$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft File: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft (raw, json) Hash identifier: VrDH1ZIgzHQn70mnPeEwtKjJsBXZwoKgw0TRJlhDLBY= Subject key identifier: 03:DE:0D:83:EF:16:E1:C6:E7:DB:07:A0:1D:BA:8A:40:2C:35:26:15 Authority key identifier: DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A Certificate issuer: /CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A Certificate serial: 69D5533CF049B6B408B7DD9C47C4E36B9D4B3767 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 12:18:33 +0000 Manifest this update: Wed 02 Sep 2026 12:13:33 +0000 Manifest next update: Thu 03 Sep 2026 15:47:33 +0000 Files and hashes: 1: 3130332e3137312e3138352e302f32342d3234203d3e20313432333734.roa (hash: KJ7p2DQB9uLZReoNNtXLeW/ntHP0ly/9EgDzYMeS9tA=) 2: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (hash: SJt1SBaXEP9+A3/U6mnd55r9+cQvaamR3U/aBvUPC3E=) 3: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl (hash: TtnyiWau+ZF4CFfqVuEqzDTPQavRb4ebhIhovd9DV/o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 15:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d5:53:3c:f0:49:b6:b4:08:b7:dd:9c:47:c4:e3:6b:9d:4b:37:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A Validity Not Before: Sep 2 12:13:33 2026 GMT Not After : Sep 3 15:47:33 2026 GMT Subject: CN=03DE0D83EF16E1C6E7DB07A01DBA8A402C352615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:39:6a:d2:da:a9:91:f1:90:b0:72:41:ca: de:e8:ba:97:45:c3:3c:25:e7:50:79:7a:7b:a0:f2: 66:d2:1f:55:bc:ab:d9:41:e7:84:f4:86:63:84:30: 7b:a2:85:cb:19:8b:69:4f:6c:6b:1d:d6:0a:30:ae: ac:04:59:20:df:5d:e1:d5:54:17:dc:60:53:89:1b: d6:88:29:27:27:b8:7a:5f:d4:1e:d3:74:22:85:67: 9d:20:2a:b6:4a:8a:81:eb:0a:85:b9:28:18:82:e8: 6d:59:a1:d3:c1:f9:b0:57:59:f6:11:91:ac:3c:be: 37:e7:08:41:c9:87:e5:14:c6:98:62:2e:3a:84:93: ea:86:5d:2a:13:34:d1:af:07:c6:e1:7b:31:28:2b: 8d:53:05:21:1e:1b:b9:51:cc:a3:0f:ec:c5:85:c8: 3b:b7:dc:11:6e:1b:dd:3f:a6:8b:b6:54:40:90:6f: 52:13:8f:06:44:00:86:a7:1f:1a:ff:b0:f3:03:48: 21:84:60:a2:7a:bb:34:8d:37:e5:97:2c:f0:30:48: 85:ab:18:4f:d4:9b:43:1f:68:81:3a:b8:d0:72:da: b9:1e:4e:c2:0e:fb:b7:c4:40:22:8a:66:71:27:a9: ba:69:22:cb:0c:18:d4:3d:f9:d8:60:a5:6c:70:d2: fb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DE:0D:83:EF:16:E1:C6:E7:DB:07:A0:1D:BA:8A:40:2C:35:26:15 X509v3 Authority Key Identifier: keyid:DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:4f:d8:e8:fd:ff:e3:d1:7e:05:9a:95:52:04:f6:1c:ea:33: 50:2a:2f:fa:c1:d2:e6:81:f6:02:d8:65:0e:7f:75:19:1b:dd: cc:a2:d2:1a:c7:85:5a:c4:d9:f2:dc:4b:87:79:84:15:75:1a: cc:88:5a:3f:e3:8e:b4:09:18:e0:0b:e2:71:19:92:a6:84:27: 74:35:48:bb:22:24:3e:20:50:67:cb:50:5d:65:e3:b2:ca:57: c9:55:30:e9:7b:47:11:fc:63:49:14:a9:91:b7:aa:79:c6:c8: a9:2a:54:f0:0e:8c:8a:f8:e8:93:7a:69:38:37:83:af:54:d0: 0f:f3:01:68:a7:07:02:9f:9a:6f:bd:eb:55:bd:64:a0:66:aa: eb:51:95:be:89:c5:6b:eb:e2:6e:8f:bf:c0:13:5f:7b:a8:f6: 93:ca:e6:21:7a:20:b5:02:cb:70:4d:f8:34:fe:d5:7a:e5:19: f4:f1:25:f4:93:bc:a2:25:f7:78:77:f6:be:ea:78:a6:06:72: a6:b1:65:12:a9:47:3c:16:3d:b2:00:ba:05:c7:a7:1c:b8:69: b1:93:c2:cd:bf:75:d3:7b:a8:0d:a6:fb:11:41:2d:d8:4f:8b: 2d:ba:03:af:cb:8d:92:77:64:73:24:02:de:a4:cd:b2:3a:09: b0:5a:46:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadVTPPBJtrQIt92cR8Tja51LN2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3Q0RFMUVBQjlCMEVGQkU4MEUwNzg3NDdFRTYwRkRB RUY4RkUyQTAeFw0yNjA5MDIxMjEzMzNaFw0yNjA5MDMxNTQ3MzNaMDMxMTAvBgNV BAMTKDAzREUwRDgzRUYxNkUxQzZFN0RCMDdBMDFEQkE4QTQwMkMzNTI2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uTlq0tqpkfGQsHJByt7oupdF wzwl51B5enug8mbSH1W8q9lB54T0hmOEMHuihcsZi2lPbGsd1gowrqwEWSDfXeHV VBfcYFOJG9aIKScnuHpf1B7TdCKFZ50gKrZKioHrCoW5KBiC6G1ZodPB+bBXWfYR kaw8vjfnCEHJh+UUxphiLjqEk+qGXSoTNNGvB8bhezEoK41TBSEeG7lRzKMP7MWF yDu33BFuG90/pou2VECQb1ITjwZEAIanHxr/sPMDSCGEYKJ6uzSNN+WXLPAwSIWr GE/Um0MfaIE6uNBy2rkeTsIO+7fEQCKKZnEnqbppIssMGNQ9+dhgpWxw0vvDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA94Ng+8W4cbn2wegHbqKQCw1JhUwHwYDVR0j BBgwFoAU3nzeHqubDvvoDgeHR+5g/a74/iowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg1NWY0NTAtZWI3Zi00YTI2LWE2YzQtZjk4MjdlZTBhNWI4LzAvREU3Q0RFMUVB QjlCMEVGQkU4MEUwNzg3NDdFRTYwRkRBRUY4RkUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTdDREUxRUFCOUIwRUZCRTgwRTA3ODc0N0VFNjBGREFFRjhG RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg1NWY0NTAtZWI3Zi00YTI2LWE2 YzQtZjk4MjdlZTBhNWI4LzAvREU3Q0RFMUVBQjlCMEVGQkU4MEUwNzg3NDdFRTYw RkRBRUY4RkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBP2Oj9/+PRfgWalVIE9hzqM1AqL/rB0uaB 9gLYZQ5/dRkb3cyi0hrHhVrE2fLcS4d5hBV1GsyIWj/jjrQJGOAL4nEZkqaEJ3Q1 SLsiJD4gUGfLUF1l47LKV8lVMOl7RxH8Y0kUqZG3qnnGyKkqVPAOjIr46JN6aTg3 g69U0A/zAWinBwKfmm+961W9ZKBmqutRlb6JxWvr4m6Pv8ATX3uo9pPK5iF6ILUC y3BN+DT+1XrlGfTxJfSTvKIl93h39r7qeKYGcqaxZRKpRzwWPbIAugXHpxy4abGT ws2/ddN7qA2m+xFBLdhPiy26A6/LjZJ3ZHMkAt6kzbI6CbBaRqU= -----END CERTIFICATE-----Generated at Thu Sep 3 09:28:21 2026 by rpki-client