$ rpki-client -vvf rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft File: DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft (raw, json) Hash identifier: fC0pZo/9UKlM9JFO+DlM6WwfP6DxgDRsxhNq7wDfqxw= Subject key identifier: 2B:DA:7A:BB:F1:78:09:F4:B2:71:35:1F:0F:A2:82:74:13:2B:6A:EE Authority key identifier: DC:DF:EB:9B:30:70:53:1B:D7:F0:16:67:76:A9:BD:79:0D:81:56:F3 Certificate issuer: /CN=DCDFEB9B3070531BD7F0166776A9BD790D8156F3 Certificate serial: 311A3D8CDDDE4A0BA25111942FA97F76548F577D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:49:19 +0000 Manifest this update: Thu 23 Jul 2026 19:44:19 +0000 Manifest next update: Fri 24 Jul 2026 22:42:19 +0000 Files and hashes: 1: DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl (hash: GWQL9J0jYnDz77Kpn2nWzCMOkFmg/mPDKlDAEO70DfQ=) 2: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: WosTloIyziln5PL7ehnM5NRi5lB1Tbc4uPNxmDzbd8Y=) 3: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: xTYeiw6tD9ub4a6qX/XD5duOKCOoUSMBMj8/IYpDd/U=) 4: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: Yc1lRGNv0/ivQZsDhjeb4Ll2thmzxFFCqYVkWRBmzS0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:1a:3d:8c:dd:de:4a:0b:a2:51:11:94:2f:a9:7f:76:54:8f:57:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCDFEB9B3070531BD7F0166776A9BD790D8156F3 Validity Not Before: Jul 23 19:44:19 2026 GMT Not After : Jul 24 22:42:19 2026 GMT Subject: CN=2BDA7ABBF17809F4B271351F0FA28274132B6AEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7a:12:8e:9a:df:18:8d:b2:9b:c6:1c:1a:1e: 23:cf:bd:1e:c8:20:9e:3f:97:1b:bb:0b:8a:a6:96: 09:d2:ed:c8:1c:d6:ba:42:89:bd:4b:1d:d3:26:4d: 79:ad:71:9c:70:00:fd:99:99:a2:96:b3:3a:8b:79: 20:c0:03:e1:c5:4e:65:12:fd:9c:b8:8a:2b:b6:af: 56:28:8f:1b:d8:6e:46:d1:73:80:f6:15:f5:7a:04: 46:bb:f5:bb:59:5a:7c:37:57:16:26:e2:ac:2d:f4: e3:ec:98:05:56:2e:70:0b:1d:ec:d6:68:15:a5:58: 9b:89:96:fa:e3:fa:c1:68:07:37:d3:fc:83:b0:51: d4:69:fe:f8:05:47:75:12:fa:73:b0:50:fa:54:6a: aa:ed:fc:19:55:12:f3:4e:7f:7b:b4:f6:54:cc:ff: 8e:c1:61:e9:03:5a:1c:f4:08:2b:3a:07:fe:0e:65: cd:11:98:91:6b:24:1d:5d:81:75:e7:3a:af:c3:b2: 24:94:ad:f3:25:f4:77:36:34:d3:d0:2e:3b:4d:c6: b8:c1:3f:e1:90:87:91:ce:89:1c:94:3a:83:a6:e2: 3a:6e:55:7e:56:12:97:81:17:72:f8:3a:d5:4d:70: 82:f8:3a:db:5a:d7:0f:44:d8:17:d2:5e:86:cc:d8: 99:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DA:7A:BB:F1:78:09:F4:B2:71:35:1F:0F:A2:82:74:13:2B:6A:EE X509v3 Authority Key Identifier: keyid:DC:DF:EB:9B:30:70:53:1B:D7:F0:16:67:76:A9:BD:79:0D:81:56:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:70:69:ba:dd:5d:ce:b5:b5:e6:c9:5f:82:51:8e:c4:f2:9c: 8f:e7:9c:54:10:d2:e2:92:af:3f:9c:b6:fb:84:e8:9c:92:79: b6:b4:b8:dd:41:24:9a:a1:64:b2:48:9f:bf:08:54:87:30:69: c7:26:56:1f:4e:ae:ae:5c:d0:83:12:78:87:0f:80:54:3d:fa: 9b:63:d3:3a:10:26:8a:26:63:ab:33:00:a1:ae:90:a7:eb:24: c0:d4:b8:7f:dc:de:81:65:da:1e:09:9e:cf:6c:04:f6:e1:67: 3e:c9:89:dd:75:61:9d:3b:e5:64:78:1e:01:0b:57:3c:56:21: d4:60:44:bf:77:98:25:50:9b:f7:ae:ca:29:4a:05:3f:2d:5d: 59:6b:dd:a3:0b:f6:28:2b:d3:28:1f:58:b9:4c:48:97:f2:5a: 1c:86:40:24:c6:10:bc:05:6c:f4:c3:f1:8d:27:62:fe:65:b3: d3:8b:eb:e1:7c:52:5d:c6:33:0c:d4:c4:c2:6f:5a:48:3a:2d: 7c:65:69:13:1c:5c:9a:d7:a7:13:01:6d:5a:a2:e5:d7:78:6d: 1b:85:81:e9:a4:92:94:f6:99:fe:94:4f:4e:1c:de:eb:25:fb: 3c:91:b3:0f:89:93:d9:f7:c2:12:7e:5c:d3:25:fa:4a:3d:c2: 2d:b5:a0:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMRo9jN3eSguiURGUL6l/dlSPV30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENERkVCOUIzMDcwNTMxQkQ3RjAxNjY3NzZBOUJENzkw RDgxNTZGMzAeFw0yNjA3MjMxOTQ0MTlaFw0yNjA3MjQyMjQyMTlaMDMxMTAvBgNV BAMTKDJCREE3QUJCRjE3ODA5RjRCMjcxMzUxRjBGQTI4Mjc0MTMyQjZBRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQehKOmt8YjbKbxhwaHiPPvR7I IJ4/lxu7C4qmlgnS7cgc1rpCib1LHdMmTXmtcZxwAP2ZmaKWszqLeSDAA+HFTmUS /Zy4iiu2r1YojxvYbkbRc4D2FfV6BEa79btZWnw3VxYm4qwt9OPsmAVWLnALHezW aBWlWJuJlvrj+sFoBzfT/IOwUdRp/vgFR3US+nOwUPpUaqrt/BlVEvNOf3u09lTM /47BYekDWhz0CCs6B/4OZc0RmJFrJB1dgXXnOq/DsiSUrfMl9Hc2NNPQLjtNxrjB P+GQh5HOiRyUOoOm4jpuVX5WEpeBF3L4OtVNcIL4Otta1w9E2BfSXobM2JllAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK9p6u/F4CfSycTUfD6KCdBMrau4wHwYDVR0j BBgwFoAU3N/rmzBwUxvX8BZndqm9eQ2BVvMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGViOGI4ODktM2IzZC00ZWY1LWFkNzAtNWIxMDQ1ZWZmMzkzLzAvRENERkVCOUIz MDcwNTMxQkQ3RjAxNjY3NzZBOUJENzkwRDgxNTZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0RGRUI5QjMwNzA1MzFCRDdGMDE2Njc3NkE5QkQ3OTBEODE1 NkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvRENERkVCOUIzMDcwNTMxQkQ3RjAxNjY3NzZBOUJE NzkwRDgxNTZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZwabrdXc61tebJX4JRjsTynI/nnFQQ0uKS rz+ctvuE6JySeba0uN1BJJqhZLJIn78IVIcwaccmVh9Orq5c0IMSeIcPgFQ9+ptj 0zoQJoomY6szAKGukKfrJMDUuH/c3oFl2h4Jns9sBPbhZz7Jid11YZ075WR4HgEL VzxWIdRgRL93mCVQm/euyilKBT8tXVlr3aML9igr0ygfWLlMSJfyWhyGQCTGELwF bPTD8Y0nYv5ls9OL6+F8Ul3GMwzUxMJvWkg6LXxlaRMcXJrXpxMBbVqi5dd4bRuF gemkkpT2mf6UT04c3usl+zyRsw+Jk9n3whJ+XNMl+ko9wi21oEs= -----END CERTIFICATE-----Generated at Fri Jul 24 14:18:12 2026 by rpki-client