$ rpki-client -vvf rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft File: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft (raw, json) Hash identifier: No2ewIgOYVagPqcqgEsB3DprinMylXwEOU4LJBhSXUs= Subject key identifier: E6:56:65:6D:93:C5:78:F4:63:21:F5:F4:E3:1D:51:7F:5F:59:82:2D Authority key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 Certificate issuer: /CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Certificate serial: 060F84E9F7688B2C68DF40AFFA553C109B3AD5C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:09:54 +0000 Manifest this update: Tue 12 May 2026 19:04:54 +0000 Manifest next update: Wed 13 May 2026 22:54:54 +0000 Files and hashes: 1: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: dGdlLSEHAjcJ4pF+nJ/zA2guRtQM9WITw951OaaIjIY=) 2: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl (hash: XGM2FMrFehOEpflZaidNXuqifVxdk02uprIof0Os+nw=) 3: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: 0DqNe75QOc3hGqgnlAm5b0fiz1fZsts/kBEvqeLylzQ=) 4: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: mAMKTw9FxHeyHppx5JdFbSfkyfyGBYD9cH190RAyriA=) 5: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: Y9lsT2HQ5ICM+BicfmZcvwMhmuIC9lwWMF3PEUQBipo=) 6: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: IkNdgsDaw78ogG3Aodj/Jzt/an3DS2wRm3jUm6iycMk=) 7: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: 3HAIIUys7Tc4LRT+YcRLOfjs2X6R/CDKgmkxni8LvLc=) 8: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: UoG4R/fnzXCLLPhjnt97eVjW6Ux+f3m1mN0pOE9yqnE=) 9: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: /N5wTnzqjzFsnj42mRLwrc4fGmzK+1uIwKiyAnk610A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:0f:84:e9:f7:68:8b:2c:68:df:40:af:fa:55:3c:10:9b:3a:d5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Validity Not Before: May 12 19:04:54 2026 GMT Not After : May 13 22:54:54 2026 GMT Subject: CN=E656656D93C578F46321F5F4E31D517F5F59822D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:51:74:a2:37:84:05:dd:5b:79:e7:25:c7:13: ec:9a:3f:d0:29:73:95:55:58:b7:7c:05:c6:27:c2: 95:0f:ff:c5:90:2d:87:a8:9b:f8:0c:af:fe:64:e9: 48:83:34:6b:f0:02:f7:7b:70:da:67:fa:f8:ef:ba: c7:e0:af:e4:e9:fc:46:ba:a9:0f:b3:07:5c:65:88: 32:3a:a6:93:ba:6d:c1:28:57:a8:83:76:5e:e2:fc: ff:29:a4:74:98:56:43:0a:10:c0:b0:71:2c:6d:c3: 4f:f8:ef:fa:43:80:0c:fc:99:43:13:9f:53:8c:36: 1f:b5:e5:e0:1b:a7:48:8f:52:38:1d:86:9b:d1:21: 06:a6:f7:1c:c7:ea:3d:9d:37:71:be:35:c0:97:60: 53:b3:95:bd:1b:e1:86:52:13:5e:13:c0:1c:dd:bf: 12:0b:26:e5:45:c9:56:e6:1c:11:b3:8c:58:93:f6: 31:c7:8f:56:6d:9d:bf:52:bb:6b:78:a1:c0:7e:f1: b6:ae:63:a2:ce:5b:24:7e:ea:70:4b:13:54:d0:9a: 8c:0c:cc:24:82:1f:08:db:38:55:fd:cb:f0:7d:df: e0:f3:f0:18:e2:2f:64:4e:77:e2:87:a1:d4:36:39: 0e:ec:ae:54:4e:c0:6a:46:f3:c2:11:0c:1c:b3:a0: fe:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:56:65:6D:93:C5:78:F4:63:21:F5:F4:E3:1D:51:7F:5F:59:82:2D X509v3 Authority Key Identifier: keyid:DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a0:88:fc:da:47:f2:3c:ea:b1:f9:26:46:b4:f8:29:36:58: 1d:c0:4c:b7:1b:90:b0:89:7f:e2:77:20:4b:eb:36:9f:36:1c: b5:4b:fd:82:f1:bb:2b:a8:a3:0b:6a:87:d2:3d:8d:73:e2:8c: b9:27:25:a1:cf:c4:8b:84:f3:ad:ff:c3:48:b5:25:35:43:3d: 70:4d:43:1b:71:8a:ed:53:ad:46:6d:7d:7f:68:77:47:ff:c7: 27:6b:7a:10:7d:24:90:63:3e:d7:aa:64:fa:e6:9f:d8:4a:20: 65:df:19:a3:5b:94:54:05:9f:a4:d4:63:94:a8:4b:d6:59:4a: 9a:ac:73:ce:0c:9e:a8:eb:37:5b:4c:5a:d9:1c:12:63:a4:d2: 53:9e:b8:80:f9:85:6a:60:0d:5b:1b:a5:44:c3:4c:a5:ae:c5: 63:01:38:f2:25:98:4f:4b:35:d2:e5:1b:e8:b5:86:cf:e0:94: 5e:27:db:f9:26:0d:d8:d6:6b:40:13:5c:21:a1:78:83:d6:b6: 6a:f8:8f:9f:7a:b1:e6:7d:3e:21:27:1a:c6:f8:09:31:c8:f5: 6a:e6:71:30:2b:b9:dc:fc:40:6d:21:98:3a:70:3d:cb:31:ee: 35:02:db:b1:2b:c9:cb:2d:5b:1c:c5:c8:25:c2:f5:09:8f:26: 66:8c:47:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBg+E6fdoiyxo30Cv+lU8EJs61cQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlD NDFFMzFDMjAeFw0yNjA1MTIxOTA0NTRaFw0yNjA1MTMyMjU0NTRaMDMxMTAvBgNV BAMTKEU2NTY2NTZEOTNDNTc4RjQ2MzIxRjVGNEUzMUQ1MTdGNUY1OTgyMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYUXSiN4QF3Vt55yXHE+yaP9Ap c5VVWLd8BcYnwpUP/8WQLYeom/gMr/5k6UiDNGvwAvd7cNpn+vjvusfgr+Tp/Ea6 qQ+zB1xliDI6ppO6bcEoV6iDdl7i/P8ppHSYVkMKEMCwcSxtw0/47/pDgAz8mUMT n1OMNh+15eAbp0iPUjgdhpvRIQam9xzH6j2dN3G+NcCXYFOzlb0b4YZSE14TwBzd vxILJuVFyVbmHBGzjFiT9jHHj1Ztnb9Su2t4ocB+8bauY6LOWyR+6nBLE1TQmowM zCSCHwjbOFX9y/B93+Dz8BjiL2ROd+KHodQ2OQ7srlROwGpG88IRDByzoP6vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5lZlbZPFePRjIfX04x1Rf19Zgi0wHwYDVR0j BBgwFoAU2+tfyJHMCoYgpSUI5nuxKcQeMcIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFkMWUxNmEtMGE0ZC00NGIxLTk4NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5 MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlDNDFFMzFDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkVCNUZDODkxQ0MwQTg2MjBBNTI1MDhFNjdCQjEyOUM0MUUz MUMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIx MjlDNDFFMzFDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSgiPzaR/I86rH5Jka0+Ck2WB3ATLcbkLCJ f+J3IEvrNp82HLVL/YLxuyuoowtqh9I9jXPijLknJaHPxIuE863/w0i1JTVDPXBN Qxtxiu1TrUZtfX9od0f/xydrehB9JJBjPteqZPrmn9hKIGXfGaNblFQFn6TUY5So S9ZZSpqsc84MnqjrN1tMWtkcEmOk0lOeuID5hWpgDVsbpUTDTKWuxWMBOPIlmE9L NdLlG+i1hs/glF4n2/kmDdjWa0ATXCGheIPWtmr4j596seZ9PiEnGsb4CTHI9Wrm cTArudz8QG0hmDpwPcsx7jUC27ErycstWxzFyCXC9QmPJmaMR0U= -----END CERTIFICATE-----Generated at Wed May 13 01:41:29 2026 by rpki-client