$ rpki-client -vvf rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft File: DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft (raw, json) Hash identifier: bLSQv7+uaBGCW8sDuk/Nf/WLneeFim22SvI4RowZ6eU= Subject key identifier: B8:F9:28:DC:FF:76:6C:25:5B:D6:C5:C6:36:9F:77:34:72:85:15:74 Authority key identifier: DC:DF:EB:9B:30:70:53:1B:D7:F0:16:67:76:A9:BD:79:0D:81:56:F3 Certificate issuer: /CN=DCDFEB9B3070531BD7F0166776A9BD790D8156F3 Certificate serial: 5462D92F32E007D853D212BBB2F3AE63794587CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 01:52:02 +0000 Manifest this update: Sat 20 Jun 2026 01:47:02 +0000 Manifest next update: Sun 21 Jun 2026 04:07:02 +0000 Files and hashes: 1: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: WosTloIyziln5PL7ehnM5NRi5lB1Tbc4uPNxmDzbd8Y=) 2: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: Yc1lRGNv0/ivQZsDhjeb4Ll2thmzxFFCqYVkWRBmzS0=) 3: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: xTYeiw6tD9ub4a6qX/XD5duOKCOoUSMBMj8/IYpDd/U=) 4: DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl (hash: aBOOW2aOSnKFUA6xWHpbomkmvZ9neogDUBvn23bCOq4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:62:d9:2f:32:e0:07:d8:53:d2:12:bb:b2:f3:ae:63:79:45:87:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCDFEB9B3070531BD7F0166776A9BD790D8156F3 Validity Not Before: Jun 20 01:47:02 2026 GMT Not After : Jun 21 04:07:02 2026 GMT Subject: CN=B8F928DCFF766C255BD6C5C6369F773472851574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:47:e2:b3:d7:7e:83:7a:ea:0d:43:19:d0:6c: 74:90:86:94:bd:89:5e:f8:5a:0c:47:e0:13:03:ef: cf:1c:44:49:86:bc:79:39:21:84:e2:2e:ea:ec:10: 7b:e4:b2:bc:ec:29:83:c9:d2:b1:fa:cc:04:c4:ff: 2c:65:d5:2a:0d:ba:d4:5c:a2:ab:d9:df:ba:3b:c6: b5:08:e1:ee:1d:94:b5:cd:21:e6:c3:30:1b:12:34: 1a:49:7e:53:ef:dd:75:22:1f:d4:30:38:c8:08:f1: f6:2a:f9:4d:4e:29:52:09:09:b0:57:2a:ee:cd:9d: 54:cc:90:a1:83:4a:d7:18:b6:b2:16:21:ce:db:71: 78:1f:8f:83:3d:42:28:b4:6e:ae:de:48:7b:6a:ec: cf:77:2e:c7:37:c8:c7:11:28:01:37:80:17:d3:09: 6f:fa:62:20:f9:f4:cc:3b:81:5a:07:3f:95:de:a8: 37:b4:48:e1:c4:78:2a:5d:cb:fc:67:a7:7f:8f:72: 3b:27:ba:c0:9a:65:90:06:5a:bc:47:c6:27:2b:70: ab:54:d1:63:09:36:84:d6:fd:2a:41:bd:70:1d:3b: 76:25:1e:a4:b6:24:22:45:62:b0:da:66:68:49:48: df:bb:19:0b:9d:81:d9:d7:40:dd:13:95:13:75:52: 9f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F9:28:DC:FF:76:6C:25:5B:D6:C5:C6:36:9F:77:34:72:85:15:74 X509v3 Authority Key Identifier: keyid:DC:DF:EB:9B:30:70:53:1B:D7:F0:16:67:76:A9:BD:79:0D:81:56:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a0:99:ed:4b:44:f1:db:73:5a:f2:a6:be:58:d9:82:f1:52: 2c:bf:38:d0:61:19:36:ff:61:9f:f0:2a:8f:c4:3e:d2:ea:3f: e4:eb:b4:16:97:76:6f:3f:24:06:16:6f:05:ea:c4:ea:bc:e4: 53:d1:fd:38:0c:8b:7f:87:91:03:17:79:c4:6b:a2:8e:b4:eb: 39:0f:ff:37:a2:69:63:a8:33:0b:0d:ac:22:5b:5e:c5:bd:27: 8d:18:d3:d4:37:34:72:b0:3f:2c:5f:1e:f2:9f:cf:07:ff:84: eb:0c:cd:e5:a1:53:d5:99:28:1c:38:b3:07:de:19:e1:fb:ca: e7:07:d3:6d:bb:cb:e8:73:83:b6:6e:e7:7d:04:0a:dc:a9:66: a7:0a:4d:76:8e:a3:34:01:ee:d3:cf:e5:fa:f5:ac:74:c0:35: d8:c0:78:23:dd:3b:c1:d5:df:d1:2e:13:6e:a9:40:78:c7:0e: 4d:5e:86:f8:d5:5c:21:1c:d7:9a:7e:a5:4b:e1:6d:fe:e4:2b: 5b:a2:e0:06:49:b1:bd:c6:6d:1e:42:2c:97:ee:e6:52:b5:6a: 62:d8:58:11:11:74:9b:3c:31:7b:ac:fa:36:f4:73:90:1e:74: 07:66:8b:35:90:88:e9:74:c2:8a:1a:84:8a:cb:dc:8c:0b:e8: 42:f6:66:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVGLZLzLgB9hT0hK7svOuY3lFh8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENERkVCOUIzMDcwNTMxQkQ3RjAxNjY3NzZBOUJENzkw RDgxNTZGMzAeFw0yNjA2MjAwMTQ3MDJaFw0yNjA2MjEwNDA3MDJaMDMxMTAvBgNV BAMTKEI4RjkyOERDRkY3NjZDMjU1QkQ2QzVDNjM2OUY3NzM0NzI4NTE1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYR+Kz136DeuoNQxnQbHSQhpS9 iV74WgxH4BMD788cREmGvHk5IYTiLursEHvksrzsKYPJ0rH6zATE/yxl1SoNutRc oqvZ37o7xrUI4e4dlLXNIebDMBsSNBpJflPv3XUiH9QwOMgI8fYq+U1OKVIJCbBX Ku7NnVTMkKGDStcYtrIWIc7bcXgfj4M9Qii0bq7eSHtq7M93Lsc3yMcRKAE3gBfT CW/6YiD59Mw7gVoHP5XeqDe0SOHEeCpdy/xnp3+PcjsnusCaZZAGWrxHxicrcKtU 0WMJNoTW/SpBvXAdO3YlHqS2JCJFYrDaZmhJSN+7GQudgdnXQN0TlRN1Up+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuPko3P92bCVb1sXGNp93NHKFFXQwHwYDVR0j BBgwFoAU3N/rmzBwUxvX8BZndqm9eQ2BVvMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGViOGI4ODktM2IzZC00ZWY1LWFkNzAtNWIxMDQ1ZWZmMzkzLzAvRENERkVCOUIz MDcwNTMxQkQ3RjAxNjY3NzZBOUJENzkwRDgxNTZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0RGRUI5QjMwNzA1MzFCRDdGMDE2Njc3NkE5QkQ3OTBEODE1 NkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvRENERkVCOUIzMDcwNTMxQkQ3RjAxNjY3NzZBOUJE NzkwRDgxNTZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2gme1LRPHbc1rypr5Y2YLxUiy/ONBhGTb/ YZ/wKo/EPtLqP+TrtBaXdm8/JAYWbwXqxOq85FPR/TgMi3+HkQMXecRroo606zkP /zeiaWOoMwsNrCJbXsW9J40Y09Q3NHKwPyxfHvKfzwf/hOsMzeWhU9WZKBw4swfe GeH7yucH0227y+hzg7Zu530ECtypZqcKTXaOozQB7tPP5fr1rHTANdjAeCPdO8HV 39EuE26pQHjHDk1ehvjVXCEc15p+pUvhbf7kK1ui4AZJsb3GbR5CLJfu5lK1amLY WBERdJs8MXus+jb0c5AedAdmizWQiOl0wooahIrL3IwL6EL2Zk0= -----END CERTIFICATE-----Generated at Sat Jun 20 08:53:38 2026 by rpki-client