$ rpki-client -vvf rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft File: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft (raw, json) Hash identifier: fktpmvslW9Io4aDooQPHfRvvN1sfq9hex5dMeLxTh2w= Subject key identifier: D7:40:2F:78:96:D7:2D:DC:1E:14:C3:EF:10:16:E2:9C:66:4D:3F:1E Authority key identifier: DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C Certificate issuer: /CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Certificate serial: 01117659239C7686196053D6BC5F224BD210CE63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:56:39 +0000 Manifest this update: Tue 12 May 2026 22:51:39 +0000 Manifest next update: Wed 13 May 2026 23:38:39 +0000 Files and hashes: 1: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl (hash: eQ+CxEJnEaufzlIMxU+vCcLqJEGjHenXoykFi8M14jg=) 2: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: hKLPAhro/Jq1h6DXfB80L/ei9CiaAI4MnHiXFKHH4tE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:11:76:59:23:9c:76:86:19:60:53:d6:bc:5f:22:4b:d2:10:ce:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Validity Not Before: May 12 22:51:39 2026 GMT Not After : May 13 23:38:39 2026 GMT Subject: CN=D7402F7896D72DDC1E14C3EF1016E29C664D3F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:00:ee:0e:67:34:dc:f0:21:4d:5d:2e:02:7b: a4:1d:97:48:61:e9:ab:2d:19:c3:bf:40:8d:69:2c: 23:13:d1:a9:6b:17:1f:9c:41:2a:9b:0d:4a:36:f0: 91:33:d6:88:34:d6:23:42:51:e1:11:4c:74:9e:b3: 39:1e:39:91:a9:cb:29:28:77:52:fd:01:99:a7:c6: 95:7c:78:65:ea:df:99:15:80:6d:26:9d:3f:2e:72: f6:b3:50:8d:5a:78:ce:c7:9f:c8:73:67:b6:46:17: d7:57:3a:60:3f:c0:77:40:59:40:c1:08:60:d2:79: e7:06:97:2c:58:0e:ff:e0:69:36:5c:0c:2c:2f:d7: 93:51:72:4a:e1:1c:37:9e:fd:c9:be:99:6c:92:93: 43:c4:2f:97:a3:b2:6f:05:74:be:65:22:5d:d0:8f: 01:39:1c:1c:64:2f:0e:77:b2:56:b1:f4:56:a2:44: 6e:99:cd:09:90:b5:b1:05:50:f7:93:2d:1f:7b:6d: 71:85:51:cc:02:b2:f0:8b:25:69:13:ce:9a:97:0e: 27:af:d2:10:4d:54:7f:c9:f8:45:ae:16:a7:9f:b0: a4:fd:c2:d0:9e:d5:9d:34:27:ef:dc:ee:03:5b:c0: b0:4c:e7:b8:88:61:8d:9d:6f:d1:e7:2c:60:4a:1a: 83:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:40:2F:78:96:D7:2D:DC:1E:14:C3:EF:10:16:E2:9C:66:4D:3F:1E X509v3 Authority Key Identifier: keyid:DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:52:f7:6d:76:b9:ca:85:21:5d:3d:38:25:40:2f:f0:5a:40: df:ab:78:5f:95:54:73:28:a6:3b:01:5d:56:4c:9e:4d:f6:9d: ca:dd:7f:93:5c:6a:c0:58:94:1d:da:0f:b6:98:15:f2:22:d9: 1e:ce:99:d2:26:88:66:70:2f:bf:57:1d:55:b7:27:fb:ab:e4: 0b:c9:18:97:65:53:62:a5:da:de:7c:8f:b8:a7:06:c6:0e:da: ec:62:a3:be:5f:06:47:db:5e:c4:78:e3:41:13:75:a0:31:9d: 20:1e:7f:d9:0d:c0:3c:42:93:84:c3:32:55:eb:3a:fc:b4:82: 78:84:2a:f5:b9:bd:93:52:54:59:97:40:27:4a:17:57:07:d5: 90:97:5e:e6:91:27:49:44:10:ab:c7:8c:f5:49:ca:b3:32:11: 41:c8:d2:87:21:c5:66:76:ad:11:90:77:34:a1:46:d2:09:d0: bd:ba:fd:fc:6c:e3:98:fc:bc:3e:02:73:fe:8f:bd:1a:b3:1f: ad:db:a7:dc:8b:db:87:31:19:24:52:40:b9:31:d9:4b:58:59: ec:63:39:f5:a3:3b:24:00:ea:ec:54:d3:9a:4b:50:8c:9d:e4: c4:f8:89:e4:1a:9f:27:23:af:6e:76:1d:cf:65:98:74:68:b4: 17:40:d7:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUARF2WSOcdoYZYFPWvF8iS9IQzmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREExMjM0M0JCRDlGNDc5MTgyMjczQTlGN0I3RDZERDAy OThENUIxQzAeFw0yNjA1MTIyMjUxMzlaFw0yNjA1MTMyMzM4MzlaMDMxMTAvBgNV BAMTKEQ3NDAyRjc4OTZENzJEREMxRTE0QzNFRjEwMTZFMjlDNjY0RDNGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtAO4OZzTc8CFNXS4Ce6Qdl0hh 6astGcO/QI1pLCMT0alrFx+cQSqbDUo28JEz1og01iNCUeERTHSeszkeOZGpyyko d1L9AZmnxpV8eGXq35kVgG0mnT8ucvazUI1aeM7Hn8hzZ7ZGF9dXOmA/wHdAWUDB CGDSeecGlyxYDv/gaTZcDCwv15NRckrhHDee/cm+mWySk0PEL5ejsm8FdL5lIl3Q jwE5HBxkLw53slax9FaiRG6ZzQmQtbEFUPeTLR97bXGFUcwCsvCLJWkTzpqXDiev 0hBNVH/J+EWuFqefsKT9wtCe1Z00J+/c7gNbwLBM57iIYY2db9HnLGBKGoN9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU10AveJbXLdweFMPvEBbinGZNPx4wHwYDVR0j BBgwFoAU2hI0O72fR5GCJzqfe31t0CmNWxwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzM4NzRjZjMtYWRiMS00OTQ3LWE3ZTQtYTJkMzJjNTRlZDFmLzAvREExMjM0M0JC RDlGNDc5MTgyMjczQTlGN0I3RDZERDAyOThENUIxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTEyMzQzQkJEOUY0NzkxODIyNzNBOUY3QjdENkREMDI5OEQ1 QjFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzM4NzRjZjMtYWRiMS00OTQ3LWE3 ZTQtYTJkMzJjNTRlZDFmLzAvREExMjM0M0JCRDlGNDc5MTgyMjczQTlGN0I3RDZE RDAyOThENUIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlS9212ucqFIV09OCVAL/BaQN+reF+VVHMo pjsBXVZMnk32ncrdf5NcasBYlB3aD7aYFfIi2R7OmdImiGZwL79XHVW3J/ur5AvJ GJdlU2Kl2t58j7inBsYO2uxio75fBkfbXsR440ETdaAxnSAef9kNwDxCk4TDMlXr Ovy0gniEKvW5vZNSVFmXQCdKF1cH1ZCXXuaRJ0lEEKvHjPVJyrMyEUHI0ochxWZ2 rRGQdzShRtIJ0L26/fxs45j8vD4Cc/6PvRqzH63bp9yL24cxGSRSQLkx2UtYWexj OfWjOyQA6uxU05pLUIyd5MT4ieQanycjr252Hc9lmHRotBdA19o= -----END CERTIFICATE-----Generated at Wed May 13 02:58:43 2026 by rpki-client