEVGQkU4MEUwNzg3NDdFRTYwRkRBRUY4RkUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTdDREUxRUFCOUIwRUZCRTgwRTA3ODc0N0VFNjBGREFFRjhG RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg1NWY0NTAtZWI3Zi00YTI2LWE2 YzQtZjk4MjdlZTBhNWI4LzAvREU3Q0RFMUVBQjlCMEVGQkU4MEUwNzg3NDdFRTYw RkRBRUY4RkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgy/nu2s2YXpmBDi3f1NmRGdMoYycMhjjI+ iVFT9Smd2Tn7DRyUB/VWdcCIJjpm/gFvX1bhAM7whWx9RYHjM+BU5cY/GgDgLQYK WiUD00BCK/OviZy6kgIZM/PT/ZR09ZMnVHhDo4tG4EGluhY+FHHJ0MzW8ZqZwnOQ 0DTsTAr15FKIOAu3iirUoxEG1puSuHh89zSvgsMWNVmi2s8RHlGgKO2KDTod+Vk2 5KArhZiwWv3UfpsAg3VMviVTSWAeBjwwalRma5IhhHQqXTojM7iNX7FU5lIZgYrD I+Bx5fQAKYfOdtABVe0k9jajAM4HgBK8sbVowAHMjnTVwSqkMSU= -----END CERTIFICATE-----Generated at Fri Sep 25 05:54:55 2026 by rpki-client