$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft File: DA4C7EC09188922B406170208997DD586575FFB0.mft (raw, json) Hash identifier: YVHy2sILkL+NWWr57Lqk2oL5GDvg8eRjwb/ri0yZhPY= Subject key identifier: C6:D4:B6:B0:C8:C5:69:FD:C5:74:9F:D4:D6:FE:7E:58:B6:8F:7A:47 Authority key identifier: DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 Certificate issuer: /CN=DA4C7EC09188922B406170208997DD586575FFB0 Certificate serial: 3148AD9BA6F95A4E81AA6BE827F0F63366DDA1D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 19:35:10 +0000 Manifest this update: Wed 23 Sep 2026 19:30:10 +0000 Manifest next update: Thu 24 Sep 2026 22:47:10 +0000 Files and hashes: 1: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: MLj0AUwkGxT9VgNAnaRkUPum+E8mfae8sdJn0VM7fng=) 2: DA4C7EC09188922B406170208997DD586575FFB0.crl (hash: FNhCSb4O81U8GVKSIDegzKcSnOvmCdNOuiCJHZC32PI=) 3: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: +HwPI5t9LV2JhVv1OMpumDZv5OfbCi5N5psEQEHPJ+A=) 4: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: LjLUgvBMy0vDjBtT3AvvXHrDpEIsdVFxx/cTyXnRl4k=) 5: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: /A5BVWcPl0ZTjFUSUynQsRiKSne+ZQyE6o9O6kwxRu8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:48:ad:9b:a6:f9:5a:4e:81:aa:6b:e8:27:f0:f6:33:66:dd:a1:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA4C7EC09188922B406170208997DD586575FFB0 Validity Not Before: Sep 23 19:30:10 2026 GMT Not After : Sep 24 22:47:10 2026 GMT Subject: CN=C6D4B6B0C8C569FDC5749FD4D6FE7E58B68F7A47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:2e:5d:4d:d8:40:23:a2:ab:00:2b:e5:b7: 5f:7b:0e:de:d3:30:f3:e3:e4:74:28:ee:b5:2f:f1: 4d:4e:33:e1:c6:40:55:6a:2a:96:ff:73:d1:b2:80: 3d:08:f4:25:8b:0b:af:bd:80:d5:fc:26:6c:8e:65: 66:10:8d:ec:66:89:7c:b6:7d:de:f8:46:04:79:79: db:65:de:7b:a8:49:00:e7:ec:6a:4c:d3:7e:6c:74: 96:2c:84:44:73:9e:e2:f6:15:48:77:5e:2c:70:ea: 93:7b:73:80:ca:e2:66:0b:5b:23:8e:d6:83:1b:a3: ef:98:48:47:14:f3:6d:03:1c:20:7d:33:f7:8d:d3: 62:0b:64:d0:4b:e8:28:09:dc:c0:f2:c0:6f:b7:d2: 1a:b6:03:70:3b:3a:4c:7f:16:36:ea:92:66:70:bf: 68:0a:f1:f4:93:14:21:1f:5e:b4:e9:41:3b:48:9a: 32:13:42:da:52:a6:f8:7a:ae:4d:26:fd:4b:4e:a4: 13:92:15:c1:8a:28:84:01:54:e0:23:30:11:b5:86: 48:9f:50:74:45:19:df:7d:1d:55:11:f3:14:92:18: 3b:68:79:af:d8:41:4e:3c:9c:ed:c1:39:28:1b:e1: ec:72:2c:ee:6e:67:5b:61:e8:9e:6c:49:ab:0f:82: b7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D4:B6:B0:C8:C5:69:FD:C5:74:9F:D4:D6:FE:7E:58:B6:8F:7A:47 X509v3 Authority Key Identifier: keyid:DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:76:ce:f8:f8:97:74:c0:12:96:5e:1a:96:3f:d9:95:18:f0: 0f:57:c4:88:69:b1:49:da:64:50:06:43:c6:bb:50:d8:ad:b5: 40:51:05:88:4a:5e:f1:07:2f:5f:ba:66:c6:75:fc:89:90:d6: 40:4f:b7:0a:49:34:00:55:7f:19:73:0d:1c:2f:9b:ad:b6:c8: 03:fc:f8:e4:f7:5c:80:27:f0:99:76:f1:81:b0:47:71:a1:94: b6:65:e8:2d:39:72:6e:0e:46:2d:9a:1e:8e:4d:28:26:36:e8: 35:fe:3f:8a:a3:67:40:3c:02:c8:df:ca:af:96:5f:24:fd:ab: 56:17:81:92:c0:44:fa:ae:3c:0a:41:9e:f8:fc:af:ad:d6:92: c0:39:35:33:5d:83:c0:27:02:c5:2f:f4:03:cb:70:65:53:10: c5:d1:3f:c9:66:fc:d9:70:15:c1:6e:dd:c6:f2:53:bc:56:ac: e4:36:aa:44:ac:f4:49:20:57:26:b0:18:02:ee:a5:b8:d8:ad: 6f:5f:ae:b5:b2:b3:0a:06:2c:29:54:35:ae:e7:19:71:65:77: 4f:29:ce:82:78:78:15:db:ec:ab:e4:92:89:e5:b8:4e:09:61: 42:81:36:20:d7:2c:66:34:e4:16:a8:3d:00:66:06:f3:ea:02: f2:49:b6:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMUitm6b5Wk6BqmvoJ/D2M2bdodUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2 NTc1RkZCMDAeFw0yNjA5MjMxOTMwMTBaFw0yNjA5MjQyMjQ3MTBaMDMxMTAvBgNV BAMTKEM2RDRCNkIwQzhDNTY5RkRDNTc0OUZENEQ2RkU3RTU4QjY4RjdBNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3y5dTdhAI6KrACvlt197Dt7T MPPj5HQo7rUv8U1OM+HGQFVqKpb/c9GygD0I9CWLC6+9gNX8JmyOZWYQjexmiXy2 fd74RgR5edtl3nuoSQDn7GpM035sdJYshERznuL2FUh3Xixw6pN7c4DK4mYLWyOO 1oMbo++YSEcU820DHCB9M/eN02ILZNBL6CgJ3MDywG+30hq2A3A7Okx/FjbqkmZw v2gK8fSTFCEfXrTpQTtImjITQtpSpvh6rk0m/UtOpBOSFcGKKIQBVOAjMBG1hkif UHRFGd99HVUR8xSSGDtoea/YQU48nO3BOSgb4exyLO5uZ1th6J5sSasPgrc5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxtS2sMjFaf3FdJ/U1v5+WLaPekcwHwYDVR0j BBgwFoAU2kx+wJGIkitAYXAgiZfdWGV1/7AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhjZTIwMDgtODRiNy00YmVmLTk0YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5 MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2NTc1RkZCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTRDN0VDMDkxODg5MjJCNDA2MTcwMjA4OTk3REQ1ODY1NzVG RkIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RE NTg2NTc1RkZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABd2zvj4l3TAEpZeGpY/2ZUY8A9XxIhpsUna ZFAGQ8a7UNittUBRBYhKXvEHL1+6ZsZ1/ImQ1kBPtwpJNABVfxlzDRwvm622yAP8 +OT3XIAn8Jl28YGwR3GhlLZl6C05cm4ORi2aHo5NKCY26DX+P4qjZ0A8Asjfyq+W XyT9q1YXgZLARPquPApBnvj8r63WksA5NTNdg8AnAsUv9APLcGVTEMXRP8lm/Nlw FcFu3cbyU7xWrOQ2qkSs9EkgVyawGALupbjYrW9frrWyswoGLClUNa7nGXFld08p zoJ4eBXb7KvkkonluE4JYUKBNiDXLGY05BaoPQBmBvPqAvJJttY= -----END CERTIFICATE-----Generated at Thu Sep 24 08:29:00 2026 by rpki-client