$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft File: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft (raw, json) Hash identifier: D0qTRi+mdgq/OClYPCFKNIu99qh2vrRWF7XSCeNk5A8= Subject key identifier: 58:1C:A8:90:2F:32:82:B3:56:10:C2:00:7E:98:62:6A:E1:84:BB:7C Authority key identifier: DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 Certificate issuer: /CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Certificate serial: 37BD2E927DCBF6272CDB65D12AADA2F7A2C7DFD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 05:19:14 +0000 Manifest this update: Mon 02 Nov 2026 05:14:14 +0000 Manifest next update: Tue 03 Nov 2026 08:04:14 +0000 Files and hashes: 1: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl (hash: Ti9udNwQ7rqFPwa8b6tH2qXFK4fG7QAFGZ+njrtbLW8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:bd:2e:92:7d:cb:f6:27:2c:db:65:d1:2a:ad:a2:f7:a2:c7:df:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Validity Not Before: Nov 2 05:14:14 2026 GMT Not After : Nov 3 08:04:14 2026 GMT Subject: CN=581CA8902F3282B35610C2007E98626AE184BB7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:38:4a:fd:01:25:9c:91:a0:7f:73:ce:1c: 62:75:6d:e0:1a:ba:70:0b:de:8a:df:4e:6a:6a:ad: 80:24:1a:7e:66:84:39:04:88:1e:3b:ba:93:4f:01: 5b:d9:56:2c:62:a7:c9:21:cf:83:6f:13:f8:85:ad: c9:d3:43:b6:ca:cd:ee:92:7c:e4:17:27:d1:d5:23: 35:31:70:2a:66:5d:6f:cc:b9:d8:07:33:2f:54:1b: 48:97:49:6e:24:46:18:53:b5:f0:88:55:29:04:49: 0c:34:3f:4f:62:63:85:f9:1a:6e:79:b2:bb:7f:52: 81:cc:15:8f:17:a9:44:51:65:f4:35:f4:ab:29:66: ef:82:5e:a8:34:94:f5:b5:17:79:0e:b9:fe:df:13: 02:89:b6:bb:8e:52:38:f4:07:a1:8a:95:5b:f1:54: 67:b3:81:aa:bf:04:e1:b7:37:ae:19:e0:a0:b6:70: dd:25:05:c6:c1:b1:25:f0:a3:1e:c5:ff:32:12:1e: 7b:2b:7f:db:f6:b6:82:6f:87:0e:54:93:6b:ca:4d: 89:84:48:00:92:c2:1a:3a:d5:4f:ca:37:9a:74:a8: f2:f7:aa:17:b2:9c:ef:f5:ca:8f:aa:92:3c:c9:13: 5b:6a:0d:2e:f4:42:63:40:27:7e:cb:d3:2a:ad:6b: 4d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1C:A8:90:2F:32:82:B3:56:10:C2:00:7E:98:62:6A:E1:84:BB:7C X509v3 Authority Key Identifier: keyid:DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a7:91:37:94:7d:3a:e9:dd:8a:f4:c9:86:be:b8:14:2a:34: 94:56:29:03:77:d8:32:6a:84:c0:cc:39:d7:ec:23:d2:d2:98: e3:4a:a8:9c:6a:9b:8b:22:8a:63:5a:a0:00:1f:ab:a8:ed:4f: b8:e2:a7:42:19:55:6e:cd:7a:fd:1a:78:69:ae:2e:22:ce:8f: 75:f6:e4:10:43:f3:ab:a3:fc:14:ee:35:f7:1d:6c:41:58:0b: a0:bf:b4:dd:0e:66:0a:c6:a0:69:79:a0:a7:40:ff:f0:af:8f: c6:cc:f5:fa:c8:f0:70:86:9a:6a:c6:22:c7:19:d6:71:c0:b0: 16:cb:bc:42:55:d6:a1:1f:8d:57:0a:b9:d0:1c:85:9c:0b:72: 7d:e4:29:dd:9a:98:73:7f:1b:aa:89:47:07:ce:90:98:51:0d: ea:11:85:79:95:5d:c0:2f:33:5d:8f:7a:bb:bd:d9:66:c2:79: 54:43:26:3a:1b:bf:0f:6a:af:e5:26:ab:0e:ef:e2:f0:04:89: 5b:32:75:02:68:98:77:d9:94:b4:9c:33:33:b8:f8:b1:ab:2f: 48:86:40:25:f7:6a:3b:95:df:81:0f:28:e5:86:7e:f1:dd:c5: 3d:b1:3c:9b:8e:11:4a:3b:6e:57:58:1f:50:63:a4:8b:0c:ed: 42:a8:c2:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN70ukn3L9ics22XRKq2i96LH39YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0Mx RkM4MUNFNjAeFw0yNjExMDIwNTE0MTRaFw0yNjExMDMwODA0MTRaMDMxMTAvBgNV BAMTKDU4MUNBODkwMkYzMjgyQjM1NjEwQzIwMDdFOTg2MjZBRTE4NEJCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnFzhK/QElnJGgf3POHGJ1beAa unAL3orfTmpqrYAkGn5mhDkEiB47upNPAVvZVixip8khz4NvE/iFrcnTQ7bKze6S fOQXJ9HVIzUxcCpmXW/MudgHMy9UG0iXSW4kRhhTtfCIVSkESQw0P09iY4X5Gm55 srt/UoHMFY8XqURRZfQ19KspZu+CXqg0lPW1F3kOuf7fEwKJtruOUjj0B6GKlVvx VGezgaq/BOG3N64Z4KC2cN0lBcbBsSXwox7F/zISHnsrf9v2toJvhw5Uk2vKTYmE SACSwho61U/KN5p0qPL3qheynO/1yo+qkjzJE1tqDS70QmNAJ37L0yqta01bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWByokC8ygrNWEMIAfphiauGEu3wwHwYDVR0j BBgwFoAU2kO1zrOE47p77iyTLYYvPB/IHOYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VC Mzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0MxRkM4MUNFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTQzQjVDRUIzODRFM0JBN0JFRTJDOTMyRDg2MkYzQzFGQzgx Q0U2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2 YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJG M0MxRkM4MUNFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFynkTeUfTrp3Yr0yYa+uBQqNJRWKQN32DJq hMDMOdfsI9LSmONKqJxqm4siimNaoAAfq6jtT7jip0IZVW7Nev0aeGmuLiLOj3X2 5BBD86uj/BTuNfcdbEFYC6C/tN0OZgrGoGl5oKdA//Cvj8bM9frI8HCGmmrGIscZ 1nHAsBbLvEJV1qEfjVcKudAchZwLcn3kKd2amHN/G6qJRwfOkJhRDeoRhXmVXcAv M12Peru92WbCeVRDJjobvw9qr+Umqw7v4vAEiVsydQJomHfZlLScMzO4+LGrL0iG QCX3ajuV34EPKOWGfvHdxT2xPJuOEUo7bldYH1BjpIsM7UKowms= -----END CERTIFICATE-----Generated at Mon Nov 2 21:50:59 2026 by rpki-client