$ rpki-client -vvf rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft File: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft (raw, json) Hash identifier: U4zM4XH7WmgkD/N1r2QWD4YBVEaHK7H3TDfQiH+3UcU= Subject key identifier: 32:BA:B0:F0:9C:8B:09:4A:C8:19:C9:7B:7F:8B:20:D0:C1:5C:73:B2 Authority key identifier: DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB Certificate issuer: /CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Certificate serial: 2F1C9CB96C4071A4B9553F6438E3BD8069535631 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 00:07:21 +0000 Manifest this update: Tue 28 Jul 2026 00:02:21 +0000 Manifest next update: Wed 29 Jul 2026 01:59:21 +0000 Files and hashes: 1: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: raCtvjVmEJI55eIKeNiuVbv8oBn2bNkQd9Io9ytHzqU=) 2: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl (hash: I6znTDiIiGGpl/b/Cqo0hre8xUprExGU6yUytwEJMWg=) 3: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: 5SPmMH7FYGGF68tuvyYTcGmJM2nZRCHFWkVHY/HhGvw=) 4: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: 8nmjbXVGRgtW15sU+Nw25IOfD9ULS+LcKdXK12LUizs=) 5: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: dDeWtGREo/C+9RQAi+5KoHx0KqrltXLZhEwhJjs/H8A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 23:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:1c:9c:b9:6c:40:71:a4:b9:55:3f:64:38:e3:bd:80:69:53:56:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Validity Not Before: Jul 28 00:02:21 2026 GMT Not After : Jul 29 01:59:21 2026 GMT Subject: CN=32BAB0F09C8B094AC819C97B7F8B20D0C15C73B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e9:71:52:c7:e8:cb:83:0b:30:64:63:ba:29: db:44:93:45:1f:13:09:86:e3:1a:d3:39:6a:b1:bb: 04:b2:b9:0b:e5:f8:e8:ea:90:a1:c7:47:7e:73:5e: c1:a2:3b:e0:19:b8:ae:7e:37:f4:35:9f:ff:ad:4f: 2e:75:cc:51:a6:51:af:f2:cb:29:8c:c5:f3:68:31: 4b:27:c9:6f:80:c4:1a:63:63:78:de:25:65:52:bb: ce:d0:73:0b:39:f0:db:36:75:73:06:df:d3:c0:32: eb:d1:48:f6:7c:e8:a6:45:77:17:3c:a2:97:44:41: cf:b2:e5:59:55:6f:5d:13:6c:de:9a:25:7c:27:79: 83:8d:48:30:f7:c2:93:91:64:97:6a:f2:97:c6:34: f9:d0:2c:74:5f:36:7b:f6:1a:6a:bd:4a:c8:74:27: 0c:c9:b5:45:2e:30:97:5e:bb:82:f8:a1:15:41:67: 15:91:55:3d:ad:26:04:b3:e4:69:6a:53:44:32:84: 53:5f:49:3b:07:be:32:f3:1d:8c:81:af:c5:b5:ff: 69:ab:f0:e1:4d:cf:88:88:ea:e0:44:16:4c:a8:42: 8f:93:7f:98:82:bb:41:81:9d:62:b3:78:dd:c0:5a: 99:0e:51:5f:56:2d:2f:76:de:fa:6f:c0:75:c3:54: e1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BA:B0:F0:9C:8B:09:4A:C8:19:C9:7B:7F:8B:20:D0:C1:5C:73:B2 X509v3 Authority Key Identifier: keyid:DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:9d:b3:92:9c:ab:14:86:eb:85:49:1c:58:6e:d8:3c:3f:f3: db:a8:28:8f:6c:6c:a9:ed:15:d4:55:f9:ab:c3:45:78:87:19: 48:dd:6b:53:55:99:9a:dd:2b:6e:b0:a5:2d:bc:de:4e:1d:1b: f3:7b:c8:38:93:d2:76:5e:c1:99:56:73:2d:47:09:4d:e6:58: f6:5e:dd:68:84:8a:19:b5:d6:e8:d8:e2:21:0c:1d:14:1e:6e: 8a:41:b7:20:8d:f8:4d:0e:0f:aa:74:c3:4a:42:03:03:93:36: 08:f8:9f:f8:82:53:4a:82:2b:36:aa:91:2e:3f:8e:a6:40:76: 58:fc:45:06:35:30:0e:e7:b3:31:a9:7f:f2:21:fb:17:f8:59: 49:0e:5e:74:00:33:48:43:c9:85:4a:f4:7e:ea:5f:c1:90:73: ee:f7:85:9e:82:79:34:a3:a6:86:f4:c8:ac:6c:4c:cc:87:0c: 9e:24:eb:de:ad:e1:c7:3d:16:9d:23:27:d8:60:97:15:5d:7a: f0:1c:57:9c:4e:23:4d:89:2f:0f:24:30:80:60:66:36:af:58: 7c:66:7c:7a:79:97:05:3c:27:83:2e:f5:44:bc:aa:f9:a7:32: 4b:fb:2a:1a:d7:1c:da:8a:63:e1:52:4b:9f:3a:1a:31:38:be: c4:d2:e1:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxycuWxAcaS5VT9kOOO9gGlTVjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCRUVFODk3RkQ4NTU3MzA0QTJDMDIwREI4NkFEMkJB ODBCMDZGQjAeFw0yNjA3MjgwMDAyMjFaFw0yNjA3MjkwMTU5MjFaMDMxMTAvBgNV BAMTKDMyQkFCMEYwOUM4QjA5NEFDODE5Qzk3QjdGOEIyMEQwQzE1QzczQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv6XFSx+jLgwswZGO6KdtEk0Uf EwmG4xrTOWqxuwSyuQvl+OjqkKHHR35zXsGiO+AZuK5+N/Q1n/+tTy51zFGmUa/y yymMxfNoMUsnyW+AxBpjY3jeJWVSu87Qcws58Ns2dXMG39PAMuvRSPZ86KZFdxc8 opdEQc+y5VlVb10TbN6aJXwneYONSDD3wpORZJdq8pfGNPnQLHRfNnv2Gmq9Ssh0 JwzJtUUuMJdeu4L4oRVBZxWRVT2tJgSz5GlqU0QyhFNfSTsHvjLzHYyBr8W1/2mr 8OFNz4iI6uBEFkyoQo+Tf5iCu0GBnWKzeN3AWpkOUV9WLS923vpvwHXDVOEPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMrqw8JyLCUrIGcl7f4sg0MFcc7IwHwYDVR0j BBgwFoAU3r7uiX/YVXMEosAg24atK6gLBvswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIyZjUxNTItYTI5NS00N2I3LWFkZGMtZmJmZWYzMjQ3ZTNiLzAvREVCRUVFODk3 RkQ4NTU3MzA0QTJDMDIwREI4NkFEMkJBODBCMDZGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUJFRUU4OTdGRDg1NTczMDRBMkMwMjBEQjg2QUQyQkE4MEIw NkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvREVCRUVFODk3RkQ4NTU3MzA0QTJDMDIwREI4NkFE MkJBODBCMDZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABids5KcqxSG64VJHFhu2Dw/89uoKI9sbKnt FdRV+avDRXiHGUjda1NVmZrdK26wpS283k4dG/N7yDiT0nZewZlWcy1HCU3mWPZe 3WiEihm11ujY4iEMHRQebopBtyCN+E0OD6p0w0pCAwOTNgj4n/iCU0qCKzaqkS4/ jqZAdlj8RQY1MA7nszGpf/Ih+xf4WUkOXnQAM0hDyYVK9H7qX8GQc+73hZ6CeTSj pob0yKxsTMyHDJ4k696t4cc9Fp0jJ9hglxVdevAcV5xOI02JLw8kMIBgZjavWHxm fHp5lwU8J4Mu9US8qvmnMkv7KhrXHNqKY+FSS586GjE4vsTS4So= -----END CERTIFICATE-----Generated at Tue Jul 28 03:15:00 2026 by rpki-client