$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft File: DA4C7EC09188922B406170208997DD586575FFB0.mft (raw, json) Hash identifier: egB7FQXiFcu5pzCDAqxJAk0Pxe6RNLtaLPl6eCP2s18= Subject key identifier: 47:23:DD:12:12:3C:C9:C7:29:2E:6C:2A:48:D0:72:C4:20:16:94:79 Authority key identifier: DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 Certificate issuer: /CN=DA4C7EC09188922B406170208997DD586575FFB0 Certificate serial: 685A8B884EE14F1441B0D371560FA64A2DC4E8CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:39:02 +0000 Manifest this update: Tue 12 May 2026 07:34:02 +0000 Manifest next update: Wed 13 May 2026 09:20:02 +0000 Files and hashes: 1: DA4C7EC09188922B406170208997DD586575FFB0.crl (hash: EjcSf8saaGL3ffQodbH3IQ9aagL7kClE335fsH0bA+E=) 2: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: MLj0AUwkGxT9VgNAnaRkUPum+E8mfae8sdJn0VM7fng=) 3: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: +HwPI5t9LV2JhVv1OMpumDZv5OfbCi5N5psEQEHPJ+A=) 4: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: /A5BVWcPl0ZTjFUSUynQsRiKSne+ZQyE6o9O6kwxRu8=) 5: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: LjLUgvBMy0vDjBtT3AvvXHrDpEIsdVFxx/cTyXnRl4k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:5a:8b:88:4e:e1:4f:14:41:b0:d3:71:56:0f:a6:4a:2d:c4:e8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA4C7EC09188922B406170208997DD586575FFB0 Validity Not Before: May 12 07:34:02 2026 GMT Not After : May 13 09:20:02 2026 GMT Subject: CN=4723DD12123CC9C7292E6C2A48D072C420169479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a2:d8:eb:d1:1b:df:b1:02:f7:90:b3:1e:56: 3b:a1:70:0c:71:ca:23:05:aa:d9:51:e5:d0:75:6a: e0:d6:ea:cb:cd:73:6c:1a:2e:3c:af:44:08:0c:e4: 73:f3:15:4e:90:b6:bc:10:b3:00:6d:48:7b:48:67: 16:49:f6:10:20:74:65:28:55:55:98:b0:0b:b0:2e: 90:15:ab:3f:94:f1:33:e9:a9:60:6f:2b:51:d6:14: 6b:cc:1e:c9:f1:d1:69:de:cf:85:e6:0c:ff:7d:29: 65:31:79:f2:00:53:43:a8:85:85:a4:3a:3e:e8:15: 7a:6e:54:80:e3:b7:eb:7d:56:4b:55:d9:d3:24:da: f3:72:01:38:69:1a:92:83:a3:db:37:89:4b:ee:90: 06:8a:ad:25:76:59:ac:0b:b3:90:0e:8f:df:38:0e: 17:81:cc:d3:85:99:2d:8e:05:b3:99:84:8d:f8:b4: 2a:ce:24:75:f0:ff:22:f6:51:7f:35:ec:00:73:95: fd:26:ff:d0:47:57:d5:95:5f:20:cc:ef:5f:45:01: 88:64:97:46:60:08:e9:e5:2c:20:53:d3:2d:61:7e: ac:01:96:72:ee:78:58:4a:76:25:11:f2:18:dd:04: 04:a3:66:ea:f2:10:5f:12:2f:04:f2:56:fb:70:cb: d6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:23:DD:12:12:3C:C9:C7:29:2E:6C:2A:48:D0:72:C4:20:16:94:79 X509v3 Authority Key Identifier: keyid:DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:b8:eb:05:b9:37:b8:3b:b1:04:70:f7:5f:e7:dc:53:dd:e5: ee:c5:2d:37:23:40:b3:e6:fe:5c:ad:8a:5c:43:53:6b:b8:91: 8e:f4:ad:0f:9a:0d:29:8f:a7:b2:8b:cd:c7:c7:fe:f7:b7:be: 02:57:41:96:34:4b:d8:9b:0e:49:04:10:5d:f4:29:f6:65:c0: c9:86:95:bd:66:18:9e:90:d6:73:33:46:6b:6e:23:7a:02:cf: 19:66:78:9a:3d:06:ad:c3:a8:41:14:de:4c:54:28:0d:f7:2a: 2d:69:6e:ba:30:88:34:29:fc:ff:fa:ff:ac:f5:a4:9a:88:0a: bb:08:ff:d0:5a:1c:cf:fd:66:3c:db:21:58:75:a0:a0:d5:1e: 37:33:70:99:d9:f3:c7:aa:0d:a7:75:d9:65:54:ec:3b:00:be: 52:34:2c:91:ef:35:45:22:9d:d2:6d:1e:ff:89:ca:de:13:10: 05:23:8b:f2:bf:15:6d:ad:55:19:0f:1b:21:f9:cc:aa:67:54: 9b:86:ac:5b:d8:c3:43:72:6d:59:55:30:52:bd:56:98:46:b2: 72:31:03:b9:21:18:91:91:3d:c1:9a:19:e3:62:23:d5:80:34: 82:8c:db:00:c3:cc:eb:4b:0e:18:c8:96:02:99:3a:d0:5e:a6: 02:a5:62:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaFqLiE7hTxRBsNNxVg+mSi3E6M4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2 NTc1RkZCMDAeFw0yNjA1MTIwNzM0MDJaFw0yNjA1MTMwOTIwMDJaMDMxMTAvBgNV BAMTKDQ3MjNERDEyMTIzQ0M5QzcyOTJFNkMyQTQ4RDA3MkM0MjAxNjk0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwotjr0RvfsQL3kLMeVjuhcAxx yiMFqtlR5dB1auDW6svNc2waLjyvRAgM5HPzFU6QtrwQswBtSHtIZxZJ9hAgdGUo VVWYsAuwLpAVqz+U8TPpqWBvK1HWFGvMHsnx0Wnez4XmDP99KWUxefIAU0OohYWk Oj7oFXpuVIDjt+t9VktV2dMk2vNyAThpGpKDo9s3iUvukAaKrSV2WawLs5AOj984 DheBzNOFmS2OBbOZhI34tCrOJHXw/yL2UX817ABzlf0m/9BHV9WVXyDM719FAYhk l0ZgCOnlLCBT0y1hfqwBlnLueFhKdiUR8hjdBASjZuryEF8SLwTyVvtwy9ZJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURyPdEhI8yccpLmwqSNByxCAWlHkwHwYDVR0j BBgwFoAU2kx+wJGIkitAYXAgiZfdWGV1/7AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhjZTIwMDgtODRiNy00YmVmLTk0YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5 MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2NTc1RkZCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTRDN0VDMDkxODg5MjJCNDA2MTcwMjA4OTk3REQ1ODY1NzVG RkIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RE NTg2NTc1RkZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFm46wW5N7g7sQRw91/n3FPd5e7FLTcjQLPm /lytilxDU2u4kY70rQ+aDSmPp7KLzcfH/ve3vgJXQZY0S9ibDkkEEF30KfZlwMmG lb1mGJ6Q1nMzRmtuI3oCzxlmeJo9Bq3DqEEU3kxUKA33Ki1pbrowiDQp/P/6/6z1 pJqICrsI/9BaHM/9ZjzbIVh1oKDVHjczcJnZ88eqDad12WVU7DsAvlI0LJHvNUUi ndJtHv+Jyt4TEAUji/K/FW2tVRkPGyH5zKpnVJuGrFvYw0NybVlVMFK9VphGsnIx A7khGJGRPcGaGeNiI9WANIKM2wDDzOtLDhjIlgKZOtBepgKlYmE= -----END CERTIFICATE-----Generated at Tue May 12 23:20:48 2026 by rpki-client