$ rpki-client -vvvf rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft File: DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft (raw, json) Hash identifier: lsxSERPIzJnkJuxyaMp5d+HWlEq9y5Y+cFtZWU9HgcM= Subject key identifier: 8D:5E:33:C9:1E:DF:7C:CE:F1:44:29:78:EB:A8:BD:69:54:A6:20:4C Authority key identifier: DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 Certificate issuer: /CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Certificate serial: 799DE7C9F2890096CFE5DC212AF0A729631A47EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 14:22:22 +0000 Manifest this update: Sat 14 Nov 2026 14:17:22 +0000 Manifest next update: Sun 15 Nov 2026 16:35:22 +0000 Files and hashes: 1: DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl (hash: PQKms74yYr0rbvWVeSJ/jpl8MwX6kjUGDjhMQifE/io=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 16:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:9d:e7:c9:f2:89:00:96:cf:e5:dc:21:2a:f0:a7:29:63:1a:47:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Validity Not Before: Nov 14 14:17:22 2026 GMT Not After : Nov 15 16:35:22 2026 GMT Subject: CN=8D5E33C91EDF7CCEF1442978EBA8BD6954A6204C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:32:84:19:f6:45:7b:ff:7a:bd:08:4a:b5:96: 6f:f3:11:e8:b1:37:ec:90:94:e2:ab:7b:a2:54:69: f9:1b:55:c9:6b:bd:dd:05:f6:2c:80:cc:6f:34:bb: 36:59:ce:89:68:f6:e4:5c:5a:4a:a4:1d:68:e8:a4: 91:69:0c:bb:0c:0e:b5:f1:bf:3a:ec:07:9b:36:25: 3a:9a:3e:28:5f:00:5d:e9:c4:e7:64:2b:60:a2:95: eb:2c:b1:4d:ea:53:12:8b:00:b1:2b:e5:68:44:ac: 50:52:e6:a4:cc:fe:14:ed:8e:8e:ff:7e:d1:37:31: 0e:20:79:6c:e2:9a:ae:a9:6a:bc:bc:e7:63:8a:40: 17:7f:8c:3e:d8:c3:f3:77:bd:f8:48:63:91:7b:ba: 71:fd:a3:34:91:17:78:c7:7b:2a:bc:fc:99:c6:01: aa:e6:66:eb:d9:cf:26:8d:cc:a8:9b:92:b9:46:21: 08:c2:5f:65:1e:3e:d6:86:2f:3a:5a:e1:4a:8a:5a: 3f:4c:8e:48:bd:23:47:af:05:99:18:8c:6f:8b:f7: 62:ab:e5:a5:04:df:a0:78:56:18:b7:43:26:3c:f7: 51:15:62:33:27:ba:5f:39:f5:f9:e0:c5:53:2b:3d: 52:2b:9e:8a:76:cd:78:f0:e2:0c:b3:0a:36:b4:7a: 3a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5E:33:C9:1E:DF:7C:CE:F1:44:29:78:EB:A8:BD:69:54:A6:20:4C X509v3 Authority Key Identifier: keyid:DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a1:86:e0:0c:98:9c:9b:e2:b4:3c:c2:59:c2:ab:ef:2a:86: be:82:b1:ef:1d:ba:24:9b:2a:bf:b9:86:21:fe:a4:3c:a5:44: 22:27:cd:9b:3f:25:0a:99:61:c8:fd:fb:07:08:3d:88:a0:16: f7:d0:46:3a:be:5b:15:9e:4e:0d:f4:f4:75:ed:36:60:c4:88: 2b:78:17:bc:86:89:e0:3d:ce:89:bb:e7:3e:e3:7b:0e:ed:7c: 53:62:c8:8e:2a:50:a3:a6:52:f0:c9:34:53:41:26:fc:1d:01: 95:ae:b8:75:0b:7d:6a:f9:d3:d0:eb:8b:16:12:73:45:2c:4c: 7b:b4:94:24:d1:33:61:a2:bf:de:c7:98:79:b3:b6:9f:71:80: 38:83:55:bb:d7:0a:29:05:02:11:73:4f:12:a6:19:8f:c4:8d: e8:ca:51:5f:2b:81:f2:e1:e6:7b:c7:3e:be:61:17:93:e1:af: e9:5a:9b:29:13:94:ae:5e:76:55:b9:35:cf:07:16:b4:38:d6: 70:a6:a1:57:00:56:e7:82:7d:69:52:59:c1:57:7a:e8:02:1b: 7d:54:01:71:16:7b:c9:b0:14:68:ad:06:4e:86:9a:46:8d:b9: cf:e0:d9:86:96:1f:04:d1:b0:ca:09:af:10:30:9a:9b:93:45: e3:bd:30:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeZ3nyfKJAJbP5dwhKvCnKWMaR+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5 Nzg5NjVEMDAeFw0yNjExMTQxNDE3MjJaFw0yNjExMTUxNjM1MjJaMDMxMTAvBgNV BAMTKDhENUUzM0M5MUVERjdDQ0VGMTQ0Mjk3OEVCQThCRDY5NTRBNjIwNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSMoQZ9kV7/3q9CEq1lm/zEeix N+yQlOKre6JUafkbVclrvd0F9iyAzG80uzZZzolo9uRcWkqkHWjopJFpDLsMDrXx vzrsB5s2JTqaPihfAF3pxOdkK2CilesssU3qUxKLALEr5WhErFBS5qTM/hTtjo7/ ftE3MQ4geWzimq6pary852OKQBd/jD7Yw/N3vfhIY5F7unH9ozSRF3jHeyq8/JnG AarmZuvZzyaNzKibkrlGIQjCX2UePtaGLzpa4UqKWj9Mjki9I0evBZkYjG+L92Kr 5aUE36B4Vhi3QyY891EVYjMnul859fngxVMrPVIrnop2zXjw4gyzCja0ejqxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjV4zyR7ffM7xRCl466i9aVSmIEwwHwYDVR0j BBgwFoAU2pcnDKVSeeF6dDD8rExLbJeJZdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDBhNmZlYWEtNmI0Zi00N2NmLTllM2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENB NTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5Nzg5NjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTk3MjcwQ0E1NTI3OUUxN0E3NDMwRkNBQzRDNEI2Qzk3ODk2 NUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRC NkM5Nzg5NjVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABehhuAMmJyb4rQ8wlnCq+8qhr6Cse8duiSb Kr+5hiH+pDylRCInzZs/JQqZYcj9+wcIPYigFvfQRjq+WxWeTg309HXtNmDEiCt4 F7yGieA9zom75z7jew7tfFNiyI4qUKOmUvDJNFNBJvwdAZWuuHULfWr509DrixYS c0UsTHu0lCTRM2Giv97HmHmztp9xgDiDVbvXCikFAhFzTxKmGY/EjejKUV8rgfLh 5nvHPr5hF5Phr+lamykTlK5edlW5Nc8HFrQ41nCmoVcAVueCfWlSWcFXeugCG31U AXEWe8mwFGitBk6GmkaNuc/g2YaWHwTRsMoJrxAwmpuTReO9MHQ= -----END CERTIFICATE-----Generated at Sun Nov 15 00:05:59 2026 by rpki-client