$ rpki-client -vvf rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft File: DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft (raw, json) Hash identifier: VYfwSTGiykgUlR8OST7ikyhe2v9zWdTEFz7/AG2h0a0= Subject key identifier: CC:4E:68:11:6B:8A:3F:11:C9:1E:EA:D7:BD:86:BF:36:78:E0:69:7D Authority key identifier: DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 Certificate issuer: /CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Certificate serial: 13093C4DF5D336632F4E548473478A40B2D81FB1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:34:17 +0000 Manifest this update: Tue 16 Jun 2026 16:29:17 +0000 Manifest next update: Wed 17 Jun 2026 20:23:17 +0000 Files and hashes: 1: DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl (hash: 7+/7OGc4PcQ4yWJB0QI7Dpa25q3T6+Me2LWDRQJbGO8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:09:3c:4d:f5:d3:36:63:2f:4e:54:84:73:47:8a:40:b2:d8:1f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Validity Not Before: Jun 16 16:29:17 2026 GMT Not After : Jun 17 20:23:17 2026 GMT Subject: CN=CC4E68116B8A3F11C91EEAD7BD86BF3678E0697D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:4a:6d:62:af:05:a9:b3:87:c2:bd:a0:5a: d6:bd:1a:ce:2f:93:e1:39:fd:0c:1b:02:f7:97:ba: f3:38:74:3c:d5:6a:0f:d0:c9:b6:8b:57:84:db:0b: 93:74:5c:4a:4e:77:a6:58:1a:e0:3c:87:a0:a1:0b: 3a:b0:96:bf:c0:25:06:e2:53:21:6f:34:01:af:1e: 95:53:03:2c:1f:41:40:ae:46:9a:ae:eb:bc:b3:dd: ed:ec:38:13:76:43:5a:a6:85:12:39:b1:5a:73:ae: c7:ab:91:7e:3a:5f:9a:72:a9:6e:ef:8b:f5:f3:93: b2:6b:ba:a3:fa:80:f3:b4:38:86:b1:5d:ad:4b:ad: c5:d7:4d:c4:bc:66:f9:04:de:eb:07:c0:86:86:4d: 35:6d:c0:d9:f8:75:87:c6:3e:9a:9f:c6:ce:6b:17: 48:27:d3:1f:9b:2f:80:a3:83:67:27:e5:bc:a3:80: 39:af:bf:71:b0:12:59:33:b6:d6:e1:09:5d:cf:1e: a5:aa:5a:97:f9:04:05:61:47:b6:28:67:ff:b3:ba: f2:9e:1e:b8:e9:5f:a3:0d:49:0c:c3:28:75:e1:43: 90:85:d6:cf:8d:61:e9:51:19:2b:63:1b:f1:3b:6b: a1:19:ce:ac:ac:e1:c9:0c:73:ef:93:b2:a2:a5:8d: 59:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4E:68:11:6B:8A:3F:11:C9:1E:EA:D7:BD:86:BF:36:78:E0:69:7D X509v3 Authority Key Identifier: keyid:DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:65:e4:af:1d:34:3e:53:20:d3:39:6e:b5:be:0a:2d:5b:c9: 08:7c:55:ee:c1:e8:28:a6:36:5e:e8:04:1a:1f:37:07:d7:7d: 6f:63:51:3a:2f:70:ae:02:74:8b:16:7e:9d:18:c2:6d:44:cc: 5f:59:7e:e5:43:a8:2b:67:49:ba:e0:c0:d6:81:ad:91:a3:9d: 23:18:83:2c:6a:3f:07:35:c3:5b:d8:84:80:81:f4:e6:9f:04: 89:3e:19:ea:3c:84:79:06:8c:34:c7:81:e2:c6:23:e5:83:f1: cc:1d:a8:16:4e:4a:7c:3c:31:7f:1a:3d:1d:a8:31:b4:12:33: 9a:21:5d:f3:38:09:75:b5:2e:25:40:10:9d:86:0c:6c:00:54: 4d:e4:1a:63:e8:ac:22:6e:b8:e0:11:2e:0b:1d:82:ec:e0:b3: 88:db:c6:d3:50:49:57:c1:da:3d:60:4b:f2:20:d9:d9:c7:a7: 93:be:dc:95:e5:7c:23:80:ee:fa:27:ff:ff:ce:fa:e2:d4:56: ee:5f:fd:6b:5a:5f:b6:cf:bf:ae:00:04:d3:8e:76:0b:e4:0d: a0:fc:f6:95:3f:9b:b2:39:83:9f:87:41:db:97:a8:31:f8:b6: ea:6c:c1:f9:69:ef:bc:e1:e2:80:dc:4a:3a:e7:ba:ad:e8:58: 20:da:95:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwk8TfXTNmMvTlSEc0eKQLLYH7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5 Nzg5NjVEMDAeFw0yNjA2MTYxNjI5MTdaFw0yNjA2MTcyMDIzMTdaMDMxMTAvBgNV BAMTKENDNEU2ODExNkI4QTNGMTFDOTFFRUFEN0JEODZCRjM2NzhFMDY5N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nkptYq8FqbOHwr2gWta9Gs4v k+E5/QwbAveXuvM4dDzVag/QybaLV4TbC5N0XEpOd6ZYGuA8h6ChCzqwlr/AJQbi UyFvNAGvHpVTAywfQUCuRpqu67yz3e3sOBN2Q1qmhRI5sVpzrserkX46X5pyqW7v i/Xzk7JruqP6gPO0OIaxXa1LrcXXTcS8ZvkE3usHwIaGTTVtwNn4dYfGPpqfxs5r F0gn0x+bL4Cjg2cn5byjgDmvv3GwElkzttbhCV3PHqWqWpf5BAVhR7YoZ/+zuvKe HrjpX6MNSQzDKHXhQ5CF1s+NYelRGStjG/E7a6EZzqys4ckMc++TsqKljVlhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzE5oEWuKPxHJHurXvYa/NnjgaX0wHwYDVR0j BBgwFoAU2pcnDKVSeeF6dDD8rExLbJeJZdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDBhNmZlYWEtNmI0Zi00N2NmLTllM2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENB NTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5Nzg5NjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTk3MjcwQ0E1NTI3OUUxN0E3NDMwRkNBQzRDNEI2Qzk3ODk2 NUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRC NkM5Nzg5NjVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhl5K8dND5TINM5brW+Ci1byQh8Ve7B6Cim Nl7oBBofNwfXfW9jUTovcK4CdIsWfp0Ywm1EzF9ZfuVDqCtnSbrgwNaBrZGjnSMY gyxqPwc1w1vYhICB9OafBIk+Geo8hHkGjDTHgeLGI+WD8cwdqBZOSnw8MX8aPR2o MbQSM5ohXfM4CXW1LiVAEJ2GDGwAVE3kGmPorCJuuOARLgsdguzgs4jbxtNQSVfB 2j1gS/Ig2dnHp5O+3JXlfCOA7von///O+uLUVu5f/WtaX7bPv64ABNOOdgvkDaD8 9pU/m7I5g5+HQduXqDH4tupswflp77zh4oDcSjrnuq3oWCDalUk= -----END CERTIFICATE-----Generated at Wed Jun 17 10:08:16 2026 by rpki-client