$ rpki-client -vvvf rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft File: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft (raw, json) Hash identifier: 34mJb1tF8FhL4Hjx8NVbFEjM6BpYQNmlVuj/LVGNRZI= Subject key identifier: FC:CE:E6:F0:E4:03:ED:92:8C:C4:04:77:28:DB:37:5E:C7:98:0D:DF Authority key identifier: DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB Certificate issuer: /CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Certificate serial: 5ACC9E8F3EB00B19421E3BFA2C3D91A000F3614B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft Manifest number: F1 Signing time: Wed 28 Oct 2026 07:19:23 +0000 Manifest this update: Wed 28 Oct 2026 07:14:23 +0000 Manifest next update: Thu 29 Oct 2026 09:56:23 +0000 Files and hashes: 1: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: raCtvjVmEJI55eIKeNiuVbv8oBn2bNkQd9Io9ytHzqU=) 2: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl (hash: bTdxQc3VeLfcJ21FLk8EZKN+j1/AQsKk4S4be6Y6Z3c=) 3: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: 5SPmMH7FYGGF68tuvyYTcGmJM2nZRCHFWkVHY/HhGvw=) 4: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: 8nmjbXVGRgtW15sU+Nw25IOfD9ULS+LcKdXK12LUizs=) 5: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: dDeWtGREo/C+9RQAi+5KoHx0KqrltXLZhEwhJjs/H8A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 07:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:cc:9e:8f:3e:b0:0b:19:42:1e:3b:fa:2c:3d:91:a0:00:f3:61:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Validity Not Before: Oct 28 07:14:23 2026 GMT Not After : Oct 29 09:56:23 2026 GMT Subject: CN=FCCEE6F0E403ED928CC4047728DB375EC7980DDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:13:31:9a:54:13:6e:c9:01:89:a6:31:9c:d8: 68:e2:6e:2c:14:ef:86:00:90:5f:3d:19:4c:70:3c: 5e:73:b9:6c:02:21:b4:ca:20:ed:ef:e4:7f:05:cd: 19:55:0b:c6:ce:ab:40:64:c2:1e:44:04:81:93:cc: 26:f3:1c:e1:57:87:9e:de:13:48:3a:b6:a5:f3:78: 70:33:6b:75:e0:c4:5f:20:78:83:fc:b4:48:fe:3f: 67:86:98:65:1f:80:b8:75:97:67:ab:9e:56:ae:a6: a5:4e:85:14:44:a3:c7:19:c6:5a:28:33:e6:c0:ef: 7f:9a:5e:5c:35:e7:1b:af:a8:c0:9b:c1:8b:56:02: b3:68:53:fb:7d:a3:ac:3f:16:f9:83:89:30:14:38: 73:7a:8f:a8:42:19:6c:72:7b:4e:be:ba:79:77:58: 6c:0b:b7:b4:6e:b8:ed:16:2d:2d:9f:d8:a6:13:5e: fb:e0:f4:ab:a1:28:d7:c3:ef:32:f4:f4:f2:1a:5e: 96:dc:36:6d:20:4f:71:21:dd:a7:db:c4:32:ea:5b: cb:c9:75:18:b1:d3:c1:2e:56:59:2e:13:a2:5c:ae: 11:40:37:9c:ef:b4:69:fc:1b:a4:47:27:37:36:7a: fb:d3:63:8b:5d:d3:04:15:10:90:56:3a:0d:0b:59: b6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CE:E6:F0:E4:03:ED:92:8C:C4:04:77:28:DB:37:5E:C7:98:0D:DF X509v3 Authority Key Identifier: keyid:DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:32:ee:69:c1:af:41:3b:23:d6:58:74:28:22:8f:c6:db:c2: 94:a1:40:44:f1:ce:83:6f:6a:b4:60:34:00:47:64:b0:6f:5a: 3b:aa:e9:8d:4e:13:8c:61:88:fe:ea:9a:93:be:11:07:61:7b: 24:f7:57:e6:ac:4d:8a:9d:9c:48:ad:b9:c8:92:7f:4a:b6:2b: 0f:38:ce:39:fb:09:1f:b1:9f:58:13:f4:b4:3f:22:ab:62:c1: f2:9c:cd:40:17:2a:98:de:b7:5c:16:63:46:99:f4:33:73:04: 4f:40:93:fe:30:5a:2e:84:96:56:f5:ef:06:1d:0d:3e:59:f3: 44:e4:19:d0:f8:1c:37:e2:be:80:5f:98:c3:5b:6b:41:56:c2: 81:e1:a1:ab:28:fc:54:a7:99:84:6e:73:bd:51:0f:a0:2c:0b: 98:71:18:09:1a:0c:40:43:d4:12:37:9e:da:bb:de:a4:1c:a6: 17:2e:a1:fe:76:6c:1a:be:40:3a:eb:67:90:7d:7b:d0:e6:5c: 87:51:93:72:38:e9:fe:3c:9e:fa:27:1b:e3:ca:8e:69:d7:6c: 21:b4:65:83:f4:a8:f9:8d:08:51:46:2f:cf:eb:fc:f4:24:da: d0:bb:28:55:64:b5:aa:d2:a5:78:21:c6:89:bc:05:9e:90:ae: 65:5f:d3:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWsyejz6wCxlCHjv6LD2RoADzYUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCRUVFODk3RkQ4NTU3MzA0QTJDMDIwREI4NkFEMkJB ODBCMDZGQjAeFw0yNjEwMjgwNzE0MjNaFw0yNjEwMjkwOTU2MjNaMDMxMTAvBgNV BAMTKEZDQ0VFNkYwRTQwM0VEOTI4Q0M0MDQ3NzI4REIzNzVFQzc5ODBEREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChEzGaVBNuyQGJpjGc2GjibiwU 74YAkF89GUxwPF5zuWwCIbTKIO3v5H8FzRlVC8bOq0Bkwh5EBIGTzCbzHOFXh57e E0g6tqXzeHAza3XgxF8geIP8tEj+P2eGmGUfgLh1l2ernlaupqVOhRREo8cZxloo M+bA73+aXlw15xuvqMCbwYtWArNoU/t9o6w/FvmDiTAUOHN6j6hCGWxye06+unl3 WGwLt7RuuO0WLS2f2KYTXvvg9KuhKNfD7zL09PIaXpbcNm0gT3Eh3afbxDLqW8vJ dRix08EuVlkuE6JcrhFAN5zvtGn8G6RHJzc2evvTY4td0wQVEJBWOg0LWbbJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/M7m8OQD7ZKMxAR3KNs3XseYDd8wHwYDVR0j BBgwFoAU3r7uiX/YVXMEosAg24atK6gLBvswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIyZjUxNTItYTI5NS00N2I3LWFkZGMtZmJmZWYzMjQ3ZTNiLzAvREVCRUVFODk3 RkQ4NTU3MzA0QTJDMDIwREI4NkFEMkJBODBCMDZGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUJFRUU4OTdGRDg1NTczMDRBMkMwMjBEQjg2QUQyQkE4MEIw NkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvREVCRUVFODk3RkQ4NTU3MzA0QTJDMDIwREI4NkFE MkJBODBCMDZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8y7mnBr0E7I9ZYdCgij8bbwpShQETxzoNv arRgNABHZLBvWjuq6Y1OE4xhiP7qmpO+EQdheyT3V+asTYqdnEituciSf0q2Kw84 zjn7CR+xn1gT9LQ/IqtiwfKczUAXKpjet1wWY0aZ9DNzBE9Ak/4wWi6Ellb17wYd DT5Z80TkGdD4HDfivoBfmMNba0FWwoHhoaso/FSnmYRuc71RD6AsC5hxGAkaDEBD 1BI3ntq73qQcphcuof52bBq+QDrrZ5B9e9DmXIdRk3I46f48nvonG+PKjmnXbCG0 ZYP0qPmNCFFGL8/r/PQk2tC7KFVktarSpXghxom8BZ6QrmVf0w8= -----END CERTIFICATE-----Generated at Wed Oct 28 18:21:46 2026 by rpki-client