$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft File: DA4C7EC09188922B406170208997DD586575FFB0.mft (raw, json) Hash identifier: AgX5rN35yVuqCWDhB665yha1zTrO1h6o9nJlmCW2E78= Subject key identifier: E9:9B:66:04:74:AF:6C:17:31:AC:EC:D8:6E:1B:B9:AB:D1:25:BF:DA Authority key identifier: DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 Certificate issuer: /CN=DA4C7EC09188922B406170208997DD586575FFB0 Certificate serial: 7BBAC233EBAB5A98675D6BA7111F24E00F698940 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 03:19:56 +0000 Manifest this update: Tue 21 Jul 2026 03:14:56 +0000 Manifest next update: Wed 22 Jul 2026 04:11:56 +0000 Files and hashes: 1: DA4C7EC09188922B406170208997DD586575FFB0.crl (hash: 8n3EwFHP1QaLRwTA0rbQZtv8cZmCisvm7nGz3DEyAUM=) 2: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: +HwPI5t9LV2JhVv1OMpumDZv5OfbCi5N5psEQEHPJ+A=) 3: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: MLj0AUwkGxT9VgNAnaRkUPum+E8mfae8sdJn0VM7fng=) 4: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: LjLUgvBMy0vDjBtT3AvvXHrDpEIsdVFxx/cTyXnRl4k=) 5: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: /A5BVWcPl0ZTjFUSUynQsRiKSne+ZQyE6o9O6kwxRu8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ba:c2:33:eb:ab:5a:98:67:5d:6b:a7:11:1f:24:e0:0f:69:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA4C7EC09188922B406170208997DD586575FFB0 Validity Not Before: Jul 21 03:14:56 2026 GMT Not After : Jul 22 04:11:56 2026 GMT Subject: CN=E99B660474AF6C1731ACECD86E1BB9ABD125BFDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:91:e9:70:6e:fe:d6:52:5a:00:12:62:83: 8f:1b:d1:64:91:86:e6:6c:72:89:18:1a:ad:53:2f: e0:23:fb:0c:0a:a4:6e:f4:7e:30:e7:f5:e7:72:36: f7:f8:ff:20:27:21:0c:92:32:fc:bd:cc:08:01:78: a2:e0:b4:d5:af:96:d6:5d:cf:81:a0:4c:ae:52:2e: e3:6f:f8:1e:f6:19:53:07:55:d0:8b:0d:29:6b:97: 19:c3:cb:62:f6:d9:26:50:93:4b:f9:69:c1:e0:a8: 9c:ac:fd:b3:4f:f8:0e:3c:33:93:82:f4:5c:44:f5: a6:0b:44:c2:60:ab:62:e7:d2:ed:db:a1:85:73:a3: 98:9b:98:54:22:d5:03:51:39:76:bf:d2:26:da:e1: bf:81:d3:84:3b:d9:70:b4:94:64:f5:9b:1d:30:c9: e1:ce:83:ff:1c:d4:d9:35:ab:e8:e1:39:6d:de:ea: a3:d5:5f:45:f8:f8:b9:2e:d2:7a:97:86:51:1e:05: 29:bf:0f:9c:17:a2:8a:c7:1d:9f:29:79:a7:b6:d5: c9:49:f8:68:98:fc:84:69:78:42:19:97:57:7c:1f: a6:d2:fd:1d:aa:9a:93:ec:22:5d:af:ac:94:49:c8: da:ff:e8:22:3a:91:d3:7a:ed:ea:cd:36:b3:f9:6e: a9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9B:66:04:74:AF:6C:17:31:AC:EC:D8:6E:1B:B9:AB:D1:25:BF:DA X509v3 Authority Key Identifier: keyid:DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3c:1d:78:4a:ab:2d:b4:3b:9b:5e:35:69:91:b0:24:a5:2b: b2:8f:af:23:c8:dd:26:ee:83:93:54:c5:2c:b4:60:ca:f4:79: f0:34:71:69:30:01:4c:ac:0a:c2:f1:dc:c7:a9:1f:52:12:4c: 76:a3:0e:6b:b4:c0:79:d3:24:ab:cb:2c:49:3e:bd:3d:3d:bb: 8b:43:84:05:e2:3a:25:53:f3:28:ed:9c:a0:4c:31:9b:18:74: eb:f0:af:c1:7a:00:39:f5:a8:f7:22:9f:7f:80:8f:cf:6d:00: 22:9d:03:c6:4a:71:c4:d7:6b:bf:7f:92:c5:4e:52:4c:b7:67: a5:dd:7d:68:c2:83:93:5f:20:bf:69:20:0d:48:9b:e7:86:c6: 77:e6:1d:7b:9f:c2:91:84:21:63:ec:41:57:06:2f:37:1f:03: 33:63:cd:b6:80:cd:78:75:52:3e:f1:ca:c7:04:bd:0d:64:1a: 50:cc:0c:25:09:bf:f6:d6:d9:d1:2d:b7:a1:db:a1:a5:43:5d: cb:7a:34:69:17:2a:83:96:22:ad:cc:66:ee:87:6e:c9:b1:db: cb:1c:9a:bc:63:60:b1:da:60:7f:cb:d7:e9:a3:72:08:d8:ca: b4:b8:c6:1c:0a:9d:fa:15:dc:9b:26:7b:70:87:d4:f6:f2:d6: 9e:7e:0d:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe7rCM+urWphnXWunER8k4A9piUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2 NTc1RkZCMDAeFw0yNjA3MjEwMzE0NTZaFw0yNjA3MjIwNDExNTZaMDMxMTAvBgNV BAMTKEU5OUI2NjA0NzRBRjZDMTczMUFDRUNEODZFMUJCOUFCRDEyNUJGREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9qJHpcG7+1lJaABJig48b0WSR huZscokYGq1TL+Aj+wwKpG70fjDn9edyNvf4/yAnIQySMvy9zAgBeKLgtNWvltZd z4GgTK5SLuNv+B72GVMHVdCLDSlrlxnDy2L22SZQk0v5acHgqJys/bNP+A48M5OC 9FxE9aYLRMJgq2Ln0u3boYVzo5ibmFQi1QNROXa/0iba4b+B04Q72XC0lGT1mx0w yeHOg/8c1Nk1q+jhOW3e6qPVX0X4+Lku0nqXhlEeBSm/D5wXoorHHZ8peae21clJ +GiY/IRpeEIZl1d8H6bS/R2qmpPsIl2vrJRJyNr/6CI6kdN67erNNrP5bqm5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ZtmBHSvbBcxrOzYbhu5q9Elv9owHwYDVR0j BBgwFoAU2kx+wJGIkitAYXAgiZfdWGV1/7AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhjZTIwMDgtODRiNy00YmVmLTk0YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5 MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2NTc1RkZCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTRDN0VDMDkxODg5MjJCNDA2MTcwMjA4OTk3REQ1ODY1NzVG RkIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RE NTg2NTc1RkZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA48HXhKqy20O5teNWmRsCSlK7KPryPI3Sbu g5NUxSy0YMr0efA0cWkwAUysCsLx3MepH1ISTHajDmu0wHnTJKvLLEk+vT09u4tD hAXiOiVT8yjtnKBMMZsYdOvwr8F6ADn1qPcin3+Aj89tACKdA8ZKccTXa79/ksVO Uky3Z6XdfWjCg5NfIL9pIA1Im+eGxnfmHXufwpGEIWPsQVcGLzcfAzNjzbaAzXh1 Uj7xyscEvQ1kGlDMDCUJv/bW2dEtt6HboaVDXct6NGkXKoOWIq3MZu6Hbsmx28sc mrxjYLHaYH/L1+mjcgjYyrS4xhwKnfoV3Jsme3CH1Pby1p5+DWM= -----END CERTIFICATE-----Generated at Tue Jul 21 09:23:34 2026 by rpki-client