$ rpki-client -vvf rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft File: DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft (raw, json) Hash identifier: pJaaDfzEo2BMyLpLJA/bwwIQHjKjFZa8d0Y7oE1ttPw= Subject key identifier: D8:6B:FF:CF:13:3F:28:88:16:7F:9F:C9:23:9F:A0:2D:90:0E:6E:F5 Authority key identifier: DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28 Certificate issuer: /CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728 Certificate serial: 7EEBF20EF451B29D69285748E4E2A8EC30E1221A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:04:41 +0000 Manifest this update: Tue 12 May 2026 18:59:41 +0000 Manifest next update: Wed 13 May 2026 20:41:41 +0000 Files and hashes: 1: 3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa (hash: prMxe0nmDe/VDC0+RGajULsFBb7iapYsATrUpS7D5Qc=) 2: DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl (hash: sX7CbBu6vlHwQJQdTs5CwepfTMA/lEXgWTZV7LAoxTg=) 3: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (hash: PVWSPZbDocSISt550/WJyHY7HuMqnPYZ4LfX4EkPasI=) 4: 3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (hash: Emh7sO7kJSNFsbIsXv30t/j66tuYFAQx0UDDDCsbvSk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:eb:f2:0e:f4:51:b2:9d:69:28:57:48:e4:e2:a8:ec:30:e1:22:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728 Validity Not Before: May 12 18:59:41 2026 GMT Not After : May 13 20:41:41 2026 GMT Subject: CN=D86BFFCF133F2888167F9FC9239FA02D900E6EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:db:aa:68:2c:f5:c4:ca:42:f5:97:db:af:ee: 23:82:c2:1c:a9:a0:f3:2f:1b:eb:ed:1e:81:1e:fd: c2:39:dd:6d:ac:bc:a4:2d:9a:5a:8b:a1:60:91:01: e9:ee:07:d0:6e:04:62:98:0d:14:a2:0a:e6:90:0c: 12:47:ac:53:1b:4f:6e:1f:2b:c8:1c:72:32:97:da: b9:28:c6:00:c3:9f:9a:53:44:03:fd:20:3d:e0:5d: e4:e6:02:31:5c:97:dc:c6:f2:37:dd:0b:01:3c:20: 96:09:9f:ef:ef:da:2c:28:37:ce:dd:bd:59:ec:b8: d5:2a:ec:d0:df:95:d3:00:ad:0a:15:de:96:1e:da: 11:18:f2:7e:a4:30:ee:59:08:0d:37:1a:89:eb:e8: e8:de:e7:83:74:a2:9d:39:29:4b:b5:4b:66:b9:b5: 77:c0:50:08:c4:fa:24:c3:97:dc:a7:bb:01:b6:9c: ad:79:7a:74:58:9c:05:51:91:92:8a:84:f9:08:d7: fa:45:70:95:64:ee:6a:5d:b8:92:8e:91:a8:b1:dc: fb:b3:f6:d8:a0:f2:de:ad:da:56:40:78:19:e3:81: 31:24:28:15:24:9a:fc:40:a2:fe:22:dc:38:d9:01: 0c:d5:73:9b:4a:bd:98:42:ae:29:1c:94:14:3a:26: 94:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6B:FF:CF:13:3F:28:88:16:7F:9F:C9:23:9F:A0:2D:90:0E:6E:F5 X509v3 Authority Key Identifier: keyid:DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:01:cb:c6:89:da:7b:1a:51:8a:5f:78:ef:12:7f:42:5f:38: cd:d6:ee:b5:f1:4f:63:24:e9:e6:7b:ad:8d:26:3f:e1:d5:35: 92:40:af:f1:5b:ad:04:4f:2f:81:09:43:e8:55:47:26:63:6e: 30:b5:1d:d5:70:4e:b8:dc:96:c1:4b:f3:8e:e0:6c:a9:ea:ad: 33:35:91:7e:03:7b:1b:a8:74:d6:48:59:0c:ce:5b:98:1e:51: bd:3c:67:5b:c5:7b:05:37:bb:8b:dc:53:e0:a5:1c:8c:60:4e: 55:12:3e:5c:96:ac:da:c1:ca:98:b7:7b:3e:af:06:aa:93:cf: 81:fa:23:40:a7:bc:69:37:a5:3e:9b:d8:ef:12:bc:4e:9f:eb: 58:9a:eb:a9:84:11:72:ba:05:cf:9c:9b:7d:44:2d:a4:b1:53: ef:e6:32:f6:b2:a3:c0:73:a8:da:fd:c7:0d:42:c4:42:f8:15: 1d:40:d6:bf:37:b5:a6:e9:d9:11:d4:1d:c6:c9:28:08:20:46: 59:a6:1d:d0:77:66:3d:db:b7:d9:bd:9c:68:41:fb:37:bc:61: 5c:fe:3a:70:21:03:f3:f3:bc:59:df:a7:34:3f:d5:8b:fd:d9: a3:52:c6:fa:90:9b:d7:76:c4:e7:06:e3:ff:55:fb:9a:f8:ef: 68:5a:50:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfuvyDvRRsp1pKFdI5OKo7DDhIhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4OTM2REUyM0JEMDY4RkZGOEI5RDVCMDM5MkUwMDA5 N0JBMDcyODAeFw0yNjA1MTIxODU5NDFaFw0yNjA1MTMyMDQxNDFaMDMxMTAvBgNV BAMTKEQ4NkJGRkNGMTMzRjI4ODgxNjdGOUZDOTIzOUZBMDJEOTAwRTZFRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb26poLPXEykL1l9uv7iOCwhyp oPMvG+vtHoEe/cI53W2svKQtmlqLoWCRAenuB9BuBGKYDRSiCuaQDBJHrFMbT24f K8gccjKX2rkoxgDDn5pTRAP9ID3gXeTmAjFcl9zG8jfdCwE8IJYJn+/v2iwoN87d vVnsuNUq7NDfldMArQoV3pYe2hEY8n6kMO5ZCA03Gonr6Oje54N0op05KUu1S2a5 tXfAUAjE+iTDl9ynuwG2nK15enRYnAVRkZKKhPkI1/pFcJVk7mpduJKOkaix3Puz 9tig8t6t2lZAeBnjgTEkKBUkmvxAov4i3DjZAQzVc5tKvZhCrikclBQ6JpQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Gv/zxM/KIgWf5/JI5+gLZAObvUwHwYDVR0j BBgwFoAU2ok23iO9Bo//i51bA5LgAJe6BygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZhYTNiZWItNTc2MS00YzM0LTg4ZDMtMDE1Y2NjNjQwMDJmLzAvREE4OTM2REUy M0JEMDY4RkZGOEI5RDVCMDM5MkUwMDA5N0JBMDcyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTg5MzZERTIzQkQwNjhGRkY4QjlENUIwMzkyRTAwMDk3QkEw NzI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZhYTNiZWItNTc2MS00YzM0LTg4 ZDMtMDE1Y2NjNjQwMDJmLzAvREE4OTM2REUyM0JEMDY4RkZGOEI5RDVCMDM5MkUw MDA5N0JBMDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIBy8aJ2nsaUYpfeO8Sf0JfOM3W7rXxT2Mk 6eZ7rY0mP+HVNZJAr/FbrQRPL4EJQ+hVRyZjbjC1HdVwTrjclsFL847gbKnqrTM1 kX4DexuodNZIWQzOW5geUb08Z1vFewU3u4vcU+ClHIxgTlUSPlyWrNrBypi3ez6v BqqTz4H6I0CnvGk3pT6b2O8SvE6f61ia66mEEXK6Bc+cm31ELaSxU+/mMvayo8Bz qNr9xw1CxEL4FR1A1r83tabp2RHUHcbJKAggRlmmHdB3Zj3bt9m9nGhB+ze8YVz+ OnAhA/PzvFnfpzQ/1Yv92aNSxvqQm9d2xOcG4/9V+5r472haUOM= -----END CERTIFICATE-----Generated at Wed May 13 05:38:01 2026 by rpki-client