$ rpki-client -vvf rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft File: DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft (raw, json) Hash identifier: L8nRG0CzsU4RGuRG1DZrcKCitp9uiwcywMIzECSk5Ow= Subject key identifier: C5:A6:B2:EF:C0:09:B3:87:3B:47:05:C7:88:50:C9:37:59:55:B1:B8 Authority key identifier: DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 Certificate issuer: /CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Certificate serial: 6123BCC04D69C0A715A93CE74B733685B2B2FD0E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 11:46:59 +0000 Manifest this update: Sun 02 Aug 2026 11:41:59 +0000 Manifest next update: Mon 03 Aug 2026 14:12:59 +0000 Files and hashes: 1: DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl (hash: PaK/OIpprvn9E5NbbCmgFYEnDuenQ1UQOvYrPWWHLL4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 14:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:23:bc:c0:4d:69:c0:a7:15:a9:3c:e7:4b:73:36:85:b2:b2:fd:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Validity Not Before: Aug 2 11:41:59 2026 GMT Not After : Aug 3 14:12:59 2026 GMT Subject: CN=C5A6B2EFC009B3873B4705C78850C9375955B1B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:d7:b7:b5:68:b2:f6:2f:89:05:21:82:11: 64:d6:3a:b4:a2:9e:f3:56:e1:99:5e:1a:5c:c3:fb: cb:58:1c:5f:af:93:18:f4:25:f0:a5:58:7e:e4:18: 3b:b2:5d:b5:a6:1e:d0:32:f8:db:e4:72:d4:8e:e7: 3f:28:c6:8f:1d:eb:7c:94:d9:6f:79:7b:61:95:08: 8a:31:90:f6:a7:cc:a5:70:59:05:de:05:23:93:c7: 63:a6:c1:d1:24:bc:d7:02:ee:f1:4f:dc:49:f5:ed: ea:84:1f:44:35:e2:5b:7a:a0:b5:5d:f6:a9:e7:bb: ee:fa:ba:d8:cc:0c:99:ed:1a:2f:ba:a6:70:b2:4d: 4e:f9:66:65:a6:5a:c6:cf:9a:17:06:f1:1e:f2:19: d0:9b:07:09:ba:14:13:18:37:2e:93:cf:5f:ca:cf: df:e9:4b:c8:a6:c5:5f:3d:f2:f4:12:33:c9:ad:7c: 5a:e3:34:77:40:dc:22:a1:7d:b9:e9:23:60:d8:09: f1:ae:af:d2:06:17:7d:e6:db:43:c2:3e:9d:9a:69: 87:cd:8c:b5:69:d4:22:80:da:0a:c6:67:85:17:1b: ab:98:73:f7:6e:df:48:4d:e7:00:7d:03:66:9c:15: f6:45:f5:11:0c:af:fc:a6:24:9e:34:ae:49:b5:09: df:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A6:B2:EF:C0:09:B3:87:3B:47:05:C7:88:50:C9:37:59:55:B1:B8 X509v3 Authority Key Identifier: keyid:DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:d5:1f:58:88:1a:16:82:96:3c:18:df:f8:43:0f:af:e6:0d: 18:54:c8:32:16:5e:d6:51:f2:f7:21:9f:86:f2:ea:21:ca:ed: d6:7d:5b:27:c7:cd:df:32:3d:0a:95:ae:7c:39:7b:7d:6e:9d: 86:cf:88:e3:8f:b0:ef:53:7e:e4:6c:5c:0d:90:c0:ae:c3:50: a2:2d:e9:a4:4a:7b:d6:cf:9d:a5:38:30:30:8a:04:8c:d8:74: b3:d2:78:f0:b8:71:56:b9:9d:5b:5e:9a:e8:16:c2:ee:cc:f7: f7:15:63:99:47:89:d1:5b:74:ea:e3:ea:cb:82:74:d3:f6:23: 6e:c2:7c:ff:09:cc:6f:d7:0b:6a:b2:58:7c:3a:db:c3:4e:98: a7:a7:45:bc:1e:52:a9:9d:05:81:f3:2d:8f:f5:a2:64:56:af: 91:36:8f:72:ab:3a:28:10:1b:41:d1:5c:61:56:db:90:26:f3: b8:a8:d9:11:47:ca:80:8a:86:4b:55:b9:ff:07:5d:7b:bc:09: c9:27:4d:c2:fe:17:de:45:72:33:2e:d3:3e:56:2b:6d:7e:83: 98:f3:17:8c:35:28:7e:e7:eb:34:1c:53:fe:c8:89:c4:32:6b: 8a:ed:3e:06:c3:38:92:75:d9:e9:1b:16:47:3b:a1:30:0c:f6: c8:77:72:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYSO8wE1pwKcVqTznS3M2hbKy/Q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5 Nzg5NjVEMDAeFw0yNjA4MDIxMTQxNTlaFw0yNjA4MDMxNDEyNTlaMDMxMTAvBgNV BAMTKEM1QTZCMkVGQzAwOUIzODczQjQ3MDVDNzg4NTBDOTM3NTk1NUIxQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfde3tWiy9i+JBSGCEWTWOrSi nvNW4ZleGlzD+8tYHF+vkxj0JfClWH7kGDuyXbWmHtAy+NvkctSO5z8oxo8d63yU 2W95e2GVCIoxkPanzKVwWQXeBSOTx2OmwdEkvNcC7vFP3En17eqEH0Q14lt6oLVd 9qnnu+76utjMDJntGi+6pnCyTU75ZmWmWsbPmhcG8R7yGdCbBwm6FBMYNy6Tz1/K z9/pS8imxV898vQSM8mtfFrjNHdA3CKhfbnpI2DYCfGur9IGF33m20PCPp2aaYfN jLVp1CKA2grGZ4UXG6uYc/du30hN5wB9A2acFfZF9REMr/ymJJ40rkm1Cd/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxaay78AJs4c7RwXHiFDJN1lVsbgwHwYDVR0j BBgwFoAU2pcnDKVSeeF6dDD8rExLbJeJZdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDBhNmZlYWEtNmI0Zi00N2NmLTllM2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENB NTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5Nzg5NjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTk3MjcwQ0E1NTI3OUUxN0E3NDMwRkNBQzRDNEI2Qzk3ODk2 NUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRC NkM5Nzg5NjVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7VH1iIGhaCljwY3/hDD6/mDRhUyDIWXtZR 8vchn4by6iHK7dZ9WyfHzd8yPQqVrnw5e31unYbPiOOPsO9TfuRsXA2QwK7DUKIt 6aRKe9bPnaU4MDCKBIzYdLPSePC4cVa5nVtemugWwu7M9/cVY5lHidFbdOrj6suC dNP2I27CfP8JzG/XC2qyWHw628NOmKenRbweUqmdBYHzLY/1omRWr5E2j3KrOigQ G0HRXGFW25Am87io2RFHyoCKhktVuf8HXXu8CcknTcL+F95FcjMu0z5WK21+g5jz F4w1KH7n6zQcU/7IicQya4rtPgbDOJJ12ekbFkc7oTAM9sh3cvo= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:34 2026 by rpki-client