$ rpki-client -vvvf rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft File: DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft (raw, json) Hash identifier: tUGmBwBIXw9Hmf3sEKIZcnl3coqnnaIuRYN0evnMV0M= Subject key identifier: 84:A7:8E:E0:F9:F9:6C:09:78:BE:E3:45:44:42:FF:AF:90:86:04:E2 Authority key identifier: DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 Certificate issuer: /CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Certificate serial: 4B4EBF919AFA95752B71B3E1A0A89DE6406BF849 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft Manifest number: BD Signing time: Mon 21 Sep 2026 09:33:21 +0000 Manifest this update: Mon 21 Sep 2026 09:28:21 +0000 Manifest next update: Tue 22 Sep 2026 11:29:21 +0000 Files and hashes: 1: DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl (hash: iQFuNPzkqHOONxhBy3FfRgJs4fmdiwNYb+MlJDhva8k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4e:bf:91:9a:fa:95:75:2b:71:b3:e1:a0:a8:9d:e6:40:6b:f8:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Validity Not Before: Sep 21 09:28:21 2026 GMT Not After : Sep 22 11:29:21 2026 GMT Subject: CN=84A78EE0F9F96C0978BEE3454442FFAF908604E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2b:35:2c:1e:6c:55:c3:94:b2:37:a4:d6:35: bc:bb:54:a2:7a:5d:ea:9f:cc:72:d1:a6:18:ff:1e: 85:c5:01:7f:63:36:27:cb:af:ae:8c:dc:06:f2:04: 19:ba:66:34:b5:b4:bd:12:7a:03:4e:d1:73:96:1a: 28:17:21:1c:d0:35:89:96:e0:7c:07:12:37:01:cf: 8c:c9:f0:12:ed:b0:39:01:97:83:60:29:b5:74:8d: e1:ae:12:a1:da:0f:44:f7:48:82:cb:9f:7d:c3:68: d0:46:46:f8:98:53:8a:fc:fc:f6:e7:9c:17:f4:08: 13:28:eb:c6:e1:ac:05:ec:0d:c6:8d:c4:00:fd:26: 4b:50:b2:13:f0:23:f8:50:20:f4:4f:cc:13:2c:21: 0b:9d:74:ca:86:77:61:7a:ed:0f:4d:a0:97:79:32: a9:90:fb:24:68:d5:38:c2:c6:d3:01:ea:19:0f:e4: 04:c2:3c:f4:07:86:1a:6c:34:9e:39:f8:f2:05:95: e3:07:22:6a:0d:bd:22:12:bd:f8:bb:a7:9a:f2:b0: 47:5c:91:21:d9:25:62:64:21:95:44:55:e9:c9:1f: 30:d7:0f:b8:c1:ca:a1:b1:15:a0:01:71:52:cf:b9: 27:76:1e:79:d6:22:fa:8b:63:4e:21:81:9b:c1:87: 32:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A7:8E:E0:F9:F9:6C:09:78:BE:E3:45:44:42:FF:AF:90:86:04:E2 X509v3 Authority Key Identifier: keyid:DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:10:2e:e9:80:9a:fd:7a:a8:bc:78:f1:73:20:95:ec:b7:c3: 94:33:59:06:f8:8d:f7:dc:01:44:47:59:c0:6f:e5:fc:27:16: 04:4b:cb:3b:d3:77:d0:c6:ad:12:03:3b:1a:d8:e6:a1:91:d8: 50:68:91:1a:f9:b4:e5:7e:1a:dc:bb:44:f6:76:df:b1:dd:cf: 1f:07:e8:36:14:91:ca:9f:bb:86:8a:1d:1e:45:69:a0:37:1e: 96:93:31:1f:96:7a:13:2b:04:ef:75:5c:3d:50:e4:96:61:06: db:f4:54:f3:04:ab:49:3c:06:9b:d6:cf:69:15:95:bb:7a:47: 4b:70:a1:df:d5:6f:78:46:2d:59:3a:b1:95:ff:10:09:f0:03: 79:82:fd:22:09:78:49:01:3d:b9:66:c8:fd:ae:a7:58:14:fa: c4:64:cf:2f:07:f8:63:1a:b1:88:fa:8b:00:3f:51:df:22:e2: ac:7d:b5:99:dd:0a:ed:3d:4d:40:aa:7d:86:a5:c8:b2:01:0a: f1:04:78:b5:6f:19:83:14:73:4a:79:75:15:6e:a5:bb:a1:c0: 66:01:dc:cd:9e:db:36:8b:da:b1:2e:bc:f6:54:2b:01:25:9d: a6:1b:50:40:98:cb:bc:00:04:c6:21:7f:2b:9b:4a:b3:9a:cc: da:c1:99:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS06/kZr6lXUrcbPhoKid5kBr+EkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5 Nzg5NjVEMDAeFw0yNjA5MjEwOTI4MjFaFw0yNjA5MjIxMTI5MjFaMDMxMTAvBgNV BAMTKDg0QTc4RUUwRjlGOTZDMDk3OEJFRTM0NTQ0NDJGRkFGOTA4NjA0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdKzUsHmxVw5SyN6TWNby7VKJ6 XeqfzHLRphj/HoXFAX9jNifLr66M3AbyBBm6ZjS1tL0SegNO0XOWGigXIRzQNYmW 4HwHEjcBz4zJ8BLtsDkBl4NgKbV0jeGuEqHaD0T3SILLn33DaNBGRviYU4r8/Pbn nBf0CBMo68bhrAXsDcaNxAD9JktQshPwI/hQIPRPzBMsIQuddMqGd2F67Q9NoJd5 MqmQ+yRo1TjCxtMB6hkP5ATCPPQHhhpsNJ45+PIFleMHImoNvSISvfi7p5rysEdc kSHZJWJkIZVEVenJHzDXD7jByqGxFaABcVLPuSd2HnnWIvqLY04hgZvBhzL1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhKeO4Pn5bAl4vuNFREL/r5CGBOIwHwYDVR0j BBgwFoAU2pcnDKVSeeF6dDD8rExLbJeJZdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDBhNmZlYWEtNmI0Zi00N2NmLTllM2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENB NTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5Nzg5NjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTk3MjcwQ0E1NTI3OUUxN0E3NDMwRkNBQzRDNEI2Qzk3ODk2 NUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRC NkM5Nzg5NjVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQQLumAmv16qLx48XMgley3w5QzWQb4jffc AURHWcBv5fwnFgRLyzvTd9DGrRIDOxrY5qGR2FBokRr5tOV+Gty7RPZ237Hdzx8H 6DYUkcqfu4aKHR5FaaA3HpaTMR+WehMrBO91XD1Q5JZhBtv0VPMEq0k8BpvWz2kV lbt6R0twod/Vb3hGLVk6sZX/EAnwA3mC/SIJeEkBPblmyP2up1gU+sRkzy8H+GMa sYj6iwA/Ud8i4qx9tZndCu09TUCqfYalyLIBCvEEeLVvGYMUc0p5dRVupbuhwGYB 3M2e2zaL2rEuvPZUKwElnaYbUECYy7wABMYhfyubSrOazNrBmQM= -----END CERTIFICATE-----Generated at Mon Sep 21 23:21:49 2026 by rpki-client