$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft File: DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft (raw, json) Hash identifier: D4E6kamaJMvBOJhOW2cUBFW8lI8UR+k//bl/IRxZSdc= Subject key identifier: 28:2B:E2:2D:FE:8E:77:E1:99:35:CD:90:E2:21:13:47:D2:72:39:8F Authority key identifier: DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28 Certificate issuer: /CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728 Certificate serial: 777EAD2483D97DBD6FE8F98722209416D9A2C173 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 08:38:48 +0000 Manifest this update: Tue 03 Nov 2026 08:33:48 +0000 Manifest next update: Wed 04 Nov 2026 09:04:48 +0000 Files and hashes: 1: 3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (hash: Emh7sO7kJSNFsbIsXv30t/j66tuYFAQx0UDDDCsbvSk=) 2: 3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa (hash: prMxe0nmDe/VDC0+RGajULsFBb7iapYsATrUpS7D5Qc=) 3: DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl (hash: D7PUsYCkJKEt7AJF+1bX8VD+dokwX5tiFvk85VHvZHw=) 4: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (hash: PVWSPZbDocSISt550/WJyHY7HuMqnPYZ4LfX4EkPasI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 09:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:7e:ad:24:83:d9:7d:bd:6f:e8:f9:87:22:20:94:16:d9:a2:c1:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728 Validity Not Before: Nov 3 08:33:48 2026 GMT Not After : Nov 4 09:04:48 2026 GMT Subject: CN=282BE22DFE8E77E19935CD90E2211347D272398F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7c:5c:7f:7a:55:5b:9a:85:68:d1:5d:ce:0b: dd:d9:71:89:7c:cd:5f:87:21:d7:e1:91:da:43:ad: 46:d7:ee:15:11:73:30:26:af:9e:04:8b:be:27:89: 62:55:80:f7:2e:9b:5e:6a:89:ea:46:fa:1d:ab:7a: 29:8e:3e:a6:65:08:b4:7d:85:ac:68:71:bb:d0:f4: f1:36:b9:fd:29:c6:e1:99:1d:f2:77:ba:cb:ba:41: 28:16:6a:c0:70:8b:ad:4e:35:08:41:18:98:51:9d: 74:b4:5a:68:51:63:8e:de:05:63:78:c6:3c:ad:a2: 45:d3:66:ce:a0:78:2f:ed:3f:19:f0:ee:0c:93:40: 67:e9:e5:7a:33:9a:90:22:e3:19:98:5e:f7:40:02: a2:35:49:08:c8:ea:32:69:80:a7:af:6c:50:bb:d1: 23:09:51:2d:8e:0f:74:fa:0c:15:a2:50:3c:b0:a7: 4f:15:34:a4:02:dc:8a:c8:7c:38:9f:9b:a3:f8:8a: 3e:23:6c:61:f4:a4:9d:4a:86:94:d7:01:f6:74:95: a6:bf:81:a5:0a:7a:14:64:c1:cf:1e:7d:ec:cc:08: aa:dc:55:91:38:1d:01:0f:90:57:66:6c:5a:84:6a: 00:14:4a:e8:59:2a:66:cd:18:1a:f1:17:3d:0e:38: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2B:E2:2D:FE:8E:77:E1:99:35:CD:90:E2:21:13:47:D2:72:39:8F X509v3 Authority Key Identifier: keyid:DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1b:e3:0a:31:59:18:2a:9c:33:05:a4:d9:19:99:db:e3:7a: d3:f8:68:be:7f:30:0d:15:e6:68:81:b8:a9:12:9c:e0:07:5f: f5:1e:96:00:35:a0:b1:81:aa:3a:bd:a1:19:ad:ff:31:8a:b3: be:95:e3:79:eb:96:0f:e3:9a:4b:ce:bc:c4:a5:ae:50:5e:f4: 13:ca:ff:42:72:bb:ab:09:9e:2a:ea:80:78:b7:32:b3:e6:eb: d6:cc:23:1a:32:b5:47:fb:e3:49:ea:3d:c7:86:4a:97:6c:e1: ec:10:67:8f:34:8f:a1:e5:01:c4:e2:74:34:6b:90:4a:d6:2e: 07:41:21:e3:fe:fe:ba:13:a0:3b:87:39:dc:cd:54:57:ce:09: e1:34:d6:c8:a6:73:b5:70:ae:38:8c:36:73:f8:ad:7e:14:d5: 34:b3:31:9d:92:b2:80:75:c0:20:ec:a9:a1:a0:60:33:dd:d6: 97:e4:4d:bf:b2:f9:a0:7a:1f:21:c4:80:9b:35:59:fe:a2:34: e8:ab:7e:c4:64:ae:27:9b:8a:bc:25:fd:d5:df:0e:86:ab:21: b6:e9:99:bc:ea:b3:69:40:b5:9f:1c:b3:09:c3:2e:ad:93:11: a0:8a:13:08:c0:36:27:49:03:7d:94:76:44:cd:2c:4c:1f:20: 3d:b5:48:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd36tJIPZfb1v6PmHIiCUFtmiwXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4OTM2REUyM0JEMDY4RkZGOEI5RDVCMDM5MkUwMDA5 N0JBMDcyODAeFw0yNjExMDMwODMzNDhaFw0yNjExMDQwOTA0NDhaMDMxMTAvBgNV BAMTKDI4MkJFMjJERkU4RTc3RTE5OTM1Q0Q5MEUyMjExMzQ3RDI3MjM5OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfFx/elVbmoVo0V3OC93ZcYl8 zV+HIdfhkdpDrUbX7hURczAmr54Ei74niWJVgPcum15qiepG+h2reimOPqZlCLR9 haxocbvQ9PE2uf0pxuGZHfJ3usu6QSgWasBwi61ONQhBGJhRnXS0WmhRY47eBWN4 xjytokXTZs6geC/tPxnw7gyTQGfp5XozmpAi4xmYXvdAAqI1SQjI6jJpgKevbFC7 0SMJUS2OD3T6DBWiUDywp08VNKQC3IrIfDifm6P4ij4jbGH0pJ1KhpTXAfZ0laa/ gaUKehRkwc8efezMCKrcVZE4HQEPkFdmbFqEagAUSuhZKmbNGBrxFz0OOOKlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKCviLf6Od+GZNc2Q4iETR9JyOY8wHwYDVR0j BBgwFoAU2ok23iO9Bo//i51bA5LgAJe6BygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZhYTNiZWItNTc2MS00YzM0LTg4ZDMtMDE1Y2NjNjQwMDJmLzAvREE4OTM2REUy M0JEMDY4RkZGOEI5RDVCMDM5MkUwMDA5N0JBMDcyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTg5MzZERTIzQkQwNjhGRkY4QjlENUIwMzkyRTAwMDk3QkEw NzI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZhYTNiZWItNTc2MS00YzM0LTg4 ZDMtMDE1Y2NjNjQwMDJmLzAvREE4OTM2REUyM0JEMDY4RkZGOEI5RDVCMDM5MkUw MDA5N0JBMDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4b4woxWRgqnDMFpNkZmdvjetP4aL5/MA0V 5miBuKkSnOAHX/UelgA1oLGBqjq9oRmt/zGKs76V43nrlg/jmkvOvMSlrlBe9BPK /0Jyu6sJnirqgHi3MrPm69bMIxoytUf740nqPceGSpds4ewQZ480j6HlAcTidDRr kErWLgdBIeP+/roToDuHOdzNVFfOCeE01simc7VwrjiMNnP4rX4U1TSzMZ2SsoB1 wCDsqaGgYDPd1pfkTb+y+aB6HyHEgJs1Wf6iNOirfsRkriebirwl/dXfDoarIbbp mbzqs2lAtZ8cswnDLq2TEaCKEwjANidJA32UdkTNLEwfID21SEY= -----END CERTIFICATE-----Generated at Tue Nov 3 22:45:42 2026 by rpki-client