$ rpki-client -vvf rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft File: DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft (raw, json) Hash identifier: qLaGjgf82ENeLyC63+ew4XMk8cs4mUGma2D3qH7Oe3I= Subject key identifier: 4E:92:59:65:C2:8A:33:93:DC:B8:5D:C4:E4:CF:FB:15:65:6D:99:0E Authority key identifier: DC:DF:EB:9B:30:70:53:1B:D7:F0:16:67:76:A9:BD:79:0D:81:56:F3 Certificate issuer: /CN=DCDFEB9B3070531BD7F0166776A9BD790D8156F3 Certificate serial: 2C12ADACCED325B40406804DC9E0B3CF9343F74B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:04:47 +0000 Manifest this update: Tue 12 May 2026 18:59:47 +0000 Manifest next update: Wed 13 May 2026 21:43:47 +0000 Files and hashes: 1: DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl (hash: 0ivf2O1oLULbXFByWjKVloJfSw/sYF6nxNEraB164Gw=) 2: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: xTYeiw6tD9ub4a6qX/XD5duOKCOoUSMBMj8/IYpDd/U=) 3: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: WosTloIyziln5PL7ehnM5NRi5lB1Tbc4uPNxmDzbd8Y=) 4: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: Yc1lRGNv0/ivQZsDhjeb4Ll2thmzxFFCqYVkWRBmzS0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:12:ad:ac:ce:d3:25:b4:04:06:80:4d:c9:e0:b3:cf:93:43:f7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCDFEB9B3070531BD7F0166776A9BD790D8156F3 Validity Not Before: May 12 18:59:47 2026 GMT Not After : May 13 21:43:47 2026 GMT Subject: CN=4E925965C28A3393DCB85DC4E4CFFB15656D990E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d6:b8:e4:57:1b:4e:5d:61:b5:60:7d:8a:f3: a7:45:7c:d6:27:15:32:92:87:57:43:18:ff:8c:dd: e5:e9:81:96:f1:29:3f:8c:b1:a0:0f:c1:35:3c:f0: c9:7c:50:4b:70:c3:72:a1:1b:43:fd:6b:df:04:6a: f6:ec:dc:cd:c4:0e:56:84:8b:73:55:95:ee:83:4f: 6f:1a:d2:da:db:70:a7:34:30:52:22:56:6f:a9:64: 9d:94:b9:87:27:98:17:86:c3:6d:bb:28:a4:f5:8d: 39:82:b5:4d:11:ce:fa:c7:84:80:25:82:85:8c:2f: 56:a8:a4:5b:7a:40:2e:d4:ed:fc:f6:b7:dc:8c:c1: a8:f4:d5:8d:ac:ba:3c:3f:32:15:fe:83:75:4d:02: f7:c4:b7:ed:1e:65:d9:c6:49:55:cc:94:d4:7f:39: 6f:52:5a:ca:ec:3e:9d:7d:4d:76:67:af:44:31:ca: 3d:56:4e:d5:cb:8a:b5:39:33:18:4f:96:dc:db:22: c4:3f:ff:ac:66:ba:44:fd:bf:e3:0b:5a:31:d0:93: a5:57:e4:4a:51:65:26:90:e5:31:11:8f:2c:ba:0a: 45:fd:da:7f:0a:4f:ea:d8:4c:65:19:4d:53:e4:bf: da:e2:81:e8:32:a7:13:3a:cb:6d:4b:39:d4:9c:f8: c7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:92:59:65:C2:8A:33:93:DC:B8:5D:C4:E4:CF:FB:15:65:6D:99:0E X509v3 Authority Key Identifier: keyid:DC:DF:EB:9B:30:70:53:1B:D7:F0:16:67:76:A9:BD:79:0D:81:56:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4a:7d:1e:66:f9:5b:d0:c3:60:d9:bb:d5:89:66:33:a0:fd: 16:ec:34:bb:83:bc:dd:a0:8c:dc:e3:fc:d1:ab:8c:ba:41:61: da:bb:d6:0c:9d:60:e5:da:40:de:5d:01:db:3b:5b:15:61:c8: 2f:00:83:56:8e:e3:06:2b:b8:85:7c:62:7b:9a:f1:7a:7e:08: b3:a1:25:98:a6:8a:72:c1:0d:d8:a5:9a:a4:8c:97:f6:bc:74: a1:c8:0e:a5:65:88:63:25:86:8c:64:cf:26:79:0c:d8:43:68: a4:92:d5:4e:dd:45:8c:36:46:ef:4d:f5:20:48:80:d9:0b:cc: 3e:ce:6b:07:fe:e1:d7:bf:66:20:11:53:ad:b3:ea:3d:19:e0: 20:30:7f:24:c3:bf:0f:43:d2:d5:29:6b:ae:09:81:e6:3c:c9: 3c:97:ca:2f:f9:b5:48:48:3a:4b:f8:55:3c:9c:d1:bb:de:46: 6d:21:e6:a5:12:b0:03:05:92:6b:4e:da:46:d1:00:4b:2f:dd: 97:f2:03:53:e6:bc:cc:a0:68:a7:3c:0b:27:9d:67:02:3f:e9: 98:58:d2:2c:d7:53:05:ab:8b:10:f7:9e:40:67:e0:80:12:82: 84:f9:0d:45:75:74:32:91:68:ee:90:b0:4f:1d:ad:93:6d:3d: a9:a2:3c:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULBKtrM7TJbQEBoBNyeCzz5ND90swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENERkVCOUIzMDcwNTMxQkQ3RjAxNjY3NzZBOUJENzkw RDgxNTZGMzAeFw0yNjA1MTIxODU5NDdaFw0yNjA1MTMyMTQzNDdaMDMxMTAvBgNV BAMTKDRFOTI1OTY1QzI4QTMzOTNEQ0I4NURDNEU0Q0ZGQjE1NjU2RDk5MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91rjkVxtOXWG1YH2K86dFfNYn FTKSh1dDGP+M3eXpgZbxKT+MsaAPwTU88Ml8UEtww3KhG0P9a98Eavbs3M3EDlaE i3NVle6DT28a0trbcKc0MFIiVm+pZJ2UuYcnmBeGw227KKT1jTmCtU0RzvrHhIAl goWML1aopFt6QC7U7fz2t9yMwaj01Y2sujw/MhX+g3VNAvfEt+0eZdnGSVXMlNR/ OW9SWsrsPp19TXZnr0Qxyj1WTtXLirU5MxhPltzbIsQ//6xmukT9v+MLWjHQk6VX 5EpRZSaQ5TERjyy6CkX92n8KT+rYTGUZTVPkv9rigegypxM6y21LOdSc+McJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTpJZZcKKM5PcuF3E5M/7FWVtmQ4wHwYDVR0j BBgwFoAU3N/rmzBwUxvX8BZndqm9eQ2BVvMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGViOGI4ODktM2IzZC00ZWY1LWFkNzAtNWIxMDQ1ZWZmMzkzLzAvRENERkVCOUIz MDcwNTMxQkQ3RjAxNjY3NzZBOUJENzkwRDgxNTZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0RGRUI5QjMwNzA1MzFCRDdGMDE2Njc3NkE5QkQ3OTBEODE1 NkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvRENERkVCOUIzMDcwNTMxQkQ3RjAxNjY3NzZBOUJE NzkwRDgxNTZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJKfR5m+VvQw2DZu9WJZjOg/RbsNLuDvN2g jNzj/NGrjLpBYdq71gydYOXaQN5dAds7WxVhyC8Ag1aO4wYruIV8Ynua8Xp+CLOh JZiminLBDdilmqSMl/a8dKHIDqVliGMlhoxkzyZ5DNhDaKSS1U7dRYw2Ru9N9SBI gNkLzD7Oawf+4de/ZiARU62z6j0Z4CAwfyTDvw9D0tUpa64JgeY8yTyXyi/5tUhI Okv4VTyc0bveRm0h5qUSsAMFkmtO2kbRAEsv3ZfyA1PmvMygaKc8CyedZwI/6ZhY 0izXUwWrixD3nkBn4IASgoT5DUV1dDKRaO6QsE8drZNtPamiPGA= -----END CERTIFICATE-----Generated at Wed May 13 02:13:41 2026 by rpki-client