$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft File: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft (raw, json) Hash identifier: I8z6iLUKFfrxIwu4Dr7xUiSfGXIK56cHGKdYMHbaofI= Subject key identifier: 57:74:54:0C:39:E2:8E:9C:06:03:7B:F5:D7:97:7B:0F:A1:CF:A8:E3 Authority key identifier: DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 Certificate issuer: /CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Certificate serial: 187D53A745148E8232CDB3A8DABF6609DBCA2E4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft Manifest number: BE Signing time: Sun 20 Sep 2026 23:46:13 +0000 Manifest this update: Sun 20 Sep 2026 23:41:13 +0000 Manifest next update: Tue 22 Sep 2026 01:14:13 +0000 Files and hashes: 1: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl (hash: uqQgaYn7UxwyVkBDsqNN3cWQH2bL8/q+rwzEWpjBISc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:7d:53:a7:45:14:8e:82:32:cd:b3:a8:da:bf:66:09:db:ca:2e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Validity Not Before: Sep 20 23:41:13 2026 GMT Not After : Sep 22 01:14:13 2026 GMT Subject: CN=5774540C39E28E9C06037BF5D7977B0FA1CFA8E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:32:71:e6:64:83:05:6e:8f:6c:c6:67:23:1d: 60:3e:35:7b:69:31:45:fc:78:14:51:86:5f:cd:84: f5:95:23:e7:1e:96:a0:77:84:1d:65:b5:b4:08:49: 4b:65:26:b2:30:5c:b7:f5:42:7f:8a:33:ab:1b:e5: 03:1e:71:0d:74:f5:0b:d7:93:e1:e8:a5:b9:a5:a7: 28:7d:c2:79:87:dd:91:bb:65:d6:df:29:c1:f3:de: 89:a9:4a:17:df:32:50:d3:8a:68:b4:5c:50:29:a4: 1b:06:c8:2a:19:8d:c4:1d:f3:0f:7a:3d:72:51:94: f4:a8:21:16:86:e6:b4:31:76:34:5b:ec:54:8a:3e: aa:13:61:65:e0:41:bc:ea:58:25:ec:6c:b0:e3:7e: 05:21:09:e1:20:1f:43:23:71:76:10:0c:38:89:01: 5f:76:d1:f3:71:54:ac:58:dc:2b:d2:36:81:f3:68: 44:3a:c8:71:5e:70:95:39:bb:b2:5e:9a:9f:4e:6f: 76:a5:5d:f6:67:53:9d:12:4e:e4:30:a1:89:00:5b: cf:fa:66:e7:ee:d8:f0:76:7a:b2:f7:8b:f4:a3:34: 27:ee:31:4c:c0:45:f8:df:7b:b1:2e:bb:7c:fb:db: d6:28:05:19:ea:ad:af:46:b7:5e:c9:49:1a:c5:21: 67:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:74:54:0C:39:E2:8E:9C:06:03:7B:F5:D7:97:7B:0F:A1:CF:A8:E3 X509v3 Authority Key Identifier: keyid:DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9a:e5:06:7a:c7:04:ae:71:06:c4:b2:f9:bd:a0:9a:3b:c1: 7a:08:f2:c5:e2:a5:58:51:bd:33:d4:03:e7:1e:f9:b1:4e:a0: ca:32:c0:5f:b6:12:d6:be:fb:2a:82:b5:76:20:f4:96:8a:b3: 1c:de:e0:f0:4a:4a:75:a6:5d:a1:3d:d8:9b:bb:b7:32:cd:02: 40:25:3b:43:62:98:4e:59:a6:de:48:ff:7b:61:fa:0e:10:31: 16:30:15:80:fc:5a:ec:fd:ab:18:f4:1d:28:c3:b6:84:98:13: 94:3a:56:19:ad:ea:5f:f3:4e:41:a8:03:0c:e2:e1:0a:bf:77: c0:71:f8:1a:cb:d7:9d:86:30:3e:f2:b1:64:0e:8b:d2:09:1a: d8:7b:3d:18:47:ac:78:51:bd:8a:5b:97:02:ee:9e:cc:04:2c: 17:0f:35:37:50:61:53:aa:78:15:e3:69:5c:a3:43:d9:32:b9: 6a:4c:6c:be:d8:c4:a9:95:ad:4e:dc:ea:07:e3:31:dd:69:11: 96:7e:a0:70:78:6f:48:d0:05:34:3b:93:38:a1:7a:b6:e0:5e: 0f:19:8f:69:8f:bf:fc:63:d0:cb:ed:8d:33:c9:26:94:48:bb: 6e:3d:3c:be:06:dd:99:1a:81:59:60:51:7c:2d:01:f2:27:ea: d0:ec:08:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGH1Tp0UUjoIyzbOo2r9mCdvKLkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0Mx RkM4MUNFNjAeFw0yNjA5MjAyMzQxMTNaFw0yNjA5MjIwMTE0MTNaMDMxMTAvBgNV BAMTKDU3NzQ1NDBDMzlFMjhFOUMwNjAzN0JGNUQ3OTc3QjBGQTFDRkE4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrMnHmZIMFbo9sxmcjHWA+NXtp MUX8eBRRhl/NhPWVI+celqB3hB1ltbQISUtlJrIwXLf1Qn+KM6sb5QMecQ109QvX k+Hopbmlpyh9wnmH3ZG7ZdbfKcHz3ompShffMlDTimi0XFAppBsGyCoZjcQd8w96 PXJRlPSoIRaG5rQxdjRb7FSKPqoTYWXgQbzqWCXsbLDjfgUhCeEgH0MjcXYQDDiJ AV920fNxVKxY3CvSNoHzaEQ6yHFecJU5u7Jemp9Ob3alXfZnU50STuQwoYkAW8/6 Zufu2PB2erL3i/SjNCfuMUzARfjfe7Euu3z729YoBRnqra9Gt17JSRrFIWevAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV3RUDDnijpwGA3v115d7D6HPqOMwHwYDVR0j BBgwFoAU2kO1zrOE47p77iyTLYYvPB/IHOYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VC Mzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0MxRkM4MUNFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTQzQjVDRUIzODRFM0JBN0JFRTJDOTMyRDg2MkYzQzFGQzgx Q0U2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2 YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJG M0MxRkM4MUNFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6a5QZ6xwSucQbEsvm9oJo7wXoI8sXipVhR vTPUA+ce+bFOoMoywF+2Eta++yqCtXYg9JaKsxze4PBKSnWmXaE92Ju7tzLNAkAl O0NimE5Zpt5I/3th+g4QMRYwFYD8Wuz9qxj0HSjDtoSYE5Q6Vhmt6l/zTkGoAwzi 4Qq/d8Bx+BrL152GMD7ysWQOi9IJGth7PRhHrHhRvYpblwLunswELBcPNTdQYVOq eBXjaVyjQ9kyuWpMbL7YxKmVrU7c6gfjMd1pEZZ+oHB4b0jQBTQ7kziherbgXg8Z j2mPv/xj0MvtjTPJJpRIu249PL4G3ZkagVlgUXwtAfIn6tDsCDQ= -----END CERTIFICATE-----Generated at Mon Sep 21 12:18:15 2026 by rpki-client