$ rpki-client -vvf rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft File: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft (raw, json) Hash identifier: kJP9GxuQeGqvKrLAKhd+DSzhA85Tv3p6+ZQzntLq9Hk= Subject key identifier: E9:86:5D:C5:46:40:15:9C:F2:F8:08:A8:9E:81:B4:5E:A0:FB:43:0F Authority key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 Certificate issuer: /CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Certificate serial: 5739983C22B5CB389EC8F6004A1FB7A61FF5AFA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:17:06 +0000 Manifest this update: Tue 02 Jun 2026 18:12:06 +0000 Manifest next update: Wed 03 Jun 2026 20:03:06 +0000 Files and hashes: 1: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: /N5wTnzqjzFsnj42mRLwrc4fGmzK+1uIwKiyAnk610A=) 2: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: Y9lsT2HQ5ICM+BicfmZcvwMhmuIC9lwWMF3PEUQBipo=) 3: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: IkNdgsDaw78ogG3Aodj/Jzt/an3DS2wRm3jUm6iycMk=) 4: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: mAMKTw9FxHeyHppx5JdFbSfkyfyGBYD9cH190RAyriA=) 5: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl (hash: rP+tYKRlaO8WqVocoVLows9hcEl4Xz4+L9ZmD2hdEy4=) 6: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: 0DqNe75QOc3hGqgnlAm5b0fiz1fZsts/kBEvqeLylzQ=) 7: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: 3HAIIUys7Tc4LRT+YcRLOfjs2X6R/CDKgmkxni8LvLc=) 8: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: UoG4R/fnzXCLLPhjnt97eVjW6Ux+f3m1mN0pOE9yqnE=) 9: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: dGdlLSEHAjcJ4pF+nJ/zA2guRtQM9WITw951OaaIjIY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:39:98:3c:22:b5:cb:38:9e:c8:f6:00:4a:1f:b7:a6:1f:f5:af:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Validity Not Before: Jun 2 18:12:06 2026 GMT Not After : Jun 3 20:03:06 2026 GMT Subject: CN=E9865DC54640159CF2F808A89E81B45EA0FB430F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e1:0a:fa:4b:8d:f6:35:55:19:e4:ab:51:e0: c9:0d:08:78:d7:ce:11:e1:66:f9:f2:41:23:2a:e7: 8b:e7:c5:4f:16:66:ef:bf:a8:f6:76:91:14:11:dd: f2:40:ab:91:26:aa:d8:f1:f9:89:56:0e:5b:26:d2: 45:a6:90:b6:14:65:9b:7b:ff:40:64:7d:39:80:7f: fb:a1:3f:37:20:53:28:15:4a:9b:57:07:95:1c:de: e4:ae:be:37:e6:2c:e9:8e:8b:5a:9a:af:4f:ad:c3: d3:e2:7b:a9:63:cd:96:cf:a7:6b:07:9b:76:ae:f4: b7:74:1e:5a:52:14:61:9d:70:bf:06:59:49:e3:ab: 5f:e8:64:69:c8:5c:63:ac:a4:3a:fb:ff:eb:60:7f: e1:3f:ec:95:cf:53:59:d9:bb:97:8c:98:fe:aa:69: 30:dc:3e:73:d5:42:da:e8:dd:1c:5d:0e:00:59:fe: 76:a1:c6:81:0a:6b:c0:0e:6f:c1:bd:4e:55:74:12: ac:8b:64:b0:17:99:c7:96:5c:0e:a3:a9:e3:87:0e: 80:a0:69:55:8c:ac:48:44:d0:5b:fc:5f:b1:60:d1: 72:c5:21:cc:7a:ce:e5:c6:a7:64:7c:7c:37:6d:33: b2:94:f1:d0:e3:c2:e9:07:5f:29:98:7e:ea:f2:18: 3b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:86:5D:C5:46:40:15:9C:F2:F8:08:A8:9E:81:B4:5E:A0:FB:43:0F X509v3 Authority Key Identifier: keyid:DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:c3:7b:58:8e:e8:83:6b:4c:16:94:70:d9:66:dc:91:c4:e6: de:13:9c:92:ee:6b:5f:a6:cc:cb:fb:47:c6:e8:fd:60:f1:1b: 35:0b:13:cb:77:94:63:82:10:7e:7b:1d:fa:72:b3:1f:4d:3b: 0f:53:ef:ac:70:d2:2d:57:f4:30:32:fd:45:8f:0f:a5:4e:b1: c4:93:0b:e8:32:5b:e3:cb:09:cc:c4:e9:89:dc:59:cc:a3:8b: 7f:9f:aa:e7:23:ec:ad:d0:01:9d:49:3e:22:8e:40:ad:7d:0d: b4:ca:1c:2e:38:b3:8b:31:8e:f3:77:f5:d8:de:81:a1:f6:9f: 55:59:d4:7a:c1:a2:58:05:f7:d0:cb:62:3e:77:b8:30:8a:64: 96:68:4d:31:e9:07:16:15:43:4f:73:13:72:9e:24:7e:fe:ed: fd:63:6c:0e:83:77:34:16:93:9e:86:f6:72:7d:f3:35:2c:2a: 29:35:50:b7:df:74:1b:63:8a:02:53:3b:83:a2:9d:f1:c3:78: e7:ec:81:96:3d:16:28:fb:1c:73:58:b6:e4:ea:4e:d1:c5:57: 46:a2:3d:98:ad:23:83:58:72:4f:d6:3c:3d:14:dc:e1:fb:a9: c9:0c:3f:53:28:a1:7e:98:b6:92:94:4b:de:40:cf:27:18:ac: d5:bf:38:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVzmYPCK1yzieyPYASh+3ph/1r6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlD NDFFMzFDMjAeFw0yNjA2MDIxODEyMDZaFw0yNjA2MDMyMDAzMDZaMDMxMTAvBgNV BAMTKEU5ODY1REM1NDY0MDE1OUNGMkY4MDhBODlFODFCNDVFQTBGQjQzMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV4Qr6S432NVUZ5KtR4MkNCHjX zhHhZvnyQSMq54vnxU8WZu+/qPZ2kRQR3fJAq5Emqtjx+YlWDlsm0kWmkLYUZZt7 /0BkfTmAf/uhPzcgUygVSptXB5Uc3uSuvjfmLOmOi1qar0+tw9Pie6ljzZbPp2sH m3au9Ld0HlpSFGGdcL8GWUnjq1/oZGnIXGOspDr7/+tgf+E/7JXPU1nZu5eMmP6q aTDcPnPVQtro3RxdDgBZ/nahxoEKa8AOb8G9TlV0EqyLZLAXmceWXA6jqeOHDoCg aVWMrEhE0Fv8X7Fg0XLFIcx6zuXGp2R8fDdtM7KU8dDjwukHXymYfuryGDvzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6YZdxUZAFZzy+AionoG0XqD7Qw8wHwYDVR0j BBgwFoAU2+tfyJHMCoYgpSUI5nuxKcQeMcIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFkMWUxNmEtMGE0ZC00NGIxLTk4NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5 MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlDNDFFMzFDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkVCNUZDODkxQ0MwQTg2MjBBNTI1MDhFNjdCQjEyOUM0MUUz MUMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIx MjlDNDFFMzFDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrDe1iO6INrTBaUcNlm3JHE5t4TnJLua1+m zMv7R8bo/WDxGzULE8t3lGOCEH57Hfpysx9NOw9T76xw0i1X9DAy/UWPD6VOscST C+gyW+PLCczE6YncWcyji3+fqucj7K3QAZ1JPiKOQK19DbTKHC44s4sxjvN39dje gaH2n1VZ1HrBolgF99DLYj53uDCKZJZoTTHpBxYVQ09zE3KeJH7+7f1jbA6DdzQW k56G9nJ98zUsKik1ULffdBtjigJTO4OinfHDeOfsgZY9Fij7HHNYtuTqTtHFV0ai PZitI4NYck/WPD0U3OH7qckMP1MooX6YtpKUS95AzycYrNW/OJQ= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:08 2026 by rpki-client