$ rpki-client -vvf rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft File: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft (raw, json) Hash identifier: gqZwYlpsmVk1B6eehL7xgypdypI5E/TdHIgxKOtVvEA= Subject key identifier: CD:F0:E7:65:25:A3:C3:11:39:F6:06:E3:55:EB:28:80:47:69:A7:A1 Authority key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 Certificate issuer: /CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Certificate serial: 4CBDDAC8713C18010DFE142F9F36321A8D12F9E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 20:35:06 +0000 Manifest this update: Thu 23 Jul 2026 20:30:06 +0000 Manifest next update: Fri 24 Jul 2026 23:40:06 +0000 Files and hashes: 1: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: IkNdgsDaw78ogG3Aodj/Jzt/an3DS2wRm3jUm6iycMk=) 2: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: 3HAIIUys7Tc4LRT+YcRLOfjs2X6R/CDKgmkxni8LvLc=) 3: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: 0DqNe75QOc3hGqgnlAm5b0fiz1fZsts/kBEvqeLylzQ=) 4: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: /N5wTnzqjzFsnj42mRLwrc4fGmzK+1uIwKiyAnk610A=) 5: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: Y9lsT2HQ5ICM+BicfmZcvwMhmuIC9lwWMF3PEUQBipo=) 6: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: dGdlLSEHAjcJ4pF+nJ/zA2guRtQM9WITw951OaaIjIY=) 7: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: mAMKTw9FxHeyHppx5JdFbSfkyfyGBYD9cH190RAyriA=) 8: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl (hash: FqfNsX8xjIqS12vEHA+DXKxRzKBQYPyxfPVCA8X+RVQ=) 9: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: UoG4R/fnzXCLLPhjnt97eVjW6Ux+f3m1mN0pOE9yqnE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:bd:da:c8:71:3c:18:01:0d:fe:14:2f:9f:36:32:1a:8d:12:f9:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Validity Not Before: Jul 23 20:30:06 2026 GMT Not After : Jul 24 23:40:06 2026 GMT Subject: CN=CDF0E76525A3C31139F606E355EB28804769A7A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c8:8f:4f:17:17:3f:32:09:d2:c1:76:9b:af: aa:00:64:3a:65:ca:4f:90:0c:83:a1:2d:d3:25:d8: 93:65:61:60:14:fa:3a:47:bd:52:a3:59:70:ba:ea: e2:5b:d2:fc:db:b3:30:cb:b5:88:57:36:f3:be:e4: 4c:93:9f:3e:dd:80:a4:f1:83:8b:b6:a3:b2:6e:1e: 15:7b:ab:61:c8:dc:e7:3e:c1:9e:28:2e:09:84:31: 62:d1:35:26:81:96:b5:19:6d:4b:a4:5d:d3:8b:a8: 9d:ef:c5:54:ff:dc:7c:f4:b9:dc:4c:0b:1e:2f:e9: 16:c6:ca:1c:ae:06:ac:6f:83:c0:d9:f8:7c:cd:bb: 0b:ed:b2:e8:4a:73:61:4b:5f:81:a4:d7:73:a8:e6: 9a:61:22:61:39:a2:c4:4b:28:cb:b6:d7:ad:d0:e9: d9:e2:53:25:3d:be:e3:61:cc:05:da:8e:7e:98:38: e3:a3:2f:90:1e:6b:73:37:15:d8:45:1f:cc:c0:1b: 2c:b0:fd:e2:f5:1a:6b:82:bf:00:ad:a2:67:94:78: ef:76:8e:e4:e6:03:76:65:2b:9f:28:b6:b8:27:4d: da:31:b2:c9:25:09:78:1f:20:00:ce:19:5f:7e:4c: c6:9d:68:0c:4e:77:b6:f4:22:25:7f:e3:cf:59:3d: 2a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F0:E7:65:25:A3:C3:11:39:F6:06:E3:55:EB:28:80:47:69:A7:A1 X509v3 Authority Key Identifier: keyid:DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:21:51:3a:a3:48:45:99:1e:d1:f1:f1:29:97:ec:d0:40:ad: fa:8e:e0:82:88:df:42:f2:13:81:27:f6:7c:ce:45:73:08:24: f5:92:b7:81:d4:59:6e:4a:ea:0d:6a:96:9e:8d:c3:27:08:ff: 4e:fc:6d:46:aa:7b:02:21:ea:98:b6:32:ed:c2:65:cf:a2:42: 7e:9d:57:3f:b6:88:54:3b:91:94:ef:12:49:de:1b:0e:4e:52: 54:85:26:29:4a:ee:f2:06:88:ee:7e:f0:1b:ba:c5:02:46:58: c5:64:8f:f3:48:71:0e:ac:48:bb:74:04:66:4a:ae:90:96:23: 9c:47:f3:a4:ca:6a:86:85:97:b9:91:2f:f6:66:9d:5c:15:3d: ce:ae:22:ad:21:74:d6:fe:72:b5:18:e5:c5:82:78:0c:49:5b: c1:0e:39:88:4e:26:13:41:18:0e:f5:b4:0c:5b:71:80:7e:1c: b5:9e:4f:3b:b4:72:17:4e:98:48:fd:87:36:8f:2d:ff:a0:22: 78:04:bb:6b:a8:ca:35:f5:5a:e2:0b:b6:46:11:be:c7:c5:aa: b9:6f:48:9a:bb:24:b9:f0:0b:2d:e5:82:5b:a6:b7:fb:6d:ac: 5c:92:cc:d1:83:a9:4e:8b:9a:82:e6:6e:ea:ce:b0:4f:6a:e9: e4:32:1b:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTL3ayHE8GAEN/hQvnzYyGo0S+eUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlD NDFFMzFDMjAeFw0yNjA3MjMyMDMwMDZaFw0yNjA3MjQyMzQwMDZaMDMxMTAvBgNV BAMTKENERjBFNzY1MjVBM0MzMTEzOUY2MDZFMzU1RUIyODgwNDc2OUE3QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXyI9PFxc/MgnSwXabr6oAZDpl yk+QDIOhLdMl2JNlYWAU+jpHvVKjWXC66uJb0vzbszDLtYhXNvO+5EyTnz7dgKTx g4u2o7JuHhV7q2HI3Oc+wZ4oLgmEMWLRNSaBlrUZbUukXdOLqJ3vxVT/3Hz0udxM Cx4v6RbGyhyuBqxvg8DZ+HzNuwvtsuhKc2FLX4Gk13Oo5pphImE5osRLKMu2163Q 6dniUyU9vuNhzAXajn6YOOOjL5Aea3M3FdhFH8zAGyyw/eL1GmuCvwCtomeUeO92 juTmA3ZlK58otrgnTdoxssklCXgfIADOGV9+TMadaAxOd7b0IiV/489ZPSqxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzfDnZSWjwxE59gbjVesogEdpp6EwHwYDVR0j BBgwFoAU2+tfyJHMCoYgpSUI5nuxKcQeMcIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFkMWUxNmEtMGE0ZC00NGIxLTk4NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5 MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlDNDFFMzFDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkVCNUZDODkxQ0MwQTg2MjBBNTI1MDhFNjdCQjEyOUM0MUUz MUMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIx MjlDNDFFMzFDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAhUTqjSEWZHtHx8SmX7NBArfqO4IKI30Ly E4En9nzORXMIJPWSt4HUWW5K6g1qlp6NwycI/078bUaqewIh6pi2Mu3CZc+iQn6d Vz+2iFQ7kZTvEkneGw5OUlSFJilK7vIGiO5+8Bu6xQJGWMVkj/NIcQ6sSLt0BGZK rpCWI5xH86TKaoaFl7mRL/ZmnVwVPc6uIq0hdNb+crUY5cWCeAxJW8EOOYhOJhNB GA71tAxbcYB+HLWeTzu0chdOmEj9hzaPLf+gIngEu2uoyjX1WuILtkYRvsfFqrlv SJq7JLnwCy3lglumt/ttrFySzNGDqU6LmoLmburOsE9q6eQyG3Y= -----END CERTIFICATE-----Generated at Fri Jul 24 02:43:14 2026 by rpki-client