$ rpki-client -vvf rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft File: DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft (raw, json) Hash identifier: 0vofvQcVKqzqIMNL21aJTmS7mL3JRKsYqC4t6p9kK50= Subject key identifier: BE:DE:E8:FE:11:30:5C:14:7F:18:E3:A7:59:C1:9D:8F:E2:1C:63:6C Authority key identifier: DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 Certificate issuer: /CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Certificate serial: 5FD09F4961AA8EB14A64E7E67E289D0680BBDE6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 06:24:58 +0000 Manifest this update: Thu 18 Jun 2026 06:19:58 +0000 Manifest next update: Fri 19 Jun 2026 08:14:58 +0000 Files and hashes: 1: DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl (hash: rkh3ncHNjIyajJ5nzzzh0H1/TgZ1mELVqkfo12v1szs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d0:9f:49:61:aa:8e:b1:4a:64:e7:e6:7e:28:9d:06:80:bb:de:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Validity Not Before: Jun 18 06:19:58 2026 GMT Not After : Jun 19 08:14:58 2026 GMT Subject: CN=BEDEE8FE11305C147F18E3A759C19D8FE21C636C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:30:48:04:f3:37:82:bd:ad:f8:a8:75:5f:17: 48:82:f8:92:19:70:44:03:8f:38:ea:0b:98:ae:03: 3d:3d:68:ea:e0:b9:a6:dd:a1:45:ce:a3:fc:cb:af: b7:42:c2:b0:20:ad:6d:0d:7d:b3:8b:99:d8:0c:c7: 66:4f:5c:f7:34:56:6f:9f:b5:0a:bc:33:98:10:c7: e7:d1:85:77:c3:5b:25:71:e0:16:8e:08:38:14:3d: 77:e2:bf:d0:a3:fc:dd:b4:3d:cb:95:92:8f:a3:20: ff:9d:5d:b4:71:0c:19:12:4d:04:a6:4e:94:5a:96: 5b:f0:d4:ef:e4:b6:9d:12:fb:5d:7c:9d:6b:0d:50: c2:50:a9:d5:b6:31:65:b6:a9:9f:cd:24:9c:4c:5d: 7f:42:dc:59:3b:1d:de:43:fa:64:51:89:42:6d:fd: 03:17:1f:56:32:bc:d5:17:36:07:ee:e1:e4:3a:36: d5:66:87:3e:2c:59:27:1c:8c:d0:0d:b4:96:33:11: 09:34:86:7c:af:ac:03:a9:59:53:61:1e:8f:b1:0c: 5b:6a:bc:a2:67:9d:31:18:c9:22:a1:c6:c4:6b:3d: d3:ca:fd:9e:ad:4c:2b:53:27:83:57:4d:cc:a2:fd: 90:65:de:31:4b:19:f4:40:df:29:68:24:dc:40:28: 97:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DE:E8:FE:11:30:5C:14:7F:18:E3:A7:59:C1:9D:8F:E2:1C:63:6C X509v3 Authority Key Identifier: keyid:DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b4:32:a7:6d:da:40:a6:b0:aa:e1:35:ff:4b:81:46:88:87: 6d:8b:31:7f:b3:36:96:75:97:81:15:20:fc:4f:73:f8:cc:97: 78:25:ca:57:92:5e:63:b7:ed:e8:40:99:b2:92:eb:41:ce:79: 31:41:19:0d:d2:2a:c1:70:f3:16:52:fd:4a:ea:3e:bc:2a:ed: 76:94:b0:9f:10:6c:ce:93:19:ce:1d:91:f3:9c:f9:54:e7:f1: a1:ca:8b:2c:e4:6b:2b:b6:b0:b8:43:a9:bd:92:e8:93:5c:6b: e4:1b:67:39:86:86:b0:96:62:60:ef:a1:38:11:06:e1:0b:19: 92:d2:82:34:42:46:20:ee:d7:a5:7c:dd:c6:77:05:02:72:f3: 31:2c:86:c1:9c:3c:c0:bd:86:5c:9f:8b:08:a7:6a:ff:c3:2a: 7a:7c:ac:df:8b:c5:89:18:51:57:f7:ae:e7:3d:b3:e3:06:4d: 93:e7:fe:e9:49:5a:cb:63:59:f5:f5:55:b0:99:f0:fc:c0:46: 9c:d0:cf:bf:25:45:e7:0e:00:a5:1f:85:a6:9e:15:73:e2:19: 21:63:b5:c2:b4:10:24:9e:38:49:a5:57:0d:b8:a5:a4:16:f1: b4:d4:1c:0c:5b:95:35:9d:fd:a5:9b:5e:0f:79:d3:d3:63:af: 35:fd:7d:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9CfSWGqjrFKZOfmfiidBoC73m0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5 Nzg5NjVEMDAeFw0yNjA2MTgwNjE5NThaFw0yNjA2MTkwODE0NThaMDMxMTAvBgNV BAMTKEJFREVFOEZFMTEzMDVDMTQ3RjE4RTNBNzU5QzE5RDhGRTIxQzYzNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqMEgE8zeCva34qHVfF0iC+JIZ cEQDjzjqC5iuAz09aOrguabdoUXOo/zLr7dCwrAgrW0NfbOLmdgMx2ZPXPc0Vm+f tQq8M5gQx+fRhXfDWyVx4BaOCDgUPXfiv9Cj/N20PcuVko+jIP+dXbRxDBkSTQSm TpRallvw1O/ktp0S+118nWsNUMJQqdW2MWW2qZ/NJJxMXX9C3Fk7Hd5D+mRRiUJt /QMXH1YyvNUXNgfu4eQ6NtVmhz4sWSccjNANtJYzEQk0hnyvrAOpWVNhHo+xDFtq vKJnnTEYySKhxsRrPdPK/Z6tTCtTJ4NXTcyi/ZBl3jFLGfRA3yloJNxAKJfJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvt7o/hEwXBR/GOOnWcGdj+IcY2wwHwYDVR0j BBgwFoAU2pcnDKVSeeF6dDD8rExLbJeJZdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDBhNmZlYWEtNmI0Zi00N2NmLTllM2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENB NTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5Nzg5NjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTk3MjcwQ0E1NTI3OUUxN0E3NDMwRkNBQzRDNEI2Qzk3ODk2 NUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRC NkM5Nzg5NjVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAu0Mqdt2kCmsKrhNf9LgUaIh22LMX+zNpZ1 l4EVIPxPc/jMl3glyleSXmO37ehAmbKS60HOeTFBGQ3SKsFw8xZS/UrqPrwq7XaU sJ8QbM6TGc4dkfOc+VTn8aHKiyzkayu2sLhDqb2S6JNca+QbZzmGhrCWYmDvoTgR BuELGZLSgjRCRiDu16V83cZ3BQJy8zEshsGcPMC9hlyfiwinav/DKnp8rN+LxYkY UVf3ruc9s+MGTZPn/ulJWstjWfX1VbCZ8PzARpzQz78lRecOAKUfhaaeFXPiGSFj tcK0ECSeOEmlVw24paQW8bTUHAxblTWd/aWbXg9509NjrzX9fRE= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:17 2026 by rpki-client