$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft File: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft (raw, json) Hash identifier: CPWFHS1r5/F9cIWm/Qx9uw2SikCqdCmgoZ+TlZ1GgeU= Subject key identifier: E6:61:C6:A6:86:67:86:0D:35:52:78:CD:F0:83:2A:0F:70:4E:01:93 Authority key identifier: DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C Certificate issuer: /CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Certificate serial: 0EB210F176708F50AD28F0922622D704A1BF5DA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft Manifest number: BC Signing time: Mon 21 Sep 2026 00:11:46 +0000 Manifest this update: Mon 21 Sep 2026 00:06:46 +0000 Manifest next update: Tue 22 Sep 2026 02:52:46 +0000 Files and hashes: 1: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: hKLPAhro/Jq1h6DXfB80L/ei9CiaAI4MnHiXFKHH4tE=) 2: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl (hash: PvcBtvu7/04yOdhJwWjxmiRCrQW5ZG6PcpA/q5THtqs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b2:10:f1:76:70:8f:50:ad:28:f0:92:26:22:d7:04:a1:bf:5d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Validity Not Before: Sep 21 00:06:46 2026 GMT Not After : Sep 22 02:52:46 2026 GMT Subject: CN=E661C6A68667860D355278CDF0832A0F704E0193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:f6:ea:fe:a8:08:5e:ef:74:8c:66:a3:cc: 9f:2f:54:e9:2e:8d:5e:4c:fd:8c:76:aa:41:e0:87: f1:c5:7a:b1:14:58:92:cd:d5:14:5b:c1:92:7b:ab: 92:79:35:b9:e5:30:d4:0f:e8:e6:ae:36:4d:74:f1: 45:e2:97:d5:16:6d:f9:03:97:9c:38:d3:26:36:42: aa:52:b5:c7:d9:a8:c0:a3:c8:c9:f5:bc:ac:b1:13: 03:28:20:70:fe:0c:e2:2d:f5:7d:05:ad:68:de:e3: 4b:d7:f7:88:77:0e:f0:51:d7:81:46:66:60:d8:2e: 1a:1e:d1:c7:1b:8d:c2:ff:98:ac:ff:a3:21:bd:1a: ae:f5:e1:6b:08:d9:51:5c:69:f6:02:fc:a6:7f:b6: a9:30:0c:5b:d4:03:f9:07:c3:0b:ce:22:89:32:67: 5d:fd:99:1d:9e:d3:af:97:d5:58:63:44:16:65:3d: 6f:38:fc:6f:79:3f:1b:e9:03:1c:d5:12:b7:e1:85: 64:54:30:9d:6d:29:ea:09:e4:f9:f0:e4:e8:15:f8: 7f:2d:c3:bd:4e:91:34:12:4a:e5:c2:83:e7:87:97: 32:7d:14:6c:b2:67:00:0a:e1:75:16:f8:9d:af:b6: c4:be:e5:10:e1:fb:5f:b6:81:d5:16:b5:98:06:1a: 9b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:61:C6:A6:86:67:86:0D:35:52:78:CD:F0:83:2A:0F:70:4E:01:93 X509v3 Authority Key Identifier: keyid:DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:6b:61:9e:b5:09:06:6d:5c:54:d8:82:ec:49:76:be:4d:70: d4:ef:7e:b2:51:9e:c9:a9:bd:fc:2e:88:fc:2d:a6:63:2b:38: 5a:a8:fa:4e:b5:e3:f5:ea:d1:f4:24:6c:9d:f8:bd:5d:17:ff: 48:28:d6:66:da:72:29:d7:3f:d1:ff:1f:f8:c7:c4:8b:17:66: 6b:e9:02:3b:1e:2a:07:fc:95:df:86:4f:3f:c9:97:c3:ce:04: e0:0f:03:b2:21:8c:d0:cf:15:b5:46:e5:8d:a9:08:5b:74:ed: 3f:1f:24:fe:07:f4:37:a8:b5:83:65:da:3a:48:4b:e3:33:8b: dc:21:79:0d:1f:ee:57:35:ed:4a:fb:bc:92:76:23:f8:8b:12: 0a:ad:75:56:fa:bd:b7:3f:6d:d7:3a:50:e5:b0:f8:7f:d8:23: 53:8c:a1:a0:c3:9b:0b:19:e9:e5:e4:b0:c9:ad:d7:c7:71:b5: 75:0c:23:98:20:84:20:1e:6c:ac:47:6b:cd:34:3a:13:bc:0f: f5:94:e9:ba:ad:e2:d8:77:38:c1:0e:20:1e:9b:09:69:3d:c0: e9:1f:db:4a:e8:94:44:4e:1e:5a:58:46:1d:7c:d1:18:e6:59: 66:ea:75:30:5e:c3:ff:c9:a2:a9:62:e6:39:aa:9f:5c:a0:00: b9:27:be:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDrIQ8XZwj1CtKPCSJiLXBKG/XaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREExMjM0M0JCRDlGNDc5MTgyMjczQTlGN0I3RDZERDAy OThENUIxQzAeFw0yNjA5MjEwMDA2NDZaFw0yNjA5MjIwMjUyNDZaMDMxMTAvBgNV BAMTKEU2NjFDNkE2ODY2Nzg2MEQzNTUyNzhDREYwODMyQTBGNzA0RTAxOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4j/bq/qgIXu90jGajzJ8vVOku jV5M/Yx2qkHgh/HFerEUWJLN1RRbwZJ7q5J5NbnlMNQP6OauNk108UXil9UWbfkD l5w40yY2QqpStcfZqMCjyMn1vKyxEwMoIHD+DOIt9X0FrWje40vX94h3DvBR14FG ZmDYLhoe0ccbjcL/mKz/oyG9Gq714WsI2VFcafYC/KZ/tqkwDFvUA/kHwwvOIoky Z139mR2e06+X1VhjRBZlPW84/G95PxvpAxzVErfhhWRUMJ1tKeoJ5Pnw5OgV+H8t w71OkTQSSuXCg+eHlzJ9FGyyZwAK4XUW+J2vtsS+5RDh+1+2gdUWtZgGGpsbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5mHGpoZnhg01UnjN8IMqD3BOAZMwHwYDVR0j BBgwFoAU2hI0O72fR5GCJzqfe31t0CmNWxwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzM4NzRjZjMtYWRiMS00OTQ3LWE3ZTQtYTJkMzJjNTRlZDFmLzAvREExMjM0M0JC RDlGNDc5MTgyMjczQTlGN0I3RDZERDAyOThENUIxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTEyMzQzQkJEOUY0NzkxODIyNzNBOUY3QjdENkREMDI5OEQ1 QjFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzM4NzRjZjMtYWRiMS00OTQ3LWE3 ZTQtYTJkMzJjNTRlZDFmLzAvREExMjM0M0JCRDlGNDc5MTgyMjczQTlGN0I3RDZE RDAyOThENUIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBrYZ61CQZtXFTYguxJdr5NcNTvfrJRnsmp vfwuiPwtpmMrOFqo+k614/Xq0fQkbJ34vV0X/0go1mbacinXP9H/H/jHxIsXZmvp AjseKgf8ld+GTz/Jl8POBOAPA7IhjNDPFbVG5Y2pCFt07T8fJP4H9DeotYNl2jpI S+Mzi9wheQ0f7lc17Ur7vJJ2I/iLEgqtdVb6vbc/bdc6UOWw+H/YI1OMoaDDmwsZ 6eXksMmt18dxtXUMI5gghCAebKxHa800OhO8D/WU6bqt4th3OMEOIB6bCWk9wOkf 20rolEROHlpYRh180RjmWWbqdTBew//Joqli5jmqn1ygALknvus= -----END CERTIFICATE-----Generated at Mon Sep 21 19:01:36 2026 by rpki-client