$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft File: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft (raw, json) Hash identifier: CFvaPqQvLG5GT6UCHcF8CClNWldgs1hEDYM/s5B00kA= Subject key identifier: 79:E6:27:2D:59:90:B0:8B:67:56:5B:CC:F8:6F:AB:C1:2C:C5:CF:3C Authority key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 Certificate issuer: /CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Certificate serial: 27DCDEBD4DE0326E3D1545C5F09A49FCE120E4CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 16:24:16 +0000 Manifest this update: Wed 16 Sep 2026 16:19:16 +0000 Manifest next update: Thu 17 Sep 2026 17:07:16 +0000 Files and hashes: 1: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: 3HAIIUys7Tc4LRT+YcRLOfjs2X6R/CDKgmkxni8LvLc=) 2: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: UoG4R/fnzXCLLPhjnt97eVjW6Ux+f3m1mN0pOE9yqnE=) 3: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: mAMKTw9FxHeyHppx5JdFbSfkyfyGBYD9cH190RAyriA=) 4: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: Y9lsT2HQ5ICM+BicfmZcvwMhmuIC9lwWMF3PEUQBipo=) 5: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: /N5wTnzqjzFsnj42mRLwrc4fGmzK+1uIwKiyAnk610A=) 6: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: dGdlLSEHAjcJ4pF+nJ/zA2guRtQM9WITw951OaaIjIY=) 7: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl (hash: tDdtc7uf3lbCsY1HKtOXhyp1Qm6gyrG0/0OvjuTV+f0=) 8: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: IkNdgsDaw78ogG3Aodj/Jzt/an3DS2wRm3jUm6iycMk=) 9: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: 0DqNe75QOc3hGqgnlAm5b0fiz1fZsts/kBEvqeLylzQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:dc:de:bd:4d:e0:32:6e:3d:15:45:c5:f0:9a:49:fc:e1:20:e4:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Validity Not Before: Sep 16 16:19:16 2026 GMT Not After : Sep 17 17:07:16 2026 GMT Subject: CN=79E6272D5990B08B67565BCCF86FABC12CC5CF3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:82:a4:84:11:76:77:43:1f:9a:cd:e0:c0:3d: be:bd:9d:00:ab:4a:52:23:99:c7:31:bf:1e:28:82: 4f:29:a6:d5:9c:2f:4c:0f:86:1c:9a:ed:7f:f7:ea: 95:61:52:cf:33:6d:a1:4b:cb:e1:21:5d:eb:8a:2e: b2:1d:a0:7e:04:c0:0e:96:09:d7:2e:0d:ad:fb:77: e6:18:27:44:c3:ea:2c:fc:ea:e8:17:1a:ac:41:ac: 1d:64:01:0d:19:6c:d2:05:ab:64:24:be:d2:35:cc: 9d:6e:8d:4a:9b:c0:fc:d7:e6:91:1d:d2:e9:c8:75: da:84:14:c1:dc:5c:21:6a:df:a8:d2:87:fb:bc:0e: e2:7d:59:b5:28:d8:86:30:29:18:48:36:09:ab:94: 96:50:81:05:ab:58:f9:1d:7f:6e:89:cd:47:f0:a8: 8c:be:6a:64:eb:d8:56:b8:7f:94:4c:f3:8b:dd:bb: 49:ab:8b:27:35:a9:78:76:2e:3b:6a:34:65:6a:1b: 62:4d:6e:4d:e8:f3:2f:6c:0a:80:57:0e:2b:91:18: 7e:ab:70:d9:96:34:89:82:ef:b2:7c:55:78:a3:c4: 0c:12:31:d3:cb:fe:a8:c4:fe:f8:b9:ef:e4:26:c1: da:c4:5a:af:d5:89:a7:8f:0a:64:73:c5:32:ae:78: cf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E6:27:2D:59:90:B0:8B:67:56:5B:CC:F8:6F:AB:C1:2C:C5:CF:3C X509v3 Authority Key Identifier: keyid:DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:be:73:df:a3:f9:2c:6c:fa:dd:20:92:64:65:10:5c:17:6e: ad:fd:92:ea:26:3d:aa:60:5b:ce:51:d5:de:21:bf:d2:11:0b: 41:68:e6:38:d1:eb:e2:16:7f:f5:bb:7f:d4:72:d8:c0:32:23: e1:2c:19:cb:fb:2c:66:3b:74:af:c7:ff:e9:07:30:4b:38:6e: 8e:55:18:55:a6:fe:8b:28:1f:f3:f6:0f:76:78:e9:42:bd:f4: 65:c5:72:a9:f0:9a:70:2a:10:8a:fe:b7:d2:fd:43:8a:44:2e: e7:28:ab:22:ba:27:2c:ca:1a:92:66:65:e6:d1:3f:52:d3:f8: a7:9f:17:f4:52:83:c6:41:5d:20:20:39:05:71:dc:a7:80:e7: e1:86:1b:58:29:6e:27:fa:0e:1b:f4:1c:bc:4c:69:f3:77:07: cf:38:9c:6a:39:bf:ae:4a:05:c6:72:d5:26:4a:95:49:01:be: 77:94:fe:5b:e2:19:00:1f:b9:56:0f:06:02:17:04:74:65:d1: b6:ec:44:ca:77:4e:48:00:38:b0:65:ab:be:6e:c7:c2:f1:f7: d2:1f:7c:b0:e2:c1:b5:ed:3c:ab:b2:cf:43:e7:5c:b0:5e:32: d3:78:ad:bd:9d:53:48:78:2d:6f:da:4a:d9:c6:45:b7:8c:6d: 73:12:bb:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ9zevU3gMm49FUXF8JpJ/OEg5MwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlD NDFFMzFDMjAeFw0yNjA5MTYxNjE5MTZaFw0yNjA5MTcxNzA3MTZaMDMxMTAvBgNV BAMTKDc5RTYyNzJENTk5MEIwOEI2NzU2NUJDQ0Y4NkZBQkMxMkNDNUNGM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgqSEEXZ3Qx+azeDAPb69nQCr SlIjmccxvx4ogk8pptWcL0wPhhya7X/36pVhUs8zbaFLy+EhXeuKLrIdoH4EwA6W CdcuDa37d+YYJ0TD6iz86ugXGqxBrB1kAQ0ZbNIFq2QkvtI1zJ1ujUqbwPzX5pEd 0unIddqEFMHcXCFq36jSh/u8DuJ9WbUo2IYwKRhINgmrlJZQgQWrWPkdf26JzUfw qIy+amTr2Fa4f5RM84vdu0mriyc1qXh2LjtqNGVqG2JNbk3o8y9sCoBXDiuRGH6r cNmWNImC77J8VXijxAwSMdPL/qjE/vi57+QmwdrEWq/ViaePCmRzxTKueM8nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeeYnLVmQsItnVlvM+G+rwSzFzzwwHwYDVR0j BBgwFoAU2+tfyJHMCoYgpSUI5nuxKcQeMcIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFkMWUxNmEtMGE0ZC00NGIxLTk4NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5 MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlDNDFFMzFDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkVCNUZDODkxQ0MwQTg2MjBBNTI1MDhFNjdCQjEyOUM0MUUz MUMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIx MjlDNDFFMzFDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFi+c9+j+Sxs+t0gkmRlEFwXbq39kuomPapg W85R1d4hv9IRC0Fo5jjR6+IWf/W7f9Ry2MAyI+EsGcv7LGY7dK/H/+kHMEs4bo5V GFWm/osoH/P2D3Z46UK99GXFcqnwmnAqEIr+t9L9Q4pELucoqyK6JyzKGpJmZebR P1LT+KefF/RSg8ZBXSAgOQVx3KeA5+GGG1gpbif6Dhv0HLxMafN3B884nGo5v65K BcZy1SZKlUkBvneU/lviGQAfuVYPBgIXBHRl0bbsRMp3TkgAOLBlq75ux8Lx99If fLDiwbXtPKuyz0PnXLBeMtN4rb2dU0h4LW/aStnGRbeMbXMSu6Q= -----END CERTIFICATE-----Generated at Thu Sep 17 10:12:00 2026 by rpki-client