$ rpki-client -vvf rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft File: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft (raw, json) Hash identifier: RMKi4Fz3pgxDtsHWM4BYBKEEq438rsGo+HgQggM8t6s= Subject key identifier: 4B:C3:32:A6:C6:4B:51:96:80:15:05:93:62:F4:E0:75:04:8A:FB:61 Authority key identifier: DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C Certificate issuer: /CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Certificate serial: 01E25E9767AFBA54FDA544AC756AA0F9AB395704 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 02:22:39 +0000 Manifest this update: Wed 03 Jun 2026 02:17:39 +0000 Manifest next update: Thu 04 Jun 2026 03:51:39 +0000 Files and hashes: 1: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: hKLPAhro/Jq1h6DXfB80L/ei9CiaAI4MnHiXFKHH4tE=) 2: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl (hash: E360wo2J+biJovGutl5M7K1wbWB4Ed3NFY6gVbwdRQk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 03:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:e2:5e:97:67:af:ba:54:fd:a5:44:ac:75:6a:a0:f9:ab:39:57:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Validity Not Before: Jun 3 02:17:39 2026 GMT Not After : Jun 4 03:51:39 2026 GMT Subject: CN=4BC332A6C64B51968015059362F4E075048AFB61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:4a:d7:e0:c0:c5:e5:f2:58:ef:9f:9c:6e: ce:0a:d5:85:1e:75:74:90:51:a4:25:fc:2d:86:e5: 37:94:18:6a:0e:f3:46:e8:6b:c4:52:9b:46:48:84: 32:94:f6:23:c6:ce:9f:05:23:92:99:cb:c6:14:5c: a6:a4:a5:61:80:39:e8:ed:67:0d:f0:4e:a2:b7:66: 92:d5:06:76:3a:14:cb:0b:d6:f4:2b:f5:a5:c4:73: d4:e0:6d:87:c0:ae:8e:4a:3b:4b:e6:0e:e9:db:4e: 15:dc:f1:7f:cf:21:b4:78:61:0b:a6:9f:13:f2:46: 1b:5e:89:e5:78:03:20:ab:23:18:7d:13:ba:52:20: 83:22:15:96:3d:6c:c7:55:88:49:46:d6:2f:3f:59: 73:82:91:6c:36:26:0b:c2:95:cf:21:dd:dc:92:8c: 3a:ac:f9:d1:57:a2:ad:78:30:33:5c:b8:58:c5:34: 24:da:08:85:84:1b:66:3a:27:5d:32:cc:f8:c3:f9: 9f:0c:68:07:4a:47:77:dd:53:04:fa:81:ba:68:7c: e7:bb:3c:47:39:71:6a:32:5c:c6:c5:f0:b8:26:a9: a2:67:3b:20:8e:e7:dc:55:e6:a2:b7:33:e1:6d:98: d4:e7:f8:ef:db:2f:25:67:d9:d8:86:8b:74:27:44: ac:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C3:32:A6:C6:4B:51:96:80:15:05:93:62:F4:E0:75:04:8A:FB:61 X509v3 Authority Key Identifier: keyid:DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:0f:92:0e:6a:cb:92:fb:23:a4:67:1f:0a:49:9e:89:d6:81: 02:db:f1:15:59:20:58:d9:7c:df:86:22:6f:31:e3:8e:9f:a8: a0:ff:e9:e5:2c:5f:fa:62:b6:c1:f4:d1:e7:0a:d5:b7:1e:a3: 8b:fc:a1:e6:c2:ae:35:41:1f:f2:16:6d:bf:ca:af:02:b0:d0: 50:42:d2:9f:8d:7f:69:92:76:b1:ed:2a:ae:88:a5:4b:a3:85: d8:18:d0:24:7d:19:dd:b4:f2:fc:36:a9:99:ec:e2:1d:24:a7: 83:40:55:2d:33:ea:a1:fa:9f:c8:31:31:e9:2d:53:9c:62:69: 79:d3:a9:0f:24:37:93:06:87:74:06:55:a8:a1:cb:32:20:25: 97:34:cd:d2:ce:43:24:cf:a3:43:db:52:c6:e8:84:4a:20:15: e5:33:98:05:3d:2e:eb:8f:9d:45:27:55:3e:cb:c4:d1:b8:ad: 04:f9:1b:7f:29:48:f7:6a:ab:00:d7:03:49:b8:c6:54:b0:ee: 73:b0:50:31:5c:35:58:ed:31:0d:b1:69:14:65:86:b5:9d:8f: 14:69:84:43:dd:73:3c:8d:07:f6:69:50:33:94:cf:a2:bc:d3: 14:1d:da:b2:b6:58:14:45:2c:30:c6:ad:25:b1:7c:8f:4a:cb: f9:3e:f2:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAeJel2evulT9pUSsdWqg+as5VwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREExMjM0M0JCRDlGNDc5MTgyMjczQTlGN0I3RDZERDAy OThENUIxQzAeFw0yNjA2MDMwMjE3MzlaFw0yNjA2MDQwMzUxMzlaMDMxMTAvBgNV BAMTKDRCQzMzMkE2QzY0QjUxOTY4MDE1MDU5MzYyRjRFMDc1MDQ4QUZCNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEAUrX4MDF5fJY75+cbs4K1YUe dXSQUaQl/C2G5TeUGGoO80boa8RSm0ZIhDKU9iPGzp8FI5KZy8YUXKakpWGAOejt Zw3wTqK3ZpLVBnY6FMsL1vQr9aXEc9TgbYfAro5KO0vmDunbThXc8X/PIbR4YQum nxPyRhteieV4AyCrIxh9E7pSIIMiFZY9bMdViElG1i8/WXOCkWw2JgvClc8h3dyS jDqs+dFXoq14MDNcuFjFNCTaCIWEG2Y6J10yzPjD+Z8MaAdKR3fdUwT6gbpofOe7 PEc5cWoyXMbF8LgmqaJnOyCO59xV5qK3M+FtmNTn+O/bLyVn2diGi3QnRKwzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS8MypsZLUZaAFQWTYvTgdQSK+2EwHwYDVR0j BBgwFoAU2hI0O72fR5GCJzqfe31t0CmNWxwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzM4NzRjZjMtYWRiMS00OTQ3LWE3ZTQtYTJkMzJjNTRlZDFmLzAvREExMjM0M0JC RDlGNDc5MTgyMjczQTlGN0I3RDZERDAyOThENUIxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTEyMzQzQkJEOUY0NzkxODIyNzNBOUY3QjdENkREMDI5OEQ1 QjFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzM4NzRjZjMtYWRiMS00OTQ3LWE3 ZTQtYTJkMzJjNTRlZDFmLzAvREExMjM0M0JCRDlGNDc5MTgyMjczQTlGN0I3RDZE RDAyOThENUIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQPkg5qy5L7I6RnHwpJnonWgQLb8RVZIFjZ fN+GIm8x446fqKD/6eUsX/pitsH00ecK1bceo4v8oebCrjVBH/IWbb/KrwKw0FBC 0p+Nf2mSdrHtKq6IpUujhdgY0CR9Gd208vw2qZns4h0kp4NAVS0z6qH6n8gxMekt U5xiaXnTqQ8kN5MGh3QGVaihyzIgJZc0zdLOQyTPo0PbUsbohEogFeUzmAU9LuuP nUUnVT7LxNG4rQT5G38pSPdqqwDXA0m4xlSw7nOwUDFcNVjtMQ2xaRRlhrWdjxRp hEPdczyNB/ZpUDOUz6K80xQd2rK2WBRFLDDGrSWxfI9Ky/k+8q0= -----END CERTIFICATE-----Generated at Wed Jun 3 04:44:41 2026 by rpki-client