$ rpki-client -vvf rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft File: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft (raw, json) Hash identifier: Baskz/1f1oKHJUGubaXTJHdbWAg2/ccD1j48Z3ybURg= Subject key identifier: E3:51:88:80:73:DD:1F:16:87:2D:6E:DC:77:FA:4C:93:FC:29:AC:70 Authority key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 Certificate issuer: /CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Certificate serial: 1432F7583909AFDC3E2DD76DC28C54C411726BD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 21:17:31 +0000 Manifest this update: Mon 20 Jul 2026 21:12:31 +0000 Manifest next update: Tue 21 Jul 2026 21:18:31 +0000 Files and hashes: 1: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: IkNdgsDaw78ogG3Aodj/Jzt/an3DS2wRm3jUm6iycMk=) 2: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: 0DqNe75QOc3hGqgnlAm5b0fiz1fZsts/kBEvqeLylzQ=) 3: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: Y9lsT2HQ5ICM+BicfmZcvwMhmuIC9lwWMF3PEUQBipo=) 4: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: dGdlLSEHAjcJ4pF+nJ/zA2guRtQM9WITw951OaaIjIY=) 5: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: /N5wTnzqjzFsnj42mRLwrc4fGmzK+1uIwKiyAnk610A=) 6: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl (hash: rxgvz6mURa6bP9I9VEF6czEXcHK8vtqYqa/MDObhGn8=) 7: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: 3HAIIUys7Tc4LRT+YcRLOfjs2X6R/CDKgmkxni8LvLc=) 8: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: UoG4R/fnzXCLLPhjnt97eVjW6Ux+f3m1mN0pOE9yqnE=) 9: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: mAMKTw9FxHeyHppx5JdFbSfkyfyGBYD9cH190RAyriA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:32:f7:58:39:09:af:dc:3e:2d:d7:6d:c2:8c:54:c4:11:72:6b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Validity Not Before: Jul 20 21:12:31 2026 GMT Not After : Jul 21 21:18:31 2026 GMT Subject: CN=E351888073DD1F16872D6EDC77FA4C93FC29AC70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d3:00:fb:bb:53:84:b8:41:e2:4d:82:1e:e2: 2e:93:97:60:1d:c2:58:b0:53:3b:3c:ee:fb:63:dd: c1:92:40:03:d6:90:74:27:5d:86:5b:c0:50:d8:80: db:01:ff:62:df:23:f8:54:75:0f:de:52:50:cc:3f: 79:ef:20:22:d2:0a:20:51:f4:c5:d3:af:6d:6a:0f: df:f4:48:c3:c2:98:04:b3:ef:7a:f3:b4:d5:a5:14: 24:11:bb:02:df:67:5d:f0:29:7a:9c:ca:b5:38:f9: 2f:7b:6f:ee:b3:c7:bd:0b:af:12:cc:86:05:6c:8d: 1a:91:64:a9:40:f3:69:4f:05:35:b1:f8:98:94:fe: 50:2a:93:e4:fb:3f:10:a5:92:99:03:f8:5c:e7:fc: 8f:9a:28:d2:8f:99:67:61:a5:89:45:ee:bc:50:35: dc:0b:32:60:59:62:95:4a:70:eb:7d:6d:80:2a:70: cb:e2:75:21:24:76:b2:61:d9:55:65:22:5f:ec:d0: f9:11:a1:e2:ef:48:86:c6:7f:5f:ff:c9:c2:2f:41: de:83:e0:cd:fd:18:d7:24:0e:62:26:ba:c0:50:28: b2:29:f6:cd:f5:af:fc:e7:9f:89:75:31:b4:8f:18: 64:85:49:ec:6d:4c:1c:20:ac:7d:05:f5:22:b0:c2: db:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:51:88:80:73:DD:1F:16:87:2D:6E:DC:77:FA:4C:93:FC:29:AC:70 X509v3 Authority Key Identifier: keyid:DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:d8:c7:95:e3:7b:b4:77:10:8d:57:f5:24:0b:61:84:3f:fa: 47:65:23:42:23:20:76:bb:2d:5d:88:63:93:b0:18:1d:86:c1: c9:e6:78:b3:8f:0e:44:19:8b:08:08:9d:d5:08:50:68:9a:38: ce:19:80:e3:fa:fa:66:be:c7:d6:f5:35:6e:d2:19:97:b6:ef: cd:bb:23:0f:56:04:49:48:f2:ef:e9:38:4f:1a:50:00:68:c3: 93:1c:1b:93:9c:50:d9:8c:c0:11:a5:bd:b5:9a:f7:a9:88:1f: 63:b3:4b:f1:20:ec:5f:3d:21:9d:46:a5:e0:0b:24:5c:b8:62: b0:eb:f6:93:77:24:b9:97:2c:47:a0:a4:8f:62:29:c7:50:bd: 87:68:71:c4:33:ee:d0:4e:f3:04:bf:f7:49:db:c0:47:54:f8: 5f:14:a2:d9:e2:b4:6b:5c:8b:82:b0:b1:98:ed:48:0d:41:58: 2f:0e:ca:4c:ad:47:e3:f4:0b:0a:6d:c2:49:2f:5b:17:7f:46: 58:a7:a7:93:81:22:4a:68:f6:d3:de:47:d6:ea:00:cc:bf:9d: b9:b5:2c:c2:86:24:76:37:2e:95:d3:9b:8e:2d:f3:f3:d5:dc: 9f:92:8f:4d:5b:8c:fc:39:1c:72:a8:29:b8:78:ad:26:1f:6b: db:1f:cf:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFDL3WDkJr9w+LddtwoxUxBFya9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlD NDFFMzFDMjAeFw0yNjA3MjAyMTEyMzFaFw0yNjA3MjEyMTE4MzFaMDMxMTAvBgNV BAMTKEUzNTE4ODgwNzNERDFGMTY4NzJENkVEQzc3RkE0QzkzRkMyOUFDNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM0wD7u1OEuEHiTYIe4i6Tl2Ad wliwUzs87vtj3cGSQAPWkHQnXYZbwFDYgNsB/2LfI/hUdQ/eUlDMP3nvICLSCiBR 9MXTr21qD9/0SMPCmASz73rztNWlFCQRuwLfZ13wKXqcyrU4+S97b+6zx70LrxLM hgVsjRqRZKlA82lPBTWx+JiU/lAqk+T7PxClkpkD+Fzn/I+aKNKPmWdhpYlF7rxQ NdwLMmBZYpVKcOt9bYAqcMvidSEkdrJh2VVlIl/s0PkRoeLvSIbGf1//ycIvQd6D 4M39GNckDmImusBQKLIp9s31r/znn4l1MbSPGGSFSextTBwgrH0F9SKwwtvjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU41GIgHPdHxaHLW7cd/pMk/wprHAwHwYDVR0j BBgwFoAU2+tfyJHMCoYgpSUI5nuxKcQeMcIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFkMWUxNmEtMGE0ZC00NGIxLTk4NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5 MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlDNDFFMzFDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkVCNUZDODkxQ0MwQTg2MjBBNTI1MDhFNjdCQjEyOUM0MUUz MUMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIx MjlDNDFFMzFDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3Yx5Xje7R3EI1X9SQLYYQ/+kdlI0IjIHa7 LV2IY5OwGB2GwcnmeLOPDkQZiwgIndUIUGiaOM4ZgOP6+ma+x9b1NW7SGZe27827 Iw9WBElI8u/pOE8aUABow5McG5OcUNmMwBGlvbWa96mIH2OzS/Eg7F89IZ1GpeAL JFy4YrDr9pN3JLmXLEegpI9iKcdQvYdoccQz7tBO8wS/90nbwEdU+F8UotnitGtc i4KwsZjtSA1BWC8OykytR+P0CwptwkkvWxd/Rlinp5OBIkpo9tPeR9bqAMy/nbm1 LMKGJHY3LpXTm44t8/PV3J+Sj01bjPw5HHKoKbh4rSYfa9sfz/A= -----END CERTIFICATE-----Generated at Tue Jul 21 08:24:07 2026 by rpki-client