$ rpki-client -vvf rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft File: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft (raw, json) Hash identifier: D11ZSvpuAF0WIcmjzX1MAWhn5syBaM0l06m1uWsiEqE= Subject key identifier: 8A:C5:4D:4E:58:C3:26:E2:FD:BA:5B:6F:6F:CC:1E:24:D4:2A:EC:74 Authority key identifier: DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C Certificate issuer: /CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Certificate serial: 047196CECD03F7556C97915CA10C629087363941 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 15:00:05 +0000 Manifest this update: Tue 28 Jul 2026 14:55:05 +0000 Manifest next update: Wed 29 Jul 2026 17:35:05 +0000 Files and hashes: 1: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: hKLPAhro/Jq1h6DXfB80L/ei9CiaAI4MnHiXFKHH4tE=) 2: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl (hash: oSwWmPnlvI+v9JBoGfGAgwKq7q/FzCLCauK/1GH97Wk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:71:96:ce:cd:03:f7:55:6c:97:91:5c:a1:0c:62:90:87:36:39:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Validity Not Before: Jul 28 14:55:05 2026 GMT Not After : Jul 29 17:35:05 2026 GMT Subject: CN=8AC54D4E58C326E2FDBA5B6F6FCC1E24D42AEC74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:20:34:18:c9:85:05:8e:95:cf:62:3b:95: d3:02:ce:c1:25:56:3e:f5:f5:df:b5:c1:86:d6:0c: 35:0c:55:7d:da:2f:b0:53:80:e2:d4:79:5f:38:c0: 4b:6c:54:34:fb:a5:16:4f:10:fb:2a:b3:0e:79:93: cd:6a:e8:22:63:bc:0a:c0:90:72:f2:4a:9b:3a:f6: 6d:67:ca:03:2a:64:67:20:c1:1b:8c:47:c3:0b:99: ae:90:b5:d1:d1:e0:7d:80:aa:72:74:c1:58:6e:7e: 30:ef:89:6a:e2:ae:b3:cf:52:1b:f6:4d:56:40:bf: 49:4b:ff:97:cd:93:ab:ff:fc:6e:80:05:0d:a2:2f: 69:00:e9:85:2d:fd:ab:2a:3c:47:d5:88:9c:c3:4b: f0:ac:d1:78:42:62:d2:7d:89:ac:05:e6:c8:3d:5b: 57:a0:49:de:15:f9:7a:c9:65:48:37:08:57:82:f7: 60:4d:65:f8:6d:61:11:27:0a:6d:57:02:cf:67:4b: 4c:73:da:a7:e5:97:04:35:c2:0a:20:a0:04:91:43: 3a:f0:be:38:46:9e:4e:ce:37:06:49:32:b8:9c:e2: c1:c9:67:87:fd:55:7f:4c:c5:2b:01:c4:bc:de:cd: 87:3f:08:8e:17:d0:2e:1c:34:9f:3c:ae:83:0f:ab: a3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C5:4D:4E:58:C3:26:E2:FD:BA:5B:6F:6F:CC:1E:24:D4:2A:EC:74 X509v3 Authority Key Identifier: keyid:DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9c:21:0a:79:d4:80:3d:d6:f0:64:77:f8:5f:da:56:62:d8: cc:9d:12:ed:21:5b:df:a7:b5:04:fc:7e:8a:00:1b:da:2e:47: 23:3f:5f:ea:c9:9b:d8:b9:6f:b5:2c:3c:7f:7b:9f:b9:eb:8e: b8:ce:44:f1:bb:0f:19:27:39:bf:a1:af:49:86:d1:e9:b8:20: b0:c6:6c:f5:67:a0:bf:6c:2b:b9:44:74:19:04:49:10:73:ab: 7b:70:c2:6d:4d:d9:c9:ce:55:da:59:98:d7:6a:b3:c8:db:20: 4e:0b:27:c8:98:b7:d2:ac:26:7f:d6:23:13:46:77:0b:7b:11: 93:91:c8:ce:71:3f:11:52:9d:cc:2f:70:a7:58:69:22:6d:71: 46:39:c8:fc:ce:7f:f5:df:9a:f2:d8:b4:bc:a8:b9:74:c3:92: b7:08:b7:c5:0b:0e:ef:72:7d:0a:e6:8d:6d:f6:f3:15:13:22: 4c:c0:9f:08:2b:39:d9:33:d2:ea:e5:7c:57:47:16:12:72:6f: e7:82:34:26:ef:25:2a:a3:5a:30:b8:6c:da:b2:c4:e2:c9:e2: 0a:a9:4d:44:f3:61:9b:44:1f:9b:02:9a:6c:b5:0f:e8:7f:e0: a2:b5:01:ab:f4:65:a9:cc:3a:c4:76:cc:ff:45:f5:9b:52:b4: 29:cf:53:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBHGWzs0D91Vsl5FcoQxikIc2OUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREExMjM0M0JCRDlGNDc5MTgyMjczQTlGN0I3RDZERDAy OThENUIxQzAeFw0yNjA3MjgxNDU1MDVaFw0yNjA3MjkxNzM1MDVaMDMxMTAvBgNV BAMTKDhBQzU0RDRFNThDMzI2RTJGREJBNUI2RjZGQ0MxRTI0RDQyQUVDNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3QSA0GMmFBY6Vz2I7ldMCzsEl Vj719d+1wYbWDDUMVX3aL7BTgOLUeV84wEtsVDT7pRZPEPsqsw55k81q6CJjvArA kHLySps69m1nygMqZGcgwRuMR8MLma6QtdHR4H2AqnJ0wVhufjDviWrirrPPUhv2 TVZAv0lL/5fNk6v//G6ABQ2iL2kA6YUt/asqPEfViJzDS/Cs0XhCYtJ9iawF5sg9 W1egSd4V+XrJZUg3CFeC92BNZfhtYREnCm1XAs9nS0xz2qfllwQ1wgogoASRQzrw vjhGnk7ONwZJMric4sHJZ4f9VX9MxSsBxLzezYc/CI4X0C4cNJ88roMPq6NhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUisVNTljDJuL9ultvb8weJNQq7HQwHwYDVR0j BBgwFoAU2hI0O72fR5GCJzqfe31t0CmNWxwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzM4NzRjZjMtYWRiMS00OTQ3LWE3ZTQtYTJkMzJjNTRlZDFmLzAvREExMjM0M0JC RDlGNDc5MTgyMjczQTlGN0I3RDZERDAyOThENUIxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTEyMzQzQkJEOUY0NzkxODIyNzNBOUY3QjdENkREMDI5OEQ1 QjFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzM4NzRjZjMtYWRiMS00OTQ3LWE3 ZTQtYTJkMzJjNTRlZDFmLzAvREExMjM0M0JCRDlGNDc5MTgyMjczQTlGN0I3RDZE RDAyOThENUIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+cIQp51IA91vBkd/hf2lZi2MydEu0hW9+n tQT8fooAG9ouRyM/X+rJm9i5b7UsPH97n7nrjrjORPG7DxknOb+hr0mG0em4ILDG bPVnoL9sK7lEdBkESRBzq3twwm1N2cnOVdpZmNdqs8jbIE4LJ8iYt9KsJn/WIxNG dwt7EZORyM5xPxFSncwvcKdYaSJtcUY5yPzOf/XfmvLYtLyouXTDkrcIt8ULDu9y fQrmjW328xUTIkzAnwgrOdkz0urlfFdHFhJyb+eCNCbvJSqjWjC4bNqyxOLJ4gqp TUTzYZtEH5sCmmy1D+h/4KK1Aav0ZanMOsR2zP9F9ZtStCnPU0w= -----END CERTIFICATE-----Generated at Wed Jul 29 08:31:37 2026 by rpki-client