$ rpki-client -vvf rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft File: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft (raw, json) Hash identifier: bEfh+jhgWyDKtLc5Fu+4nYSchR7pAJg1YdesLef/kF8= Subject key identifier: 73:2A:4F:E6:C9:B1:00:F6:8C:F1:5A:56:90:70:E0:7D:6F:BD:C7:95 Authority key identifier: DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C Certificate issuer: /CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Certificate serial: 21DCDA97B2A412F191EFC74DB88AA17902859CB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft Manifest number: 68 Signing time: Sun 19 Jul 2026 09:18:24 +0000 Manifest this update: Sun 19 Jul 2026 09:13:24 +0000 Manifest next update: Mon 20 Jul 2026 11:22:24 +0000 Files and hashes: 1: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl (hash: pE/vPd7XS5j/BrUTVysfTSd8KiMh0BoM4FyRnpIqJYw=) 2: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: hKLPAhro/Jq1h6DXfB80L/ei9CiaAI4MnHiXFKHH4tE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:dc:da:97:b2:a4:12:f1:91:ef:c7:4d:b8:8a:a1:79:02:85:9c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Validity Not Before: Jul 19 09:13:24 2026 GMT Not After : Jul 20 11:22:24 2026 GMT Subject: CN=732A4FE6C9B100F68CF15A569070E07D6FBDC795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c6:c5:9a:87:d0:14:f6:ae:3f:31:e2:89:c1: cf:7f:91:c2:3f:a7:28:8c:4e:c6:1a:9a:40:1a:0a: b5:9e:44:f5:10:cd:e6:7b:e9:41:cd:d7:52:4e:37: 96:b4:63:dc:6e:29:da:cf:c0:3e:43:c1:ea:de:a4: 51:d7:95:2a:e2:df:c6:98:96:0b:3c:8b:f5:f4:6a: 90:5a:90:71:0f:1a:5f:94:d7:ed:7d:50:16:d6:a0: 48:5f:d3:a3:97:57:35:55:0b:0c:0b:b3:92:2b:4b: 3c:ec:48:e4:aa:5c:f5:38:56:c3:86:75:42:40:93: cc:2e:9d:fc:69:7a:66:26:b1:a9:a7:f9:9e:51:c0: ee:2f:8d:f3:d7:bf:8e:8b:bc:cb:84:76:57:d2:f6: 97:3d:6a:e1:60:9c:1a:e3:6e:f0:b8:fe:3c:10:8d: a6:b4:63:7a:fc:43:c3:30:6c:e9:dd:b7:11:77:9b: 48:bb:1e:c8:6d:d6:1c:1c:46:72:ea:d4:ac:1e:f0: 5b:7c:40:ca:70:8c:1b:fa:be:15:18:f7:ea:ac:40: c0:09:2a:b7:2b:ba:17:1d:5c:19:38:27:5e:06:26: 8c:31:27:f8:02:8c:2b:6d:23:32:fc:7e:90:00:b3: 6a:17:0a:3b:fc:ff:f2:f1:69:65:b0:86:e1:25:18: 66:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2A:4F:E6:C9:B1:00:F6:8C:F1:5A:56:90:70:E0:7D:6F:BD:C7:95 X509v3 Authority Key Identifier: keyid:DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:61:ae:6d:0b:f4:c8:62:46:42:8f:31:01:1f:57:57:1b:04: b5:72:4c:3a:a1:92:91:0c:c3:ac:c1:78:82:24:c7:14:76:9a: c9:41:b9:95:7f:ca:7f:03:0e:0e:2c:31:af:46:ae:f7:d0:ff: bc:8f:18:6b:61:46:df:65:d7:bf:e7:a6:bc:c2:87:75:2a:d2: 1d:eb:f0:94:7c:66:6f:70:62:64:2b:ae:df:59:6e:01:fd:bc: f2:ed:d0:e6:70:d2:ae:9d:a6:22:e6:27:31:cb:32:17:8e:bb: 52:a9:2b:96:d4:09:31:84:33:4d:bf:7d:56:1a:31:3d:39:f8: d9:28:82:ff:2c:80:4e:7b:5e:db:ca:77:14:8a:3e:d3:7c:9c: 97:ee:ab:90:41:c0:f4:07:2a:f7:35:17:ae:41:07:ae:06:1f: 27:58:e8:ec:f6:28:a4:bc:16:45:cd:e2:b3:84:f5:8d:5c:bf: bc:de:9e:39:10:89:ef:42:00:54:28:87:df:d2:5d:e2:6f:12: 76:0d:7d:d1:24:e4:b6:27:51:32:6b:fb:b6:85:6f:8a:72:f5: b2:90:78:50:e5:76:de:f0:26:9e:fb:dd:e2:90:de:f3:9e:36: 8f:69:be:dc:96:48:0d:70:f2:a9:91:8f:36:87:10:d2:64:32: 2b:8b:05:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdzal7KkEvGR78dNuIqheQKFnLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREExMjM0M0JCRDlGNDc5MTgyMjczQTlGN0I3RDZERDAy OThENUIxQzAeFw0yNjA3MTkwOTEzMjRaFw0yNjA3MjAxMTIyMjRaMDMxMTAvBgNV BAMTKDczMkE0RkU2QzlCMTAwRjY4Q0YxNUE1NjkwNzBFMDdENkZCREM3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpxsWah9AU9q4/MeKJwc9/kcI/ pyiMTsYamkAaCrWeRPUQzeZ76UHN11JON5a0Y9xuKdrPwD5DwerepFHXlSri38aY lgs8i/X0apBakHEPGl+U1+19UBbWoEhf06OXVzVVCwwLs5IrSzzsSOSqXPU4VsOG dUJAk8wunfxpemYmsamn+Z5RwO4vjfPXv46LvMuEdlfS9pc9auFgnBrjbvC4/jwQ jaa0Y3r8Q8MwbOndtxF3m0i7Hsht1hwcRnLq1Kwe8Ft8QMpwjBv6vhUY9+qsQMAJ KrcruhcdXBk4J14GJowxJ/gCjCttIzL8fpAAs2oXCjv8//LxaWWwhuElGGZbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcypP5smxAPaM8VpWkHDgfW+9x5UwHwYDVR0j BBgwFoAU2hI0O72fR5GCJzqfe31t0CmNWxwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzM4NzRjZjMtYWRiMS00OTQ3LWE3ZTQtYTJkMzJjNTRlZDFmLzAvREExMjM0M0JC RDlGNDc5MTgyMjczQTlGN0I3RDZERDAyOThENUIxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTEyMzQzQkJEOUY0NzkxODIyNzNBOUY3QjdENkREMDI5OEQ1 QjFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzM4NzRjZjMtYWRiMS00OTQ3LWE3 ZTQtYTJkMzJjNTRlZDFmLzAvREExMjM0M0JCRDlGNDc5MTgyMjczQTlGN0I3RDZE RDAyOThENUIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxhrm0L9MhiRkKPMQEfV1cbBLVyTDqhkpEM w6zBeIIkxxR2mslBuZV/yn8DDg4sMa9GrvfQ/7yPGGthRt9l17/nprzCh3Uq0h3r 8JR8Zm9wYmQrrt9ZbgH9vPLt0OZw0q6dpiLmJzHLMheOu1KpK5bUCTGEM02/fVYa MT05+Nkogv8sgE57XtvKdxSKPtN8nJfuq5BBwPQHKvc1F65BB64GHydY6Oz2KKS8 FkXN4rOE9Y1cv7zenjkQie9CAFQoh9/SXeJvEnYNfdEk5LYnUTJr+7aFb4py9bKQ eFDldt7wJp773eKQ3vOeNo9pvtyWSA1w8qmRjzaHENJkMiuLBbs= -----END CERTIFICATE-----Generated at Sun Jul 19 23:22:11 2026 by rpki-client