$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft File: DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft (raw, json) Hash identifier: u68hvpUN5DxXJ/MpB83vfKDZKZX5qh+IeOIrQGhBaB8= Subject key identifier: E7:2F:83:03:9C:44:DA:7C:75:5C:5A:B5:53:B0:25:02:2B:82:64:D0 Authority key identifier: DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28 Certificate issuer: /CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728 Certificate serial: 02A1D1B4332EA40B02C0C28399293B0463AFB2C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft Manifest number: C6 Signing time: Sun 27 Sep 2026 13:36:29 +0000 Manifest this update: Sun 27 Sep 2026 13:31:29 +0000 Manifest next update: Mon 28 Sep 2026 15:48:29 +0000 Files and hashes: 1: 3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (hash: Emh7sO7kJSNFsbIsXv30t/j66tuYFAQx0UDDDCsbvSk=) 2: DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl (hash: ds5KTcHt7agnyM3LJxGAg6s2epqwl9LRno3BUS71bTs=) 3: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (hash: PVWSPZbDocSISt550/WJyHY7HuMqnPYZ4LfX4EkPasI=) 4: 3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa (hash: prMxe0nmDe/VDC0+RGajULsFBb7iapYsATrUpS7D5Qc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a1:d1:b4:33:2e:a4:0b:02:c0:c2:83:99:29:3b:04:63:af:b2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728 Validity Not Before: Sep 27 13:31:29 2026 GMT Not After : Sep 28 15:48:29 2026 GMT Subject: CN=E72F83039C44DA7C755C5AB553B025022B8264D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b8:b3:78:1c:09:83:c9:fe:cf:95:0f:d2:9b: 66:91:dd:79:15:16:3e:8a:44:4b:0a:b8:43:06:69: fb:9d:24:6b:fc:d1:73:eb:f9:39:e1:98:26:ac:7a: b2:5d:d1:c4:18:58:47:d3:7e:38:e4:de:c9:77:70: 4d:71:d5:a3:36:0f:6e:48:cd:08:bc:66:95:ac:4e: 95:60:49:da:f3:37:19:7a:0e:46:25:ae:bb:a9:e8: 9c:d8:cf:99:55:d0:69:bb:92:bc:f0:02:50:7b:bc: 93:04:4a:62:61:eb:51:a6:a8:68:1a:99:01:5a:e6: fc:ee:20:f4:97:5f:2e:fe:f3:53:80:b7:b2:90:e1: 64:9a:e6:71:34:ed:1a:e6:fe:80:53:13:4f:f0:3f: 53:1d:43:5f:25:a3:5e:5d:33:25:04:36:97:aa:96: aa:40:5e:9f:7b:ea:51:72:88:0a:12:e1:92:f0:f3: 8a:22:53:83:c7:d5:92:3a:7d:6e:e8:16:b6:92:dc: 1e:e3:ea:52:9a:60:b6:db:6b:28:c5:e0:57:45:2f: f3:50:6c:d3:25:15:35:fb:cf:ba:44:81:96:5a:11: 31:9b:df:10:87:8a:27:b3:4e:68:58:02:e6:55:bd: 53:ba:e3:b9:35:28:ad:74:f7:1b:3e:b2:b0:f8:94: 6f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2F:83:03:9C:44:DA:7C:75:5C:5A:B5:53:B0:25:02:2B:82:64:D0 X509v3 Authority Key Identifier: keyid:DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:d2:42:9e:17:37:0a:c0:fc:b9:5a:66:ad:0b:22:b8:d7:5d: b2:cb:75:a9:9d:f1:7b:b4:f9:df:d5:fe:b1:0f:e5:0f:aa:23: 0e:88:5b:01:1f:3a:0c:62:df:8f:e5:6a:d6:72:60:88:1f:b5: b9:a4:aa:60:e2:90:0b:7a:7a:ab:d4:1a:ca:73:b3:b8:2d:4c: 6a:f9:92:1d:37:53:08:00:64:09:c0:27:9a:c9:46:0f:af:3d: a9:dd:c2:a7:95:a8:9b:13:52:d2:23:89:8e:03:35:77:04:67: f0:69:04:ce:7c:f4:92:2d:31:96:df:e8:2a:9d:bc:3d:12:03: 39:a1:99:ce:cb:f8:c6:35:c4:5c:74:bb:7b:3e:5e:c6:09:e4: 3c:0a:a6:a0:f9:90:7a:e2:fc:e7:a2:e6:05:61:b4:3c:7a:f8: f9:61:b1:1e:ca:8b:a3:2c:3f:ad:9a:b2:4c:5e:05:3a:08:da: 11:2b:3f:e5:c1:1a:33:8e:cd:19:dd:39:c4:c3:bc:5e:42:a3: c3:e3:d2:07:6d:5b:41:04:48:39:1f:5e:e4:7a:f6:0f:69:56: 77:0f:fd:13:76:73:1f:c0:3d:6a:37:24:a7:94:f2:5b:b9:9c: 93:a0:f9:42:20:b6:98:5b:1c:ba:78:ff:67:87:f1:68:47:61: 01:07:7f:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAqHRtDMupAsCwMKDmSk7BGOvssMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4OTM2REUyM0JEMDY4RkZGOEI5RDVCMDM5MkUwMDA5 N0JBMDcyODAeFw0yNjA5MjcxMzMxMjlaFw0yNjA5MjgxNTQ4MjlaMDMxMTAvBgNV BAMTKEU3MkY4MzAzOUM0NERBN0M3NTVDNUFCNTUzQjAyNTAyMkI4MjY0RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHuLN4HAmDyf7PlQ/Sm2aR3XkV Fj6KREsKuEMGafudJGv80XPr+TnhmCaserJd0cQYWEfTfjjk3sl3cE1x1aM2D25I zQi8ZpWsTpVgSdrzNxl6DkYlrrup6JzYz5lV0Gm7krzwAlB7vJMESmJh61GmqGga mQFa5vzuIPSXXy7+81OAt7KQ4WSa5nE07Rrm/oBTE0/wP1MdQ18lo15dMyUENpeq lqpAXp976lFyiAoS4ZLw84oiU4PH1ZI6fW7oFraS3B7j6lKaYLbbayjF4FdFL/NQ bNMlFTX7z7pEgZZaETGb3xCHiiezTmhYAuZVvVO647k1KK109xs+srD4lG9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5y+DA5xE2nx1XFq1U7AlAiuCZNAwHwYDVR0j BBgwFoAU2ok23iO9Bo//i51bA5LgAJe6BygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZhYTNiZWItNTc2MS00YzM0LTg4ZDMtMDE1Y2NjNjQwMDJmLzAvREE4OTM2REUy M0JEMDY4RkZGOEI5RDVCMDM5MkUwMDA5N0JBMDcyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTg5MzZERTIzQkQwNjhGRkY4QjlENUIwMzkyRTAwMDk3QkEw NzI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZhYTNiZWItNTc2MS00YzM0LTg4 ZDMtMDE1Y2NjNjQwMDJmLzAvREE4OTM2REUyM0JEMDY4RkZGOEI5RDVCMDM5MkUw MDA5N0JBMDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHSQp4XNwrA/LlaZq0LIrjXXbLLdamd8Xu0 +d/V/rEP5Q+qIw6IWwEfOgxi34/latZyYIgftbmkqmDikAt6eqvUGspzs7gtTGr5 kh03UwgAZAnAJ5rJRg+vPandwqeVqJsTUtIjiY4DNXcEZ/BpBM589JItMZbf6Cqd vD0SAzmhmc7L+MY1xFx0u3s+XsYJ5DwKpqD5kHri/Oei5gVhtDx6+PlhsR7Ki6Ms P62askxeBToI2hErP+XBGjOOzRndOcTDvF5Co8Pj0gdtW0EESDkfXuR69g9pVncP /RN2cx/APWo3JKeU8lu5nJOg+UIgtphbHLp4/2eH8WhHYQEHf7k= -----END CERTIFICATE-----Generated at Mon Sep 28 00:52:00 2026 by rpki-client