$ rpki-client -vvf rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft File: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft (raw, json) Hash identifier: A6PYrQhKkYjq3wtg5rjcrVlAnM8K9oD64n4bS7E9jG4= Subject key identifier: 41:0D:93:6D:96:9E:29:D9:2E:F2:19:C7:A2:37:91:40:9F:D9:4E:65 Authority key identifier: DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 Certificate issuer: /CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Certificate serial: 7F6803E5618DED4B772D58C67514E8F69CA39859 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 07:02:33 +0000 Manifest this update: Sat 13 Jun 2026 06:57:33 +0000 Manifest next update: Sun 14 Jun 2026 10:09:33 +0000 Files and hashes: 1: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl (hash: 54bzJUdp9ZJ3kIZc3UzrM91Gy1YFT0FucwONgngZSWg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 10:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:68:03:e5:61:8d:ed:4b:77:2d:58:c6:75:14:e8:f6:9c:a3:98:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Validity Not Before: Jun 13 06:57:33 2026 GMT Not After : Jun 14 10:09:33 2026 GMT Subject: CN=410D936D969E29D92EF219C7A23791409FD94E65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:fd:b3:44:7b:74:e4:2f:67:4e:0f:eb:8f: e8:8a:6c:30:0f:c2:3b:2d:d8:48:59:97:81:57:cf: 58:c1:23:6b:4b:57:50:5d:46:a3:c6:0c:5e:5d:03: cd:3d:00:cd:9c:1a:9b:34:8e:1d:4f:60:d2:02:9b: 37:80:a8:3b:03:b5:ef:93:29:5f:27:76:d9:ab:92: ce:da:4b:55:fd:63:19:e1:b0:d4:ec:4e:58:20:c1: 26:f5:95:4b:45:3d:c4:f9:a7:f3:bf:4c:51:2c:14: 2b:e5:c7:8c:55:93:28:35:ab:20:52:9d:b1:d1:0e: 82:b8:c7:a2:28:aa:e5:5c:08:15:82:10:f6:54:39: 01:55:c9:93:74:0c:20:d1:7e:90:aa:9c:d8:84:ba: dc:db:80:75:32:a0:e2:79:c8:b3:cf:0e:22:38:2b: 3e:33:d9:6a:6f:f6:d3:16:c2:73:eb:67:76:34:d9: 03:e4:c0:2a:4c:43:6e:b1:c3:53:51:66:2a:6c:9f: 1c:12:4c:09:3b:bf:a5:ca:f9:b8:b8:6e:81:7a:8e: d8:63:e2:c9:31:81:d0:4a:08:0c:77:2c:74:75:c1: ea:b6:4b:c3:20:57:8b:82:4f:d1:7c:7d:5c:27:19: d0:7d:75:9f:d5:76:01:16:ab:24:a9:3c:52:5c:df: 90:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0D:93:6D:96:9E:29:D9:2E:F2:19:C7:A2:37:91:40:9F:D9:4E:65 X509v3 Authority Key Identifier: keyid:DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:3e:70:4c:08:af:02:c4:44:2a:bc:9c:a1:44:b7:a4:1d:aa: f0:18:8b:59:be:e8:6f:a3:58:87:c3:76:ba:54:03:63:4d:9d: 42:21:18:c9:c2:bb:9e:71:49:99:b8:0c:93:59:7c:96:23:25: 73:31:4d:03:8a:3b:fb:0b:49:c5:a3:ea:65:f0:e7:44:c2:ba: db:83:b4:4e:da:8d:2b:5b:c1:05:9d:4e:cb:90:29:4d:f3:6c: 16:3e:11:5e:1f:d1:9b:f7:40:7f:5b:41:bc:f2:9e:23:11:54: b0:2c:0b:59:19:9c:51:64:83:1d:d0:08:00:6d:c5:88:24:7c: 52:a1:dd:da:66:ec:fd:3a:3a:1c:40:4f:f5:1d:20:ef:6f:1a: d0:39:87:f8:1f:43:49:1c:ab:52:cd:f6:e9:59:bb:0f:8b:0d: 49:45:e9:c1:61:a0:c6:19:48:ae:da:ce:a2:22:ba:cf:78:c6: cf:95:c5:64:13:64:cd:db:61:9f:bb:7c:6c:ff:fd:6e:32:89: cb:dc:13:0e:6f:65:be:6d:56:86:12:2d:de:0e:d9:7c:8b:24: 63:df:80:01:2f:b6:45:5d:f7:b2:b6:8d:f4:b5:64:c4:eb:40: b2:8c:98:c2:82:3e:00:74:7b:74:a2:ed:81:31:03:66:f3:0b: 3e:1a:37:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2gD5WGN7Ut3LVjGdRTo9pyjmFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0Mx RkM4MUNFNjAeFw0yNjA2MTMwNjU3MzNaFw0yNjA2MTQxMDA5MzNaMDMxMTAvBgNV BAMTKDQxMEQ5MzZEOTY5RTI5RDkyRUYyMTlDN0EyMzc5MTQwOUZEOTRFNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJv2zRHt05C9nTg/rj+iKbDAP wjst2EhZl4FXz1jBI2tLV1BdRqPGDF5dA809AM2cGps0jh1PYNICmzeAqDsDte+T KV8ndtmrks7aS1X9YxnhsNTsTlggwSb1lUtFPcT5p/O/TFEsFCvlx4xVkyg1qyBS nbHRDoK4x6IoquVcCBWCEPZUOQFVyZN0DCDRfpCqnNiEutzbgHUyoOJ5yLPPDiI4 Kz4z2Wpv9tMWwnPrZ3Y02QPkwCpMQ26xw1NRZipsnxwSTAk7v6XK+bi4boF6jthj 4skxgdBKCAx3LHR1weq2S8MgV4uCT9F8fVwnGdB9dZ/VdgEWqySpPFJc35BfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQQ2TbZaeKdku8hnHojeRQJ/ZTmUwHwYDVR0j BBgwFoAU2kO1zrOE47p77iyTLYYvPB/IHOYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VC Mzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0MxRkM4MUNFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTQzQjVDRUIzODRFM0JBN0JFRTJDOTMyRDg2MkYzQzFGQzgx Q0U2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2 YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJG M0MxRkM4MUNFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHc+cEwIrwLERCq8nKFEt6QdqvAYi1m+6G+j WIfDdrpUA2NNnUIhGMnCu55xSZm4DJNZfJYjJXMxTQOKO/sLScWj6mXw50TCutuD tE7ajStbwQWdTsuQKU3zbBY+EV4f0Zv3QH9bQbzyniMRVLAsC1kZnFFkgx3QCABt xYgkfFKh3dpm7P06OhxAT/UdIO9vGtA5h/gfQ0kcq1LN9ulZuw+LDUlF6cFhoMYZ SK7azqIius94xs+VxWQTZM3bYZ+7fGz//W4yicvcEw5vZb5tVoYSLd4O2XyLJGPf gAEvtkVd97K2jfS1ZMTrQLKMmMKCPgB0e3Si7YExA2bzCz4aNyw= -----END CERTIFICATE-----Generated at Sat Jun 13 16:09:50 2026 by rpki-client