$ rpki-client -vvvf rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft File: DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft (raw, json) Hash identifier: /cSqsAKUDACH40SrftFnxXtOqd/+C6JRsAfqo3wJUAE= Subject key identifier: F8:96:B5:A5:15:90:BE:B1:B3:A3:29:8C:D6:8F:43:A1:41:42:07:DA Authority key identifier: DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 Certificate issuer: /CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Certificate serial: 65747DA909CD3F2242100ED4F9806B082A58C5EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 08:17:47 +0000 Manifest this update: Mon 02 Nov 2026 08:12:47 +0000 Manifest next update: Tue 03 Nov 2026 08:21:47 +0000 Files and hashes: 1: DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl (hash: LDDmu8PUxA6yskP+gPNqmk2/WZQqiRMdqD1jQsV9oe4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:74:7d:a9:09:cd:3f:22:42:10:0e:d4:f9:80:6b:08:2a:58:c5:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Validity Not Before: Nov 2 08:12:47 2026 GMT Not After : Nov 3 08:21:47 2026 GMT Subject: CN=F896B5A51590BEB1B3A3298CD68F43A1414207DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:24:1d:0c:dc:d5:81:7c:73:fa:6b:18:68: 7d:e1:0b:88:bb:a8:5e:79:41:68:11:5f:4f:b1:8b: 38:44:5f:9c:02:d4:38:10:05:f4:fe:d0:47:a4:d4: da:bd:b1:01:8b:b5:77:8b:3d:70:9b:5a:cb:ae:1f: f1:4a:e2:2d:b4:30:38:b6:a9:55:2b:7c:9e:29:5c: af:4f:0c:42:b4:98:f3:c0:a1:82:1c:18:b4:4a:8a: dc:24:26:41:59:e7:50:28:f6:95:89:36:11:16:84: 6a:40:41:35:4a:6c:31:44:86:4f:ff:ed:e9:ce:1f: 62:a5:76:5f:49:78:1f:6d:3d:f3:19:0b:45:5a:2b: 4a:85:f4:9b:81:95:8d:0c:92:b2:d9:b6:a4:48:e9: 37:a8:c9:f2:6d:63:e1:fe:e5:3d:ba:67:08:d7:40: 31:69:a5:91:be:e9:83:c7:32:a0:6f:08:97:f1:ca: df:6c:0b:c9:6a:bb:d0:49:3c:2c:b2:82:74:f3:7b: cd:74:43:b3:b6:61:05:83:f3:33:16:62:f3:78:98: 4f:c7:0c:41:09:6d:77:b4:d6:c4:e2:94:84:7f:77: 30:13:a6:cd:31:40:aa:13:f7:fe:b4:be:25:de:b2: e6:d2:7e:3b:41:90:9c:5c:d2:24:24:7a:40:f4:20: 99:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:96:B5:A5:15:90:BE:B1:B3:A3:29:8C:D6:8F:43:A1:41:42:07:DA X509v3 Authority Key Identifier: keyid:DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:4a:ca:cf:93:fd:5a:cd:b7:27:91:07:c3:ab:db:e8:a3:0b: 85:90:cc:d9:39:5e:9f:c8:3a:b5:e7:85:dc:dd:69:ce:25:27: 3b:57:bf:2a:78:3e:67:0d:ce:7e:5e:b7:3b:58:20:11:84:4a: f2:85:34:84:58:83:7a:8e:51:bd:af:5a:4d:e0:10:e5:5e:6f: ab:81:c6:ec:d8:6e:31:fc:8d:2a:a4:02:14:4d:4d:2b:da:dd: 64:f6:95:8f:6c:02:6a:61:d6:0e:38:d8:b7:f6:cd:f2:ff:ab: 66:8b:58:6a:90:2f:a1:af:ab:50:80:1a:08:17:42:a3:9c:96: 3c:18:d0:7e:0f:26:91:fa:42:da:b3:8e:b0:df:42:51:25:b9: 22:9e:0a:52:47:48:25:50:b0:aa:53:77:10:10:20:84:06:aa: 17:cd:f2:58:77:8c:1c:3f:39:74:a7:17:12:8a:eb:7e:b5:ac: 72:26:2d:6a:41:8f:ed:4e:c4:b3:bd:35:c4:c5:40:92:04:d7: 08:e1:2d:45:b8:08:14:66:3a:de:c6:1f:76:59:29:e3:8a:4e: 91:b2:0a:e5:bd:93:41:81:3f:c8:a7:f4:5f:f9:7d:c8:48:59: 78:72:29:09:fb:ac:63:7c:7a:18:bf:3f:2c:7e:aa:13:55:70: 89:a2:b6:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZXR9qQnNPyJCEA7U+YBrCCpYxewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5 Nzg5NjVEMDAeFw0yNjExMDIwODEyNDdaFw0yNjExMDMwODIxNDdaMDMxMTAvBgNV BAMTKEY4OTZCNUE1MTU5MEJFQjFCM0EzMjk4Q0Q2OEY0M0ExNDE0MjA3REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1mCQdDNzVgXxz+msYaH3hC4i7 qF55QWgRX0+xizhEX5wC1DgQBfT+0Eek1Nq9sQGLtXeLPXCbWsuuH/FK4i20MDi2 qVUrfJ4pXK9PDEK0mPPAoYIcGLRKitwkJkFZ51Ao9pWJNhEWhGpAQTVKbDFEhk// 7enOH2Kldl9JeB9tPfMZC0VaK0qF9JuBlY0MkrLZtqRI6TeoyfJtY+H+5T26ZwjX QDFppZG+6YPHMqBvCJfxyt9sC8lqu9BJPCyygnTze810Q7O2YQWD8zMWYvN4mE/H DEEJbXe01sTilIR/dzATps0xQKoT9/60viXesubSfjtBkJxc0iQkekD0IJkRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Ja1pRWQvrGzoymM1o9DoUFCB9owHwYDVR0j BBgwFoAU2pcnDKVSeeF6dDD8rExLbJeJZdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDBhNmZlYWEtNmI0Zi00N2NmLTllM2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENB NTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5Nzg5NjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTk3MjcwQ0E1NTI3OUUxN0E3NDMwRkNBQzRDNEI2Qzk3ODk2 NUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRC NkM5Nzg5NjVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMBKys+T/VrNtyeRB8Or2+ijC4WQzNk5Xp/I OrXnhdzdac4lJztXvyp4PmcNzn5etztYIBGESvKFNIRYg3qOUb2vWk3gEOVeb6uB xuzYbjH8jSqkAhRNTSva3WT2lY9sAmph1g442Lf2zfL/q2aLWGqQL6Gvq1CAGggX QqOcljwY0H4PJpH6QtqzjrDfQlEluSKeClJHSCVQsKpTdxAQIIQGqhfN8lh3jBw/ OXSnFxKK6361rHImLWpBj+1OxLO9NcTFQJIE1wjhLUW4CBRmOt7GH3ZZKeOKTpGy CuW9k0GBP8in9F/5fchIWXhyKQn7rGN8ehi/Pyx+qhNVcImitjU= -----END CERTIFICATE-----Generated at Mon Nov 2 16:22:22 2026 by rpki-client