$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft File: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft (raw, json) Hash identifier: hjEPfFp8pK/AFxSqgarz9ctePPi/eEkfkCc/k69IIUI= Subject key identifier: 70:62:D6:BF:D5:6E:00:04:BE:34:39:10:01:3C:1E:B8:FC:9E:78:82 Authority key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 Certificate issuer: /CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Certificate serial: 6FF8E80E99D0A4167067BFCAFBDCB3D0A00C548C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft Manifest number: BF Signing time: Wed 23 Sep 2026 12:36:44 +0000 Manifest this update: Wed 23 Sep 2026 12:31:44 +0000 Manifest next update: Thu 24 Sep 2026 14:20:44 +0000 Files and hashes: 1: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: 3HAIIUys7Tc4LRT+YcRLOfjs2X6R/CDKgmkxni8LvLc=) 2: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: /N5wTnzqjzFsnj42mRLwrc4fGmzK+1uIwKiyAnk610A=) 3: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: dGdlLSEHAjcJ4pF+nJ/zA2guRtQM9WITw951OaaIjIY=) 4: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: UoG4R/fnzXCLLPhjnt97eVjW6Ux+f3m1mN0pOE9yqnE=) 5: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: 0DqNe75QOc3hGqgnlAm5b0fiz1fZsts/kBEvqeLylzQ=) 6: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: mAMKTw9FxHeyHppx5JdFbSfkyfyGBYD9cH190RAyriA=) 7: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: IkNdgsDaw78ogG3Aodj/Jzt/an3DS2wRm3jUm6iycMk=) 8: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl (hash: X0UtjZQ5fwJVx35X2jeeXg0V2Ju0FNdVnTu15XdSQfs=) 9: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: Y9lsT2HQ5ICM+BicfmZcvwMhmuIC9lwWMF3PEUQBipo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f8:e8:0e:99:d0:a4:16:70:67:bf:ca:fb:dc:b3:d0:a0:0c:54:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Validity Not Before: Sep 23 12:31:44 2026 GMT Not After : Sep 24 14:20:44 2026 GMT Subject: CN=7062D6BFD56E0004BE343910013C1EB8FC9E7882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:c2:ed:a0:97:43:8c:c1:79:97:ea:79:0b: 67:2a:8a:b6:f7:2f:a5:ef:3f:1e:89:77:73:cf:49: 90:3c:4d:9c:6a:c4:5a:91:72:3f:54:a5:5f:3e:1c: ec:c9:46:1e:f4:fe:21:2e:29:92:09:de:da:fb:e6: 7c:5a:46:15:2e:fe:dc:88:37:94:14:9f:f0:19:64: a9:85:e0:a4:f0:6d:06:f2:af:51:a9:14:cf:5e:29: a0:a2:c5:85:c5:91:c7:3c:89:e0:d7:bf:f2:2c:8f: 6d:76:53:f8:6f:c8:ac:03:a7:2f:e0:35:25:7f:e6: 64:60:c4:39:29:c7:24:89:d8:23:6d:90:ee:05:fe: ef:49:96:0d:18:97:87:30:e1:b3:26:68:8f:f3:d1: ee:4e:e2:29:21:1d:50:83:cd:05:a7:f2:63:21:9d: bf:b0:fa:0d:37:cf:df:ec:7e:44:8d:81:f5:cd:e3: fe:b6:eb:40:47:cc:3e:cc:ac:2a:9a:fb:c6:39:3e: 6a:63:d1:a3:88:ed:3e:bc:1e:6f:11:93:de:d9:14: 6a:70:2f:d4:5f:6c:9b:dc:c2:67:9d:b7:7f:c4:ab: 4f:38:e4:4c:83:74:13:af:27:78:ab:e0:ab:7b:35: e3:37:a6:e7:d6:9d:f7:0d:93:b9:e8:ae:a7:47:96: d3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:62:D6:BF:D5:6E:00:04:BE:34:39:10:01:3C:1E:B8:FC:9E:78:82 X509v3 Authority Key Identifier: keyid:DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:1f:69:0d:1e:20:af:6f:f8:8d:20:64:32:08:2d:14:54:0c: 41:f4:28:2c:31:15:48:cb:72:79:96:6a:2b:ac:f3:7a:73:ec: f9:ab:18:ee:1b:7b:37:0f:76:26:7f:bd:8f:8a:1b:77:7d:4e: 2b:24:19:6f:03:72:f9:7c:9c:1e:90:ae:bc:eb:c6:e3:d2:ed: 82:40:28:9f:cc:48:2d:10:b8:10:05:a8:9d:ad:75:9b:b6:e4: 00:62:8c:2d:aa:01:5a:a1:72:35:51:70:9f:d2:63:f7:1e:51: 62:05:df:b8:a2:81:d6:dc:a9:a3:30:ad:cb:22:2c:c3:09:ab: ce:7d:58:c3:a7:d0:72:7b:e8:79:24:6f:55:4e:d9:b1:e9:e0: 7a:6f:fe:90:d5:2e:7f:d4:6e:68:98:76:ca:83:65:c6:bc:8a: 7a:db:56:d9:a0:17:12:ff:60:7e:dc:3c:8c:cd:cd:c3:a2:cf: c4:a1:57:9a:14:1b:81:41:f2:d2:d6:01:5a:cf:a3:bb:2f:22: 21:d4:e1:76:0c:3d:54:4c:26:6d:7c:a8:05:7e:a1:a2:8b:2a: 5c:3f:8e:41:61:9c:9a:6a:f8:d5:37:dc:ed:fc:a1:ba:48:4e: 95:b8:3f:c9:63:8a:f3:76:ba:4d:44:67:76:a4:98:f3:45:18: 0c:4f:12:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb/joDpnQpBZwZ7/K+9yz0KAMVIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlD NDFFMzFDMjAeFw0yNjA5MjMxMjMxNDRaFw0yNjA5MjQxNDIwNDRaMDMxMTAvBgNV BAMTKDcwNjJENkJGRDU2RTAwMDRCRTM0MzkxMDAxM0MxRUI4RkM5RTc4ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2HMLtoJdDjMF5l+p5C2cqirb3 L6XvPx6Jd3PPSZA8TZxqxFqRcj9UpV8+HOzJRh70/iEuKZIJ3tr75nxaRhUu/tyI N5QUn/AZZKmF4KTwbQbyr1GpFM9eKaCixYXFkcc8ieDXv/Isj212U/hvyKwDpy/g NSV/5mRgxDkpxySJ2CNtkO4F/u9Jlg0Yl4cw4bMmaI/z0e5O4ikhHVCDzQWn8mMh nb+w+g03z9/sfkSNgfXN4/6260BHzD7MrCqa+8Y5Pmpj0aOI7T68Hm8Rk97ZFGpw L9RfbJvcwmedt3/Eq0845EyDdBOvJ3ir4Kt7NeM3pufWnfcNk7norqdHltPZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcGLWv9VuAAS+NDkQATweuPyeeIIwHwYDVR0j BBgwFoAU2+tfyJHMCoYgpSUI5nuxKcQeMcIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFkMWUxNmEtMGE0ZC00NGIxLTk4NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5 MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlDNDFFMzFDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkVCNUZDODkxQ0MwQTg2MjBBNTI1MDhFNjdCQjEyOUM0MUUz MUMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIx MjlDNDFFMzFDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIfaQ0eIK9v+I0gZDIILRRUDEH0KCwxFUjL cnmWaius83pz7PmrGO4bezcPdiZ/vY+KG3d9TiskGW8Dcvl8nB6QrrzrxuPS7YJA KJ/MSC0QuBAFqJ2tdZu25ABijC2qAVqhcjVRcJ/SY/ceUWIF37iigdbcqaMwrcsi LMMJq859WMOn0HJ76Hkkb1VO2bHp4Hpv/pDVLn/UbmiYdsqDZca8inrbVtmgFxL/ YH7cPIzNzcOiz8ShV5oUG4FB8tLWAVrPo7svIiHU4XYMPVRMJm18qAV+oaKLKlw/ jkFhnJpq+NU33O38obpITpW4P8ljivN2uk1EZ3akmPNFGAxPEkg= -----END CERTIFICATE-----Generated at Wed Sep 23 21:55:26 2026 by rpki-client