$ rpki-client -vvf rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft File: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft (raw, json) Hash identifier: A1xli458scXgRxZNdyFu54cp4p1TY9yqFwuR6CUnFPw= Subject key identifier: 1C:C6:64:B7:D0:E6:E9:BE:EC:76:46:1F:97:F1:E2:81:92:36:19:A9 Authority key identifier: DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB Certificate issuer: /CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Certificate serial: 6D30651C2E0BC4DFC7D0A79F89C0EC3088DC9B11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft Manifest number: 38 Signing time: Fri 12 Jun 2026 08:00:23 +0000 Manifest this update: Fri 12 Jun 2026 07:55:23 +0000 Manifest next update: Sat 13 Jun 2026 08:25:23 +0000 Files and hashes: 1: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: dDeWtGREo/C+9RQAi+5KoHx0KqrltXLZhEwhJjs/H8A=) 2: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: 8nmjbXVGRgtW15sU+Nw25IOfD9ULS+LcKdXK12LUizs=) 3: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: raCtvjVmEJI55eIKeNiuVbv8oBn2bNkQd9Io9ytHzqU=) 4: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: 5SPmMH7FYGGF68tuvyYTcGmJM2nZRCHFWkVHY/HhGvw=) 5: DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl (hash: t+g1cIFgsTEv6091p3WHBe5RGLatejDHn2EAvw5AG8E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 08:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:30:65:1c:2e:0b:c4:df:c7:d0:a7:9f:89:c0:ec:30:88:dc:9b:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB Validity Not Before: Jun 12 07:55:23 2026 GMT Not After : Jun 13 08:25:23 2026 GMT Subject: CN=1CC664B7D0E6E9BEEC76461F97F1E281923619A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:78:a5:33:89:a5:bb:fb:d7:49:79:d0:f3:59: e8:12:39:53:1c:6d:54:d4:67:ee:13:61:dc:c4:2c: ad:7f:a3:ba:c5:3c:6d:ee:33:84:73:3b:e4:2e:22: 00:f9:32:a1:fc:c1:6e:f5:cf:03:2b:f6:d4:bb:6f: 5b:37:80:78:50:8a:2f:f0:ab:25:11:dc:ee:59:86: 6f:b2:04:c1:12:47:12:a7:48:ce:75:22:fe:a8:62: f3:9e:18:95:e6:7c:7a:9e:79:56:dc:36:7a:69:13: e7:6b:d9:1b:1d:5c:10:64:fe:fe:54:74:91:25:d7: 08:72:87:b9:a8:aa:9b:3f:d7:ef:de:74:35:bf:e9: 71:e5:11:5c:b8:78:47:b3:60:e0:96:2a:e2:e3:22: 3f:15:51:35:2c:1c:60:0d:0a:f3:e0:20:06:d3:16: ef:d4:0b:2b:d4:c7:1f:b8:a6:38:47:62:d7:28:54: a6:38:94:ca:ea:ee:ac:87:e3:0a:92:4e:1b:10:42: 39:e2:27:c0:d3:e0:5a:98:8f:19:3f:d0:06:47:22: f9:09:f2:c7:48:50:ed:41:39:59:8a:78:3a:89:78: ec:2c:d5:38:71:f3:6a:25:f9:65:8b:a6:b4:8a:85: 42:ff:e7:9c:df:54:ea:e8:b0:71:9d:ee:e8:2a:b8: 6c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C6:64:B7:D0:E6:E9:BE:EC:76:46:1F:97:F1:E2:81:92:36:19:A9 X509v3 Authority Key Identifier: keyid:DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:42:b4:8b:6d:67:06:70:39:ec:c8:1a:d1:32:b7:b3:07:b8: c3:9a:28:32:d5:b9:3b:9b:e4:09:19:c2:6a:73:cc:bd:f8:77: db:74:51:5e:90:17:57:aa:9d:37:89:c4:f8:fb:b8:3f:0f:21: 91:df:3a:4a:48:78:8e:dc:55:b2:5b:3a:ac:79:0c:95:e0:51: 81:b1:3e:35:07:fd:68:b2:70:79:06:44:c9:14:6e:68:ad:9d: 90:4e:0c:bd:ff:7d:98:7b:22:60:c1:a0:53:9c:da:45:1b:10: b8:13:90:03:f2:3a:d6:ad:1a:45:a1:de:3a:89:9f:63:09:08: 93:be:f7:f9:de:43:53:4b:02:0b:35:4c:32:2f:2e:1a:00:f1: c0:fe:2e:b6:6f:8d:ef:c9:52:e3:c3:89:e4:01:ca:31:c4:b2: 96:2a:a3:79:d7:80:00:44:b4:db:9f:cc:b8:70:89:9d:85:c3: 35:42:34:1e:91:23:e4:22:2d:83:9f:4f:2c:d8:1e:b0:e1:95: f2:46:06:c1:0a:3d:67:1c:e3:08:d7:d9:78:96:29:21:97:3e: c1:0b:02:9e:3c:54:b7:14:ef:e8:e1:8d:36:82:de:8e:67:2a: 57:6c:8d:22:5e:bc:6d:9c:2f:d4:16:5a:06:69:ba:bf:c9:25: a1:dc:a0:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbTBlHC4LxN/H0KeficDsMIjcmxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCRUVFODk3RkQ4NTU3MzA0QTJDMDIwREI4NkFEMkJB ODBCMDZGQjAeFw0yNjA2MTIwNzU1MjNaFw0yNjA2MTMwODI1MjNaMDMxMTAvBgNV BAMTKDFDQzY2NEI3RDBFNkU5QkVFQzc2NDYxRjk3RjFFMjgxOTIzNjE5QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdeKUziaW7+9dJedDzWegSOVMc bVTUZ+4TYdzELK1/o7rFPG3uM4RzO+QuIgD5MqH8wW71zwMr9tS7b1s3gHhQii/w qyUR3O5Zhm+yBMESRxKnSM51Iv6oYvOeGJXmfHqeeVbcNnppE+dr2RsdXBBk/v5U dJEl1whyh7moqps/1+/edDW/6XHlEVy4eEezYOCWKuLjIj8VUTUsHGANCvPgIAbT Fu/UCyvUxx+4pjhHYtcoVKY4lMrq7qyH4wqSThsQQjniJ8DT4FqYjxk/0AZHIvkJ 8sdIUO1BOVmKeDqJeOws1Thx82ol+WWLprSKhUL/55zfVOrosHGd7ugquGxNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHMZkt9Dm6b7sdkYfl/HigZI2GakwHwYDVR0j BBgwFoAU3r7uiX/YVXMEosAg24atK6gLBvswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIyZjUxNTItYTI5NS00N2I3LWFkZGMtZmJmZWYzMjQ3ZTNiLzAvREVCRUVFODk3 RkQ4NTU3MzA0QTJDMDIwREI4NkFEMkJBODBCMDZGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUJFRUU4OTdGRDg1NTczMDRBMkMwMjBEQjg2QUQyQkE4MEIw NkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvREVCRUVFODk3RkQ4NTU3MzA0QTJDMDIwREI4NkFE MkJBODBCMDZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBCtIttZwZwOezIGtEyt7MHuMOaKDLVuTub 5AkZwmpzzL34d9t0UV6QF1eqnTeJxPj7uD8PIZHfOkpIeI7cVbJbOqx5DJXgUYGx PjUH/WiycHkGRMkUbmitnZBODL3/fZh7ImDBoFOc2kUbELgTkAPyOtatGkWh3jqJ n2MJCJO+9/neQ1NLAgs1TDIvLhoA8cD+LrZvje/JUuPDieQByjHEspYqo3nXgABE tNufzLhwiZ2FwzVCNB6RI+QiLYOfTyzYHrDhlfJGBsEKPWcc4wjX2XiWKSGXPsEL Ap48VLcU7+jhjTaC3o5nKldsjSJevG2cL9QWWgZpur/JJaHcoHM= -----END CERTIFICATE-----Generated at Sat Jun 13 02:10:32 2026 by rpki-client