$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft File: DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft (raw, json) Hash identifier: COj6Tzoc40lSRgsYW/hWfIXJS8hGsyWkv/B+ydKW0XY= Subject key identifier: DC:21:A8:85:D1:22:6D:0E:2E:C9:2D:BF:7F:C5:02:84:06:43:74:7D Authority key identifier: DE:E1:9A:96:E6:FA:5B:36:0F:C8:BF:1C:E5:AC:9B:14:8D:0E:87:4C Certificate issuer: /CN=DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C Certificate serial: 75076AE522C18C3AD8FBEDF2A3EE11B7FBD6A5BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 20:25:34 +0000 Manifest this update: Fri 19 Jun 2026 20:20:34 +0000 Manifest next update: Sat 20 Jun 2026 21:35:34 +0000 Files and hashes: 1: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: TRjfg68H1cvqa28w3D+TRkRhD92nBMq1k+4HcpA2+sQ=) 2: DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.crl (hash: DwFBqkgMRl4zKyP+lykrmtxBAx90w4GFZYT7/K/LXOg=) 3: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: rwg483/d/uW8MM/6Hs4Vo767LHO7cJke91zFFG533K4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.crl rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 21:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:07:6a:e5:22:c1:8c:3a:d8:fb:ed:f2:a3:ee:11:b7:fb:d6:a5:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C Validity Not Before: Jun 19 20:20:34 2026 GMT Not After : Jun 20 21:35:34 2026 GMT Subject: CN=DC21A885D1226D0E2EC92DBF7FC502840643747D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8c:6c:3a:4a:ae:8a:3e:67:55:75:4c:8b:68: e3:c2:ba:f6:1b:44:6e:48:48:7a:56:a6:77:7f:c9: 3f:0b:7e:a3:23:d7:34:6c:8b:41:9c:79:fc:89:df: 7b:cf:a3:ee:db:b0:18:dc:7f:ea:a7:45:f5:6a:2f: 3c:3d:f8:f1:15:3c:df:40:3c:8f:17:dc:b4:a9:9d: 3c:03:24:69:cc:93:9e:76:2a:89:02:8d:e3:98:1a: b5:d8:4b:65:bf:cf:56:77:b3:d8:d1:af:af:de:e1: 09:2f:5f:b4:0e:16:8e:ad:d7:a2:d8:ab:a1:3d:71: 11:a2:b1:87:d1:d8:e5:4d:cf:07:fb:24:56:18:8c: 2c:6a:f1:14:94:4a:eb:d7:7d:44:c7:c7:8a:c6:17: 95:31:ef:46:1a:03:6e:19:92:ec:c0:95:9f:f8:7e: 24:20:fe:17:62:ba:cc:95:6a:dc:f7:a7:3e:1d:a9: 39:e5:26:1e:72:5c:f5:ea:eb:4b:9a:5c:7f:b7:c4: 5f:6e:51:ef:47:e3:e8:dd:07:bb:11:7a:3d:74:18: 50:cd:43:df:94:b7:9f:3f:cf:50:99:de:5a:4a:ec: f2:7d:16:ba:6f:d4:c1:1d:eb:8f:20:91:46:35:17: c0:d5:44:e3:cb:8f:2b:28:74:50:fe:32:df:63:d2: 82:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:21:A8:85:D1:22:6D:0E:2E:C9:2D:BF:7F:C5:02:84:06:43:74:7D X509v3 Authority Key Identifier: keyid:DE:E1:9A:96:E6:FA:5B:36:0F:C8:BF:1C:E5:AC:9B:14:8D:0E:87:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/DEE19A96E6FA5B360FC8BF1CE5AC9B148D0E874C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:87:98:67:3e:9f:9a:04:b1:c9:a3:ca:3d:b4:2f:09:8d:3f: 76:1d:cf:11:50:39:98:9d:a4:ed:a3:e1:d9:66:5d:45:74:4e: dc:ff:c6:36:b7:d5:5e:3e:5c:4d:86:51:80:3a:42:41:3d:79: a0:ee:eb:97:5d:91:21:0c:51:ae:74:13:60:6b:e2:e4:0d:0b: 35:5a:83:23:86:81:b0:64:e1:bd:5a:58:7c:1b:74:aa:92:56: 8d:c7:b6:c6:28:f6:cf:ae:92:6c:fd:3b:9a:9e:6e:03:9e:3a: 43:c4:d0:c0:97:5c:5f:3e:fb:c5:de:75:01:bc:9d:59:ff:b5: d4:34:89:06:c4:21:4c:6b:45:3e:ea:c6:ad:6f:49:5c:49:01: f2:a8:54:89:a2:e5:25:0e:a8:de:7b:d3:82:c3:e9:59:61:a3: 35:a4:6c:d7:05:c0:37:0f:29:db:3e:ea:53:66:5a:5b:f6:56: bc:47:9b:12:d9:1d:c9:4e:2a:9c:0f:88:be:6a:e0:1c:4c:39: 95:8b:78:6b:23:3a:1f:62:da:7a:df:bb:3e:18:01:2f:05:81: 65:bc:68:a6:92:a7:1d:d1:f4:c4:95:86:ba:7c:23:f4:de:a6: a6:63:f1:43:0e:d5:01:b0:08:a4:99:c6:01:4e:14:1d:29:49: 2c:72:9a:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQdq5SLBjDrY++3yo+4Rt/vWpb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVFMTlBOTZFNkZBNUIzNjBGQzhCRjFDRTVBQzlCMTQ4 RDBFODc0QzAeFw0yNjA2MTkyMDIwMzRaFw0yNjA2MjAyMTM1MzRaMDMxMTAvBgNV BAMTKERDMjFBODg1RDEyMjZEMEUyRUM5MkRCRjdGQzUwMjg0MDY0Mzc0N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqjGw6Sq6KPmdVdUyLaOPCuvYb RG5ISHpWpnd/yT8LfqMj1zRsi0GcefyJ33vPo+7bsBjcf+qnRfVqLzw9+PEVPN9A PI8X3LSpnTwDJGnMk552KokCjeOYGrXYS2W/z1Z3s9jRr6/e4QkvX7QOFo6t16LY q6E9cRGisYfR2OVNzwf7JFYYjCxq8RSUSuvXfUTHx4rGF5Ux70YaA24ZkuzAlZ/4 fiQg/hdiusyVatz3pz4dqTnlJh5yXPXq60uaXH+3xF9uUe9H4+jdB7sRej10GFDN Q9+Ut58/z1CZ3lpK7PJ9Frpv1MEd648gkUY1F8DVROPLjysodFD+Mt9j0oLpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3CGohdEibQ4uyS2/f8UChAZDdH0wHwYDVR0j BBgwFoAU3uGalub6WzYPyL8c5aybFI0Oh0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY0ZmE3YjgtNTMwMi00OTBiLTkyZTQtMjdmMjhjNjY1NzVjLzAvREVFMTlBOTZF NkZBNUIzNjBGQzhCRjFDRTVBQzlCMTQ4RDBFODc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUUxOUE5NkU2RkE1QjM2MEZDOEJGMUNFNUFDOUIxNDhEMEU4 NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvREVFMTlBOTZFNkZBNUIzNjBGQzhCRjFDRTVBQzlC MTQ4RDBFODc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASHmGc+n5oEscmjyj20LwmNP3YdzxFQOZid pO2j4dlmXUV0Ttz/xja31V4+XE2GUYA6QkE9eaDu65ddkSEMUa50E2Br4uQNCzVa gyOGgbBk4b1aWHwbdKqSVo3HtsYo9s+ukmz9O5qebgOeOkPE0MCXXF8++8XedQG8 nVn/tdQ0iQbEIUxrRT7qxq1vSVxJAfKoVImi5SUOqN5704LD6VlhozWkbNcFwDcP Kds+6lNmWlv2VrxHmxLZHclOKpwPiL5q4BxMOZWLeGsjOh9i2nrfuz4YAS8FgWW8 aKaSpx3R9MSVhrp8I/TepqZj8UMO1QGwCKSZxgFOFB0pSSxymgM= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:30 2026 by rpki-client