$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft File: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft (raw, json) Hash identifier: EvUX9JVatYpkeRU1ooKNNTdeqrI2qaMQBYt0beuW7wc= Subject key identifier: 08:09:52:D2:F8:AD:65:24:E2:57:EC:F6:29:68:94:F3:DF:6B:86:0A Authority key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 Certificate issuer: /CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Certificate serial: 3F780397542E807CE5EC54BA417E3C5AEA3C9ED1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft Manifest number: F6 Signing time: Tue 03 Nov 2026 16:48:36 +0000 Manifest this update: Tue 03 Nov 2026 16:43:36 +0000 Manifest next update: Wed 04 Nov 2026 18:54:36 +0000 Files and hashes: 1: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: IkNdgsDaw78ogG3Aodj/Jzt/an3DS2wRm3jUm6iycMk=) 2: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: 0DqNe75QOc3hGqgnlAm5b0fiz1fZsts/kBEvqeLylzQ=) 3: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: /N5wTnzqjzFsnj42mRLwrc4fGmzK+1uIwKiyAnk610A=) 4: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl (hash: 0TmlvdVLJbq8wAdQ3c4EkJhfG+3Hj2fnNWYB77SRbBE=) 5: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: UoG4R/fnzXCLLPhjnt97eVjW6Ux+f3m1mN0pOE9yqnE=) 6: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: Y9lsT2HQ5ICM+BicfmZcvwMhmuIC9lwWMF3PEUQBipo=) 7: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: 3HAIIUys7Tc4LRT+YcRLOfjs2X6R/CDKgmkxni8LvLc=) 8: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: dGdlLSEHAjcJ4pF+nJ/zA2guRtQM9WITw951OaaIjIY=) 9: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: mAMKTw9FxHeyHppx5JdFbSfkyfyGBYD9cH190RAyriA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 18:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:78:03:97:54:2e:80:7c:e5:ec:54:ba:41:7e:3c:5a:ea:3c:9e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Validity Not Before: Nov 3 16:43:36 2026 GMT Not After : Nov 4 18:54:36 2026 GMT Subject: CN=080952D2F8AD6524E257ECF6296894F3DF6B860A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ee:d7:f6:8d:04:07:02:40:c2:ce:82:ff:25: 34:68:d6:9e:51:28:3d:af:0a:5b:09:de:9d:2b:e5: 10:98:16:92:4a:43:b7:84:7b:7d:61:22:39:d4:43: 65:b6:f4:cc:ca:f5:e8:d6:8c:a1:c9:db:37:d7:0b: 1d:06:f5:5e:cb:fa:83:38:27:70:d4:16:a5:56:65: 35:40:6a:6b:6a:50:08:a5:64:b4:8c:61:68:04:5e: 31:fe:a1:59:8f:6c:7e:c1:b6:bd:6d:a1:62:63:55: e5:5d:3a:17:d1:7d:4a:b2:2a:1b:94:97:60:6e:4f: cf:4c:65:34:25:8c:6b:f0:69:63:42:76:17:f1:1e: f5:15:f3:0f:02:63:53:da:3b:24:d1:26:11:13:a4: fa:f6:0e:14:16:77:88:0d:30:28:65:7c:e0:81:e8: 1b:1d:ad:68:79:ee:d1:cd:6b:26:00:88:00:40:78: fd:27:b5:ca:e4:b6:57:1c:71:c3:a6:b2:3a:0d:eb: cf:81:6c:c6:46:df:52:ee:aa:15:65:2e:a4:72:40: 3b:cc:66:74:4b:ce:b4:14:86:f4:99:80:60:02:bc: 64:ae:1d:2c:70:7c:ff:43:c2:e6:ff:dc:af:fd:66: cf:9c:94:c7:b9:e1:02:9c:c4:be:ac:08:b8:99:95: 9a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:09:52:D2:F8:AD:65:24:E2:57:EC:F6:29:68:94:F3:DF:6B:86:0A X509v3 Authority Key Identifier: keyid:DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:49:c5:76:d0:9b:0c:41:12:db:78:51:ca:76:0c:02:4f:8a: 80:29:02:9b:80:dc:f6:6e:dc:6d:33:08:d4:b8:a5:78:3f:93: aa:d8:0d:30:e4:3a:66:db:2e:5f:03:4d:e7:a0:a9:00:51:c5: f8:fe:a3:05:49:dd:12:37:27:42:55:a9:f2:c1:39:85:86:ee: 41:8b:b1:2d:ed:a7:71:e2:13:7c:e3:e5:08:29:71:b8:88:b4: 53:67:9a:9d:fb:0f:95:65:9c:1e:68:c3:ce:95:6f:ec:c8:3a: 02:60:de:86:66:e6:53:be:cc:1c:3b:e8:93:71:59:4c:4e:74: 2b:96:cc:ba:bd:29:9b:4e:31:fa:fe:b0:27:30:7d:dc:99:1f: a5:57:bb:20:b5:b1:6d:16:e2:13:73:b9:3f:f6:1c:44:34:c6: 9a:52:b4:2c:f8:87:b7:ce:04:f1:d6:9a:77:9e:c9:ef:a9:bb: 68:0f:7b:99:fe:d0:31:1b:0b:2e:e9:9a:e3:40:87:87:01:cc: 76:c9:a9:cf:94:f8:c9:01:c3:f4:c0:0a:43:12:8b:f0:90:f5: 9d:ab:70:ef:34:be:35:2f:27:26:af:d1:f2:8d:51:3e:e2:75: b2:5f:bc:96:d6:e6:58:03:32:2e:b7:4a:da:c3:57:ba:92:54: 50:d5:ff:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP3gDl1QugHzl7FS6QX48Wuo8ntEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlD NDFFMzFDMjAeFw0yNjExMDMxNjQzMzZaFw0yNjExMDQxODU0MzZaMDMxMTAvBgNV BAMTKDA4MDk1MkQyRjhBRDY1MjRFMjU3RUNGNjI5Njg5NEYzREY2Qjg2MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7tf2jQQHAkDCzoL/JTRo1p5R KD2vClsJ3p0r5RCYFpJKQ7eEe31hIjnUQ2W29MzK9ejWjKHJ2zfXCx0G9V7L+oM4 J3DUFqVWZTVAamtqUAilZLSMYWgEXjH+oVmPbH7Btr1toWJjVeVdOhfRfUqyKhuU l2BuT89MZTQljGvwaWNCdhfxHvUV8w8CY1PaOyTRJhETpPr2DhQWd4gNMChlfOCB 6BsdrWh57tHNayYAiABAeP0ntcrktlccccOmsjoN68+BbMZG31LuqhVlLqRyQDvM ZnRLzrQUhvSZgGACvGSuHSxwfP9Dwub/3K/9Zs+clMe54QKcxL6sCLiZlZrdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCAlS0vitZSTiV+z2KWiU899rhgowHwYDVR0j BBgwFoAU2+tfyJHMCoYgpSUI5nuxKcQeMcIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFkMWUxNmEtMGE0ZC00NGIxLTk4NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5 MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlDNDFFMzFDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkVCNUZDODkxQ0MwQTg2MjBBNTI1MDhFNjdCQjEyOUM0MUUz MUMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIx MjlDNDFFMzFDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1JxXbQmwxBEtt4Ucp2DAJPioApApuA3PZu 3G0zCNS4pXg/k6rYDTDkOmbbLl8DTeegqQBRxfj+owVJ3RI3J0JVqfLBOYWG7kGL sS3tp3HiE3zj5QgpcbiItFNnmp37D5VlnB5ow86Vb+zIOgJg3oZm5lO+zBw76JNx WUxOdCuWzLq9KZtOMfr+sCcwfdyZH6VXuyC1sW0W4hNzuT/2HEQ0xppStCz4h7fO BPHWmneeye+pu2gPe5n+0DEbCy7pmuNAh4cBzHbJqc+U+MkBw/TACkMSi/CQ9Z2r cO80vjUvJyav0fKNUT7idbJfvJbW5lgDMi63StrDV7qSVFDV/74= -----END CERTIFICATE-----Generated at Wed Nov 4 04:40:47 2026 by rpki-client