$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft File: DA4C7EC09188922B406170208997DD586575FFB0.mft (raw, json) Hash identifier: 6aP2VnRjI2JVG3ZFE1h28r1ECSfNKSaoH60UHPsCKxw= Subject key identifier: 9C:1C:E5:3F:A7:C5:68:EC:A2:3C:F1:C5:30:7C:95:F5:5B:FD:F8:EF Authority key identifier: DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 Certificate issuer: /CN=DA4C7EC09188922B406170208997DD586575FFB0 Certificate serial: 1030D642CF13438F3A99C506982B61014228112B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft Manifest number: BF Signing time: Sun 20 Sep 2026 18:24:36 +0000 Manifest this update: Sun 20 Sep 2026 18:19:36 +0000 Manifest next update: Mon 21 Sep 2026 22:11:36 +0000 Files and hashes: 1: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: +HwPI5t9LV2JhVv1OMpumDZv5OfbCi5N5psEQEHPJ+A=) 2: DA4C7EC09188922B406170208997DD586575FFB0.crl (hash: reXKbUzq3WzZjRDAo5ymJgMua2rPGZY21ej/fi1XNuA=) 3: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: /A5BVWcPl0ZTjFUSUynQsRiKSne+ZQyE6o9O6kwxRu8=) 4: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: LjLUgvBMy0vDjBtT3AvvXHrDpEIsdVFxx/cTyXnRl4k=) 5: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: MLj0AUwkGxT9VgNAnaRkUPum+E8mfae8sdJn0VM7fng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:30:d6:42:cf:13:43:8f:3a:99:c5:06:98:2b:61:01:42:28:11:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA4C7EC09188922B406170208997DD586575FFB0 Validity Not Before: Sep 20 18:19:36 2026 GMT Not After : Sep 21 22:11:36 2026 GMT Subject: CN=9C1CE53FA7C568ECA23CF1C5307C95F55BFDF8EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a7:dc:12:18:13:1a:79:13:81:48:19:f5:d6: 50:69:6f:6d:33:4f:54:56:c4:1d:68:e1:b1:1b:4d: 01:a4:a9:f6:e7:03:2e:eb:d3:22:83:a0:af:65:17: 1e:f5:8e:47:57:d8:3a:c9:0c:71:62:a0:76:fc:2a: bf:36:d4:ac:94:3c:fb:9f:41:57:96:e6:21:71:d7: a0:db:20:39:8a:eb:ea:d2:54:e6:ca:5f:bf:e6:eb: 38:a7:4b:0c:c9:5e:d4:4d:06:75:37:dc:9d:46:14: 24:57:95:34:d5:9a:57:64:ca:e6:c5:28:7a:b2:a2: 42:e3:ab:90:57:10:17:f9:73:c3:e2:b4:7d:92:92: 96:65:18:9c:16:7b:18:90:b1:31:11:7d:10:35:be: 45:bb:e6:04:57:f9:f1:de:4a:89:92:de:35:63:6a: 65:b7:fe:d9:82:d5:cf:6a:3e:20:41:e0:6d:85:d9: 9c:d7:1d:a2:be:c4:a3:a6:e7:44:ea:01:44:d1:75: 49:1d:b3:42:c0:0d:a1:5c:ee:28:c0:02:4c:84:07: 7f:64:b5:af:30:57:cf:a7:e8:6d:62:bd:0e:f1:0b: 97:c2:38:6c:e5:1d:36:8b:25:27:e9:23:cf:d4:0b: c2:29:b0:c3:58:bd:19:45:70:e4:16:7e:f9:f0:4c: 2f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1C:E5:3F:A7:C5:68:EC:A2:3C:F1:C5:30:7C:95:F5:5B:FD:F8:EF X509v3 Authority Key Identifier: keyid:DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:3f:17:de:f4:b3:2f:ee:11:8f:2c:c4:cf:e3:29:b7:2a:1a: 91:e9:3b:01:ff:cf:8e:16:51:f7:c4:de:7f:de:88:02:63:7f: 76:db:80:3f:3f:79:f2:d1:63:4f:60:38:69:58:44:84:29:3f: 51:c3:a4:98:ab:d4:fb:ba:aa:38:d5:2c:d6:45:e5:9a:6e:30: 82:2f:d4:bd:b3:3a:51:78:37:ff:69:55:5a:bd:b7:35:49:fc: c7:56:b0:65:5b:72:48:f5:1a:8f:93:4c:86:0d:c6:14:7a:05: df:55:30:3e:72:90:30:25:b1:6c:f2:a0:88:2f:e1:2c:aa:76: 0d:81:1f:a8:61:59:1d:ab:cb:81:cb:30:64:e3:be:e9:2f:7c: 13:8b:d1:6b:42:ef:d3:72:58:0e:02:72:37:91:5a:9d:68:de: 41:52:35:00:09:3c:a3:d5:c6:7c:38:fb:43:fe:c4:02:16:e1: b9:37:a4:60:62:6c:1e:82:cd:cb:c6:48:c7:12:ee:e5:c2:28: b2:d0:06:63:4d:fa:1e:cd:cc:9f:17:87:81:f8:a8:4a:13:7e: f7:a1:36:cd:d8:36:61:dc:eb:b9:cc:85:e8:f3:5d:81:12:8f: 95:0c:01:5e:8c:f0:54:52:a4:91:04:01:61:5c:21:78:3b:60: ca:3b:05:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEDDWQs8TQ486mcUGmCthAUIoESswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2 NTc1RkZCMDAeFw0yNjA5MjAxODE5MzZaFw0yNjA5MjEyMjExMzZaMDMxMTAvBgNV BAMTKDlDMUNFNTNGQTdDNTY4RUNBMjNDRjFDNTMwN0M5NUY1NUJGREY4RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQp9wSGBMaeROBSBn11lBpb20z T1RWxB1o4bEbTQGkqfbnAy7r0yKDoK9lFx71jkdX2DrJDHFioHb8Kr821KyUPPuf QVeW5iFx16DbIDmK6+rSVObKX7/m6zinSwzJXtRNBnU33J1GFCRXlTTVmldkyubF KHqyokLjq5BXEBf5c8PitH2SkpZlGJwWexiQsTERfRA1vkW75gRX+fHeSomS3jVj amW3/tmC1c9qPiBB4G2F2ZzXHaK+xKOm50TqAUTRdUkds0LADaFc7ijAAkyEB39k ta8wV8+n6G1ivQ7xC5fCOGzlHTaLJSfpI8/UC8IpsMNYvRlFcOQWfvnwTC8xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnBzlP6fFaOyiPPHFMHyV9Vv9+O8wHwYDVR0j BBgwFoAU2kx+wJGIkitAYXAgiZfdWGV1/7AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhjZTIwMDgtODRiNy00YmVmLTk0YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5 MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2NTc1RkZCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTRDN0VDMDkxODg5MjJCNDA2MTcwMjA4OTk3REQ1ODY1NzVG RkIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RE NTg2NTc1RkZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFk/F970sy/uEY8sxM/jKbcqGpHpOwH/z44W UffE3n/eiAJjf3bbgD8/efLRY09gOGlYRIQpP1HDpJir1Pu6qjjVLNZF5ZpuMIIv 1L2zOlF4N/9pVVq9tzVJ/MdWsGVbckj1Go+TTIYNxhR6Bd9VMD5ykDAlsWzyoIgv 4Syqdg2BH6hhWR2ry4HLMGTjvukvfBOL0WtC79NyWA4CcjeRWp1o3kFSNQAJPKPV xnw4+0P+xAIW4bk3pGBibB6CzcvGSMcS7uXCKLLQBmNN+h7NzJ8Xh4H4qEoTfveh Ns3YNmHc67nMhejzXYESj5UMAV6M8FRSpJEEAWFcIXg7YMo7Ba8= -----END CERTIFICATE-----Generated at Mon Sep 21 04:51:44 2026 by rpki-client