$ rpki-client -vvf rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft File: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft (raw, json) Hash identifier: jJGnySzKVneRTI5lcvsmWTWfuG/v8MBUvPXnks8rNng= Subject key identifier: 24:30:12:06:A3:53:D9:83:78:02:1D:AC:9D:9B:03:E5:2A:33:9E:13 Authority key identifier: DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A Certificate issuer: /CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A Certificate serial: 0ABE24BF8A4428E9AD7B1646629C81C655EBC8A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 17:21:48 +0000 Manifest this update: Fri 19 Jun 2026 17:16:48 +0000 Manifest next update: Sat 20 Jun 2026 18:54:48 +0000 Files and hashes: 1: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (hash: SJt1SBaXEP9+A3/U6mnd55r9+cQvaamR3U/aBvUPC3E=) 2: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl (hash: 3zfcYsQ0+L1eDWy9Z1dIezEY2mUjRD3TlybK4eclIn4=) 3: 3130332e3137312e3138352e302f32342d3234203d3e20313432333734.roa (hash: KJ7p2DQB9uLZReoNNtXLeW/ntHP0ly/9EgDzYMeS9tA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:be:24:bf:8a:44:28:e9:ad:7b:16:46:62:9c:81:c6:55:eb:c8:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A Validity Not Before: Jun 19 17:16:48 2026 GMT Not After : Jun 20 18:54:48 2026 GMT Subject: CN=24301206A353D98378021DAC9D9B03E52A339E13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:48:fb:50:05:ec:97:df:7d:b8:e3:53:c5:6f: 5d:c8:df:43:85:e7:d5:96:47:19:8d:0b:c0:d6:92: 8f:24:aa:18:64:23:56:ec:8d:e3:e2:c6:f6:a4:3b: 58:ed:5c:c8:a3:eb:5b:ce:ce:db:33:19:28:dc:76: 32:52:a6:84:da:59:87:98:c8:aa:67:e2:50:c3:e8: af:80:b1:b9:40:25:47:d9:ec:d5:1a:5f:46:1b:3a: 8b:ca:c4:3f:f5:8f:5e:5e:f4:b2:e4:2f:c2:dc:ad: 1d:aa:6a:f3:61:af:b4:22:03:4c:14:ce:9f:6b:9c: 42:09:1f:65:e9:62:23:42:ff:57:61:20:31:2d:86: ef:78:a0:10:cc:16:85:11:89:4a:11:8b:b6:4f:fa: ea:d9:29:c4:33:7c:46:73:79:1b:85:8c:45:22:da: 87:07:be:4f:68:9a:86:ec:c1:4b:93:a2:dd:40:7f: 78:fa:d2:97:bb:4a:f6:8e:21:e7:29:40:42:9b:96: 08:bf:bb:fe:e1:d8:a5:e7:a5:cd:51:9f:e6:89:a7: 3f:c3:6f:27:d6:71:99:f9:61:05:f7:7f:62:88:f0: fa:75:3c:a4:d6:36:90:5a:b5:1a:66:4d:51:a4:d4: 43:55:0b:93:87:5e:83:cc:69:d6:28:68:2d:6b:d8: 5e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:30:12:06:A3:53:D9:83:78:02:1D:AC:9D:9B:03:E5:2A:33:9E:13 X509v3 Authority Key Identifier: keyid:DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:e2:a5:9a:d5:3b:ae:8c:0c:92:8f:a0:83:b5:c3:7b:af:65: a6:75:8a:75:41:81:06:d8:91:71:ef:55:5f:7f:55:19:8b:35: fb:00:35:3e:b4:c4:e6:27:98:48:1b:f1:12:b9:6c:21:10:75: ac:9e:97:8e:53:ce:6b:86:3e:9e:43:d4:0e:de:1e:37:f0:0b: 79:a6:cd:ac:08:7a:75:7c:65:30:1f:d0:80:20:92:b9:fd:45: 72:bd:39:3d:51:a1:fd:2e:df:a2:bc:9c:a1:1f:1d:ec:a0:9b: 30:a0:24:6b:5d:f0:50:b1:4f:d6:87:b7:06:78:9c:9b:93:65: c2:ae:85:d9:8d:0f:a2:b7:25:cf:a4:f0:e4:0a:41:8c:b4:79: 1a:d9:68:b8:e0:b7:8c:b4:1b:03:65:b0:86:41:f5:3e:64:9b: fc:cb:df:53:0d:3a:f2:ad:eb:47:49:1d:74:e2:79:3e:7e:1e: d0:a5:6b:48:1c:b4:68:20:7c:9d:f2:67:ce:0f:5c:49:e4:7d: cd:39:8a:77:34:04:87:62:69:fe:21:84:29:5b:65:d8:d5:62: f6:4d:c6:b1:a3:4f:64:55:bb:40:43:9e:34:65:45:80:30:68: 52:e5:05:4d:04:8c:91:ea:e0:99:0f:d8:9e:b1:ab:6a:35:35: 07:71:76:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCr4kv4pEKOmtexZGYpyBxlXryKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3Q0RFMUVBQjlCMEVGQkU4MEUwNzg3NDdFRTYwRkRB RUY4RkUyQTAeFw0yNjA2MTkxNzE2NDhaFw0yNjA2MjAxODU0NDhaMDMxMTAvBgNV BAMTKDI0MzAxMjA2QTM1M0Q5ODM3ODAyMURBQzlEOUIwM0U1MkEzMzlFMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5SPtQBeyX332441PFb13I30OF 59WWRxmNC8DWko8kqhhkI1bsjePixvakO1jtXMij61vOztszGSjcdjJSpoTaWYeY yKpn4lDD6K+AsblAJUfZ7NUaX0YbOovKxD/1j15e9LLkL8LcrR2qavNhr7QiA0wU zp9rnEIJH2XpYiNC/1dhIDEthu94oBDMFoURiUoRi7ZP+urZKcQzfEZzeRuFjEUi 2ocHvk9omobswUuTot1Af3j60pe7SvaOIecpQEKblgi/u/7h2KXnpc1Rn+aJpz/D byfWcZn5YQX3f2KI8Pp1PKTWNpBatRpmTVGk1ENVC5OHXoPMadYoaC1r2F4TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJDASBqNT2YN4Ah2snZsD5SoznhMwHwYDVR0j BBgwFoAU3nzeHqubDvvoDgeHR+5g/a74/iowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg1NWY0NTAtZWI3Zi00YTI2LWE2YzQtZjk4MjdlZTBhNWI4LzAvREU3Q0RFMUVB QjlCMEVGQkU4MEUwNzg3NDdFRTYwRkRBRUY4RkUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTdDREUxRUFCOUIwRUZCRTgwRTA3ODc0N0VFNjBGREFFRjhG RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg1NWY0NTAtZWI3Zi00YTI2LWE2 YzQtZjk4MjdlZTBhNWI4LzAvREU3Q0RFMUVBQjlCMEVGQkU4MEUwNzg3NDdFRTYw RkRBRUY4RkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAODipZrVO66MDJKPoIO1w3uvZaZ1inVBgQbY kXHvVV9/VRmLNfsANT60xOYnmEgb8RK5bCEQdayel45TzmuGPp5D1A7eHjfwC3mm zawIenV8ZTAf0IAgkrn9RXK9OT1Rof0u36K8nKEfHeygmzCgJGtd8FCxT9aHtwZ4 nJuTZcKuhdmND6K3Jc+k8OQKQYy0eRrZaLjgt4y0GwNlsIZB9T5km/zL31MNOvKt 60dJHXTieT5+HtCla0gctGggfJ3yZ84PXEnkfc05inc0BIdiaf4hhClbZdjVYvZN xrGjT2RVu0BDnjRlRYAwaFLlBU0EjJHq4JkP2J6xq2o1NQdxdpo= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:08 2026 by rpki-client