$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft File: DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft (raw, json) Hash identifier: 3keVboAU+I82LrsKd2JB9BQLVVuBvzkfuTL6bSiE+4U= Subject key identifier: 86:90:36:AE:B5:F6:E9:A2:98:61:BC:76:B3:4C:91:53:3E:06:16:27 Authority key identifier: DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28 Certificate issuer: /CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728 Certificate serial: 1D8D1483C5407F8A097390CCB99CECB8AEDC5C0B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 01:09:23 +0000 Manifest this update: Wed 04 Nov 2026 01:04:23 +0000 Manifest next update: Thu 05 Nov 2026 01:39:23 +0000 Files and hashes: 1: 3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (hash: Emh7sO7kJSNFsbIsXv30t/j66tuYFAQx0UDDDCsbvSk=) 2: DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl (hash: KZB4hovEIV9oh+tTyi0X6iq9DdRhAEzZoep6uz2G2zE=) 3: 3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa (hash: prMxe0nmDe/VDC0+RGajULsFBb7iapYsATrUpS7D5Qc=) 4: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (hash: PVWSPZbDocSISt550/WJyHY7HuMqnPYZ4LfX4EkPasI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 01:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:8d:14:83:c5:40:7f:8a:09:73:90:cc:b9:9c:ec:b8:ae:dc:5c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728 Validity Not Before: Nov 4 01:04:23 2026 GMT Not After : Nov 5 01:39:23 2026 GMT Subject: CN=869036AEB5F6E9A29861BC76B34C91533E061627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:58:da:b0:59:89:a2:2a:bb:55:4e:67:0f: 6b:86:72:e1:79:46:5e:92:7e:75:6e:c2:59:be:d3: 8e:10:77:5b:b3:ad:65:65:61:c8:13:9d:0d:be:17: 8a:40:f3:83:ee:30:55:63:92:2b:8e:e5:05:a2:b3: f0:34:10:7c:e7:e5:a8:51:d9:fd:3d:61:64:72:63: 01:42:9d:ee:8f:be:a5:5d:ba:5f:b4:77:46:9d:21: 40:33:0e:15:7a:9f:78:4e:42:9c:c0:29:82:d0:eb: d9:d2:8a:80:eb:85:48:07:19:4f:ee:b6:90:e0:77: c4:eb:8e:2b:f2:c9:1f:de:aa:92:b6:51:ce:5f:22: 5b:43:82:e6:49:4e:41:27:32:fa:d8:92:45:24:7c: de:b2:f6:80:f6:4a:01:ed:2d:3d:41:a9:c4:68:b6: 02:32:b6:3f:45:97:af:62:f4:3f:c1:e5:4d:2a:ae: b9:72:df:59:b0:44:e8:46:6b:ac:42:c8:10:31:f7: 19:5b:85:98:a2:5e:dd:d0:cf:2b:c7:74:b8:c9:49: b8:58:e9:cb:a0:2e:7e:77:38:f3:36:28:ac:03:9c: f2:b3:90:8e:cf:2e:53:ac:a8:c8:f0:c8:8a:43:1d: 42:6c:f9:c2:1e:73:d5:ad:96:94:d9:5d:84:07:4a: 53:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:90:36:AE:B5:F6:E9:A2:98:61:BC:76:B3:4C:91:53:3E:06:16:27 X509v3 Authority Key Identifier: keyid:DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:5f:54:0d:95:0d:16:df:d2:05:d8:4d:7e:18:15:3f:ad:51: fa:8c:75:8e:ad:0a:cb:f7:f1:3c:b4:58:ef:e5:ea:36:86:c8: 28:9b:0a:4e:3a:6f:fc:de:88:a7:60:7f:0e:ea:50:06:ce:0a: e4:78:31:38:a9:b7:4b:58:f9:5d:09:74:d4:cc:4f:6d:c1:f2: bf:45:fc:a4:75:5b:16:ca:75:76:69:72:b2:61:97:c7:1f:dc: 6f:fd:9f:9b:8f:a3:58:8c:45:50:12:ba:fb:61:b9:7e:9d:05: 7d:26:f3:27:2b:ea:96:72:1e:f7:d3:98:41:a1:1f:e5:ab:4e: 30:ec:aa:0a:be:2a:3f:6d:97:49:1d:69:bb:41:c4:a3:ee:c9: bf:90:c9:28:1c:f1:02:c7:6c:e5:f3:a9:a6:94:0f:aa:3f:92: 07:a7:60:a0:08:0e:e1:c6:92:a9:43:0c:46:45:44:cf:30:87: 54:d1:4c:06:20:d6:24:53:4b:9c:de:db:4f:22:8a:10:6d:b5: c9:ce:2a:14:aa:14:8b:c0:c2:0c:61:5b:01:d6:ec:1c:63:e3: b5:4f:a2:09:70:14:93:05:62:76:bc:8a:98:d6:75:5d:73:45: b7:80:05:35:ae:a8:76:8e:2e:55:6c:d2:b2:0b:ad:54:79:39: 68:3d:f8:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHY0Ug8VAf4oJc5DMuZzsuK7cXAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4OTM2REUyM0JEMDY4RkZGOEI5RDVCMDM5MkUwMDA5 N0JBMDcyODAeFw0yNjExMDQwMTA0MjNaFw0yNjExMDUwMTM5MjNaMDMxMTAvBgNV BAMTKDg2OTAzNkFFQjVGNkU5QTI5ODYxQkM3NkIzNEM5MTUzM0UwNjE2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYljasFmJoiq7VU5nD2uGcuF5 Rl6SfnVuwlm+044Qd1uzrWVlYcgTnQ2+F4pA84PuMFVjkiuO5QWis/A0EHzn5ahR 2f09YWRyYwFCne6PvqVdul+0d0adIUAzDhV6n3hOQpzAKYLQ69nSioDrhUgHGU/u tpDgd8TrjivyyR/eqpK2Uc5fIltDguZJTkEnMvrYkkUkfN6y9oD2SgHtLT1BqcRo tgIytj9Fl69i9D/B5U0qrrly31mwROhGa6xCyBAx9xlbhZiiXt3QzyvHdLjJSbhY 6cugLn53OPM2KKwDnPKzkI7PLlOsqMjwyIpDHUJs+cIec9WtlpTZXYQHSlO5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhpA2rrX26aKYYbx2s0yRUz4GFicwHwYDVR0j BBgwFoAU2ok23iO9Bo//i51bA5LgAJe6BygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZhYTNiZWItNTc2MS00YzM0LTg4ZDMtMDE1Y2NjNjQwMDJmLzAvREE4OTM2REUy M0JEMDY4RkZGOEI5RDVCMDM5MkUwMDA5N0JBMDcyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTg5MzZERTIzQkQwNjhGRkY4QjlENUIwMzkyRTAwMDk3QkEw NzI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZhYTNiZWItNTc2MS00YzM0LTg4 ZDMtMDE1Y2NjNjQwMDJmLzAvREE4OTM2REUyM0JEMDY4RkZGOEI5RDVCMDM5MkUw MDA5N0JBMDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhfVA2VDRbf0gXYTX4YFT+tUfqMdY6tCsv3 8Ty0WO/l6jaGyCibCk46b/zeiKdgfw7qUAbOCuR4MTipt0tY+V0JdNTMT23B8r9F /KR1WxbKdXZpcrJhl8cf3G/9n5uPo1iMRVASuvthuX6dBX0m8ycr6pZyHvfTmEGh H+WrTjDsqgq+Kj9tl0kdabtBxKPuyb+QySgc8QLHbOXzqaaUD6o/kgenYKAIDuHG kqlDDEZFRM8wh1TRTAYg1iRTS5ze208iihBttcnOKhSqFIvAwgxhWwHW7Bxj47VP oglwFJMFYna8ipjWdV1zRbeABTWuqHaOLlVs0rILrVR5OWg9+Jk= -----END CERTIFICATE-----Generated at Wed Nov 4 05:40:41 2026 by rpki-client