$ rpki-client -vvf rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft File: DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft (raw, json) Hash identifier: GsgdKxW2RCSR+m/Bd7fK+20E4jMEvia+oW1p/87/xmA= Subject key identifier: 66:05:09:8E:01:9C:E5:B7:39:AA:31:2F:F0:84:F9:4E:17:7D:2E:78 Authority key identifier: DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28 Certificate issuer: /CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728 Certificate serial: 234ECC2A18AD1D4BED8271BF52E4C1C559D15840 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:02:10 +0000 Manifest this update: Tue 02 Jun 2026 13:57:10 +0000 Manifest next update: Wed 03 Jun 2026 17:58:10 +0000 Files and hashes: 1: 3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa (hash: prMxe0nmDe/VDC0+RGajULsFBb7iapYsATrUpS7D5Qc=) 2: 3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (hash: Emh7sO7kJSNFsbIsXv30t/j66tuYFAQx0UDDDCsbvSk=) 3: DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl (hash: zsqLT+9q0dHptCQe9NOBU0zP71W8ritDcEa/VmwpuOA=) 4: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (hash: PVWSPZbDocSISt550/WJyHY7HuMqnPYZ4LfX4EkPasI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4e:cc:2a:18:ad:1d:4b:ed:82:71:bf:52:e4:c1:c5:59:d1:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728 Validity Not Before: Jun 2 13:57:10 2026 GMT Not After : Jun 3 17:58:10 2026 GMT Subject: CN=6605098E019CE5B739AA312FF084F94E177D2E78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:87:20:57:65:f6:94:16:4d:64:88:ed:5d:4b: 7d:47:41:92:64:ad:b5:0f:bb:00:aa:26:bc:d6:28: ef:a4:a8:0d:20:e5:d0:b3:3a:c0:e9:76:5a:6f:10: e0:3e:0c:a6:c4:ed:e4:d6:ab:84:9d:2c:49:2f:48: 1c:ab:d2:8f:68:79:5a:82:a8:27:9d:4e:9e:ec:db: f4:fe:68:a8:4d:76:bd:b6:b8:93:b7:de:52:65:68: f3:5c:e4:3c:dd:a8:b1:ae:d6:f5:56:af:68:5f:82: 3b:72:d1:2f:e3:73:ad:5e:e2:26:34:f4:31:ef:83: c7:c1:9c:bd:77:48:27:b9:d8:30:40:0e:95:7e:22: d0:18:67:6c:41:85:93:79:df:d9:15:4a:53:73:32: 29:dc:12:a9:34:0b:09:ab:70:d5:d3:78:88:e3:9b: aa:1c:ca:6e:55:89:28:f9:05:f2:9b:d6:ec:d3:cd: 37:44:a4:45:8a:2b:53:b1:3d:43:ec:bc:c1:02:e4: d1:80:d3:86:5a:82:68:05:7e:3b:fc:7c:f2:2c:3d: 1f:59:f7:b4:b5:e1:8a:2e:fe:93:7a:9c:96:7c:f0: ec:b0:6f:1b:8a:21:e0:83:ba:84:b2:87:49:8e:87: 8c:b5:8d:2e:bd:b3:3d:d0:89:32:d0:77:c0:97:da: 11:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:05:09:8E:01:9C:E5:B7:39:AA:31:2F:F0:84:F9:4E:17:7D:2E:78 X509v3 Authority Key Identifier: keyid:DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2f:46:87:7a:aa:68:1e:6d:05:5e:8e:da:2a:18:cd:ea:62: f8:99:85:41:a2:43:dd:6a:98:62:17:2d:1f:1a:9e:50:b6:42: 15:d6:6c:21:94:20:04:3a:68:0c:25:6d:18:6c:76:aa:72:54: c8:23:e7:31:50:92:11:12:15:e0:11:fc:af:5c:c2:1a:75:1e: 90:22:ee:e4:ef:4c:95:e9:da:08:0f:35:c4:3b:7f:fb:4f:cc: a7:1d:25:33:80:c4:c9:ba:31:12:40:66:c8:a9:a0:30:aa:a4: 2c:6f:ff:c4:35:dc:8a:97:37:6f:e8:59:bb:ad:38:0c:33:0e: 4d:25:cc:b1:68:9c:f5:37:12:f7:ce:1a:1b:87:66:25:d0:ee: e5:71:fb:e8:f9:7a:09:41:5e:60:89:75:05:72:4b:bb:d4:8a: 28:10:55:83:75:60:50:37:ed:bc:91:3c:92:bc:d7:57:5d:02: bd:03:21:1e:78:4f:ce:a7:7a:43:bb:f8:46:84:aa:ec:dc:04: 0c:ae:2b:20:ad:11:09:d3:79:5f:64:7f:66:12:3a:d8:73:d8: 05:3c:95:2f:12:a4:96:38:75:78:33:ed:11:e0:25:b3:99:57: 6b:b5:4f:bc:78:4a:4b:55:5a:bc:f5:3b:28:6e:96:f8:5d:cc: 7c:de:ef:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI07MKhitHUvtgnG/UuTBxVnRWEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4OTM2REUyM0JEMDY4RkZGOEI5RDVCMDM5MkUwMDA5 N0JBMDcyODAeFw0yNjA2MDIxMzU3MTBaFw0yNjA2MDMxNzU4MTBaMDMxMTAvBgNV BAMTKDY2MDUwOThFMDE5Q0U1QjczOUFBMzEyRkYwODRGOTRFMTc3RDJFNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hyBXZfaUFk1kiO1dS31HQZJk rbUPuwCqJrzWKO+kqA0g5dCzOsDpdlpvEOA+DKbE7eTWq4SdLEkvSByr0o9oeVqC qCedTp7s2/T+aKhNdr22uJO33lJlaPNc5DzdqLGu1vVWr2hfgjty0S/jc61e4iY0 9DHvg8fBnL13SCe52DBADpV+ItAYZ2xBhZN539kVSlNzMincEqk0CwmrcNXTeIjj m6ocym5ViSj5BfKb1uzTzTdEpEWKK1OxPUPsvMEC5NGA04ZagmgFfjv8fPIsPR9Z 97S14You/pN6nJZ88OywbxuKIeCDuoSyh0mOh4y1jS69sz3QiTLQd8CX2hEhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZgUJjgGc5bc5qjEv8IT5Thd9LngwHwYDVR0j BBgwFoAU2ok23iO9Bo//i51bA5LgAJe6BygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZhYTNiZWItNTc2MS00YzM0LTg4ZDMtMDE1Y2NjNjQwMDJmLzAvREE4OTM2REUy M0JEMDY4RkZGOEI5RDVCMDM5MkUwMDA5N0JBMDcyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTg5MzZERTIzQkQwNjhGRkY4QjlENUIwMzkyRTAwMDk3QkEw NzI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZhYTNiZWItNTc2MS00YzM0LTg4 ZDMtMDE1Y2NjNjQwMDJmLzAvREE4OTM2REUyM0JEMDY4RkZGOEI5RDVCMDM5MkUw MDA5N0JBMDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwvRod6qmgebQVejtoqGM3qYviZhUGiQ91q mGIXLR8anlC2QhXWbCGUIAQ6aAwlbRhsdqpyVMgj5zFQkhESFeAR/K9cwhp1HpAi 7uTvTJXp2ggPNcQ7f/tPzKcdJTOAxMm6MRJAZsipoDCqpCxv/8Q13IqXN2/oWbut OAwzDk0lzLFonPU3EvfOGhuHZiXQ7uVx++j5eglBXmCJdQVyS7vUiigQVYN1YFA3 7byRPJK811ddAr0DIR54T86nekO7+EaEquzcBAyuKyCtEQnTeV9kf2YSOthz2AU8 lS8SpJY4dXgz7RHgJbOZV2u1T7x4SktVWrz1OyhulvhdzHze75Q= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:40 2026 by rpki-client