$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft File: DA4C7EC09188922B406170208997DD586575FFB0.mft (raw, json) Hash identifier: JXUlowvlO/N6KSS4x65JGv3iU9wlR/D0PiXFLtKDYxQ= Subject key identifier: 21:D4:44:59:84:6D:75:43:49:11:A0:BA:5C:2F:98:29:6C:87:AF:F4 Authority key identifier: DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 Certificate issuer: /CN=DA4C7EC09188922B406170208997DD586575FFB0 Certificate serial: 33453660E6F1C67FD724CB8EF3E9DC219A49BA10 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 15:23:44 +0000 Manifest this update: Tue 02 Jun 2026 15:18:44 +0000 Manifest next update: Wed 03 Jun 2026 18:05:44 +0000 Files and hashes: 1: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: +HwPI5t9LV2JhVv1OMpumDZv5OfbCi5N5psEQEHPJ+A=) 2: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: /A5BVWcPl0ZTjFUSUynQsRiKSne+ZQyE6o9O6kwxRu8=) 3: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: LjLUgvBMy0vDjBtT3AvvXHrDpEIsdVFxx/cTyXnRl4k=) 4: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: MLj0AUwkGxT9VgNAnaRkUPum+E8mfae8sdJn0VM7fng=) 5: DA4C7EC09188922B406170208997DD586575FFB0.crl (hash: G0Rc8T/K1iTydQfcjnIHvzeA9OBa1IJYlgRmFAM7VO8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 18:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:45:36:60:e6:f1:c6:7f:d7:24:cb:8e:f3:e9:dc:21:9a:49:ba:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA4C7EC09188922B406170208997DD586575FFB0 Validity Not Before: Jun 2 15:18:44 2026 GMT Not After : Jun 3 18:05:44 2026 GMT Subject: CN=21D44459846D75434911A0BA5C2F98296C87AFF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:66:96:3d:bc:08:bc:f4:74:66:14:f2:98:8e: 2f:4b:ed:8e:bf:33:34:a8:35:eb:3f:e0:d9:04:61: b8:ce:4b:df:4b:d8:49:0a:a0:e5:10:d2:8c:39:4a: 22:4b:05:3f:80:6d:bd:4f:63:79:65:6c:0a:23:e4: df:ff:aa:6c:ef:a7:a9:c7:ac:79:49:cf:48:08:8c: 08:1c:96:10:73:88:f5:80:57:03:e2:55:30:de:15: 38:3d:95:3a:4d:96:fd:ef:d4:48:dd:44:1b:77:d5: 44:ad:0e:67:c9:1f:83:87:36:ed:56:52:39:c1:ef: fe:54:e2:13:cc:87:7d:b4:e3:85:a6:d6:e9:ac:0e: 8f:b2:a8:db:d9:3f:0f:b9:41:a4:99:b2:35:15:37: 57:ed:0c:09:e3:84:db:23:06:d4:ba:6d:44:87:0d: b7:21:84:3d:ae:ca:6b:2d:87:e6:66:5b:ff:2b:ee: c3:3d:d8:c8:44:6e:af:b3:55:82:b7:5c:4d:99:b1: 84:d6:23:c8:8f:a1:1f:16:2b:d1:30:f1:ec:52:0b: 11:a7:c8:0c:91:92:23:5c:e7:4a:58:c5:3b:3c:ea: 82:74:c2:a7:5f:65:bc:8f:f6:e4:b5:61:cc:ac:b2: cd:5c:16:31:d5:b7:fe:c7:f0:18:a8:a8:ce:f0:56: fc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D4:44:59:84:6D:75:43:49:11:A0:BA:5C:2F:98:29:6C:87:AF:F4 X509v3 Authority Key Identifier: keyid:DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:c1:25:61:cb:4d:5d:26:9c:6c:d7:c3:37:73:b5:86:03:c8: 7a:2e:43:c2:19:54:e6:ce:72:66:b6:0a:f0:c3:76:27:dd:5b: 1f:21:5a:ef:a6:57:de:79:c0:ac:cf:a1:f1:72:36:f4:91:6c: 5d:b5:88:9f:94:48:22:d5:b7:3d:d6:7b:cb:4c:2b:0c:27:2e: 7d:67:80:b0:03:7e:58:9a:94:29:90:ee:fb:16:54:34:0b:34: 22:27:f1:f6:5e:17:9a:85:9c:12:19:73:6b:1a:bd:c5:eb:04: 93:ce:bc:44:e4:f3:2e:8d:59:29:41:06:26:2f:35:fe:c4:30: e2:a1:8d:02:b9:cc:b2:42:56:c9:ed:d0:5e:bb:79:05:c0:8f: dc:44:67:96:5a:3a:b3:80:eb:1c:6d:a7:63:09:b5:37:da:7e: 00:e7:3e:c2:3a:ab:2d:f5:2c:1f:c0:b9:83:39:0a:af:c4:19: 4a:4b:3b:cb:62:d5:ff:d0:8b:e8:be:f5:bd:7c:13:a0:f3:e2: 49:be:7d:fa:c5:6b:84:fd:d3:66:6f:dd:36:9a:94:f4:5e:f7: 57:cf:38:c6:e7:e8:ca:1c:fc:0c:a5:6a:b0:7a:1e:3b:0a:d7: e8:15:65:be:83:b2:1c:63:c2:f1:b3:cf:92:24:9d:36:f4:ac: 52:ab:fe:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM0U2YObxxn/XJMuO8+ncIZpJuhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2 NTc1RkZCMDAeFw0yNjA2MDIxNTE4NDRaFw0yNjA2MDMxODA1NDRaMDMxMTAvBgNV BAMTKDIxRDQ0NDU5ODQ2RDc1NDM0OTExQTBCQTVDMkY5ODI5NkM4N0FGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIZpY9vAi89HRmFPKYji9L7Y6/ MzSoNes/4NkEYbjOS99L2EkKoOUQ0ow5SiJLBT+Abb1PY3llbAoj5N//qmzvp6nH rHlJz0gIjAgclhBziPWAVwPiVTDeFTg9lTpNlv3v1EjdRBt31UStDmfJH4OHNu1W UjnB7/5U4hPMh32044Wm1umsDo+yqNvZPw+5QaSZsjUVN1ftDAnjhNsjBtS6bUSH DbchhD2uymsth+ZmW/8r7sM92MhEbq+zVYK3XE2ZsYTWI8iPoR8WK9Ew8exSCxGn yAyRkiNc50pYxTs86oJ0wqdfZbyP9uS1Ycysss1cFjHVt/7H8BioqM7wVvyhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIdREWYRtdUNJEaC6XC+YKWyHr/QwHwYDVR0j BBgwFoAU2kx+wJGIkitAYXAgiZfdWGV1/7AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhjZTIwMDgtODRiNy00YmVmLTk0YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5 MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2NTc1RkZCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTRDN0VDMDkxODg5MjJCNDA2MTcwMjA4OTk3REQ1ODY1NzVG RkIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RE NTg2NTc1RkZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAODBJWHLTV0mnGzXwzdztYYDyHouQ8IZVObO cma2CvDDdifdWx8hWu+mV955wKzPofFyNvSRbF21iJ+USCLVtz3We8tMKwwnLn1n gLADflialCmQ7vsWVDQLNCIn8fZeF5qFnBIZc2savcXrBJPOvETk8y6NWSlBBiYv Nf7EMOKhjQK5zLJCVsnt0F67eQXAj9xEZ5ZaOrOA6xxtp2MJtTfafgDnPsI6qy31 LB/AuYM5Cq/EGUpLO8ti1f/Qi+i+9b18E6Dz4km+ffrFa4T902Zv3TaalPRe91fP OMbn6Moc/AylarB6HjsK1+gVZb6DshxjwvGzz5IknTb0rFKr/gg= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:26 2026 by rpki-client