$ rpki-client -vvf rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft File: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft (raw, json) Hash identifier: e6FH0HeF4zT2oRmGFnkRyqLNzRYrZI7jZu+rzl2pO6s= Subject key identifier: 35:F9:3D:E6:A8:48:46:B9:76:3A:A8:B7:36:E3:6B:F3:98:B7:1F:92 Authority key identifier: DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 Certificate issuer: /CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Certificate serial: 3911C6D8E556327F4B6B55291FDDF1BF935E584F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 16:52:31 +0000 Manifest this update: Tue 28 Jul 2026 16:47:31 +0000 Manifest next update: Wed 29 Jul 2026 19:10:31 +0000 Files and hashes: 1: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl (hash: nhfVSUgJGPd34GC9s3RLZhlw0DxGrrPblpbZedaG79Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:11:c6:d8:e5:56:32:7f:4b:6b:55:29:1f:dd:f1:bf:93:5e:58:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Validity Not Before: Jul 28 16:47:31 2026 GMT Not After : Jul 29 19:10:31 2026 GMT Subject: CN=35F93DE6A84846B9763AA8B736E36BF398B71F92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b2:9c:2c:71:93:2c:13:52:2c:1b:8f:4a:d2: 81:41:e6:64:31:c7:5c:00:d1:7f:9a:bd:a0:6d:4c: 55:4d:d7:03:b3:6d:7b:72:7d:26:ff:6f:23:5b:10: 38:40:05:10:50:39:01:e7:c4:34:a5:92:a4:34:1f: 5f:20:f2:7a:6d:83:9c:83:fe:b5:30:9f:61:4f:76: 3b:8b:79:0d:bb:08:be:da:d9:ab:ec:ff:a6:98:fd: 9c:cc:33:df:75:9c:b4:ec:1b:81:2b:87:b2:05:6e: f9:c5:2d:d0:6c:9b:41:8c:f6:19:41:9d:c6:72:37: 93:4a:44:90:8c:66:3d:d6:65:62:10:40:8b:71:dc: 3a:f5:93:07:9b:a1:1a:1e:7c:c1:16:45:e9:62:03: 54:17:f0:af:d2:fe:01:74:e5:1d:e9:42:6a:8f:85: 8e:f7:0e:93:cb:ad:4c:d8:dc:e8:48:7d:37:a3:e7: 1c:f3:33:fe:7e:51:9e:47:cc:e0:b3:05:00:4e:7f: 2c:2e:72:c2:8e:dd:fd:fd:2d:74:08:d7:a6:d3:3b: 1c:a4:0a:fb:e6:5e:66:d5:7c:d0:78:34:e2:ab:ff: d2:c8:b0:9e:3e:2f:f7:65:f8:70:39:fc:39:8b:87: a5:64:67:82:80:f7:64:8b:d5:02:8b:97:f2:9b:3a: ad:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F9:3D:E6:A8:48:46:B9:76:3A:A8:B7:36:E3:6B:F3:98:B7:1F:92 X509v3 Authority Key Identifier: keyid:DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:e9:75:b4:f0:d7:88:ea:cf:58:15:c4:42:70:72:d5:eb:c1: fa:0e:01:e2:17:74:e3:ae:4d:9f:e0:aa:61:49:81:9c:23:0f: 70:8a:a7:0b:a1:a9:e7:5e:a8:28:ca:1d:6d:cd:bb:b8:2d:68: a3:dc:ca:15:c4:ff:d7:c8:5c:7f:aa:35:d3:12:47:af:b1:f8: e7:14:13:67:0c:28:ed:59:c4:54:c0:80:99:72:91:34:97:9c: ab:c9:0c:30:47:bb:1f:e7:0b:3f:f4:23:ce:c5:47:4b:f0:93: 41:33:24:5b:cb:e2:c0:03:c0:f3:e2:43:03:0c:76:8f:f4:65: a7:78:49:fb:78:25:e9:ae:14:e3:ab:7c:32:67:71:7e:8c:94: 95:03:25:b3:1f:60:d8:b5:e1:2b:ce:28:83:83:e5:41:9c:d8: c7:18:4c:cf:e9:26:24:0c:d5:86:3a:c1:ba:54:09:07:c2:18: 48:b4:f2:15:89:cc:54:41:58:85:63:32:b2:76:8e:46:bd:81: 3f:d0:1b:37:9c:04:e8:c2:49:d8:88:b2:3a:6e:55:72:8d:63: 3d:15:bf:1d:21:c1:24:92:76:5d:41:77:2b:4e:3e:38:91:4b: 4f:3e:14:f6:67:ab:e2:42:dd:92:df:8c:c9:02:31:13:11:74: 31:50:37:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUORHG2OVWMn9La1UpH93xv5NeWE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0Mx RkM4MUNFNjAeFw0yNjA3MjgxNjQ3MzFaFw0yNjA3MjkxOTEwMzFaMDMxMTAvBgNV BAMTKDM1RjkzREU2QTg0ODQ2Qjk3NjNBQThCNzM2RTM2QkYzOThCNzFGOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3spwscZMsE1IsG49K0oFB5mQx x1wA0X+avaBtTFVN1wOzbXtyfSb/byNbEDhABRBQOQHnxDSlkqQ0H18g8nptg5yD /rUwn2FPdjuLeQ27CL7a2avs/6aY/ZzMM991nLTsG4Erh7IFbvnFLdBsm0GM9hlB ncZyN5NKRJCMZj3WZWIQQItx3Dr1kweboRoefMEWReliA1QX8K/S/gF05R3pQmqP hY73DpPLrUzY3OhIfTej5xzzM/5+UZ5HzOCzBQBOfywucsKO3f39LXQI16bTOxyk CvvmXmbVfNB4NOKr/9LIsJ4+L/dl+HA5/DmLh6VkZ4KA92SL1QKLl/KbOq3HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNfk95qhIRrl2Oqi3NuNr85i3H5IwHwYDVR0j BBgwFoAU2kO1zrOE47p77iyTLYYvPB/IHOYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VC Mzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0MxRkM4MUNFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTQzQjVDRUIzODRFM0JBN0JFRTJDOTMyRDg2MkYzQzFGQzgx Q0U2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2 YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJG M0MxRkM4MUNFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjpdbTw14jqz1gVxEJwctXrwfoOAeIXdOOu TZ/gqmFJgZwjD3CKpwuhqedeqCjKHW3Nu7gtaKPcyhXE/9fIXH+qNdMSR6+x+OcU E2cMKO1ZxFTAgJlykTSXnKvJDDBHux/nCz/0I87FR0vwk0EzJFvL4sADwPPiQwMM do/0Zad4Sft4JemuFOOrfDJncX6MlJUDJbMfYNi14SvOKIOD5UGc2McYTM/pJiQM 1YY6wbpUCQfCGEi08hWJzFRBWIVjMrJ2jka9gT/QGzecBOjCSdiIsjpuVXKNYz0V vx0hwSSSdl1BdytOPjiRS08+FPZnq+JC3ZLfjMkCMRMRdDFQNxQ= -----END CERTIFICATE-----Generated at Tue Jul 28 20:31:09 2026 by rpki-client