$ rpki-client -vvf rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft File: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft (raw, json) Hash identifier: ruKjwOfIIhoToX3ZaI99/yLNymb+TnamkHBh2aGJUy8= Subject key identifier: A3:C5:81:01:FB:A1:1C:56:05:83:7E:69:0D:62:47:E2:65:64:5C:1A Authority key identifier: DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C Certificate issuer: /CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Certificate serial: 3F05ADD0B0D56D62E89B49FD8144AB11C0C8BF36 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 15:48:45 +0000 Manifest this update: Sat 13 Jun 2026 15:43:45 +0000 Manifest next update: Sun 14 Jun 2026 18:45:45 +0000 Files and hashes: 1: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: hKLPAhro/Jq1h6DXfB80L/ei9CiaAI4MnHiXFKHH4tE=) 2: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl (hash: F/rQoD36eCc73qOBpDZf3DT0hNdLgXAlpeg9pLttUYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:05:ad:d0:b0:d5:6d:62:e8:9b:49:fd:81:44:ab:11:c0:c8:bf:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Validity Not Before: Jun 13 15:43:45 2026 GMT Not After : Jun 14 18:45:45 2026 GMT Subject: CN=A3C58101FBA11C5605837E690D6247E265645C1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:fc:3b:15:b4:f1:ab:50:2b:63:c7:3b:84: 74:36:04:79:b1:0e:7a:97:90:d5:e0:ce:e0:66:59: 7f:a0:3e:10:44:be:04:d2:ff:b3:d7:ac:40:bc:3c: 25:77:ed:39:ea:7f:7b:b6:a6:62:dc:02:89:3f:a3: 65:4a:5d:28:f4:2e:67:50:55:cb:98:98:80:b7:c7: f3:16:eb:8c:fd:3e:e5:3d:c2:ef:cf:ce:66:44:d7: f2:ca:04:88:b4:62:82:68:4b:14:56:01:72:c1:4d: 79:94:7e:23:56:4e:a5:ce:7b:83:71:95:73:8a:3d: 4c:f3:e9:c5:64:a9:cd:60:a0:b7:ba:60:a3:56:7b: 28:02:eb:a0:0c:8f:c3:12:63:f9:2f:bb:b9:da:18: 78:d5:5d:5b:88:39:4f:91:fa:b5:6d:ef:e7:cc:ed: dd:be:38:4f:e3:62:1f:cf:71:e0:8b:84:c8:78:bf: 6f:90:b1:60:63:bb:9e:29:9b:40:f8:17:85:68:36: c8:47:23:43:57:df:07:e1:2f:e5:68:bd:b6:be:ed: c3:5a:7a:63:c0:e0:7b:35:15:e4:81:9d:60:db:44: 2a:52:50:7f:48:87:a2:6b:f2:9a:6b:a8:32:29:91: a8:43:c0:64:f5:11:7e:9e:94:33:00:23:85:63:bd: 56:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C5:81:01:FB:A1:1C:56:05:83:7E:69:0D:62:47:E2:65:64:5C:1A X509v3 Authority Key Identifier: keyid:DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d2:e1:67:b6:3f:66:48:86:f5:91:b2:3d:81:0f:a6:17:df: cf:61:2c:7c:4f:08:34:9a:13:ae:86:fc:23:e0:3e:b5:35:d9: 62:75:cb:f5:37:c8:fa:63:85:bc:70:71:75:a9:92:b7:0c:11: 54:75:fe:c2:90:f6:ae:c6:2e:e4:1b:78:db:95:57:2e:e0:5b: b7:90:6d:67:e5:2f:18:f0:2c:e3:91:a1:01:d8:6a:4f:49:7e: 9b:9d:7b:f6:e1:56:be:c0:28:06:88:b5:87:5f:c7:6e:ef:5c: 95:a9:33:3e:c8:c3:95:13:11:ad:50:68:73:e9:db:84:43:59: 50:f8:bb:16:9a:d5:6d:85:54:cc:43:2e:e6:ff:f2:b8:e4:fb: cb:60:55:2f:66:be:5d:0c:b2:60:6e:aa:69:f4:e0:cf:13:3a: 26:3b:59:a9:40:b1:4d:63:29:fe:b2:ae:a6:3b:67:81:72:69: 4c:c2:d4:11:af:bb:50:d7:c8:cd:10:d6:36:f5:22:bc:01:54: fd:01:29:76:a1:89:ff:7a:5b:c0:05:30:f1:91:f3:2e:7c:60: 38:ed:5e:0d:6e:07:b0:80:e7:f9:c7:3e:91:61:f5:91:89:ac: 0c:64:10:2d:e2:f5:39:2b:e7:e6:8c:08:57:63:46:fa:ba:f3: 59:91:c9:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPwWt0LDVbWLom0n9gUSrEcDIvzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREExMjM0M0JCRDlGNDc5MTgyMjczQTlGN0I3RDZERDAy OThENUIxQzAeFw0yNjA2MTMxNTQzNDVaFw0yNjA2MTQxODQ1NDVaMDMxMTAvBgNV BAMTKEEzQzU4MTAxRkJBMTFDNTYwNTgzN0U2OTBENjI0N0UyNjU2NDVDMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmz/w7FbTxq1ArY8c7hHQ2BHmx DnqXkNXgzuBmWX+gPhBEvgTS/7PXrEC8PCV37Tnqf3u2pmLcAok/o2VKXSj0LmdQ VcuYmIC3x/MW64z9PuU9wu/PzmZE1/LKBIi0YoJoSxRWAXLBTXmUfiNWTqXOe4Nx lXOKPUzz6cVkqc1goLe6YKNWeygC66AMj8MSY/kvu7naGHjVXVuIOU+R+rVt7+fM 7d2+OE/jYh/PceCLhMh4v2+QsWBju54pm0D4F4VoNshHI0NX3wfhL+Vovba+7cNa emPA4Hs1FeSBnWDbRCpSUH9Ih6Jr8pprqDIpkahDwGT1EX6elDMAI4VjvVYHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo8WBAfuhHFYFg35pDWJH4mVkXBowHwYDVR0j BBgwFoAU2hI0O72fR5GCJzqfe31t0CmNWxwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzM4NzRjZjMtYWRiMS00OTQ3LWE3ZTQtYTJkMzJjNTRlZDFmLzAvREExMjM0M0JC RDlGNDc5MTgyMjczQTlGN0I3RDZERDAyOThENUIxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTEyMzQzQkJEOUY0NzkxODIyNzNBOUY3QjdENkREMDI5OEQ1 QjFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzM4NzRjZjMtYWRiMS00OTQ3LWE3 ZTQtYTJkMzJjNTRlZDFmLzAvREExMjM0M0JCRDlGNDc5MTgyMjczQTlGN0I3RDZE RDAyOThENUIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLS4We2P2ZIhvWRsj2BD6YX389hLHxPCDSa E66G/CPgPrU12WJ1y/U3yPpjhbxwcXWpkrcMEVR1/sKQ9q7GLuQbeNuVVy7gW7eQ bWflLxjwLOORoQHYak9Jfpude/bhVr7AKAaItYdfx27vXJWpMz7Iw5UTEa1QaHPp 24RDWVD4uxaa1W2FVMxDLub/8rjk+8tgVS9mvl0MsmBuqmn04M8TOiY7WalAsU1j Kf6yrqY7Z4FyaUzC1BGvu1DXyM0Q1jb1IrwBVP0BKXahif96W8AFMPGR8y58YDjt Xg1uB7CA5/nHPpFh9ZGJrAxkEC3i9Tkr5+aMCFdjRvq681mRycg= -----END CERTIFICATE-----Generated at Sat Jun 13 23:12:24 2026 by rpki-client