$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft File: DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft (raw, json) Hash identifier: 5R9VVaaHrIUvAoA0l8efFFVeeVk+wCPkPBC/IQTHg1U= Subject key identifier: 9B:32:8F:5A:0A:41:EA:BA:76:9D:BD:3F:09:9E:DF:78:5A:9E:44:E8 Authority key identifier: DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28 Certificate issuer: /CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728 Certificate serial: 1918FD24EDCFFCF107757E0FC3B6AD1C54504E95 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 17:41:51 +0000 Manifest this update: Sat 26 Sep 2026 17:36:51 +0000 Manifest next update: Sun 27 Sep 2026 21:31:51 +0000 Files and hashes: 1: DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl (hash: imXzBoQk6IUTd84u9HQxMhD+3b+48oeBA80THozEc+c=) 2: 3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa (hash: prMxe0nmDe/VDC0+RGajULsFBb7iapYsATrUpS7D5Qc=) 3: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (hash: PVWSPZbDocSISt550/WJyHY7HuMqnPYZ4LfX4EkPasI=) 4: 3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (hash: Emh7sO7kJSNFsbIsXv30t/j66tuYFAQx0UDDDCsbvSk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:18:fd:24:ed:cf:fc:f1:07:75:7e:0f:c3:b6:ad:1c:54:50:4e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728 Validity Not Before: Sep 26 17:36:51 2026 GMT Not After : Sep 27 21:31:51 2026 GMT Subject: CN=9B328F5A0A41EABA769DBD3F099EDF785A9E44E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:57:00:25:48:c2:2d:91:38:06:53:3a:88:fb: 8d:10:d2:99:57:b6:85:22:d8:cd:55:6e:ef:62:95: b3:a5:c5:9a:8c:b9:7a:8f:a3:29:c5:53:18:da:dd: 99:bf:55:2d:22:b7:bb:de:57:48:7a:f8:ec:58:ba: 37:38:0c:b2:a5:22:7d:45:3e:d5:44:40:21:20:d9: 87:be:1c:49:ee:01:77:f7:3e:07:cd:e5:b1:23:24: de:b5:ac:8e:20:7e:d1:08:5d:1f:df:4a:63:32:05: b6:9f:bd:fb:91:61:96:02:f2:e8:e4:6b:a0:71:d2: 66:ab:58:56:85:a9:a7:8a:55:8e:93:29:32:be:a3: 43:be:63:98:a6:dc:51:35:3e:b4:fc:69:46:12:97: cf:c0:c1:1d:b3:21:d7:27:5a:69:f3:63:c0:82:97: 1d:ec:c8:2f:65:80:96:34:c3:be:01:ac:2e:c4:3c: 93:88:50:83:7e:26:e1:cc:88:13:8d:aa:7d:91:f0: 2f:ee:32:4c:63:f9:4b:77:1e:3b:f8:da:99:ab:60: 52:b4:69:37:ab:d2:33:7b:d6:a4:6b:d5:a5:3e:32: 20:c6:b5:31:cd:21:67:9d:8b:f0:15:b7:ac:c1:66: 78:b5:84:bf:ca:99:fc:41:05:47:d6:7c:fa:ef:3b: 77:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:32:8F:5A:0A:41:EA:BA:76:9D:BD:3F:09:9E:DF:78:5A:9E:44:E8 X509v3 Authority Key Identifier: keyid:DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:52:54:83:6c:c6:4d:f3:2e:14:e2:f3:7f:5a:76:0f:72:6c: 88:97:51:22:73:ac:cd:32:9b:92:ef:07:3e:50:2d:22:bb:c6: 7b:55:9c:82:6f:d5:b6:f7:e8:94:85:97:db:20:c3:b3:f2:d7: fc:d4:58:98:ee:41:b3:a7:ef:a7:95:9a:6c:e9:0e:f8:ef:26: c2:f6:57:82:97:5f:a9:e8:01:bc:5a:7b:9a:2d:89:7b:8b:aa: 7d:f9:7e:62:82:51:b3:1f:5d:f5:30:04:40:73:31:96:ea:40: 32:34:f0:3b:d3:5f:08:6a:63:90:b5:59:7c:9e:cf:b6:7e:8e: cd:86:87:05:ba:10:77:f8:4f:b5:9e:67:df:38:a8:77:23:83: 5b:71:df:18:4f:21:aa:d6:89:1f:06:5c:e1:56:d6:c9:74:22: e3:60:6c:18:08:81:ea:23:99:dd:57:50:67:f6:d3:d0:a8:d6: 40:18:e9:3f:e6:44:a5:e0:6b:b0:d7:03:39:67:0a:00:35:d0: 62:4e:4d:31:27:47:17:2b:ea:98:9a:b1:88:d7:67:62:ae:66: a1:63:56:1a:2e:51:42:fb:36:8d:1e:bf:3e:92:37:05:99:f8: 88:cf:36:1f:f0:f4:73:80:45:c9:cc:15:d6:cf:75:1b:37:ef: 52:e7:9c:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGRj9JO3P/PEHdX4Pw7atHFRQTpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4OTM2REUyM0JEMDY4RkZGOEI5RDVCMDM5MkUwMDA5 N0JBMDcyODAeFw0yNjA5MjYxNzM2NTFaFw0yNjA5MjcyMTMxNTFaMDMxMTAvBgNV BAMTKDlCMzI4RjVBMEE0MUVBQkE3NjlEQkQzRjA5OUVERjc4NUE5RTQ0RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVwAlSMItkTgGUzqI+40Q0plX toUi2M1Vbu9ilbOlxZqMuXqPoynFUxja3Zm/VS0it7veV0h6+OxYujc4DLKlIn1F PtVEQCEg2Ye+HEnuAXf3PgfN5bEjJN61rI4gftEIXR/fSmMyBbafvfuRYZYC8ujk a6Bx0marWFaFqaeKVY6TKTK+o0O+Y5im3FE1PrT8aUYSl8/AwR2zIdcnWmnzY8CC lx3syC9lgJY0w74BrC7EPJOIUIN+JuHMiBONqn2R8C/uMkxj+Ut3Hjv42pmrYFK0 aTer0jN71qRr1aU+MiDGtTHNIWedi/AVt6zBZni1hL/KmfxBBUfWfPrvO3ddAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmzKPWgpB6rp2nb0/CZ7feFqeROgwHwYDVR0j BBgwFoAU2ok23iO9Bo//i51bA5LgAJe6BygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZhYTNiZWItNTc2MS00YzM0LTg4ZDMtMDE1Y2NjNjQwMDJmLzAvREE4OTM2REUy M0JEMDY4RkZGOEI5RDVCMDM5MkUwMDA5N0JBMDcyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTg5MzZERTIzQkQwNjhGRkY4QjlENUIwMzkyRTAwMDk3QkEw NzI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZhYTNiZWItNTc2MS00YzM0LTg4 ZDMtMDE1Y2NjNjQwMDJmLzAvREE4OTM2REUyM0JEMDY4RkZGOEI5RDVCMDM5MkUw MDA5N0JBMDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRSVINsxk3zLhTi839adg9ybIiXUSJzrM0y m5LvBz5QLSK7xntVnIJv1bb36JSFl9sgw7Py1/zUWJjuQbOn76eVmmzpDvjvJsL2 V4KXX6noAbxae5otiXuLqn35fmKCUbMfXfUwBEBzMZbqQDI08DvTXwhqY5C1WXye z7Z+js2GhwW6EHf4T7WeZ984qHcjg1tx3xhPIarWiR8GXOFW1sl0IuNgbBgIgeoj md1XUGf209Co1kAY6T/mRKXga7DXAzlnCgA10GJOTTEnRxcr6piasYjXZ2KuZqFj VhouUUL7No0evz6SNwWZ+IjPNh/w9HOARcnMFdbPdRs371LnnAM= -----END CERTIFICATE-----Generated at Sun Sep 27 09:57:25 2026 by rpki-client