$ rpki-client -vvvf rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft File: DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft (raw, json) Hash identifier: 3Olw1COtKehrfAAEY+qA5kzgzo2ZBzRIDInDVrxeI8k= Subject key identifier: 1F:D1:58:A1:E9:37:84:07:BE:80:26:F3:75:40:97:19:90:4F:F9:77 Authority key identifier: DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 Certificate issuer: /CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Certificate serial: 7974E0F0EBFBFDE44B69742E9333C26CEDC7B734 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 23:38:11 +0000 Manifest this update: Wed 16 Sep 2026 23:33:11 +0000 Manifest next update: Fri 18 Sep 2026 02:56:11 +0000 Files and hashes: 1: DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl (hash: SBskEYGdrc1BCswy9qCX599vz8l6gbU7pzwoV9CtGKM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:74:e0:f0:eb:fb:fd:e4:4b:69:74:2e:93:33:c2:6c:ed:c7:b7:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA97270CA55279E17A7430FCAC4C4B6C978965D0 Validity Not Before: Sep 16 23:33:11 2026 GMT Not After : Sep 18 02:56:11 2026 GMT Subject: CN=1FD158A1E9378407BE8026F375409719904FF977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:85:f7:f7:b3:5b:dc:fc:59:4a:7f:b3:55:fa: 4a:7f:e1:c3:80:40:48:44:85:fd:ad:02:9b:e5:55: b5:6c:3a:9c:14:0e:11:a5:c5:bf:08:c1:ce:df:c3: 4d:a8:2e:cc:45:52:5d:96:1c:31:87:87:c1:06:50: 2d:cd:e4:9b:19:ae:6e:ba:62:4f:8f:a3:db:ec:fc: e6:1d:f0:82:f0:e4:47:12:0a:8f:6b:7d:45:d1:58: 24:c1:36:40:2a:c4:1d:c4:3d:2a:48:88:77:2c:03: 7b:71:9a:a4:37:df:23:23:c2:d2:90:ba:a4:b5:8c: 28:87:67:a1:f5:fa:08:2b:ad:25:5e:db:6a:7e:05: 8d:0b:be:3c:4d:50:41:09:98:a1:23:2f:c2:c0:87: 6b:d7:0d:84:eb:a6:92:fb:23:9c:e3:a8:6a:df:3c: dc:9d:62:a0:90:d9:03:24:d9:69:7d:88:6b:6b:db: a3:bf:69:58:e8:03:17:c1:24:71:28:3d:29:9b:88: 6e:ff:f9:a2:eb:f2:62:ce:2a:9f:0c:97:48:f4:ad: c0:e0:0d:33:b1:21:44:e3:66:06:01:d8:fc:a8:7f: cc:46:29:2a:58:39:d4:30:5a:6b:87:f1:0d:1b:0e: ab:f2:15:12:ff:e4:c0:ac:b6:0a:59:ad:a4:a7:b4: 1e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D1:58:A1:E9:37:84:07:BE:80:26:F3:75:40:97:19:90:4F:F9:77 X509v3 Authority Key Identifier: keyid:DA:97:27:0C:A5:52:79:E1:7A:74:30:FC:AC:4C:4B:6C:97:89:65:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/DA97270CA55279E17A7430FCAC4C4B6C978965D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e6:cd:b4:8f:82:74:61:58:92:37:8b:9f:33:72:a6:f3:17: 94:a9:37:97:50:ff:c0:f5:fb:80:7c:07:82:79:ec:99:69:19: a3:bf:4e:13:9d:f5:3a:61:4d:2f:25:7f:7d:ef:29:37:80:00: 3e:76:b1:93:6a:74:12:be:6b:a8:d2:69:b3:36:89:2d:82:f1: 10:17:cd:b7:ed:2a:07:61:0c:32:f0:67:2c:8e:60:39:82:9a: 1d:09:38:1d:a0:53:fd:ff:84:58:22:d5:0f:3f:39:37:91:31: e2:53:6f:e8:60:fe:42:a3:7f:5e:73:63:c4:1c:d8:c4:cf:78: 86:4c:ca:81:e7:b8:2b:22:b2:ef:8e:32:82:aa:ef:bc:d6:ef: ca:dc:80:93:d4:99:2f:ad:5f:c5:7b:33:f7:ef:78:13:67:59: 3d:11:f3:6e:4f:47:a5:c6:b2:4f:89:98:ac:16:35:15:cc:45: 1d:b4:37:76:c2:bb:69:79:b7:f6:e1:29:ac:10:9f:65:b6:35: 37:7b:9c:15:39:c1:fb:ea:07:73:55:81:09:f2:d1:2d:35:39: 35:ef:0c:6d:1b:0c:4b:a4:27:99:b5:9b:36:99:de:93:9d:41: 9f:1e:3b:bd:79:37:84:d9:e7:2b:b9:2b:f0:e6:fe:63:bf:66: 79:73:66:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeXTg8Ov7/eRLaXQukzPCbO3HtzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5 Nzg5NjVEMDAeFw0yNjA5MTYyMzMzMTFaFw0yNjA5MTgwMjU2MTFaMDMxMTAvBgNV BAMTKDFGRDE1OEExRTkzNzg0MDdCRTgwMjZGMzc1NDA5NzE5OTA0RkY5NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmhff3s1vc/FlKf7NV+kp/4cOA QEhEhf2tApvlVbVsOpwUDhGlxb8Iwc7fw02oLsxFUl2WHDGHh8EGUC3N5JsZrm66 Yk+Po9vs/OYd8ILw5EcSCo9rfUXRWCTBNkAqxB3EPSpIiHcsA3txmqQ33yMjwtKQ uqS1jCiHZ6H1+ggrrSVe22p+BY0LvjxNUEEJmKEjL8LAh2vXDYTrppL7I5zjqGrf PNydYqCQ2QMk2Wl9iGtr26O/aVjoAxfBJHEoPSmbiG7/+aLr8mLOKp8Ml0j0rcDg DTOxIUTjZgYB2Pyof8xGKSpYOdQwWmuH8Q0bDqvyFRL/5MCstgpZraSntB4TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH9FYoek3hAe+gCbzdUCXGZBP+XcwHwYDVR0j BBgwFoAU2pcnDKVSeeF6dDD8rExLbJeJZdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDBhNmZlYWEtNmI0Zi00N2NmLTllM2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENB NTUyNzlFMTdBNzQzMEZDQUM0QzRCNkM5Nzg5NjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTk3MjcwQ0E1NTI3OUUxN0E3NDMwRkNBQzRDNEI2Qzk3ODk2 NUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvREE5NzI3MENBNTUyNzlFMTdBNzQzMEZDQUM0QzRC NkM5Nzg5NjVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXmzbSPgnRhWJI3i58zcqbzF5SpN5dQ/8D1 +4B8B4J57JlpGaO/ThOd9TphTS8lf33vKTeAAD52sZNqdBK+a6jSabM2iS2C8RAX zbftKgdhDDLwZyyOYDmCmh0JOB2gU/3/hFgi1Q8/OTeRMeJTb+hg/kKjf15zY8Qc 2MTPeIZMyoHnuCsisu+OMoKq77zW78rcgJPUmS+tX8V7M/fveBNnWT0R825PR6XG sk+JmKwWNRXMRR20N3bCu2l5t/bhKawQn2W2NTd7nBU5wfvqB3NVgQny0S01OTXv DG0bDEukJ5m1mzaZ3pOdQZ8eO715N4TZ5yu5K/Dm/mO/ZnlzZrA= -----END CERTIFICATE-----Generated at Thu Sep 17 14:21:54 2026 by rpki-client