$ rpki-client -vvvf rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft File: DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft (raw, json) Hash identifier: ktwVNedr30SaCrLuT5sn418XsMYi1yXHjPZDr9vaG5U= Subject key identifier: F8:0A:04:7A:23:42:AE:9E:9D:C0:A8:C5:1F:65:79:A6:A1:0B:13:B7 Authority key identifier: DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 Certificate issuer: /CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Certificate serial: 15341DD36CD7DC0274A2221E4D17198D6367F1DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 14:29:00 +0000 Manifest this update: Wed 23 Sep 2026 14:24:00 +0000 Manifest next update: Thu 24 Sep 2026 15:55:00 +0000 Files and hashes: 1: DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl (hash: pTL7Sk7kpt/cFAnm85b5qJxeLNv/HdMybj+PRIEt2Qs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:34:1d:d3:6c:d7:dc:02:74:a2:22:1e:4d:17:19:8d:63:67:f1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Validity Not Before: Sep 23 14:24:00 2026 GMT Not After : Sep 24 15:55:00 2026 GMT Subject: CN=F80A047A2342AE9E9DC0A8C51F6579A6A10B13B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f7:81:bf:f2:86:71:af:49:fb:db:e3:24:65: 23:9d:2b:75:d1:1b:5e:59:fe:b5:6f:ed:67:de:da: 6d:40:7b:01:8f:96:90:64:91:3a:d3:8c:7c:6c:ca: 3f:8a:8f:48:e7:c6:61:7f:34:eb:ea:f6:e4:c1:80: 7b:9b:e2:1d:4d:87:1a:90:3a:be:f2:69:b8:23:7a: b6:5c:1f:6b:02:f3:72:14:de:f2:11:c8:1c:a6:9e: da:41:ca:ee:a9:c0:40:88:ea:a7:1e:3e:e7:c5:87: a4:45:84:9f:88:81:df:a3:78:69:3c:d3:75:a7:b7: d2:01:cf:1b:a9:6a:4f:17:ac:e1:c3:4b:a0:d7:1e: b6:0c:86:bd:ce:af:7e:81:db:e6:32:9b:28:76:f1: 5d:f3:2c:f8:da:62:c1:52:1d:e5:55:50:ac:4e:8b: 81:52:d2:c1:21:7b:70:63:8d:1a:b2:27:d4:9e:56: a7:2d:05:6a:17:56:cb:01:cc:42:5e:6a:2b:e2:34: c4:d0:1c:43:81:51:dc:4d:60:16:81:b5:8b:9a:b3: 14:e9:9b:11:6d:56:e8:45:2e:cc:84:5e:10:9e:0b: ba:3f:df:25:c3:5c:eb:38:07:71:73:83:d7:ec:35: a5:95:31:45:90:33:3e:f9:3a:59:8a:bd:77:78:22: 9d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0A:04:7A:23:42:AE:9E:9D:C0:A8:C5:1F:65:79:A6:A1:0B:13:B7 X509v3 Authority Key Identifier: keyid:DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:8f:9c:5f:b4:3f:aa:63:f5:55:df:6c:c8:21:39:7a:11:d8: a0:c6:97:28:05:65:73:c8:f0:7b:1d:4f:59:5f:a8:1d:df:aa: 3c:bb:ef:2c:4d:7e:a6:04:83:cc:6c:4b:64:2b:00:df:d5:34: 52:af:ce:77:77:d4:62:2e:04:08:fc:50:59:7f:c8:42:05:b6: a6:4c:a4:6e:19:ac:d5:fc:24:e1:b2:f7:18:48:2e:1b:d9:0a: 9c:de:3a:5b:fb:f3:ae:f2:c9:6f:bf:fa:87:6b:f5:87:e6:6f: ae:ba:5f:c5:e5:2a:99:45:73:a9:41:85:4e:a6:ee:c0:1b:1b: a2:3c:8f:10:b3:4e:96:85:2a:67:c7:03:27:9c:d1:4e:3d:60: 7a:d7:db:a2:b5:5b:36:21:00:5d:cb:67:29:a6:6d:f8:8c:96: fc:76:83:20:b4:9b:75:bf:f7:3e:b1:69:3d:4d:e5:fc:cf:fb: 63:c2:8e:61:39:3d:b1:5c:cd:4d:46:a7:00:e3:35:04:98:19: 11:29:78:d7:3b:1a:2f:58:f7:f9:ee:8e:28:d0:26:81:84:d3: dd:b1:bd:72:20:5c:99:40:12:0d:a0:06:99:36:9a:b9:f6:37: 40:ea:63:7d:f3:fa:fe:29:98:84:3b:39:0b:f2:7b:3b:8f:19: a3:53:d2:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFTQd02zX3AJ0oiIeTRcZjWNn8d0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5 Nzg5NjVEMDAeFw0yNjA5MjMxNDI0MDBaFw0yNjA5MjQxNTU1MDBaMDMxMTAvBgNV BAMTKEY4MEEwNDdBMjM0MkFFOUU5REMwQThDNTFGNjU3OUE2QTEwQjEzQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk94G/8oZxr0n72+MkZSOdK3XR G15Z/rVv7Wfe2m1AewGPlpBkkTrTjHxsyj+Kj0jnxmF/NOvq9uTBgHub4h1NhxqQ Or7yabgjerZcH2sC83IU3vIRyBymntpByu6pwECI6qcePufFh6RFhJ+Igd+jeGk8 03Wnt9IBzxupak8XrOHDS6DXHrYMhr3Or36B2+Yymyh28V3zLPjaYsFSHeVVUKxO i4FS0sEhe3BjjRqyJ9SeVqctBWoXVssBzEJeaiviNMTQHEOBUdxNYBaBtYuasxTp mxFtVuhFLsyEXhCeC7o/3yXDXOs4B3Fzg9fsNaWVMUWQMz75OlmKvXd4Ip1zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+AoEeiNCrp6dwKjFH2V5pqELE7cwHwYDVR0j BBgwFoAU2pcnDKVSeeF6dDD8rExLbJeJZdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDBhNmZlYWEtNmI0Zi00N2NmLTllM2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENB NTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5Nzg5NjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTk3MjcwQ0E1NTI3OUUxN0E3NDMwRkNBQzRDNEI2Qzk3ODk2 NUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRC NkM5Nzg5NjVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKPnF+0P6pj9VXfbMghOXoR2KDGlygFZXPI 8HsdT1lfqB3fqjy77yxNfqYEg8xsS2QrAN/VNFKvznd31GIuBAj8UFl/yEIFtqZM pG4ZrNX8JOGy9xhILhvZCpzeOlv7867yyW+/+odr9Yfmb666X8XlKplFc6lBhU6m 7sAbG6I8jxCzTpaFKmfHAyec0U49YHrX26K1WzYhAF3LZymmbfiMlvx2gyC0m3W/ 9z6xaT1N5fzP+2PCjmE5PbFczU1GpwDjNQSYGREpeNc7Gi9Y9/nujijQJoGE092x vXIgXJlAEg2gBpk2mrn2N0DqY33z+v4pmIQ7OQvyezuPGaNT0lg= -----END CERTIFICATE-----Generated at Wed Sep 23 18:58:31 2026 by rpki-client