$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft File: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft (raw, json) Hash identifier: NJKq8pVYODN3zejzcLgWSPDo5FNup0aUWj4VWUaCZNU= Subject key identifier: 88:30:3D:60:20:03:CA:3C:FA:3F:8B:51:86:75:E1:A8:03:6D:52:B6 Authority key identifier: DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C Certificate issuer: /CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Certificate serial: 43B69DDC919F3ED4BED30843F368C97323B04584 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 22:49:15 +0000 Manifest this update: Wed 23 Sep 2026 22:44:15 +0000 Manifest next update: Fri 25 Sep 2026 02:07:15 +0000 Files and hashes: 1: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl (hash: W2VSdAj7RGB0dIHDcaV29+qrEa9kuO+i0jGLAR+mzCE=) 2: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: hKLPAhro/Jq1h6DXfB80L/ei9CiaAI4MnHiXFKHH4tE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b6:9d:dc:91:9f:3e:d4:be:d3:08:43:f3:68:c9:73:23:b0:45:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Validity Not Before: Sep 23 22:44:15 2026 GMT Not After : Sep 25 02:07:15 2026 GMT Subject: CN=88303D602003CA3CFA3F8B518675E1A8036D52B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8b:67:6d:af:35:01:0b:0a:c1:95:b9:b6:1a: 64:c6:5d:c8:26:43:4f:8e:a4:8d:f0:00:fe:da:69: f2:48:0b:d7:dd:71:a3:73:c0:f0:22:e7:d9:cd:08: 66:14:da:0f:9a:12:c0:c8:58:eb:bd:b3:80:30:f0: ec:95:50:0f:d5:e7:38:55:37:9e:da:1b:18:5b:33: b8:84:6e:88:10:50:29:90:6a:be:fe:89:13:c1:2e: 0f:55:f5:b5:a1:5a:c6:e1:2f:7e:0d:e9:93:de:4f: 81:33:ff:e8:89:22:94:c2:05:46:d4:ef:f6:dc:9b: 52:39:b9:04:f6:e2:c2:d0:ed:b7:18:a1:4d:4d:2c: 35:2a:2f:bc:5d:a4:f2:e0:12:77:6f:75:c3:1c:c4: 68:03:06:04:1d:62:b6:38:d3:a8:43:b0:1a:f2:67: 1e:db:d2:bb:fe:7d:ac:0c:92:7e:09:da:27:3b:b8: a5:d1:de:4c:96:88:62:b1:5b:22:10:92:22:42:7f: 3f:6d:e5:09:31:0d:2e:88:cf:68:96:57:bf:da:13: 35:82:86:46:a1:2b:b1:4c:61:3f:9f:93:94:3c:fd: 87:0c:48:25:f7:60:ae:5d:c1:86:db:a2:42:bb:dd: de:46:36:db:01:f8:89:ed:bd:13:c4:20:48:d9:fc: 8b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:30:3D:60:20:03:CA:3C:FA:3F:8B:51:86:75:E1:A8:03:6D:52:B6 X509v3 Authority Key Identifier: keyid:DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:99:f5:87:70:33:6e:fd:90:88:2f:3f:9e:9d:5e:23:45:e8: db:f1:4d:c2:f6:01:24:f1:6d:8b:15:66:10:f2:46:d9:28:9f: e6:2f:d4:7b:c6:52:98:e6:29:f5:f4:ec:4a:45:b2:65:77:52: f8:a5:a2:a2:34:fc:85:10:a1:17:b6:f3:44:62:d9:04:fb:ca: 40:36:1a:48:be:c3:ff:87:88:7c:a8:24:a8:46:f2:0a:ce:93: a1:d5:95:72:04:35:8e:f8:e5:70:76:c6:97:73:4c:23:8d:e0: f8:e9:1b:fc:55:08:d5:1c:77:45:a5:e0:f8:d7:bb:69:99:c0: 41:b5:ab:73:25:1b:57:3c:8f:db:00:13:f4:5f:fd:74:bb:06: 7f:d6:02:f6:2d:89:93:70:ef:70:c4:ad:c0:d9:6f:ff:02:62: e4:06:58:3a:4d:09:49:b1:f7:b9:36:9f:1f:95:59:90:5d:3a: f2:38:6d:5d:00:ef:e7:88:79:ec:44:ec:97:1c:93:60:f7:9d: 2c:93:97:f6:8b:39:82:78:7f:d0:6c:7b:9d:00:da:fb:da:26: 90:8a:d3:05:ce:a9:a1:96:7b:bb:2e:4c:3e:69:10:e4:fc:2a: d1:22:33:2f:3a:ff:ba:36:f9:0a:14:9c:a8:cd:92:f9:6c:49: f0:ff:bd:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ7ad3JGfPtS+0whD82jJcyOwRYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREExMjM0M0JCRDlGNDc5MTgyMjczQTlGN0I3RDZERDAy OThENUIxQzAeFw0yNjA5MjMyMjQ0MTVaFw0yNjA5MjUwMjA3MTVaMDMxMTAvBgNV BAMTKDg4MzAzRDYwMjAwM0NBM0NGQTNGOEI1MTg2NzVFMUE4MDM2RDUyQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1i2dtrzUBCwrBlbm2GmTGXcgm Q0+OpI3wAP7aafJIC9fdcaNzwPAi59nNCGYU2g+aEsDIWOu9s4Aw8OyVUA/V5zhV N57aGxhbM7iEbogQUCmQar7+iRPBLg9V9bWhWsbhL34N6ZPeT4Ez/+iJIpTCBUbU 7/bcm1I5uQT24sLQ7bcYoU1NLDUqL7xdpPLgEndvdcMcxGgDBgQdYrY406hDsBry Zx7b0rv+fawMkn4J2ic7uKXR3kyWiGKxWyIQkiJCfz9t5QkxDS6Iz2iWV7/aEzWC hkahK7FMYT+fk5Q8/YcMSCX3YK5dwYbbokK73d5GNtsB+IntvRPEIEjZ/IsDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiDA9YCADyjz6P4tRhnXhqANtUrYwHwYDVR0j BBgwFoAU2hI0O72fR5GCJzqfe31t0CmNWxwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzM4NzRjZjMtYWRiMS00OTQ3LWE3ZTQtYTJkMzJjNTRlZDFmLzAvREExMjM0M0JC RDlGNDc5MTgyMjczQTlGN0I3RDZERDAyOThENUIxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTEyMzQzQkJEOUY0NzkxODIyNzNBOUY3QjdENkREMDI5OEQ1 QjFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzM4NzRjZjMtYWRiMS00OTQ3LWE3 ZTQtYTJkMzJjNTRlZDFmLzAvREExMjM0M0JCRDlGNDc5MTgyMjczQTlGN0I3RDZE RDAyOThENUIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOZ9YdwM279kIgvP56dXiNF6NvxTcL2ASTx bYsVZhDyRtkon+Yv1HvGUpjmKfX07EpFsmV3UviloqI0/IUQoRe280Ri2QT7ykA2 Gki+w/+HiHyoJKhG8grOk6HVlXIENY745XB2xpdzTCON4PjpG/xVCNUcd0Wl4PjX u2mZwEG1q3MlG1c8j9sAE/Rf/XS7Bn/WAvYtiZNw73DErcDZb/8CYuQGWDpNCUmx 97k2nx+VWZBdOvI4bV0A7+eIeexE7Jcck2D3nSyTl/aLOYJ4f9Bse50A2vvaJpCK 0wXOqaGWe7suTD5pEOT8KtEiMy86/7o2+QoUnKjNkvlsSfD/vfk= -----END CERTIFICATE-----Generated at Thu Sep 24 12:20:31 2026 by rpki-client