$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft File: DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft (raw, json) Hash identifier: ApHKRGHlDulfEDPuDlbxEUIyyAZD/BKNIIK9fBnblNo= Subject key identifier: 1C:B7:68:E2:FA:80:31:5E:27:0E:9E:DA:3F:9F:DF:1D:17:F7:A8:2F Authority key identifier: DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3 Certificate issuer: /CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3 Certificate serial: 77E4A8AF7597CB22664E2ED09A75DF423EC1ED5A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 17:32:05 +0000 Manifest this update: Fri 19 Jun 2026 17:27:05 +0000 Manifest next update: Sat 20 Jun 2026 21:08:05 +0000 Files and hashes: 1: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: zkjugBCGR1RTN3rv+4fVMMpCR+DjhaqSm22RICfrfmA=) 2: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: lZy/D3zEI+V1zNnvBB6OJZ7BzAoFD7HSvYryTbhRU2s=) 3: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: 7Jy3y4ltltsmzNhSvINfLmQPgIpSxy3LDWGrSnNQ3Zk=) 4: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d26NLF/sKVXadNSIsUNq9koHjOM/iTFNcX1v1zkyxRU=) 5: DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl (hash: rUMeJjgQ1NoASwPfZAgXn9uz+urEUgBD+FhGgRPXgiw=) 6: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: BDfl1ljAlzUeNiFgOAogNvfZpmtNq6Kp37cGWuK0R5E=) 7: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: f+1xV3V7eIo4yjJqos+xUQVvX1GIUuOZUCoIKtF+llo=) 8: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: 2xJo8vO5RtzGv7BkUmxulZhOANWhCfhuYoau31MaZh0=) 9: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: D8gdQFYf8NnWhum3Srq97Jkm5hnXUuKFuTsge2OROqA=) 10: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: ovVBKtJH+Wixf+bjFfGN0BaqhZuS+FBdLYnDH3wV8vw=) 11: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: zZohFjEfg5KbgTKUDn03P4ViER6I84zu0tvUUBWCbms=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 21:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:e4:a8:af:75:97:cb:22:66:4e:2e:d0:9a:75:df:42:3e:c1:ed:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3 Validity Not Before: Jun 19 17:27:05 2026 GMT Not After : Jun 20 21:08:05 2026 GMT Subject: CN=1CB768E2FA80315E270E9EDA3F9FDF1D17F7A82F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cb:7b:1c:55:01:12:ce:36:b6:cb:a2:48:37: d4:bf:60:17:ae:f2:cf:44:15:5a:15:69:80:cc:20: ca:34:d6:bf:e3:da:8f:2c:60:c2:b2:0c:82:b3:e9: 7f:50:0c:05:45:78:ce:10:c2:53:0d:a7:ae:78:63: ef:25:66:a2:d3:3d:40:74:b5:5f:6b:a4:f4:f7:2e: e1:cc:6d:60:fd:97:28:2d:d1:39:f0:60:68:70:cb: 94:94:5e:1f:9d:26:80:39:65:03:e2:46:5d:34:21: 59:9d:6c:78:e9:5a:af:9f:a8:fc:ff:30:70:32:0c: 9a:59:f6:d7:b5:44:ae:c3:53:61:50:33:f9:2d:f5: c7:5d:7b:dc:e2:d9:8f:13:0e:d9:42:fa:d0:e1:ac: a5:35:e1:2d:f4:ee:bc:84:dc:f1:07:c1:f7:95:ef: 26:f1:60:7e:ee:f8:96:bb:38:d2:57:88:c3:6b:44: c9:91:79:a3:17:bf:5b:ff:83:d2:6c:8b:f4:12:2c: 41:74:49:98:15:9b:ae:2f:23:6c:17:02:5a:6f:6b: c9:b7:56:a2:32:74:0f:08:e8:96:c2:0f:c3:c2:f6: b5:32:db:3e:9a:c6:c8:83:b9:43:25:5c:2b:9f:64: 06:2e:05:e7:c8:41:d7:ea:50:c5:80:ae:4d:0a:7c: ea:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B7:68:E2:FA:80:31:5E:27:0E:9E:DA:3F:9F:DF:1D:17:F7:A8:2F X509v3 Authority Key Identifier: keyid:DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:cf:11:6e:74:e8:75:39:47:09:dc:bb:3c:bf:2d:a5:63:d4: 3e:a5:1e:16:67:86:89:00:30:4a:dc:01:d4:13:51:5f:95:89: 94:f9:7f:99:43:c4:02:17:a5:97:b6:26:86:97:1d:84:6d:47: 91:2b:bf:66:45:47:ad:b1:1f:e7:86:f3:b8:9c:f6:09:87:6a: 48:39:42:fe:2c:3d:95:ba:22:4a:f9:c3:7b:92:c3:2d:5b:35: 24:a3:2a:ea:ab:2e:55:b5:ff:63:1a:0a:d1:9e:00:29:8b:8f: 76:79:80:d6:c3:4e:ee:c9:65:fe:67:e3:61:92:43:ac:f1:04: 83:bd:d0:f4:3b:82:d3:c4:e7:d7:ac:5e:e5:ba:5b:22:9f:73: 00:57:02:19:e0:24:87:9d:ab:2a:e9:61:42:ed:e8:8e:53:a9: 5c:f8:5e:e4:80:e3:46:59:ec:4d:f7:8d:14:a1:29:9f:e1:63: e9:9e:dd:a3:65:0f:6d:35:d6:ed:50:13:07:0b:63:17:bc:7c: a1:0f:0a:eb:04:ac:62:e8:44:f7:46:0d:87:7a:dc:37:e8:b7: a8:bc:7f:07:02:96:a9:76:30:40:c7:70:36:cb:fa:e0:7a:e2: c4:ba:93:59:8d:f2:55:80:d3:f0:11:aa:8a:1a:cc:4c:05:e9: 10:6f:a2:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd+Sor3WXyyJmTi7QmnXfQj7B7VowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RTk5RUEwMzBBRjhBRUJGQjdCNkE3QTBFOTE2NzRE REIyOUFDMzAeFw0yNjA2MTkxNzI3MDVaFw0yNjA2MjAyMTA4MDVaMDMxMTAvBgNV BAMTKDFDQjc2OEUyRkE4MDMxNUUyNzBFOUVEQTNGOUZERjFEMTdGN0E4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoy3scVQESzja2y6JIN9S/YBeu 8s9EFVoVaYDMIMo01r/j2o8sYMKyDIKz6X9QDAVFeM4QwlMNp654Y+8lZqLTPUB0 tV9rpPT3LuHMbWD9lygt0TnwYGhwy5SUXh+dJoA5ZQPiRl00IVmdbHjpWq+fqPz/ MHAyDJpZ9te1RK7DU2FQM/kt9cdde9zi2Y8TDtlC+tDhrKU14S307ryE3PEHwfeV 7ybxYH7u+Ja7ONJXiMNrRMmReaMXv1v/g9Jsi/QSLEF0SZgVm64vI2wXAlpva8m3 VqIydA8I6JbCD8PC9rUy2z6axsiDuUMlXCufZAYuBefIQdfqUMWArk0KfOp1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHLdo4vqAMV4nDp7aP5/fHRf3qC8wHwYDVR0j BBgwFoAU3k6Z6gMK+K6/t7anoOkWdN2ymsMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyNTQ0MTktNTNiZS00YWQ0LWJmN2YtMjlmODkxMjUyM2QwLzAvREU0RTk5RUEw MzBBRjhBRUJGQjdCNkE3QTBFOTE2NzREREIyOUFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTRFOTlFQTAzMEFGOEFFQkZCN0I2QTdBMEU5MTY3NEREQjI5 QUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm N2YtMjlmODkxMjUyM2QwLzAvREU0RTk5RUEwMzBBRjhBRUJGQjdCNkE3QTBFOTE2 NzREREIyOUFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTPEW506HU5Rwncuzy/LaVj1D6lHhZnhokA MErcAdQTUV+ViZT5f5lDxAIXpZe2JoaXHYRtR5Erv2ZFR62xH+eG87ic9gmHakg5 Qv4sPZW6Ikr5w3uSwy1bNSSjKuqrLlW1/2MaCtGeACmLj3Z5gNbDTu7JZf5n42GS Q6zxBIO90PQ7gtPE59esXuW6WyKfcwBXAhngJIedqyrpYULt6I5TqVz4XuSA40ZZ 7E33jRShKZ/hY+me3aNlD2011u1QEwcLYxe8fKEPCusErGLoRPdGDYd63Dfot6i8 fwcClql2MEDHcDbL+uB64sS6k1mN8lWA0/ARqooazEwF6RBvoig= -----END CERTIFICATE-----Generated at Sat Jun 20 11:24:56 2026 by rpki-client