$ rpki-client -vvf rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft File: DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft (raw, json) Hash identifier: M90VxF6zmFrhSt30kmNyr6vjDS1bkNC9SIBHRXsYfJg= Subject key identifier: 78:C3:4B:D3:66:34:05:F9:20:41:D9:1A:07:ED:0D:8A:F9:53:89:54 Authority key identifier: DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28 Certificate issuer: /CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728 Certificate serial: 68190EDE36E3EDBD060AABB0F0969821856443AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:26:10 +0000 Manifest this update: Thu 23 Jul 2026 21:21:10 +0000 Manifest next update: Sat 25 Jul 2026 00:33:10 +0000 Files and hashes: 1: DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl (hash: rxbhRNQuI0gK5N+8wM2DGvFkpzwZYfxsRETqBceaV2c=) 2: 3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (hash: Emh7sO7kJSNFsbIsXv30t/j66tuYFAQx0UDDDCsbvSk=) 3: 3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa (hash: prMxe0nmDe/VDC0+RGajULsFBb7iapYsATrUpS7D5Qc=) 4: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (hash: PVWSPZbDocSISt550/WJyHY7HuMqnPYZ4LfX4EkPasI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:19:0e:de:36:e3:ed:bd:06:0a:ab:b0:f0:96:98:21:85:64:43:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728 Validity Not Before: Jul 23 21:21:10 2026 GMT Not After : Jul 25 00:33:10 2026 GMT Subject: CN=78C34BD3663405F92041D91A07ED0D8AF9538954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:5e:cc:2a:2c:5d:ba:e6:74:66:c8:99:6d: bd:34:a6:b6:67:e4:a2:fc:a0:e9:94:56:62:81:83: c4:25:79:1a:bb:f8:d9:29:53:d8:f3:75:67:7e:db: ad:33:1a:05:38:e1:06:2d:f9:d7:7e:8c:96:03:2c: 80:aa:d7:b2:cd:43:9e:62:2f:74:e3:54:0a:42:84: 6d:d5:5b:c5:59:6e:74:60:a3:40:c8:27:5f:1c:64: 75:f0:3b:95:fa:ef:ea:14:1c:4d:68:b6:0d:ca:e9: ec:8d:3a:ed:21:f7:35:bc:4b:49:c6:1e:2a:b6:37: 39:75:d9:a2:9b:70:95:33:e1:90:c2:66:d2:bc:df: 15:04:92:32:7e:ff:d2:f7:35:44:41:89:38:33:0f: 0a:9e:e0:ba:7e:b2:7d:89:a1:6d:92:d2:e0:b3:37: be:92:21:05:27:cb:6a:d1:bf:9b:eb:4e:ae:20:3e: bd:c5:0d:c7:00:cb:cf:bb:6f:c3:13:18:5b:73:46: 99:99:72:f6:26:0d:a9:48:2b:e4:d1:de:5c:c4:ba: b4:04:1c:bb:a1:99:34:e7:24:d2:65:71:21:2e:33: f9:87:f9:1e:37:de:73:5a:5f:04:46:5f:47:ba:6c: e3:e8:0e:6a:b6:89:b8:b6:38:cc:92:b3:71:91:0e: c3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C3:4B:D3:66:34:05:F9:20:41:D9:1A:07:ED:0D:8A:F9:53:89:54 X509v3 Authority Key Identifier: keyid:DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:34:7a:a1:ac:cb:61:e2:8e:ed:e0:4b:65:f7:7d:1e:b1:d5: 46:20:98:f6:c1:cb:50:14:37:8e:8e:ff:51:a7:cd:2a:46:bb: 69:3f:be:e9:ac:d5:f6:61:88:f0:6d:ce:a6:82:e3:d5:71:15: 2d:d7:e0:76:fe:78:04:85:ad:f2:ad:b4:26:6d:ea:38:14:fd: 03:01:56:6a:f4:91:6b:44:f6:33:b2:59:a4:c7:ea:81:40:47: e7:56:9c:4f:9b:fc:0f:fd:27:8d:7d:b0:15:90:ec:5c:28:cb: 53:08:ea:be:6e:e3:e4:ad:32:64:fd:3d:c0:26:b0:cc:aa:e2: 6b:c6:b0:12:f3:72:7f:fc:a3:33:61:29:45:31:5d:43:c5:c2: aa:05:10:fb:2c:42:eb:ee:b2:17:6f:cf:d1:47:fe:fa:4d:9e: 6c:4f:0a:b1:51:5e:27:84:13:89:29:4f:be:7d:07:1f:c3:4f: 44:c4:5e:dd:32:6f:fa:a2:c9:85:bb:ec:93:61:e5:0a:7c:d2: b3:b8:cf:65:90:92:e2:90:c9:2d:89:31:90:4b:90:14:ad:27: ac:44:c0:f3:0e:4c:e4:0e:a8:39:92:68:12:f5:12:5f:c5:da: 5e:30:a9:ab:3b:e9:e9:62:f1:88:ae:aa:b0:49:34:35:38:25: a0:26:1c:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaBkO3jbj7b0GCquw8JaYIYVkQ6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4OTM2REUyM0JEMDY4RkZGOEI5RDVCMDM5MkUwMDA5 N0JBMDcyODAeFw0yNjA3MjMyMTIxMTBaFw0yNjA3MjUwMDMzMTBaMDMxMTAvBgNV BAMTKDc4QzM0QkQzNjYzNDA1RjkyMDQxRDkxQTA3RUQwRDhBRjk1Mzg5NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3g17MKixduuZ0ZsiZbb00prZn 5KL8oOmUVmKBg8QleRq7+NkpU9jzdWd+260zGgU44QYt+dd+jJYDLICq17LNQ55i L3TjVApChG3VW8VZbnRgo0DIJ18cZHXwO5X67+oUHE1otg3K6eyNOu0h9zW8S0nG Hiq2Nzl12aKbcJUz4ZDCZtK83xUEkjJ+/9L3NURBiTgzDwqe4Lp+sn2JoW2S0uCz N76SIQUny2rRv5vrTq4gPr3FDccAy8+7b8MTGFtzRpmZcvYmDalIK+TR3lzEurQE HLuhmTTnJNJlcSEuM/mH+R433nNaXwRGX0e6bOPoDmq2ibi2OMySs3GRDsMdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeMNL02Y0BfkgQdkaB+0NivlTiVQwHwYDVR0j BBgwFoAU2ok23iO9Bo//i51bA5LgAJe6BygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZhYTNiZWItNTc2MS00YzM0LTg4ZDMtMDE1Y2NjNjQwMDJmLzAvREE4OTM2REUy M0JEMDY4RkZGOEI5RDVCMDM5MkUwMDA5N0JBMDcyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTg5MzZERTIzQkQwNjhGRkY4QjlENUIwMzkyRTAwMDk3QkEw NzI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZhYTNiZWItNTc2MS00YzM0LTg4 ZDMtMDE1Y2NjNjQwMDJmLzAvREE4OTM2REUyM0JEMDY4RkZGOEI5RDVCMDM5MkUw MDA5N0JBMDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC00eqGsy2Hiju3gS2X3fR6x1UYgmPbBy1AU N46O/1GnzSpGu2k/vums1fZhiPBtzqaC49VxFS3X4Hb+eASFrfKttCZt6jgU/QMB Vmr0kWtE9jOyWaTH6oFAR+dWnE+b/A/9J419sBWQ7Fwoy1MI6r5u4+StMmT9PcAm sMyq4mvGsBLzcn/8ozNhKUUxXUPFwqoFEPssQuvushdvz9FH/vpNnmxPCrFRXieE E4kpT759Bx/DT0TEXt0yb/qiyYW77JNh5Qp80rO4z2WQkuKQyS2JMZBLkBStJ6xE wPMOTOQOqDmSaBL1El/F2l4wqas76eli8YiuqrBJNDU4JaAmHKI= -----END CERTIFICATE-----Generated at Fri Jul 24 12:44:39 2026 by rpki-client