$ rpki-client -vvf rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft File: DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft (raw, json) Hash identifier: 7PuBwIzCoAGJJ2D67LvXA+2M71A8Gq3vEPKYFhJoDBY= Subject key identifier: 2E:4C:D3:E7:27:24:7F:8C:FB:B8:8C:DD:B0:ED:47:FC:8C:07:EE:0C Authority key identifier: DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC Certificate issuer: /CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC Certificate serial: 1691AFBFE40B4729CFFA5B09DD38C4D12A33F1A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 16:30:37 +0000 Manifest this update: Fri 19 Jun 2026 16:25:37 +0000 Manifest next update: Sat 20 Jun 2026 18:52:37 +0000 Files and hashes: 1: 3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (hash: 8lXuq/DeovKiTSw+1KX+GVyNFO7DCMSlCXzJz4jkGN8=) 2: 3130332e3138392e312e302f32342d3234203d3e20313439383830.roa (hash: 8bw4CbbPmgFdSPOl3wk5Lxb6WEH9Yu6WI8ZoRW3ng/U=) 3: DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl (hash: 1HdZ4qwvbfpkEPBVJJ8Z40nGzXuKARCekSNUaWOX+Aw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:91:af:bf:e4:0b:47:29:cf:fa:5b:09:dd:38:c4:d1:2a:33:f1:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC Validity Not Before: Jun 19 16:25:37 2026 GMT Not After : Jun 20 18:52:37 2026 GMT Subject: CN=2E4CD3E727247F8CFBB88CDDB0ED47FC8C07EE0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:45:f5:92:88:5e:84:5e:bb:8a:06:b1:69:ae: bf:19:fd:80:ce:0f:1d:24:e3:31:0c:db:d4:58:55: f3:1b:b7:af:91:54:9a:a4:76:14:2b:0a:86:5e:8e: b7:75:4f:88:40:da:69:66:8f:c6:c9:54:dd:67:c8: 7d:34:80:cc:c0:38:7c:11:96:0d:8d:e2:4f:41:52: 69:a0:ed:7f:66:92:bd:63:e9:d1:89:8c:90:2d:27: 9c:eb:29:3f:73:fd:42:9f:b1:b3:6a:c1:46:50:7f: f8:e2:d9:d2:2f:ee:1f:dd:c2:8d:32:d1:c3:ea:e0: d4:12:6b:47:9b:7e:00:14:bb:4e:dd:7e:42:fd:bc: 0d:2f:4d:51:d8:6a:0e:8c:77:90:0e:de:b1:85:b7: da:99:dd:6f:7d:88:02:0d:40:c5:0f:2c:4c:58:9b: f1:aa:bb:d5:1c:29:bc:b7:0a:81:57:37:73:c3:28: 8a:e9:b3:64:1b:b9:40:d1:81:d8:ac:e6:d3:e3:33: df:d4:19:20:e8:60:43:a8:fc:25:f7:61:f7:10:d5: ea:f5:7a:19:a3:0d:1b:1c:14:5c:8d:51:91:91:3f: b1:e6:b7:73:f8:a9:c0:d1:96:45:da:10:01:c9:d5: 5b:db:b7:3a:f8:91:72:b1:a2:e4:5f:88:b1:5d:99: a1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4C:D3:E7:27:24:7F:8C:FB:B8:8C:DD:B0:ED:47:FC:8C:07:EE:0C X509v3 Authority Key Identifier: keyid:DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8f:68:d4:75:6a:fa:0a:b9:be:1d:08:bf:8c:10:e5:2d:a1: f4:23:94:9e:d4:25:bf:79:bc:cc:2a:f5:ec:c9:c1:9a:42:04: 97:b0:a3:ec:7c:1d:0e:97:f7:16:bf:77:fb:e5:8d:2e:c1:66: 8c:80:fa:4e:ab:b3:6e:60:ef:a4:27:54:7c:19:fc:2f:09:3f: fb:c6:d5:b4:46:77:91:3f:c8:d2:bb:4c:33:c3:ed:3b:08:c8: f2:13:b0:dd:ce:9c:1f:f4:10:35:54:ba:56:4a:af:9a:b8:5d: 4b:f6:fc:a1:bc:af:f1:7f:7c:4d:04:a1:e5:3a:23:ad:70:db: 2c:4f:db:53:26:23:0f:00:d7:41:4d:4e:6b:f6:61:09:11:47: ce:72:81:bf:ca:29:5d:19:14:51:96:f4:d8:e6:02:eb:bf:3c: 58:77:3b:f9:b3:15:a4:dd:30:93:e7:db:7b:94:ed:c1:36:4b: 41:b2:cb:a0:0a:7e:29:69:ea:a1:6b:17:96:da:7a:26:60:5e: 40:2f:9b:75:d1:ad:da:74:43:04:ab:ea:20:3d:a2:d5:87:60: 0d:7d:7b:24:1c:1b:8f:53:9a:f4:81:91:cc:58:4a:94:17:45: 7e:a7:fb:76:5c:45:86:31:af:8a:aa:c4:06:7e:fd:a6:53:6e: e8:93:b6:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFpGvv+QLRynP+lsJ3TjE0Soz8akwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBQzkyMDM4MDJDMTc5Nzg5QjI0QzVBMzE2OUFBN0FB MTA0QUJGQzAeFw0yNjA2MTkxNjI1MzdaFw0yNjA2MjAxODUyMzdaMDMxMTAvBgNV BAMTKDJFNENEM0U3MjcyNDdGOENGQkI4OENEREIwRUQ0N0ZDOEMwN0VFMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQRfWSiF6EXruKBrFprr8Z/YDO Dx0k4zEM29RYVfMbt6+RVJqkdhQrCoZejrd1T4hA2mlmj8bJVN1nyH00gMzAOHwR lg2N4k9BUmmg7X9mkr1j6dGJjJAtJ5zrKT9z/UKfsbNqwUZQf/ji2dIv7h/dwo0y 0cPq4NQSa0ebfgAUu07dfkL9vA0vTVHYag6Md5AO3rGFt9qZ3W99iAINQMUPLExY m/Gqu9UcKby3CoFXN3PDKIrps2QbuUDRgdis5tPjM9/UGSDoYEOo/CX3YfcQ1er1 ehmjDRscFFyNUZGRP7Hmt3P4qcDRlkXaEAHJ1Vvbtzr4kXKxouRfiLFdmaFlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULkzT5yckf4z7uIzdsO1H/IwH7gwwHwYDVR0j BBgwFoAU3qySA4AsF5eJskxaMWmqeqEEq/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhNzRhYzktOGZhNS00MzliLThmMjEtMDhmMjg0Njc3YWEzLzAvREVBQzkyMDM4 MDJDMTc5Nzg5QjI0QzVBMzE2OUFBN0FBMTA0QUJGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUFDOTIwMzgwMkMxNzk3ODlCMjRDNUEzMTY5QUE3QUExMDRB QkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhNzRhYzktOGZhNS00MzliLThm MjEtMDhmMjg0Njc3YWEzLzAvREVBQzkyMDM4MDJDMTc5Nzg5QjI0QzVBMzE2OUFB N0FBMTA0QUJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyPaNR1avoKub4dCL+MEOUtofQjlJ7UJb95 vMwq9ezJwZpCBJewo+x8HQ6X9xa/d/vljS7BZoyA+k6rs25g76QnVHwZ/C8JP/vG 1bRGd5E/yNK7TDPD7TsIyPITsN3OnB/0EDVUulZKr5q4XUv2/KG8r/F/fE0EoeU6 I61w2yxP21MmIw8A10FNTmv2YQkRR85ygb/KKV0ZFFGW9NjmAuu/PFh3O/mzFaTd MJPn23uU7cE2S0Gyy6AKfilp6qFrF5baeiZgXkAvm3XRrdp0QwSr6iA9otWHYA19 eyQcG49TmvSBkcxYSpQXRX6n+3ZcRYYxr4qqxAZ+/aZTbuiTtgc= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:58 2026 by rpki-client