$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft File: DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft (raw, json) Hash identifier: ZsI4slqsqFkxOGB/6mCowvl1n/wsPHOxVjwB4pRQGPM= Subject key identifier: 2A:CD:20:F5:21:F4:B6:2F:FA:C9:35:5D:AE:87:45:95:45:D5:C8:17 Authority key identifier: DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC Certificate issuer: /CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC Certificate serial: 3700D37F16B5FA00E3451AF0545657AD5897D930 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 20:02:20 +0000 Manifest this update: Wed 02 Sep 2026 19:57:20 +0000 Manifest next update: Thu 03 Sep 2026 20:49:20 +0000 Files and hashes: 1: 3130332e3138392e312e302f32342d3234203d3e20313439383830.roa (hash: 8bw4CbbPmgFdSPOl3wk5Lxb6WEH9Yu6WI8ZoRW3ng/U=) 2: 3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (hash: 8lXuq/DeovKiTSw+1KX+GVyNFO7DCMSlCXzJz4jkGN8=) 3: DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl (hash: 2uWR4zvOzNk8wnsJVM+biy7YBv0Sg1pFKFXi6zgyR6o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 20:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:00:d3:7f:16:b5:fa:00:e3:45:1a:f0:54:56:57:ad:58:97:d9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC Validity Not Before: Sep 2 19:57:20 2026 GMT Not After : Sep 3 20:49:20 2026 GMT Subject: CN=2ACD20F521F4B62FFAC9355DAE87459545D5C817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:eb:af:48:30:f9:64:44:d2:fa:93:cc:f4:cf: 7b:44:c6:ea:e0:85:d4:eb:ae:b8:3b:b8:68:f9:36: 66:4a:08:e6:12:5b:69:6d:4d:b3:74:0b:41:12:16: 8d:57:27:0c:da:bd:8f:82:ad:93:61:40:27:12:fd: 7f:34:da:51:68:6f:86:aa:18:aa:bb:4e:ed:da:c3: 8d:70:d1:b6:d7:fe:3e:f7:69:12:2e:f1:c8:5a:68: e1:ff:1b:86:b8:f3:bb:ff:a9:7a:97:cd:80:29:02: d7:48:4e:3e:1b:02:40:60:41:0c:84:ef:66:27:da: 22:05:bd:e4:d8:7f:1b:ed:f4:42:1d:e3:05:db:ba: 18:c5:2b:8f:87:e4:cf:b4:f2:93:af:2d:f4:d4:65: d8:d0:78:03:41:a8:ef:8b:42:aa:e7:26:72:0d:d5: 84:8a:e4:e7:d7:44:d7:05:b7:65:e6:51:bc:e7:32: 27:ee:68:35:3c:2e:90:5f:29:33:b6:b4:bb:1b:43: 7e:49:38:46:e9:60:73:f1:54:b8:cf:75:fd:7f:cd: a8:9b:99:f9:8b:2f:30:60:93:8b:44:4c:2d:c0:7b: 7d:6e:00:e2:54:0a:80:03:af:89:bd:af:0f:b5:45: a8:8c:b0:2a:ec:27:be:5c:23:c0:61:df:2d:0b:91: 4f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CD:20:F5:21:F4:B6:2F:FA:C9:35:5D:AE:87:45:95:45:D5:C8:17 X509v3 Authority Key Identifier: keyid:DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e0:e9:77:72:37:06:eb:ba:c3:0a:d3:aa:78:c7:f9:8d:99: ef:bb:2b:74:26:e3:c7:e3:dc:f0:c0:92:ce:71:6f:fc:40:27: 23:93:32:b4:4b:01:2a:c4:ff:24:c9:64:0d:5a:ac:7b:de:69: 72:9a:b0:8a:5a:1a:b4:e4:ea:61:e9:40:ff:03:c6:1c:f5:c5: a7:44:89:85:5f:3b:fb:73:76:03:2c:a5:40:94:67:4c:be:a4: 19:55:6a:cd:8c:fa:ab:bf:c0:45:f8:a7:b1:7d:71:17:b0:80: 75:30:92:b3:ab:7b:54:75:8c:93:bb:c2:6c:47:6a:88:70:d9: 40:54:83:29:78:58:30:dc:ce:5d:8a:32:ca:10:0e:65:6c:a6: 60:4d:ba:6a:0f:66:c0:3a:28:fd:37:e7:26:9c:d3:41:28:0b: eb:dd:72:71:7f:cd:be:68:be:11:e4:42:e9:8b:dd:5e:cc:31: 5c:5b:8d:9e:d7:bc:e2:42:35:b8:b3:f3:e2:3a:ce:86:93:e7: 5e:6c:be:eb:b8:6a:6f:d4:b3:fe:61:09:b1:2d:e8:17:74:0b: bd:4b:20:68:5a:80:a6:c1:e3:b3:78:d4:4f:f5:9c:db:50:b9: b6:d7:70:b9:23:e6:5a:f1:c1:b7:8c:72:80:34:0f:03:6e:b4: 23:1c:f4:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNwDTfxa1+gDjRRrwVFZXrViX2TAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBQzkyMDM4MDJDMTc5Nzg5QjI0QzVBMzE2OUFBN0FB MTA0QUJGQzAeFw0yNjA5MDIxOTU3MjBaFw0yNjA5MDMyMDQ5MjBaMDMxMTAvBgNV BAMTKDJBQ0QyMEY1MjFGNEI2MkZGQUM5MzU1REFFODc0NTk1NDVENUM4MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr669IMPlkRNL6k8z0z3tExurg hdTrrrg7uGj5NmZKCOYSW2ltTbN0C0ESFo1XJwzavY+CrZNhQCcS/X802lFob4aq GKq7Tu3aw41w0bbX/j73aRIu8chaaOH/G4a487v/qXqXzYApAtdITj4bAkBgQQyE 72Yn2iIFveTYfxvt9EId4wXbuhjFK4+H5M+08pOvLfTUZdjQeANBqO+LQqrnJnIN 1YSK5OfXRNcFt2XmUbznMifuaDU8LpBfKTO2tLsbQ35JOEbpYHPxVLjPdf1/zaib mfmLLzBgk4tETC3Ae31uAOJUCoADr4m9rw+1RaiMsCrsJ75cI8Bh3y0LkU9DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKs0g9SH0ti/6yTVdrodFlUXVyBcwHwYDVR0j BBgwFoAU3qySA4AsF5eJskxaMWmqeqEEq/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhNzRhYzktOGZhNS00MzliLThmMjEtMDhmMjg0Njc3YWEzLzAvREVBQzkyMDM4 MDJDMTc5Nzg5QjI0QzVBMzE2OUFBN0FBMTA0QUJGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUFDOTIwMzgwMkMxNzk3ODlCMjRDNUEzMTY5QUE3QUExMDRB QkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhNzRhYzktOGZhNS00MzliLThm MjEtMDhmMjg0Njc3YWEzLzAvREVBQzkyMDM4MDJDMTc5Nzg5QjI0QzVBMzE2OUFB N0FBMTA0QUJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELg6XdyNwbrusMK06p4x/mNme+7K3Qm48fj 3PDAks5xb/xAJyOTMrRLASrE/yTJZA1arHveaXKasIpaGrTk6mHpQP8Dxhz1xadE iYVfO/tzdgMspUCUZ0y+pBlVas2M+qu/wEX4p7F9cRewgHUwkrOre1R1jJO7wmxH aohw2UBUgyl4WDDczl2KMsoQDmVspmBNumoPZsA6KP035yac00EoC+vdcnF/zb5o vhHkQumL3V7MMVxbjZ7XvOJCNbiz8+I6zoaT515svuu4am/Us/5hCbEt6Bd0C71L IGhagKbB47N41E/1nNtQubbXcLkj5lrxwbeMcoA0DwNutCMc9Ck= -----END CERTIFICATE-----Generated at Thu Sep 3 04:19:57 2026 by rpki-client