$ rpki-client -vvf rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft File: DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft (raw, json) Hash identifier: 80Ek5+gQ1yqdBDkXhwDF+ytgFAlco6lpcwIhqZiQpV0= Subject key identifier: 38:46:D9:2A:BF:F6:FB:2E:53:01:27:06:FA:A1:19:EE:2F:B3:A0:70 Authority key identifier: DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 Certificate issuer: /CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Certificate serial: 559A6084AC2EF0202A29088E7C93BC720C922AA9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft Manifest number: 0E Signing time: Tue 12 May 2026 14:34:20 +0000 Manifest this update: Tue 12 May 2026 14:29:20 +0000 Manifest next update: Wed 13 May 2026 18:14:20 +0000 Files and hashes: 1: DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl (hash: McFliK1aYXs6Bs+5+Oe9RKXhqYj2SGQSHgBfsnKozU0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:9a:60:84:ac:2e:f0:20:2a:29:08:8e:7c:93:bc:72:0c:92:2a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Validity Not Before: May 12 14:29:20 2026 GMT Not After : May 13 18:14:20 2026 GMT Subject: CN=3846D92ABFF6FB2E53012706FAA119EE2FB3A070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:64:bf:35:03:e7:18:b1:59:66:0e:04:ff:8c: 54:a2:7a:15:c4:7a:36:6b:f0:f2:50:60:81:8b:82: 9a:b7:91:3b:0f:dd:af:5e:25:f6:bc:f1:e7:f5:e9: 63:b6:1d:96:77:35:d5:28:94:c8:a3:92:bd:d5:bd: 9e:4d:25:1e:d8:57:25:32:7d:8b:03:5f:0c:e1:d8: 05:26:3d:a7:ab:e5:96:5c:60:b4:06:0a:b6:9a:33: 96:ad:ac:71:de:48:9d:db:e6:e5:72:f9:a8:23:95: 10:b8:b2:39:43:8e:90:8f:d8:82:4c:7d:73:f1:f1: d7:ba:d7:fd:66:35:5b:3e:ec:e4:d1:7d:0c:0c:43: ba:61:b6:92:e0:bc:82:1c:ac:ff:38:5a:18:0f:c8: 91:63:97:2b:f8:35:ba:f2:21:64:c1:38:32:24:7a: 93:4f:e0:fa:33:52:07:44:d0:54:12:b2:97:95:79: 91:af:0f:b1:68:ba:88:f2:a9:8d:95:51:fb:9d:78: be:01:0b:fb:d8:34:94:1d:76:ed:79:a4:ce:f3:6a: 0a:8f:1c:1d:1d:28:36:e2:c1:59:b8:be:16:95:73: b1:be:17:f1:24:5c:db:05:98:fa:47:2e:fd:da:bb: b6:5b:00:ba:0e:b7:7d:4b:34:0d:07:11:58:96:3b: a8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:46:D9:2A:BF:F6:FB:2E:53:01:27:06:FA:A1:19:EE:2F:B3:A0:70 X509v3 Authority Key Identifier: keyid:DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:9f:a1:72:d8:27:90:b3:e3:55:d4:bd:c3:85:72:2d:a1:33: ea:59:52:f5:51:e2:1f:f5:eb:bf:4a:59:d4:3f:24:15:b9:c1: 2a:51:d1:84:14:0d:b7:d2:8a:ac:d3:86:7d:b9:24:21:03:69: 90:e8:8e:2f:69:a1:19:a7:f3:5a:c2:f7:c6:75:b8:70:06:36: 3c:6b:de:d3:03:d9:ea:07:f3:3b:07:77:87:d9:6c:b2:22:ad: 96:f3:3b:59:5a:af:47:0a:83:5d:79:9f:5c:77:39:aa:72:06: 49:da:56:f9:21:41:2a:bf:25:07:b2:fe:71:43:53:55:9b:68: 6e:39:4e:3f:b1:04:8e:af:5d:ea:58:95:cc:4b:d9:d2:8a:df: df:bf:12:05:99:40:d5:1e:a4:f2:4a:87:1a:54:26:33:a4:66: f3:c7:0a:8f:2e:8a:33:bb:3f:80:03:a0:25:58:27:1e:e3:7b: 9b:30:47:84:54:00:c7:8c:ea:4f:64:5c:04:01:9e:93:f7:62: 6c:d2:45:a7:bd:ea:5c:f6:6d:0e:f2:45:74:31:67:54:7c:d9: 54:78:0c:45:e9:e2:78:30:9c:8c:61:2d:a9:18:9e:94:01:5f: 39:21:4e:64:12:2c:81:08:11:f7:71:b1:dc:e1:3d:38:f5:46: 63:77:0c:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVZpghKwu8CAqKQiOfJO8cgySKqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5 Nzg5NjVEMDAeFw0yNjA1MTIxNDI5MjBaFw0yNjA1MTMxODE0MjBaMDMxMTAvBgNV BAMTKDM4NDZEOTJBQkZGNkZCMkU1MzAxMjcwNkZBQTExOUVFMkZCM0EwNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYZL81A+cYsVlmDgT/jFSiehXE ejZr8PJQYIGLgpq3kTsP3a9eJfa88ef16WO2HZZ3NdUolMijkr3VvZ5NJR7YVyUy fYsDXwzh2AUmPaer5ZZcYLQGCraaM5atrHHeSJ3b5uVy+agjlRC4sjlDjpCP2IJM fXPx8de61/1mNVs+7OTRfQwMQ7phtpLgvIIcrP84WhgPyJFjlyv4NbryIWTBODIk epNP4PozUgdE0FQSspeVeZGvD7FouojyqY2VUfudeL4BC/vYNJQddu15pM7zagqP HB0dKDbiwVm4vhaVc7G+F/EkXNsFmPpHLv3au7ZbALoOt31LNA0HEViWO6hJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOEbZKr/2+y5TAScG+qEZ7i+zoHAwHwYDVR0j BBgwFoAU2pcnDKVSeeF6dDD8rExLbJeJZdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDBhNmZlYWEtNmI0Zi00N2NmLTllM2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENB NTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5Nzg5NjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTk3MjcwQ0E1NTI3OUUxN0E3NDMwRkNBQzRDNEI2Qzk3ODk2 NUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRC NkM5Nzg5NjVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+foXLYJ5Cz41XUvcOFci2hM+pZUvVR4h/1 679KWdQ/JBW5wSpR0YQUDbfSiqzThn25JCEDaZDoji9poRmn81rC98Z1uHAGNjxr 3tMD2eoH8zsHd4fZbLIirZbzO1lar0cKg115n1x3OapyBknaVvkhQSq/JQey/nFD U1WbaG45Tj+xBI6vXepYlcxL2dKK39+/EgWZQNUepPJKhxpUJjOkZvPHCo8uijO7 P4ADoCVYJx7je5swR4RUAMeM6k9kXAQBnpP3YmzSRae96lz2bQ7yRXQxZ1R82VR4 DEXp4ngwnIxhLakYnpQBXzkhTmQSLIEIEfdxsdzhPTj1RmN3DAg= -----END CERTIFICATE-----Generated at Tue May 12 22:13:29 2026 by rpki-client