$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft File: DA4C7EC09188922B406170208997DD586575FFB0.mft (raw, json) Hash identifier: v+9b+ArU44uR3VCQs6Oo98u5dHDrABvSFetek5j2Qhg= Subject key identifier: 10:6C:2C:D6:59:1E:D5:DC:CA:D2:CA:D0:8C:2C:5D:84:60:6B:A9:9C Authority key identifier: DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 Certificate issuer: /CN=DA4C7EC09188922B406170208997DD586575FFB0 Certificate serial: 63BF23AA05495BBAA800161BC849DA13CB0F8170 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:02:43 +0000 Manifest this update: Wed 17 Jun 2026 03:57:43 +0000 Manifest next update: Thu 18 Jun 2026 05:46:43 +0000 Files and hashes: 1: DA4C7EC09188922B406170208997DD586575FFB0.crl (hash: yCualwdfr7VJHa2Vk1EuVHGXptfTfKGQDs+U4MTf6wY=) 2: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: MLj0AUwkGxT9VgNAnaRkUPum+E8mfae8sdJn0VM7fng=) 3: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: LjLUgvBMy0vDjBtT3AvvXHrDpEIsdVFxx/cTyXnRl4k=) 4: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: +HwPI5t9LV2JhVv1OMpumDZv5OfbCi5N5psEQEHPJ+A=) 5: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: /A5BVWcPl0ZTjFUSUynQsRiKSne+ZQyE6o9O6kwxRu8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:bf:23:aa:05:49:5b:ba:a8:00:16:1b:c8:49:da:13:cb:0f:81:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA4C7EC09188922B406170208997DD586575FFB0 Validity Not Before: Jun 17 03:57:43 2026 GMT Not After : Jun 18 05:46:43 2026 GMT Subject: CN=106C2CD6591ED5DCCAD2CAD08C2C5D84606BA99C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:68:14:fe:dc:8e:c9:ae:15:56:d3:2e:02: 1c:a4:ad:82:48:21:fd:7c:5a:fa:a6:3b:84:e9:76: fd:0e:97:2c:03:63:7c:7c:24:69:ad:ba:50:2a:ac: 21:3e:33:56:32:69:76:6f:dd:33:61:65:a4:92:23: c1:d6:5a:0b:93:8d:bb:35:ac:e3:81:7c:46:4b:85: 61:2f:3c:2d:fc:e7:60:cc:a7:75:f6:42:11:a9:3a: 74:97:f5:60:3b:b9:8e:c2:07:c2:3b:2f:fb:60:55: e7:2c:c4:73:d5:25:e5:a0:4e:78:18:94:77:9f:3e: 54:91:60:99:79:0b:e9:1c:74:6c:5a:e9:b9:fa:ed: 5e:22:2a:14:30:79:7d:ea:76:0e:5e:8e:ab:ac:fa: ac:f6:5d:03:c4:04:2d:c8:ed:3e:c2:ba:8b:00:06: 15:98:1f:51:f4:b1:83:88:82:ae:58:07:cf:f4:53: 41:ff:b3:c1:1f:7c:1f:f5:c7:d1:39:ac:8c:7d:8a: 1f:b1:27:92:51:d4:be:b4:61:fb:f3:1d:c9:29:3b: 56:14:89:a7:99:c7:82:f6:16:f4:3d:51:8b:4e:63: 47:3b:78:da:8a:64:4e:00:0d:d0:b9:e4:cd:b4:ff: bc:ab:2c:f8:a4:44:71:84:d2:c8:ac:cb:16:d0:f2: a1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6C:2C:D6:59:1E:D5:DC:CA:D2:CA:D0:8C:2C:5D:84:60:6B:A9:9C X509v3 Authority Key Identifier: keyid:DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:e1:82:15:d0:3d:7f:31:66:31:0c:01:43:07:84:e5:27:d4: c8:00:63:43:24:9b:d4:06:f6:0c:36:bb:f1:e4:80:08:76:e2: 3f:2d:ce:a4:0c:27:63:60:8f:a5:86:62:02:94:2d:3e:17:d9: 7b:17:b8:6c:df:c1:95:21:86:e2:69:93:f1:52:26:48:0a:37: 7e:34:5c:ed:1a:d5:72:db:cb:fc:e7:73:13:70:3e:d0:3b:5c: 45:7b:a8:38:51:ac:0b:89:60:02:9b:bc:fc:cc:07:7c:3f:72: 0e:28:6f:f7:d2:cc:64:4f:7b:4e:7d:66:a7:4e:e2:d3:9b:43: 4c:5c:0b:cf:93:41:bf:aa:62:80:4b:06:30:2e:6a:c2:11:a9: a5:83:d3:c0:e4:c2:8d:c2:c0:0b:76:d8:bc:3c:04:20:17:eb: 5c:1b:67:16:45:ac:c8:a7:4d:fc:68:1d:2f:bb:f8:ad:4e:99: f5:a2:66:8e:df:03:19:99:f2:01:f7:a9:71:48:88:8e:68:49: d6:2c:e6:51:e5:1e:21:f1:3c:e6:81:53:aa:c5:41:5d:e4:b7: d4:2b:18:5c:04:ee:c6:e2:b4:8d:e7:4e:cf:9c:5f:0d:8a:ba: 5f:2d:de:b0:53:dc:a4:da:2c:76:b6:ff:44:68:3d:14:45:d1: 4a:ce:3d:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY78jqgVJW7qoABYbyEnaE8sPgXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2 NTc1RkZCMDAeFw0yNjA2MTcwMzU3NDNaFw0yNjA2MTgwNTQ2NDNaMDMxMTAvBgNV BAMTKDEwNkMyQ0Q2NTkxRUQ1RENDQUQyQ0FEMDhDMkM1RDg0NjA2QkE5OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYGgU/tyOya4VVtMuAhykrYJI If18WvqmO4Tpdv0OlywDY3x8JGmtulAqrCE+M1YyaXZv3TNhZaSSI8HWWguTjbs1 rOOBfEZLhWEvPC3852DMp3X2QhGpOnSX9WA7uY7CB8I7L/tgVecsxHPVJeWgTngY lHefPlSRYJl5C+kcdGxa6bn67V4iKhQweX3qdg5ejqus+qz2XQPEBC3I7T7CuosA BhWYH1H0sYOIgq5YB8/0U0H/s8EffB/1x9E5rIx9ih+xJ5JR1L60YfvzHckpO1YU iaeZx4L2FvQ9UYtOY0c7eNqKZE4ADdC55M20/7yrLPikRHGE0sisyxbQ8qHBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEGws1lke1dzK0srQjCxdhGBrqZwwHwYDVR0j BBgwFoAU2kx+wJGIkitAYXAgiZfdWGV1/7AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhjZTIwMDgtODRiNy00YmVmLTk0YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5 MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2NTc1RkZCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTRDN0VDMDkxODg5MjJCNDA2MTcwMjA4OTk3REQ1ODY1NzVG RkIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RE NTg2NTc1RkZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnhghXQPX8xZjEMAUMHhOUn1MgAY0Mkm9QG 9gw2u/HkgAh24j8tzqQMJ2Ngj6WGYgKULT4X2XsXuGzfwZUhhuJpk/FSJkgKN340 XO0a1XLby/zncxNwPtA7XEV7qDhRrAuJYAKbvPzMB3w/cg4ob/fSzGRPe059ZqdO 4tObQ0xcC8+TQb+qYoBLBjAuasIRqaWD08Dkwo3CwAt22Lw8BCAX61wbZxZFrMin TfxoHS+7+K1OmfWiZo7fAxmZ8gH3qXFIiI5oSdYs5lHlHiHxPOaBU6rFQV3kt9Qr GFwE7sbitI3nTs+cXw2Kul8t3rBT3KTaLHa2/0RoPRRF0UrOPao= -----END CERTIFICATE-----Generated at Wed Jun 17 10:53:10 2026 by rpki-client