$ rpki-client -vvf rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft File: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft (raw, json) Hash identifier: H9BbNE+rgIMb6ZQAL/VLmw9VLdavObnTe74Jz5MLRJA= Subject key identifier: 6A:8B:15:9C:D6:78:31:E6:B2:FB:8C:16:BA:48:7F:FA:5D:FC:26:84 Authority key identifier: DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 Certificate issuer: /CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Certificate serial: 0F3D29FF962E6DFB0141E296DCED641109429FC8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 02:17:07 +0000 Manifest this update: Fri 24 Jul 2026 02:12:07 +0000 Manifest next update: Sat 25 Jul 2026 04:27:07 +0000 Files and hashes: 1: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl (hash: ybKPYRJ6EBuADlZq3XZkSyu1LZ0mtGO5+LeIRrjPiVA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:3d:29:ff:96:2e:6d:fb:01:41:e2:96:dc:ed:64:11:09:42:9f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Validity Not Before: Jul 24 02:12:07 2026 GMT Not After : Jul 25 04:27:07 2026 GMT Subject: CN=6A8B159CD67831E6B2FB8C16BA487FFA5DFC2684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2d:ab:d1:c9:ff:92:5f:26:ae:22:19:cd:f9: 48:1a:61:14:5e:73:45:4a:75:13:8f:14:a0:de:02: a5:b0:7f:73:c6:83:3c:9f:25:24:af:53:9c:20:5d: 77:2e:1b:e0:28:75:13:9d:50:bf:e2:a7:62:22:ed: 20:bc:50:73:76:42:51:e0:d3:c2:1c:53:1b:a0:25: c0:58:77:78:7a:c7:fc:cb:e3:0d:c6:d5:fa:72:0e: 7c:95:b5:40:b5:17:0b:25:90:e2:53:72:b3:68:2a: df:19:61:f7:89:35:0c:a1:84:2f:d2:41:67:04:65: ec:27:ad:36:f3:1d:3e:a5:e9:f7:bf:de:9b:88:2f: 40:cf:b3:35:92:3a:d1:42:46:90:f1:db:1a:eb:40: 6a:7f:9b:5c:53:44:c3:59:58:be:a3:57:ee:56:7e: 4d:74:85:13:de:2d:36:ac:b8:3a:21:09:80:8a:f4: 8c:8b:1f:58:1a:ad:65:f7:36:15:de:6d:c7:67:e9: 9b:80:d9:77:f5:dd:cc:b6:f7:0f:02:c5:07:d7:c2: a9:26:bc:b5:c2:1a:f4:68:7e:19:af:2c:27:2f:61: e4:3c:8a:61:76:61:80:f2:e3:ad:d1:4b:ec:1d:ab: 96:51:33:d1:df:a0:8c:cd:d9:63:88:c3:a5:67:2f: cf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8B:15:9C:D6:78:31:E6:B2:FB:8C:16:BA:48:7F:FA:5D:FC:26:84 X509v3 Authority Key Identifier: keyid:DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f1:fb:c1:8b:90:13:b6:58:95:1d:4d:1d:a9:20:25:3d:8e: 99:81:a3:47:3a:83:ac:8e:0e:38:58:f0:8c:60:0e:46:19:a7: a5:db:ef:0e:ee:ba:df:b8:c5:e8:52:8d:b3:58:19:3c:6f:35: 62:84:71:7a:67:7e:fc:ab:48:4d:c7:42:1e:6b:41:0a:07:fa: f5:4a:54:af:fe:ae:cd:f3:b4:8e:ed:1f:a7:09:41:b4:2d:ac: 05:86:6a:c1:a6:db:11:a8:28:61:59:13:74:26:94:fa:c1:66: 81:e3:ca:21:6d:7a:75:c0:8a:00:73:62:33:c2:c8:db:96:7a: de:19:0a:a0:cf:d6:64:9a:7c:4c:77:34:95:19:43:37:6b:b4: 95:9d:00:84:42:37:3a:eb:f3:c2:b8:c2:ed:77:cd:eb:07:73: f3:bb:2b:79:66:b6:dc:7a:83:e2:b7:af:e8:56:69:82:ca:bf: 05:50:48:c5:f6:f9:2c:d2:69:03:61:f2:a3:e6:7e:d8:83:18: 9c:b5:7b:aa:47:e6:64:05:35:3b:29:a3:74:13:ab:4f:9c:27: 1e:ab:e7:b6:82:75:07:40:72:3e:47:26:34:be:e8:b7:67:3a: 07:e1:f2:16:a1:a1:2a:d4:62:aa:f7:41:db:c9:c1:1f:1a:c4: 3b:c8:dd:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDz0p/5YubfsBQeKW3O1kEQlCn8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0Mx RkM4MUNFNjAeFw0yNjA3MjQwMjEyMDdaFw0yNjA3MjUwNDI3MDdaMDMxMTAvBgNV BAMTKDZBOEIxNTlDRDY3ODMxRTZCMkZCOEMxNkJBNDg3RkZBNURGQzI2ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQLavRyf+SXyauIhnN+UgaYRRe c0VKdROPFKDeAqWwf3PGgzyfJSSvU5wgXXcuG+AodROdUL/ip2Ii7SC8UHN2QlHg 08IcUxugJcBYd3h6x/zL4w3G1fpyDnyVtUC1FwslkOJTcrNoKt8ZYfeJNQyhhC/S QWcEZewnrTbzHT6l6fe/3puIL0DPszWSOtFCRpDx2xrrQGp/m1xTRMNZWL6jV+5W fk10hRPeLTasuDohCYCK9IyLH1garWX3NhXebcdn6ZuA2Xf13cy29w8CxQfXwqkm vLXCGvRofhmvLCcvYeQ8imF2YYDy463RS+wdq5ZRM9HfoIzN2WOIw6VnL8+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaosVnNZ4Meay+4wWukh/+l38JoQwHwYDVR0j BBgwFoAU2kO1zrOE47p77iyTLYYvPB/IHOYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VC Mzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0MxRkM4MUNFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTQzQjVDRUIzODRFM0JBN0JFRTJDOTMyRDg2MkYzQzFGQzgx Q0U2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2 YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJG M0MxRkM4MUNFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDx+8GLkBO2WJUdTR2pICU9jpmBo0c6g6yO DjhY8IxgDkYZp6Xb7w7uut+4xehSjbNYGTxvNWKEcXpnfvyrSE3HQh5rQQoH+vVK VK/+rs3ztI7tH6cJQbQtrAWGasGm2xGoKGFZE3QmlPrBZoHjyiFtenXAigBzYjPC yNuWet4ZCqDP1mSafEx3NJUZQzdrtJWdAIRCNzrr88K4wu13zesHc/O7K3lmttx6 g+K3r+hWaYLKvwVQSMX2+SzSaQNh8qPmftiDGJy1e6pH5mQFNTspo3QTq0+cJx6r 57aCdQdAcj5HJjS+6LdnOgfh8hahoSrUYqr3QdvJwR8axDvI3Xg= -----END CERTIFICATE-----Generated at Fri Jul 24 05:03:53 2026 by rpki-client