$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft File: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft (raw, json) Hash identifier: HfqVIze52/m3+j02IDz09O/lQdUigyHc+5Zfi9VyCms= Subject key identifier: 33:66:2C:4C:F6:6E:C7:58:BC:83:23:E0:6A:F3:DD:C3:A0:0D:7B:1D Authority key identifier: DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C Certificate issuer: /CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Certificate serial: 2E2B321270CE3B84CBE7E2651F8793F1722A3B62 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 21:08:52 +0000 Manifest this update: Wed 02 Sep 2026 21:03:52 +0000 Manifest next update: Fri 04 Sep 2026 01:04:52 +0000 Files and hashes: 1: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: hKLPAhro/Jq1h6DXfB80L/ei9CiaAI4MnHiXFKHH4tE=) 2: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl (hash: SzJvTZXlVcCB+9+G3Zn02Ez+R/JkIyCxIqHQ/AiCRuM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 01:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:2b:32:12:70:ce:3b:84:cb:e7:e2:65:1f:87:93:f1:72:2a:3b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Validity Not Before: Sep 2 21:03:52 2026 GMT Not After : Sep 4 01:04:52 2026 GMT Subject: CN=33662C4CF66EC758BC8323E06AF3DDC3A00D7B1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:28:ec:e5:2b:f8:4e:3f:d0:e8:7f:7e:25: 36:b2:32:80:29:c1:a6:34:7d:b6:39:4c:a9:fd:d4: 1b:78:6b:8a:05:97:48:aa:d2:cd:a6:bc:ae:97:35: 91:01:49:a4:95:19:4e:03:b1:19:2b:b8:f7:eb:fd: 3c:df:ff:fc:e7:64:94:d9:a6:55:75:b6:2e:41:d5: 06:80:c6:7b:f1:a7:17:c1:c4:f4:40:de:cc:a2:b6: 42:38:ce:99:56:b0:0a:af:69:6c:e7:ec:3b:94:92: 67:cc:3e:9a:0b:b8:e3:e0:3a:9e:5b:b4:77:98:5a: e9:48:6e:43:a6:3b:d3:ea:a1:da:b7:de:46:50:e7: 4a:68:64:a0:4a:37:37:3e:65:a3:a3:0b:9e:ff:ca: cf:00:8e:cf:5c:51:71:98:04:09:7f:1b:8d:c8:7a: 58:46:03:9e:4e:7a:bd:8c:af:46:f3:b7:7d:cf:fa: 21:34:67:68:96:00:20:45:5a:e7:d8:ad:e7:f1:32: 46:49:d1:6a:bd:c5:a1:b8:e2:8d:83:de:1e:cb:43: 77:e3:47:91:28:d8:24:67:d9:9a:86:1d:47:6e:d0: 51:60:b9:43:9c:59:8f:64:87:46:53:c3:33:ad:71: 48:c5:21:61:20:54:3f:3f:34:46:ef:08:2f:1c:06: 64:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:66:2C:4C:F6:6E:C7:58:BC:83:23:E0:6A:F3:DD:C3:A0:0D:7B:1D X509v3 Authority Key Identifier: keyid:DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:a6:a3:35:10:2a:30:1c:64:c4:e0:bc:ea:dc:ac:a4:b7:9a: dd:33:07:78:d4:f8:97:93:31:24:d3:a9:d1:38:24:0c:90:1e: 4f:a8:70:ad:21:2b:7e:2c:26:42:dc:2b:aa:4c:2b:39:20:22: ac:bf:ec:44:77:76:c2:f8:2f:03:8e:5d:e3:b2:09:0b:92:8a: ac:2b:d9:7b:fa:e9:15:43:69:69:ae:45:fb:77:5f:e4:ee:9d: ff:3d:07:ec:11:04:8e:9e:21:5f:0c:aa:ba:55:f2:c5:59:2b: ca:0e:30:b0:f0:f1:c4:9e:b9:bb:d4:89:e5:c3:63:24:2c:fe: 2d:32:af:7f:d3:9d:24:fd:89:b9:c7:20:44:88:51:be:45:b4: 71:2a:e5:99:d9:e8:1d:92:94:1f:1b:47:91:26:1a:65:c0:3e: e0:c2:13:56:a9:07:a3:e7:18:e8:89:43:30:dd:6f:bd:c8:e3: 17:d7:e8:93:d0:af:01:28:8f:f4:d3:8d:cf:a8:fa:d2:92:aa: 81:32:83:4b:5b:57:fb:0a:cc:5c:aa:c4:5f:08:33:e0:2f:42: 88:6d:27:35:66:01:1d:6b:4f:3d:d2:a2:74:31:65:71:75:d9: 21:41:58:5f:4d:be:33:96:f2:94:44:3e:c5:2b:cd:29:fe:1d: d3:04:5d:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULisyEnDOO4TL5+JlH4eT8XIqO2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREExMjM0M0JCRDlGNDc5MTgyMjczQTlGN0I3RDZERDAy OThENUIxQzAeFw0yNjA5MDIyMTAzNTJaFw0yNjA5MDQwMTA0NTJaMDMxMTAvBgNV BAMTKDMzNjYyQzRDRjY2RUM3NThCQzgzMjNFMDZBRjNEREMzQTAwRDdCMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3yjs5Sv4Tj/Q6H9+JTayMoAp waY0fbY5TKn91Bt4a4oFl0iq0s2mvK6XNZEBSaSVGU4DsRkruPfr/Tzf//znZJTZ plV1ti5B1QaAxnvxpxfBxPRA3syitkI4zplWsAqvaWzn7DuUkmfMPpoLuOPgOp5b tHeYWulIbkOmO9Pqodq33kZQ50poZKBKNzc+ZaOjC57/ys8Ajs9cUXGYBAl/G43I elhGA55Oer2Mr0bzt33P+iE0Z2iWACBFWufYrefxMkZJ0Wq9xaG44o2D3h7LQ3fj R5Eo2CRn2ZqGHUdu0FFguUOcWY9kh0ZTwzOtcUjFIWEgVD8/NEbvCC8cBmTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM2YsTPZux1i8gyPgavPdw6ANex0wHwYDVR0j BBgwFoAU2hI0O72fR5GCJzqfe31t0CmNWxwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzM4NzRjZjMtYWRiMS00OTQ3LWE3ZTQtYTJkMzJjNTRlZDFmLzAvREExMjM0M0JC RDlGNDc5MTgyMjczQTlGN0I3RDZERDAyOThENUIxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTEyMzQzQkJEOUY0NzkxODIyNzNBOUY3QjdENkREMDI5OEQ1 QjFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzM4NzRjZjMtYWRiMS00OTQ3LWE3 ZTQtYTJkMzJjNTRlZDFmLzAvREExMjM0M0JCRDlGNDc5MTgyMjczQTlGN0I3RDZE RDAyOThENUIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSmozUQKjAcZMTgvOrcrKS3mt0zB3jU+JeT MSTTqdE4JAyQHk+ocK0hK34sJkLcK6pMKzkgIqy/7ER3dsL4LwOOXeOyCQuSiqwr 2Xv66RVDaWmuRft3X+Tunf89B+wRBI6eIV8MqrpV8sVZK8oOMLDw8cSeubvUieXD YyQs/i0yr3/TnST9ibnHIESIUb5FtHEq5ZnZ6B2SlB8bR5EmGmXAPuDCE1apB6Pn GOiJQzDdb73I4xfX6JPQrwEoj/TTjc+o+tKSqoEyg0tbV/sKzFyqxF8IM+AvQoht JzVmAR1rTz3SonQxZXF12SFBWF9NvjOW8pREPsUrzSn+HdMEXTw= -----END CERTIFICATE-----Generated at Thu Sep 3 16:21:53 2026 by rpki-client