$ rpki-client -vvvf rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft File: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft (raw, json) Hash identifier: AqfDof1AZWcKskQzYVnMC9pTb87u27d72shuThwLa/8= Subject key identifier: 9C:FB:91:45:70:D8:B1:E4:EF:05:46:D2:79:A8:12:FD:D6:D7:17:55 Authority key identifier: DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB Certificate issuer: /CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Certificate serial: 3EFF9E7F5CA141F117262CB8544D2422C7A3AF87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft Manifest number: B2 Signing time: Fri 11 Sep 2026 13:17:24 +0000 Manifest this update: Fri 11 Sep 2026 13:12:24 +0000 Manifest next update: Sat 12 Sep 2026 14:17:24 +0000 Files and hashes: 1: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl (hash: imeoaAysw+8ZD/4Wz/UoGWaELTDnImbOGL6ynjSkRUA=) 2: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: 8nmjbXVGRgtW15sU+Nw25IOfD9ULS+LcKdXK12LUizs=) 3: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: dDeWtGREo/C+9RQAi+5KoHx0KqrltXLZhEwhJjs/H8A=) 4: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: raCtvjVmEJI55eIKeNiuVbv8oBn2bNkQd9Io9ytHzqU=) 5: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: 5SPmMH7FYGGF68tuvyYTcGmJM2nZRCHFWkVHY/HhGvw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 08:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ff:9e:7f:5c:a1:41:f1:17:26:2c:b8:54:4d:24:22:c7:a3:af:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Validity Not Before: Sep 11 13:12:24 2026 GMT Not After : Sep 12 14:17:24 2026 GMT Subject: CN=9CFB914570D8B1E4EF0546D279A812FDD6D71755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:ea:9c:40:c2:e7:95:05:b1:c8:e7:b7:bd: 01:6b:08:cd:d7:99:10:ad:9c:40:01:d5:0b:69:6b: 18:eb:a8:7f:9f:d5:5e:70:99:49:18:6a:25:a5:03: 42:27:ca:e2:7d:a7:59:4e:94:95:90:05:19:05:dc: 57:5d:32:c5:3e:ea:1e:3d:fc:0c:62:7b:f8:99:db: b6:31:a6:05:dd:15:4c:0c:f8:53:2a:3f:81:95:a1: 10:9a:57:7e:88:01:14:04:a6:fe:c3:cd:f5:6f:37: f8:ea:c4:c5:0f:04:64:b9:22:e8:ee:b1:25:b2:07: 2d:67:93:13:d7:56:eb:93:67:28:99:bd:a8:24:41: c6:57:4d:d8:ed:fd:b6:6c:8b:d8:e4:33:ca:7b:31: c3:bf:29:28:96:21:7d:79:7a:17:63:d7:d4:ee:d5: 9b:cc:0d:b2:2d:ee:dd:4c:50:dc:6c:a3:0e:1c:48: 71:f7:61:9e:4b:45:7e:f3:c8:ff:21:59:65:0e:58: fe:6e:f4:c8:49:fb:89:01:b3:89:84:38:97:bc:9f: b4:cd:be:e4:54:89:43:a1:4a:37:01:2b:16:89:25: 1a:95:b3:bf:3e:a1:a4:4c:80:5f:c3:b2:fc:5a:6a: 08:3a:80:69:c9:05:3d:d4:58:cc:af:09:26:c7:e5: 64:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FB:91:45:70:D8:B1:E4:EF:05:46:D2:79:A8:12:FD:D6:D7:17:55 X509v3 Authority Key Identifier: keyid:DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b3:9f:34:96:c8:9c:f8:26:4c:a2:fe:f1:19:e9:03:49:f0: 56:d9:f7:fc:83:2c:b9:16:5e:80:84:84:18:4c:a0:03:82:41: 20:fb:69:1e:2d:a5:84:8e:f0:a9:ef:ef:4e:46:bd:32:bb:30: 01:3c:9b:14:b7:51:57:4d:a5:ff:3b:1a:30:38:35:b2:3f:8b: c4:c6:c6:b0:eb:57:c0:50:80:1c:03:90:0c:37:68:2b:d4:c3: c2:96:94:f3:59:04:f4:c5:0b:f3:32:0d:23:cb:e7:b4:67:fa: ea:c8:0d:f8:f9:e2:e5:80:d2:6d:ec:b7:b1:27:0b:4d:ae:a5: 6e:48:64:7c:3e:41:a9:2e:dd:b4:8c:61:7b:40:84:0d:f4:bb: 42:9f:19:51:51:41:61:51:02:9c:80:fe:cb:f1:4a:7d:35:ec: 4d:58:b1:38:1c:6f:1a:5a:07:73:e7:c4:a5:fe:cf:75:f5:fc: ee:51:55:5c:25:65:6a:4d:cd:4b:ca:f9:68:76:d9:f3:84:a2: a6:3a:81:7c:20:dc:41:b6:1c:c5:12:48:01:50:87:13:b9:68: 3c:53:31:e7:88:9e:f6:e8:da:e0:61:b6:20:96:d1:59:5f:f4: fb:f6:fb:1a:f6:e7:34:6d:75:75:cb:83:69:34:d2:e2:1d:47: e0:be:40:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPv+ef1yhQfEXJiy4VE0kIsejr4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCRUVFODk3RkQ4NTU3MzA0QTJDMDIwREI4NkFEMkJB ODBCMDZGQjAeFw0yNjA5MTExMzEyMjRaFw0yNjA5MTIxNDE3MjRaMDMxMTAvBgNV BAMTKDlDRkI5MTQ1NzBEOEIxRTRFRjA1NDZEMjc5QTgxMkZERDZENzE3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFoOqcQMLnlQWxyOe3vQFrCM3X mRCtnEAB1QtpaxjrqH+f1V5wmUkYaiWlA0InyuJ9p1lOlJWQBRkF3FddMsU+6h49 /Axie/iZ27YxpgXdFUwM+FMqP4GVoRCaV36IARQEpv7DzfVvN/jqxMUPBGS5Iuju sSWyBy1nkxPXVuuTZyiZvagkQcZXTdjt/bZsi9jkM8p7McO/KSiWIX15ehdj19Tu 1ZvMDbIt7t1MUNxsow4cSHH3YZ5LRX7zyP8hWWUOWP5u9MhJ+4kBs4mEOJe8n7TN vuRUiUOhSjcBKxaJJRqVs78+oaRMgF/Dsvxaagg6gGnJBT3UWMyvCSbH5WSLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnPuRRXDYseTvBUbSeagS/dbXF1UwHwYDVR0j BBgwFoAU3r7uiX/YVXMEosAg24atK6gLBvswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIyZjUxNTItYTI5NS00N2I3LWFkZGMtZmJmZWYzMjQ3ZTNiLzAvREVCRUVFODk3 RkQ4NTU3MzA0QTJDMDIwREI4NkFEMkJBODBCMDZGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUJFRUU4OTdGRDg1NTczMDRBMkMwMjBEQjg2QUQyQkE4MEIw NkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvREVCRUVFODk3RkQ4NTU3MzA0QTJDMDIwREI4NkFE MkJBODBCMDZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGznzSWyJz4Jkyi/vEZ6QNJ8FbZ9/yDLLkW XoCEhBhMoAOCQSD7aR4tpYSO8Knv705GvTK7MAE8mxS3UVdNpf87GjA4NbI/i8TG xrDrV8BQgBwDkAw3aCvUw8KWlPNZBPTFC/MyDSPL57Rn+urIDfj54uWA0m3st7En C02upW5IZHw+Qaku3bSMYXtAhA30u0KfGVFRQWFRApyA/svxSn017E1YsTgcbxpa B3PnxKX+z3X1/O5RVVwlZWpNzUvK+Wh22fOEoqY6gXwg3EG2HMUSSAFQhxO5aDxT MeeInvbo2uBhtiCW0Vlf9Pv2+xr25zRtdXXLg2k00uIdR+C+QPk= -----END CERTIFICATE-----Generated at Fri Sep 11 16:14:31 2026 by rpki-client