$ rpki-client -vvf rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft File: DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft (raw, json) Hash identifier: r8uOOP4Ilxe7B4SBp6IECZOETie6pXGSj0E4OwfaDz4= Subject key identifier: 8A:CB:F4:95:B7:2E:5A:6E:A0:7F:04:FC:14:AE:49:63:3F:DA:38:88 Authority key identifier: DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 Certificate issuer: /CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Certificate serial: 205763FBBBA733EE86C29292DF37D0F384A5FE6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:50:31 +0000 Manifest this update: Thu 23 Jul 2026 16:45:31 +0000 Manifest next update: Fri 24 Jul 2026 18:51:31 +0000 Files and hashes: 1: DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl (hash: KuazUdzpJ0pruFAgHJMSpGjf3fhpfuDyIwBVOnIchR4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:57:63:fb:bb:a7:33:ee:86:c2:92:92:df:37:d0:f3:84:a5:fe:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Validity Not Before: Jul 23 16:45:31 2026 GMT Not After : Jul 24 18:51:31 2026 GMT Subject: CN=8ACBF495B72E5A6EA07F04FC14AE49633FDA3888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4f:65:8c:af:f0:05:8f:1a:0d:99:25:44:d0: 4a:71:41:a4:f0:1a:2a:b2:89:96:ec:71:92:19:1b: b4:43:34:01:24:85:94:f4:86:8c:92:1f:6a:9d:8d: e0:a8:e9:72:f0:12:be:8e:cb:1b:87:be:c9:8f:fe: ef:23:0e:86:92:8a:69:eb:f5:bc:4e:c0:46:b7:42: 5d:45:da:67:4e:9a:ad:4b:ab:bd:9d:9b:6c:f3:a6: 84:ca:c6:13:d0:20:76:e5:c2:bf:d2:98:8e:ec:3f: 78:ff:44:ea:d4:2d:76:87:38:71:16:9d:44:a3:a1: d1:1c:47:30:76:1a:d4:a9:50:e9:82:eb:06:81:99: 10:88:c2:86:f2:2e:7b:dc:27:c8:26:a9:17:d2:2c: 25:59:59:7f:4c:10:8b:c2:74:78:6f:3b:c5:dc:75: 77:6f:4c:13:19:40:95:80:39:23:54:68:e6:1b:34: c0:5e:64:73:92:4f:8e:d2:f9:52:5b:de:2b:79:27: 32:e2:66:a4:2e:b7:55:cf:9d:99:de:a9:1c:77:9d: ba:89:be:0c:bf:97:d8:6a:7e:45:13:dd:26:fa:5e: 00:04:f4:54:63:c4:5a:3e:81:b4:ab:de:34:7c:07: 9e:ad:f4:df:3b:87:b3:53:3d:74:de:aa:ac:52:67: 7e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CB:F4:95:B7:2E:5A:6E:A0:7F:04:FC:14:AE:49:63:3F:DA:38:88 X509v3 Authority Key Identifier: keyid:DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:f5:da:a4:0f:65:d9:86:17:70:c7:2f:1f:4f:f1:5e:04:d4: 32:75:fb:12:3a:b1:19:f2:c8:a6:4b:bc:a9:e5:c3:a6:e3:90: 86:fb:44:f5:13:f5:07:04:90:96:54:59:b5:34:0a:7e:a9:f7: 84:66:5a:bc:2e:cf:35:79:e6:2b:36:26:fe:f3:33:3a:71:dd: 84:74:75:f1:19:6e:30:41:ec:d1:4d:3f:55:8a:c1:4c:fc:b4: 3f:7c:70:b9:77:65:a8:0c:75:f2:a9:bd:7c:c1:29:8b:86:9e: 0a:c7:8b:8e:bf:e5:47:e3:c4:4a:45:30:3e:c0:7d:34:7f:df: a7:84:63:b7:e0:f8:7a:f5:80:e0:0b:d4:61:d0:33:d9:72:de: 36:94:76:85:50:54:fe:5a:fe:c8:93:77:d9:f2:64:b4:b5:53: ee:c8:3b:6d:b1:07:4a:74:e7:97:03:f6:db:6e:7c:8e:f5:f4: d1:94:79:94:3c:e0:7f:5e:16:94:ce:04:71:7e:b9:b9:78:2c: 4b:75:09:66:35:12:65:c8:75:24:f7:8d:11:ec:ab:16:0c:c4: dd:f5:16:07:be:2e:4c:c2:4a:27:fb:04:e3:dc:7f:23:2f:12: eb:d5:8b:a4:2a:ce:41:cb:61:83:0e:60:38:ef:d6:db:2d:4d: 88:d9:47:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIFdj+7unM+6GwpKS3zfQ84Sl/m0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5 Nzg5NjVEMDAeFw0yNjA3MjMxNjQ1MzFaFw0yNjA3MjQxODUxMzFaMDMxMTAvBgNV BAMTKDhBQ0JGNDk1QjcyRTVBNkVBMDdGMDRGQzE0QUU0OTYzM0ZEQTM4ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1T2WMr/AFjxoNmSVE0EpxQaTw GiqyiZbscZIZG7RDNAEkhZT0hoySH2qdjeCo6XLwEr6OyxuHvsmP/u8jDoaSimnr 9bxOwEa3Ql1F2mdOmq1Lq72dm2zzpoTKxhPQIHblwr/SmI7sP3j/ROrULXaHOHEW nUSjodEcRzB2GtSpUOmC6waBmRCIwobyLnvcJ8gmqRfSLCVZWX9MEIvCdHhvO8Xc dXdvTBMZQJWAOSNUaOYbNMBeZHOST47S+VJb3it5JzLiZqQut1XPnZneqRx3nbqJ vgy/l9hqfkUT3Sb6XgAE9FRjxFo+gbSr3jR8B56t9N87h7NTPXTeqqxSZ37rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUisv0lbcuWm6gfwT8FK5JYz/aOIgwHwYDVR0j BBgwFoAU2pcnDKVSeeF6dDD8rExLbJeJZdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDBhNmZlYWEtNmI0Zi00N2NmLTllM2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENB NTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5Nzg5NjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTk3MjcwQ0E1NTI3OUUxN0E3NDMwRkNBQzRDNEI2Qzk3ODk2 NUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRC NkM5Nzg5NjVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEb12qQPZdmGF3DHLx9P8V4E1DJ1+xI6sRny yKZLvKnlw6bjkIb7RPUT9QcEkJZUWbU0Cn6p94RmWrwuzzV55is2Jv7zMzpx3YR0 dfEZbjBB7NFNP1WKwUz8tD98cLl3ZagMdfKpvXzBKYuGngrHi46/5UfjxEpFMD7A fTR/36eEY7fg+Hr1gOAL1GHQM9ly3jaUdoVQVP5a/siTd9nyZLS1U+7IO22xB0p0 55cD9ttufI719NGUeZQ84H9eFpTOBHF+ubl4LEt1CWY1EmXIdST3jRHsqxYMxN31 Fge+LkzCSif7BOPcfyMvEuvVi6QqzkHLYYMOYDjv1tstTYjZR20= -----END CERTIFICATE-----Generated at Fri Jul 24 05:09:13 2026 by rpki-client