$ rpki-client -vvvf rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft File: DA20692305010D31E154AE60F41C822DD2D6CECC.mft (raw, json) Hash identifier: oXNVZPBizzCYy9YpQXdTwiJvY7Zchjag8/nxMC81RCw= Subject key identifier: 74:7C:41:9C:33:C9:76:7B:75:40:C5:77:C7:2D:BE:40:EA:7D:32:62 Authority key identifier: DA:20:69:23:05:01:0D:31:E1:54:AE:60:F4:1C:82:2D:D2:D6:CE:CC Certificate issuer: /CN=DA20692305010D31E154AE60F41C822DD2D6CECC Certificate serial: 68BC78385961CA7D99336CC14B46E7E7AC6013B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 19:04:33 +0000 Manifest this update: Wed 23 Sep 2026 18:59:33 +0000 Manifest next update: Thu 24 Sep 2026 19:57:33 +0000 Files and hashes: 1: DA20692305010D31E154AE60F41C822DD2D6CECC.crl (hash: ffn9xG137y4ch7zTkgXTRCL764Pzb31DEV19F12oDsc=) 2: 3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (hash: agruC/We/sLJTlhbwSnl6x4MYxmzcCS3rf7w9cYqIto=) 3: 3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (hash: aQMTJYE8nMh07FLcvIjiQtwhdByf/7nyD/zkKRD7jaM=) 4: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (hash: o8gOkqGVnHiHCblL7s8ySrSdxhRCwAVnszXZYwnxcmY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.crl rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:bc:78:38:59:61:ca:7d:99:33:6c:c1:4b:46:e7:e7:ac:60:13:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA20692305010D31E154AE60F41C822DD2D6CECC Validity Not Before: Sep 23 18:59:33 2026 GMT Not After : Sep 24 19:57:33 2026 GMT Subject: CN=747C419C33C9767B7540C577C72DBE40EA7D3262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:9a:59:32:67:f6:c7:22:1e:c9:b0:9f:09: a2:5b:fa:51:db:b5:fc:87:9f:9e:72:4d:a4:8d:9b: 0d:11:37:86:29:45:c2:d6:42:af:af:5a:82:a1:de: e0:72:f2:5b:b2:97:93:e7:bc:92:53:ef:1d:55:1a: b2:c7:52:48:05:9a:27:8e:4e:66:02:84:77:88:89: 03:7b:70:22:71:5d:36:99:23:f0:4d:75:f4:9c:d5: a2:e5:4f:e5:5f:68:81:c4:00:05:72:ec:a6:7f:ed: 1f:bc:80:c3:2e:3b:4d:a4:04:da:14:97:23:7c:d5: 0e:04:23:42:3c:d7:3b:2b:4c:88:4c:f2:c8:0a:e7: b7:84:99:63:b3:c6:99:30:9d:07:50:01:b9:99:58: 16:e4:a2:6e:41:20:8a:14:5c:63:fb:f0:27:af:0f: b7:06:31:c8:0d:34:1b:7e:c1:a3:2a:ff:7e:a8:31: a4:96:f1:85:3b:36:f7:dd:5d:2e:31:ab:87:02:96: 23:8d:d0:b4:ac:f3:f0:c6:36:e7:a5:1f:55:82:97: bb:df:ac:83:b2:3c:07:3e:9e:94:e5:a6:60:7f:be: 4c:66:24:3e:28:29:f5:a0:23:10:12:71:c6:ba:ce: 09:91:02:26:f7:03:31:0a:af:a8:1d:b0:6b:a3:d8: 7d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7C:41:9C:33:C9:76:7B:75:40:C5:77:C7:2D:BE:40:EA:7D:32:62 X509v3 Authority Key Identifier: keyid:DA:20:69:23:05:01:0D:31:E1:54:AE:60:F4:1C:82:2D:D2:D6:CE:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:40:29:d4:db:f7:21:8a:5f:75:eb:2f:31:94:7b:c6:78:ac: 16:2c:64:0c:88:98:ba:b2:d4:56:a1:ad:aa:33:81:90:fa:f2: 2f:83:08:fc:36:19:b6:ad:e4:59:a5:d1:71:67:2a:20:91:45: b6:d9:07:c4:2b:41:84:7d:27:dd:7a:78:83:e8:e5:02:95:28: 13:e9:78:ec:f9:af:59:55:46:1f:6a:a9:0e:53:a0:05:e2:ab: 48:7d:6e:65:6f:1c:bb:62:8c:35:f3:44:ad:1e:11:55:27:5c: fe:bd:67:e8:4a:d6:99:bf:65:5d:e9:41:d7:0d:b8:2d:6f:0e: bc:d9:aa:af:a2:26:8d:c3:6c:60:11:e7:a3:cb:10:37:5c:e0: 20:0c:d7:c6:50:31:2d:39:45:f8:62:a8:51:89:62:6d:d4:6d: 00:c0:2e:a3:bd:ac:80:79:f5:e0:ad:1b:e1:6f:f3:6e:e5:bf: 5c:a6:8d:95:2a:40:fb:00:bf:e4:16:50:90:b8:de:2a:bf:43: 0f:99:a7:63:f9:48:6c:61:aa:6d:9d:3c:c4:72:28:4a:63:f6: 7f:e3:0d:09:21:cb:e6:8c:97:91:5e:56:e8:6b:83:33:01:85: d2:99:5a:4c:42:f3:3b:17:8a:60:c4:a9:68:a0:4c:45:d9:ca: a5:3d:76:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaLx4OFlhyn2ZM2zBS0bn56xgE7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEyMDY5MjMwNTAxMEQzMUUxNTRBRTYwRjQxQzgyMkRE MkQ2Q0VDQzAeFw0yNjA5MjMxODU5MzNaFw0yNjA5MjQxOTU3MzNaMDMxMTAvBgNV BAMTKDc0N0M0MTlDMzNDOTc2N0I3NTQwQzU3N0M3MkRCRTQwRUE3RDMyNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+ppZMmf2xyIeybCfCaJb+lHb tfyHn55yTaSNmw0RN4YpRcLWQq+vWoKh3uBy8luyl5PnvJJT7x1VGrLHUkgFmieO TmYChHeIiQN7cCJxXTaZI/BNdfSc1aLlT+VfaIHEAAVy7KZ/7R+8gMMuO02kBNoU lyN81Q4EI0I81zsrTIhM8sgK57eEmWOzxpkwnQdQAbmZWBbkom5BIIoUXGP78Cev D7cGMcgNNBt+waMq/36oMaSW8YU7NvfdXS4xq4cCliON0LSs8/DGNuelH1WCl7vf rIOyPAc+npTlpmB/vkxmJD4oKfWgIxAScca6zgmRAib3AzEKr6gdsGuj2H3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdHxBnDPJdnt1QMV3xy2+QOp9MmIwHwYDVR0j BBgwFoAU2iBpIwUBDTHhVK5g9ByCLdLWzswwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzdmMmMxOTAtMzBmNS00ZjE5LWJmY2EtMGI5ODdhNTJmZDU1LzAvREEyMDY5MjMw NTAxMEQzMUUxNTRBRTYwRjQxQzgyMkREMkQ2Q0VDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTIwNjkyMzA1MDEwRDMxRTE1NEFFNjBGNDFDODIyREQyRDZD RUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzdmMmMxOTAtMzBmNS00ZjE5LWJm Y2EtMGI5ODdhNTJmZDU1LzAvREEyMDY5MjMwNTAxMEQzMUUxNTRBRTYwRjQxQzgy MkREMkQ2Q0VDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdAKdTb9yGKX3XrLzGUe8Z4rBYsZAyImLqy 1FahraozgZD68i+DCPw2Gbat5Fml0XFnKiCRRbbZB8QrQYR9J916eIPo5QKVKBPp eOz5r1lVRh9qqQ5ToAXiq0h9bmVvHLtijDXzRK0eEVUnXP69Z+hK1pm/ZV3pQdcN uC1vDrzZqq+iJo3DbGAR56PLEDdc4CAM18ZQMS05RfhiqFGJYm3UbQDALqO9rIB5 9eCtG+Fv827lv1ymjZUqQPsAv+QWUJC43iq/Qw+Zp2P5SGxhqm2dPMRyKEpj9n/j DQkhy+aMl5FeVuhrgzMBhdKZWkxC8zsXimDEqWigTEXZyqU9doM= -----END CERTIFICATE-----Generated at Wed Sep 23 23:14:57 2026 by rpki-client