$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft File: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft (raw, json) Hash identifier: uOOSCC0TqMK1zefhmWPO3HDaJK9vbjJlYHUCkOYeA5M= Subject key identifier: 1D:17:D3:5C:D3:3D:25:21:22:03:0F:DA:26:EB:F4:55:79:5C:4C:EB Authority key identifier: DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 Certificate issuer: /CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Certificate serial: 3BC0258BF961743B21CD480463838473CDA0F33E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft Manifest number: FF Signing time: Mon 09 Nov 2026 01:06:57 +0000 Manifest this update: Mon 09 Nov 2026 01:01:57 +0000 Manifest next update: Tue 10 Nov 2026 04:37:57 +0000 Files and hashes: 1: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl (hash: REBdBzHntNg4iyvSHKA79O+kvhXXUhps9QuCj+CzCqQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 04:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c0:25:8b:f9:61:74:3b:21:cd:48:04:63:83:84:73:cd:a0:f3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Validity Not Before: Nov 9 01:01:57 2026 GMT Not After : Nov 10 04:37:57 2026 GMT Subject: CN=1D17D35CD33D252122030FDA26EBF455795C4CEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:37:b9:ee:cb:a0:1f:0f:bd:c4:3d:73:c9:46: a2:0e:df:78:e6:c0:94:b1:9e:33:23:45:cf:fe:3d: 76:1f:23:16:c9:eb:10:b7:df:27:f5:fa:78:11:ca: b1:84:63:05:fa:95:47:6d:e5:bc:81:cb:8f:6a:1c: 1f:6d:e7:52:35:82:b2:d5:14:a5:21:0f:f6:55:dc: 98:c7:b2:11:14:f4:79:15:a5:60:c3:29:90:42:13: 9b:a6:45:ea:e1:6d:61:c0:44:9c:34:38:e4:69:92: 6d:01:f1:fb:27:4a:26:40:bf:3d:42:a4:b9:6b:0a: e9:9e:d2:4c:b9:43:48:c0:07:09:d7:1c:ab:02:eb: 94:3c:fb:77:0b:70:dd:53:b6:f7:08:65:d3:bb:70: b7:2d:bc:42:5c:8d:58:ce:94:a5:59:3e:73:9f:33: 1c:55:5d:ff:cb:dd:d2:45:bc:80:b5:37:3a:19:6e: 02:17:1f:2e:cf:25:ec:f6:85:6d:24:53:33:51:7b: 80:82:bf:51:31:82:9f:8d:9b:19:6c:84:e6:45:8e: 8f:72:be:e3:62:cf:7e:43:ad:fa:7a:4c:81:22:96: 05:c2:d6:c7:9b:df:ef:89:e8:8d:97:36:d2:e8:3a: e0:f8:90:ba:4f:68:77:43:66:dc:92:e4:bb:0f:0e: 09:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:17:D3:5C:D3:3D:25:21:22:03:0F:DA:26:EB:F4:55:79:5C:4C:EB X509v3 Authority Key Identifier: keyid:DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:6e:7f:76:fc:a0:47:f1:76:36:34:53:1e:92:a2:51:b8:f4: 5a:27:f4:d4:39:69:1d:f8:1b:08:30:6f:f9:a4:ca:f5:f6:9d: 27:5d:28:1a:e2:5a:84:1a:cb:b1:47:73:5e:16:4f:03:e7:41: 21:e3:4c:bb:46:62:63:cb:25:62:be:9b:86:de:26:35:8d:0f: 7e:1b:9f:22:98:7f:34:c9:f6:f9:90:af:93:06:12:1d:14:00: fc:00:7e:40:22:c3:71:b0:63:4e:3c:b1:8e:40:a6:56:38:0c: b1:d2:e2:5b:0f:cb:2f:a3:1b:67:48:5a:4d:32:43:5f:bb:9a: f5:02:b2:22:14:5e:5c:d7:b3:c6:ce:16:03:15:e6:bb:cc:6c: 23:81:ca:aa:42:54:7b:be:4c:ac:b4:48:f8:1f:f0:3e:5b:be: 48:d1:12:fc:72:95:6e:1f:74:20:e7:c4:86:6c:f2:98:f2:9b: 64:22:6a:fa:49:84:1a:6c:3a:6c:b6:3e:69:89:8e:ae:8b:e7: 16:eb:35:f9:be:d9:a1:02:bc:8d:96:a2:50:eb:98:c4:f2:e4: 3e:f7:d1:c7:83:35:76:c9:64:5d:69:c2:09:c1:ff:f3:7b:8b: 64:be:a4:ee:0d:30:1f:70:c8:70:50:28:3c:91:b9:60:86:a2: de:f2:bb:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8Ali/lhdDshzUgEY4OEc82g8z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0Mx RkM4MUNFNjAeFw0yNjExMDkwMTAxNTdaFw0yNjExMTAwNDM3NTdaMDMxMTAvBgNV BAMTKDFEMTdEMzVDRDMzRDI1MjEyMjAzMEZEQTI2RUJGNDU1Nzk1QzRDRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTN7nuy6AfD73EPXPJRqIO33jm wJSxnjMjRc/+PXYfIxbJ6xC33yf1+ngRyrGEYwX6lUdt5byBy49qHB9t51I1grLV FKUhD/ZV3JjHshEU9HkVpWDDKZBCE5umRerhbWHARJw0OORpkm0B8fsnSiZAvz1C pLlrCume0ky5Q0jABwnXHKsC65Q8+3cLcN1TtvcIZdO7cLctvEJcjVjOlKVZPnOf MxxVXf/L3dJFvIC1NzoZbgIXHy7PJez2hW0kUzNRe4CCv1Exgp+NmxlshOZFjo9y vuNiz35Drfp6TIEilgXC1seb3++J6I2XNtLoOuD4kLpPaHdDZtyS5LsPDgk9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHRfTXNM9JSEiAw/aJuv0VXlcTOswHwYDVR0j BBgwFoAU2kO1zrOE47p77iyTLYYvPB/IHOYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VC Mzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0MxRkM4MUNFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTQzQjVDRUIzODRFM0JBN0JFRTJDOTMyRDg2MkYzQzFGQzgx Q0U2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2 YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJG M0MxRkM4MUNFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1uf3b8oEfxdjY0Ux6SolG49Fon9NQ5aR34 Gwgwb/mkyvX2nSddKBriWoQay7FHc14WTwPnQSHjTLtGYmPLJWK+m4beJjWND34b nyKYfzTJ9vmQr5MGEh0UAPwAfkAiw3GwY048sY5AplY4DLHS4lsPyy+jG2dIWk0y Q1+7mvUCsiIUXlzXs8bOFgMV5rvMbCOByqpCVHu+TKy0SPgf8D5bvkjREvxylW4f dCDnxIZs8pjym2QiavpJhBpsOmy2PmmJjq6L5xbrNfm+2aECvI2WolDrmMTy5D73 0ceDNXbJZF1pwgnB//N7i2S+pO4NMB9wyHBQKDyRuWCGot7yu+s= -----END CERTIFICATE-----Generated at Mon Nov 9 22:17:47 2026 by rpki-client