$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft File: DA4C7EC09188922B406170208997DD586575FFB0.mft (raw, json) Hash identifier: VLiMfu8E1jl0Q8QSag5XE5Nw5SAK5PQxg6MfceDgMIY= Subject key identifier: 9C:E8:51:42:A9:87:D9:FD:3B:A3:10:79:77:71:67:5E:B0:FB:DE:90 Authority key identifier: DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 Certificate issuer: /CN=DA4C7EC09188922B406170208997DD586575FFB0 Certificate serial: 12962C0CF7F0138E69AA1136630A20206158A47A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 04:55:31 +0000 Manifest this update: Fri 24 Jul 2026 04:50:31 +0000 Manifest next update: Sat 25 Jul 2026 08:37:31 +0000 Files and hashes: 1: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: /A5BVWcPl0ZTjFUSUynQsRiKSne+ZQyE6o9O6kwxRu8=) 2: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: MLj0AUwkGxT9VgNAnaRkUPum+E8mfae8sdJn0VM7fng=) 3: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: LjLUgvBMy0vDjBtT3AvvXHrDpEIsdVFxx/cTyXnRl4k=) 4: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: +HwPI5t9LV2JhVv1OMpumDZv5OfbCi5N5psEQEHPJ+A=) 5: DA4C7EC09188922B406170208997DD586575FFB0.crl (hash: hHhtTUMtRpr7VDVYvaOLe1ipTxp9j23ivAbG9+tH82Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:96:2c:0c:f7:f0:13:8e:69:aa:11:36:63:0a:20:20:61:58:a4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA4C7EC09188922B406170208997DD586575FFB0 Validity Not Before: Jul 24 04:50:31 2026 GMT Not After : Jul 25 08:37:31 2026 GMT Subject: CN=9CE85142A987D9FD3BA310797771675EB0FBDE90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0a:73:81:db:f8:fa:4f:92:92:b2:28:3b:7f: 14:57:b5:ba:43:a9:9d:24:0b:2a:25:c4:95:b9:5a: ff:91:0b:6f:7b:ba:59:b4:0a:e0:66:52:a9:e3:c6: ec:b1:e4:75:c5:3a:05:9a:1f:0d:ac:25:49:d6:c3: 5f:c1:ad:d7:9d:59:9e:2d:c4:7f:61:c0:16:5e:8f: 51:69:b0:df:e8:72:b8:5b:15:4f:1d:0b:26:c3:e2: 21:3d:8f:c3:22:52:46:36:59:44:b8:d1:e4:e4:07: 2e:f2:7d:c6:7c:0e:be:48:33:c0:d4:d1:b8:e1:bc: 07:e9:f4:7f:67:2f:f9:7a:14:57:f7:dd:a1:74:b0: 6b:71:90:f2:9c:35:db:f6:ec:43:9c:9b:c7:ec:02: f1:4c:37:02:ad:6d:2f:70:a0:2c:c8:ab:19:e6:f2: 3d:e4:0b:ea:b1:9f:24:a9:cd:ae:e8:b8:d1:18:39: d0:94:59:17:77:93:8d:0d:5a:5a:0a:d4:8a:64:99: 0f:b6:ca:b4:9a:40:40:58:e1:65:9d:40:61:34:2c: 25:ad:0f:d1:8b:05:1e:c4:59:7c:f2:65:1e:f7:fd: 39:f5:ff:9d:02:e7:e8:d8:ce:7a:31:46:84:3b:28: cd:8d:7f:b8:ca:a2:91:10:bf:99:5c:a1:34:0f:a6: 26:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E8:51:42:A9:87:D9:FD:3B:A3:10:79:77:71:67:5E:B0:FB:DE:90 X509v3 Authority Key Identifier: keyid:DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:3e:93:03:75:4e:1f:96:aa:14:bc:d8:3b:75:32:f0:c1:fd: 1b:35:3b:99:ec:6a:ab:15:d6:7d:01:6b:85:17:08:bc:5c:d3: 23:c4:e7:42:cd:a5:c9:e8:09:71:bf:f4:cb:ac:73:d4:c6:e6: c2:09:94:84:85:b8:28:33:06:b8:55:d1:36:d8:aa:35:e9:a1: 12:e3:91:58:37:03:6a:16:6d:92:dc:14:3b:af:13:cc:15:16: aa:57:1e:1e:96:9d:21:13:80:bb:52:8b:e5:05:ed:7d:ff:6a: 04:99:bd:3e:ec:a5:c7:25:00:61:77:91:d9:92:a5:e0:6b:e1: 2b:b9:37:c4:95:f9:e3:d0:84:e1:fb:48:0f:e8:97:0b:9e:3e: a7:9b:08:7e:dd:08:ce:96:e4:bb:37:21:06:89:16:e8:b6:b2: e7:31:d9:7b:d3:7a:eb:39:5d:d5:0a:b8:82:c2:29:de:bb:76: 56:8a:c0:3c:70:50:98:ef:e2:85:72:f5:48:1c:d8:a2:ef:33: 41:8b:c6:22:35:e1:dd:6d:dc:a5:70:8c:6b:5b:02:18:07:28: 2e:4c:1f:ea:eb:03:f9:62:9d:a7:c2:16:9e:98:30:e6:d0:1c: 8f:b0:a0:58:bf:8a:39:2a:6d:03:b8:50:da:12:88:e4:8f:a1: 29:e2:04:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEpYsDPfwE45pqhE2YwogIGFYpHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2 NTc1RkZCMDAeFw0yNjA3MjQwNDUwMzFaFw0yNjA3MjUwODM3MzFaMDMxMTAvBgNV BAMTKDlDRTg1MTQyQTk4N0Q5RkQzQkEzMTA3OTc3NzE2NzVFQjBGQkRFOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkCnOB2/j6T5KSsig7fxRXtbpD qZ0kCyolxJW5Wv+RC297ulm0CuBmUqnjxuyx5HXFOgWaHw2sJUnWw1/BrdedWZ4t xH9hwBZej1FpsN/ocrhbFU8dCybD4iE9j8MiUkY2WUS40eTkBy7yfcZ8Dr5IM8DU 0bjhvAfp9H9nL/l6FFf33aF0sGtxkPKcNdv27EOcm8fsAvFMNwKtbS9woCzIqxnm 8j3kC+qxnySpza7ouNEYOdCUWRd3k40NWloK1IpkmQ+2yrSaQEBY4WWdQGE0LCWt D9GLBR7EWXzyZR73/Tn1/50C5+jYznoxRoQ7KM2Nf7jKopEQv5lcoTQPpiZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnOhRQqmH2f07oxB5d3FnXrD73pAwHwYDVR0j BBgwFoAU2kx+wJGIkitAYXAgiZfdWGV1/7AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhjZTIwMDgtODRiNy00YmVmLTk0YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5 MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2NTc1RkZCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTRDN0VDMDkxODg5MjJCNDA2MTcwMjA4OTk3REQ1ODY1NzVG RkIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RE NTg2NTc1RkZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANE+kwN1Th+WqhS82Dt1MvDB/Rs1O5nsaqsV 1n0Ba4UXCLxc0yPE50LNpcnoCXG/9Musc9TG5sIJlISFuCgzBrhV0TbYqjXpoRLj kVg3A2oWbZLcFDuvE8wVFqpXHh6WnSETgLtSi+UF7X3/agSZvT7spcclAGF3kdmS peBr4Su5N8SV+ePQhOH7SA/olwuePqebCH7dCM6W5Ls3IQaJFui2sucx2XvTeus5 XdUKuILCKd67dlaKwDxwUJjv4oVy9Ugc2KLvM0GLxiI14d1t3KVwjGtbAhgHKC5M H+rrA/linafCFp6YMObQHI+woFi/ijkqbQO4UNoSiOSPoSniBAo= -----END CERTIFICATE-----Generated at Fri Jul 24 06:20:24 2026 by rpki-client