$ rpki-client -vvf rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft File: DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft (raw, json) Hash identifier: 7y67y87UTqPBhoxnA0n5bOk2Fr4bdAgvRyyr4PB6B/U= Subject key identifier: 47:03:FF:83:E6:53:CC:3E:23:F0:9D:8F:8B:57:AE:40:8C:55:94:06 Authority key identifier: DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28 Certificate issuer: /CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728 Certificate serial: 2D42DB3013F65CB21076AE058BDE8D1657DF0098 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 01:17:20 +0000 Manifest this update: Tue 21 Jul 2026 01:12:20 +0000 Manifest next update: Wed 22 Jul 2026 03:14:20 +0000 Files and hashes: 1: DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl (hash: 4RguYC7kCz7ZrMtnYuHqCPNgRuoZayGaDBJe9QjalZQ=) 2: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (hash: PVWSPZbDocSISt550/WJyHY7HuMqnPYZ4LfX4EkPasI=) 3: 3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (hash: Emh7sO7kJSNFsbIsXv30t/j66tuYFAQx0UDDDCsbvSk=) 4: 3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa (hash: prMxe0nmDe/VDC0+RGajULsFBb7iapYsATrUpS7D5Qc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:42:db:30:13:f6:5c:b2:10:76:ae:05:8b:de:8d:16:57:df:00:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728 Validity Not Before: Jul 21 01:12:20 2026 GMT Not After : Jul 22 03:14:20 2026 GMT Subject: CN=4703FF83E653CC3E23F09D8F8B57AE408C559406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e8:df:c2:2c:f8:a6:b0:33:4a:e7:2c:a6:7c: 2a:be:c6:55:03:c2:24:aa:61:83:78:25:9f:2b:dc: b7:ef:ce:da:5b:c3:b9:ef:86:b6:f1:53:c2:96:4b: f5:ce:31:f9:4b:3e:15:27:a7:e1:27:65:e5:5d:99: de:c6:83:1f:55:6d:ba:1d:67:cb:cd:53:85:19:ee: bc:e9:90:a2:4e:30:13:fb:64:d1:45:f1:85:7e:58: c2:7c:52:f1:c1:e6:b5:57:16:4e:02:5c:7b:db:6f: e8:83:d2:9c:d0:8f:ac:7d:82:5c:01:c0:68:74:0e: 6e:42:3c:bb:35:8d:59:3d:9d:76:77:0b:61:46:a9: 9e:a4:cf:99:cb:36:ed:08:0b:89:82:19:6a:14:79: 03:3e:43:66:51:0d:e4:e6:19:76:6c:1d:1c:e6:54: d6:9f:02:57:11:fc:e1:b8:1b:60:e1:10:58:b3:7f: 3c:b9:e1:84:92:b1:8f:17:f0:07:4c:b5:57:48:ab: 3c:08:72:7b:8e:43:38:2d:d2:02:04:12:6b:87:51: ab:3c:9e:03:7e:b6:3d:a3:c6:5a:23:4d:5c:d9:ac: 6a:60:09:f3:4d:f7:19:b1:ea:6f:63:a6:3f:5f:8d: 9b:0d:2c:27:e2:f2:24:5d:fd:85:ab:48:0f:97:65: 48:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:03:FF:83:E6:53:CC:3E:23:F0:9D:8F:8B:57:AE:40:8C:55:94:06 X509v3 Authority Key Identifier: keyid:DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:54:73:d7:39:7f:5f:10:06:e1:ca:93:e3:57:39:50:d3:00: b1:cd:cc:dc:ae:b8:38:75:ea:dc:b5:29:5b:9d:a0:e4:99:25: a0:7a:7b:7e:39:ee:d9:5a:8c:cf:c8:59:d4:06:67:1d:6e:e7: ac:48:b7:f8:d9:8c:1b:f4:a8:9a:ee:a0:d8:b3:45:c3:fd:a4: 9b:b1:61:ce:92:12:81:a4:b8:60:99:f8:b6:b7:a0:1a:5e:14: cf:4f:00:4a:a0:20:2b:0f:45:f8:ac:48:bf:fd:1d:1e:2f:c0: f9:85:b6:ef:b2:f4:0b:ba:7f:e6:94:e6:59:09:01:ed:35:ac: 0b:a2:84:09:ef:30:ff:e3:2c:bd:f8:7b:cc:ec:76:a3:5a:bd: 5d:75:ad:d9:84:f9:65:d1:bd:5e:10:70:e0:b7:34:7b:5d:02: f0:4f:09:20:b3:3c:91:61:7d:92:e9:dd:43:25:22:30:14:fb: 55:33:bf:35:f0:33:7a:13:86:65:b1:ba:12:82:ca:b4:36:44: 16:7c:b1:24:30:36:a2:cf:43:ec:5f:2d:0e:50:ac:85:ef:a6: 86:aa:17:f3:c8:36:2e:32:3b:01:12:e6:2a:ec:c8:97:25:9c: 08:d3:5a:d2:0b:36:f3:ae:bd:bc:37:a3:9a:76:6a:55:bb:c3: 0d:61:a3:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULULbMBP2XLIQdq4Fi96NFlffAJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4OTM2REUyM0JEMDY4RkZGOEI5RDVCMDM5MkUwMDA5 N0JBMDcyODAeFw0yNjA3MjEwMTEyMjBaFw0yNjA3MjIwMzE0MjBaMDMxMTAvBgNV BAMTKDQ3MDNGRjgzRTY1M0NDM0UyM0YwOUQ4RjhCNTdBRTQwOEM1NTk0MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC26N/CLPimsDNK5yymfCq+xlUD wiSqYYN4JZ8r3Lfvztpbw7nvhrbxU8KWS/XOMflLPhUnp+EnZeVdmd7Ggx9Vbbod Z8vNU4UZ7rzpkKJOMBP7ZNFF8YV+WMJ8UvHB5rVXFk4CXHvbb+iD0pzQj6x9glwB wGh0Dm5CPLs1jVk9nXZ3C2FGqZ6kz5nLNu0IC4mCGWoUeQM+Q2ZRDeTmGXZsHRzm VNafAlcR/OG4G2DhEFizfzy54YSSsY8X8AdMtVdIqzwIcnuOQzgt0gIEEmuHUas8 ngN+tj2jxlojTVzZrGpgCfNN9xmx6m9jpj9fjZsNLCfi8iRd/YWrSA+XZUgDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURwP/g+ZTzD4j8J2Pi1euQIxVlAYwHwYDVR0j BBgwFoAU2ok23iO9Bo//i51bA5LgAJe6BygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZhYTNiZWItNTc2MS00YzM0LTg4ZDMtMDE1Y2NjNjQwMDJmLzAvREE4OTM2REUy M0JEMDY4RkZGOEI5RDVCMDM5MkUwMDA5N0JBMDcyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTg5MzZERTIzQkQwNjhGRkY4QjlENUIwMzkyRTAwMDk3QkEw NzI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZhYTNiZWItNTc2MS00YzM0LTg4 ZDMtMDE1Y2NjNjQwMDJmLzAvREE4OTM2REUyM0JEMDY4RkZGOEI5RDVCMDM5MkUw MDA5N0JBMDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZUc9c5f18QBuHKk+NXOVDTALHNzNyuuDh1 6ty1KVudoOSZJaB6e3457tlajM/IWdQGZx1u56xIt/jZjBv0qJruoNizRcP9pJux Yc6SEoGkuGCZ+La3oBpeFM9PAEqgICsPRfisSL/9HR4vwPmFtu+y9Au6f+aU5lkJ Ae01rAuihAnvMP/jLL34e8zsdqNavV11rdmE+WXRvV4QcOC3NHtdAvBPCSCzPJFh fZLp3UMlIjAU+1UzvzXwM3oThmWxuhKCyrQ2RBZ8sSQwNqLPQ+xfLQ5QrIXvpoaq F/PINi4yOwES5irsyJclnAjTWtILNvOuvbw3o5p2alW7ww1ho8w= -----END CERTIFICATE-----Generated at Tue Jul 21 06:11:43 2026 by rpki-client