$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft File: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft (raw, json) Hash identifier: yDEwFeVZIMeMBs9DoPA8KQgJX3hy1GqSbFi0zpj3Xg4= Subject key identifier: AF:C2:8D:8B:A9:5F:26:CC:D4:8E:1C:85:98:F1:08:FA:6F:A5:1A:38 Authority key identifier: DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 Certificate issuer: /CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Certificate serial: 4688C710A4C5FF81035B6484939B88DF9EB92223 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 09:26:13 +0000 Manifest this update: Sat 14 Nov 2026 09:21:13 +0000 Manifest next update: Sun 15 Nov 2026 09:29:13 +0000 Files and hashes: 1: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl (hash: IQo7xQFZhhJ+sY+hvPlI2KmIMHSGopdkuv2DCy/MIDk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 09:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:88:c7:10:a4:c5:ff:81:03:5b:64:84:93:9b:88:df:9e:b9:22:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Validity Not Before: Nov 14 09:21:13 2026 GMT Not After : Nov 15 09:29:13 2026 GMT Subject: CN=AFC28D8BA95F26CCD48E1C8598F108FA6FA51A38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0f:f8:c8:0a:ec:0a:fa:4b:03:c4:56:8e:42: fa:72:a7:51:b1:37:05:b1:fd:a0:0f:de:72:b1:3e: dc:b7:df:fd:dd:20:33:f5:37:a0:b3:13:c1:02:c8: bc:77:9d:c1:90:2e:dc:99:b0:b3:d6:66:46:dd:25: 40:5f:bb:3f:e4:ec:77:a6:6e:0a:cb:09:94:84:4c: ae:39:d8:12:73:ac:e1:4d:a9:dd:8f:72:23:d9:eb: 09:03:da:87:59:00:b3:0f:44:ca:0a:80:33:26:d4: fe:c8:df:d4:12:7e:af:5a:6a:68:50:6c:e6:ce:4f: 5b:7a:34:05:21:88:f8:26:43:ee:22:cf:fb:2a:9e: 5a:d3:b4:b8:e4:74:e9:01:bb:ce:cf:b5:4f:93:8f: 88:07:f2:74:00:4b:33:08:5d:d7:34:a4:33:6a:19: 65:98:79:50:e3:8c:b3:dd:4c:19:d4:b9:bb:50:9a: 31:b9:c1:c2:59:8a:34:58:48:cb:0f:d5:32:f4:7f: 99:4b:1a:d5:b4:b2:1d:0a:78:e6:2a:1d:e4:dc:0b: c0:85:98:80:52:32:76:0c:c2:82:9c:16:df:2d:28: eb:d8:ad:21:55:a3:ab:ca:f1:aa:4c:08:1c:b1:22: 33:b4:37:ac:74:db:e0:d0:7b:7c:f1:1d:37:ab:4d: bf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C2:8D:8B:A9:5F:26:CC:D4:8E:1C:85:98:F1:08:FA:6F:A5:1A:38 X509v3 Authority Key Identifier: keyid:DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:28:13:59:e0:7c:58:9a:7c:64:6e:7c:fe:09:f5:98:93:72: a0:11:0f:c6:a1:48:1b:ef:07:78:67:df:45:3b:62:c6:2d:b4: 99:f3:f8:0f:b2:d6:d5:c1:f8:5b:34:7d:61:41:d0:9d:0e:b6: f7:df:0a:0b:ca:08:9b:c0:74:c0:dd:f5:66:9f:38:91:16:77: 30:46:b4:9e:e1:3f:28:07:2c:85:7e:d0:1b:87:0b:a9:28:51: 87:89:0b:24:af:9f:05:83:db:16:b9:0a:41:c8:99:56:92:c1: 8f:29:fc:96:73:03:1c:f5:a9:0a:30:47:40:e1:da:d0:db:38: eb:09:0c:3c:11:f0:47:55:0b:45:1f:14:59:71:cd:4d:31:2e: 84:50:e8:e9:9e:f0:9f:26:04:50:be:02:dc:ae:e4:c3:de:70: df:3a:90:7c:6e:d1:89:24:83:d5:bc:85:1b:88:96:44:93:88: 05:b9:a0:f8:90:b6:12:bd:23:2c:ec:92:31:db:e9:7c:0d:63: 67:96:e7:3a:0b:f0:fe:e9:d7:be:e4:f0:70:25:3c:56:53:8e: e3:4b:85:57:0e:3c:97:1b:19:91:99:63:e6:27:b5:68:b7:9c: 67:3d:5a:66:19:3a:91:9e:35:7c:fc:d9:ac:cb:87:a8:72:e1: 64:6f:0d:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURojHEKTF/4EDW2SEk5uI3565IiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0Mx RkM4MUNFNjAeFw0yNjExMTQwOTIxMTNaFw0yNjExMTUwOTI5MTNaMDMxMTAvBgNV BAMTKEFGQzI4RDhCQTk1RjI2Q0NENDhFMUM4NTk4RjEwOEZBNkZBNTFBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHD/jICuwK+ksDxFaOQvpyp1Gx NwWx/aAP3nKxPty33/3dIDP1N6CzE8ECyLx3ncGQLtyZsLPWZkbdJUBfuz/k7Hem bgrLCZSETK452BJzrOFNqd2PciPZ6wkD2odZALMPRMoKgDMm1P7I39QSfq9aamhQ bObOT1t6NAUhiPgmQ+4iz/sqnlrTtLjkdOkBu87PtU+Tj4gH8nQASzMIXdc0pDNq GWWYeVDjjLPdTBnUubtQmjG5wcJZijRYSMsP1TL0f5lLGtW0sh0KeOYqHeTcC8CF mIBSMnYMwoKcFt8tKOvYrSFVo6vK8apMCByxIjO0N6x02+DQe3zxHTerTb8nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr8KNi6lfJszUjhyFmPEI+m+lGjgwHwYDVR0j BBgwFoAU2kO1zrOE47p77iyTLYYvPB/IHOYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VC Mzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0MxRkM4MUNFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTQzQjVDRUIzODRFM0JBN0JFRTJDOTMyRDg2MkYzQzFGQzgx Q0U2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2 YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJG M0MxRkM4MUNFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQoE1ngfFiafGRufP4J9ZiTcqARD8ahSBvv B3hn30U7YsYttJnz+A+y1tXB+Fs0fWFB0J0OtvffCgvKCJvAdMDd9WafOJEWdzBG tJ7hPygHLIV+0BuHC6koUYeJCySvnwWD2xa5CkHImVaSwY8p/JZzAxz1qQowR0Dh 2tDbOOsJDDwR8EdVC0UfFFlxzU0xLoRQ6Ome8J8mBFC+Atyu5MPecN86kHxu0Ykk g9W8hRuIlkSTiAW5oPiQthK9IyzskjHb6XwNY2eW5zoL8P7p177k8HAlPFZTjuNL hVcOPJcbGZGZY+YntWi3nGc9WmYZOpGeNXz82azLh6hy4WRvDWg= -----END CERTIFICATE-----Generated at Sat Nov 14 22:25:35 2026 by rpki-client