$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft File: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft (raw, json) Hash identifier: FUvE7sAir/Yl+ZV/EKUwcFFDMNlkQ754DW6hOQFgNow= Subject key identifier: 51:13:F6:D8:6F:89:6E:6D:09:EE:B7:BA:EA:7A:37:75:D5:90:4F:9A Authority key identifier: DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 Certificate issuer: /CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Certificate serial: 620E0FBD8598E7AC150A0B670376A13808998652 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 22:49:14 +0000 Manifest this update: Wed 23 Sep 2026 22:44:14 +0000 Manifest next update: Fri 25 Sep 2026 01:20:14 +0000 Files and hashes: 1: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl (hash: WFgalcUZdzABcHVEwI5Ms53PLue9Z370jwNAs8hmik4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0e:0f:bd:85:98:e7:ac:15:0a:0b:67:03:76:a1:38:08:99:86:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Validity Not Before: Sep 23 22:44:14 2026 GMT Not After : Sep 25 01:20:14 2026 GMT Subject: CN=5113F6D86F896E6D09EEB7BAEA7A3775D5904F9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9b:22:a5:38:f3:e1:e6:02:99:7d:c5:da:89: 6f:94:7e:2d:70:a9:da:14:f9:3c:26:94:8c:4c:21: 7c:12:d2:04:9e:db:6e:2a:5e:d7:0c:8c:a3:a8:99: 7d:0d:08:51:6d:4f:9c:6d:34:6f:59:7d:19:1c:5e: 3f:1a:09:dc:aa:4a:af:5d:58:60:54:84:db:8d:76: 7c:cf:a5:d8:d5:c2:11:58:93:9e:22:07:05:27:84: c3:1f:12:4d:6d:f0:74:dd:17:81:f5:f4:f8:98:f8: 3f:bd:ef:b5:07:ab:43:75:04:8b:f8:64:f4:36:8a: 12:cd:20:0d:83:73:ea:8a:d2:ea:d3:cf:ba:01:87: c4:ce:96:c8:93:e3:0e:d1:e8:9c:2e:ed:4a:86:4e: ae:84:b3:89:80:c2:cc:bb:49:11:47:97:1a:7f:61: 8f:d9:df:8f:7e:b3:70:3b:ae:9c:30:9c:47:36:94: 11:8f:0b:65:fc:21:9a:a8:7e:c2:c7:42:52:cb:0a: 1b:b6:d3:ba:f1:1f:c4:7e:cd:8f:0c:af:23:9e:9c: 27:5f:74:f8:22:53:bb:fd:b7:f4:a8:9e:c5:14:e4: ee:17:11:1b:fb:1f:be:41:10:39:8a:7c:47:eb:35: 7d:df:81:43:56:00:21:e3:93:74:08:73:cb:02:a0: 95:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:13:F6:D8:6F:89:6E:6D:09:EE:B7:BA:EA:7A:37:75:D5:90:4F:9A X509v3 Authority Key Identifier: keyid:DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:76:d6:e4:3c:25:26:d0:22:53:6d:09:60:49:5f:37:1e:ce: e7:62:3f:61:48:44:09:b8:dc:d4:0a:5f:8a:1a:69:94:af:bf: 7e:eb:c5:e1:01:b2:5c:8a:45:ab:8f:57:74:ef:c0:06:b1:cd: 04:19:67:1d:46:26:19:76:45:6e:d3:b7:b4:25:49:df:2d:96: 4b:aa:3a:15:3d:f1:ae:82:9d:9a:c5:3b:0c:e1:4c:dd:33:20: bb:ea:9c:0e:84:12:b5:09:b1:9a:84:ec:c6:7d:72:68:04:ca: d2:7f:2b:26:cf:68:7e:eb:ff:4a:7b:43:3f:7e:61:27:83:b9: 01:9f:a6:eb:16:6a:a1:88:c4:94:e4:c7:85:79:54:20:fb:cd: b9:e8:2c:1c:49:66:4d:bd:55:94:a3:2a:56:57:8d:c7:21:e4: 20:f8:18:d1:11:15:7c:00:9c:2e:10:b2:af:3a:b3:bf:7b:38: 75:a6:32:6e:08:2b:d9:76:07:80:64:a7:d8:88:c6:35:44:0a: 68:21:41:c9:e9:31:2d:d7:e3:15:a8:6e:60:74:b4:c3:da:5d: bf:69:3c:5c:df:26:75:74:00:56:70:d1:da:ec:d5:1a:b7:cf: 57:08:bc:fa:ac:96:51:50:51:29:29:71:02:68:2e:a5:0f:2f: 80:d2:3a:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYg4PvYWY56wVCgtnA3ahOAiZhlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0Mx RkM4MUNFNjAeFw0yNjA5MjMyMjQ0MTRaFw0yNjA5MjUwMTIwMTRaMDMxMTAvBgNV BAMTKDUxMTNGNkQ4NkY4OTZFNkQwOUVFQjdCQUVBN0EzNzc1RDU5MDRGOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPmyKlOPPh5gKZfcXaiW+Ufi1w qdoU+TwmlIxMIXwS0gSe224qXtcMjKOomX0NCFFtT5xtNG9ZfRkcXj8aCdyqSq9d WGBUhNuNdnzPpdjVwhFYk54iBwUnhMMfEk1t8HTdF4H19PiY+D+977UHq0N1BIv4 ZPQ2ihLNIA2Dc+qK0urTz7oBh8TOlsiT4w7R6Jwu7UqGTq6Es4mAwsy7SRFHlxp/ YY/Z349+s3A7rpwwnEc2lBGPC2X8IZqofsLHQlLLChu207rxH8R+zY8MryOenCdf dPgiU7v9t/SonsUU5O4XERv7H75BEDmKfEfrNX3fgUNWACHjk3QIc8sCoJWLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUURP22G+Jbm0J7re66no3ddWQT5owHwYDVR0j BBgwFoAU2kO1zrOE47p77iyTLYYvPB/IHOYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VC Mzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0MxRkM4MUNFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTQzQjVDRUIzODRFM0JBN0JFRTJDOTMyRDg2MkYzQzFGQzgx Q0U2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2 YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJG M0MxRkM4MUNFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFd21uQ8JSbQIlNtCWBJXzcezudiP2FIRAm4 3NQKX4oaaZSvv37rxeEBslyKRauPV3TvwAaxzQQZZx1GJhl2RW7Tt7QlSd8tlkuq OhU98a6CnZrFOwzhTN0zILvqnA6EErUJsZqE7MZ9cmgEytJ/KybPaH7r/0p7Qz9+ YSeDuQGfpusWaqGIxJTkx4V5VCD7zbnoLBxJZk29VZSjKlZXjcch5CD4GNERFXwA nC4Qsq86s797OHWmMm4IK9l2B4Bkp9iIxjVECmghQcnpMS3X4xWobmB0tMPaXb9p PFzfJnV0AFZw0drs1Rq3z1cIvPqsllFQUSkpcQJoLqUPL4DSOtk= -----END CERTIFICATE-----Generated at Thu Sep 24 04:20:52 2026 by rpki-client