$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft File: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft (raw, json) Hash identifier: K/MRkif7V4HyYcWTIHIu0kVIhxtT/J5tCb4PnRRSmAk= Subject key identifier: E1:98:57:6E:8E:F2:FD:F7:D7:46:78:A2:81:BE:21:30:71:C6:00:66 Authority key identifier: DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C Certificate issuer: /CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Certificate serial: 0AB55B22ACA7028938A791CF75356CA093EB0F78 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft Manifest number: E8 Signing time: Sat 24 Oct 2026 09:30:53 +0000 Manifest this update: Sat 24 Oct 2026 09:25:53 +0000 Manifest next update: Sun 25 Oct 2026 11:36:53 +0000 Files and hashes: 1: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: hKLPAhro/Jq1h6DXfB80L/ei9CiaAI4MnHiXFKHH4tE=) 2: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl (hash: cKCvy2q0mm5WJefRMNYj8m4YrjsP2IYSo1lT7GwjUu8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b5:5b:22:ac:a7:02:89:38:a7:91:cf:75:35:6c:a0:93:eb:0f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C Validity Not Before: Oct 24 09:25:53 2026 GMT Not After : Oct 25 11:36:53 2026 GMT Subject: CN=E198576E8EF2FDF7D74678A281BE213071C60066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:82:4e:c9:0e:92:56:fe:c8:2c:84:32:da:fe: 65:fd:bb:e1:f1:2a:df:65:7e:6e:97:65:a9:72:32: 98:d2:87:b7:3f:d9:d3:8b:d6:5e:74:4a:dc:dd:3a: f2:f1:eb:32:66:f8:74:23:f3:73:05:f9:b3:61:b1: 40:33:bd:c6:3d:6d:ac:ff:3c:06:80:4a:75:65:ab: 62:3d:a0:35:cb:44:2a:ba:25:ca:a9:2b:a3:b5:7b: 1a:f0:26:60:89:a1:d6:b0:d5:50:96:b6:8d:8a:5d: 2e:bb:72:a1:69:0c:c8:c7:f7:8f:5a:04:2d:ae:05: df:94:2b:a6:37:c8:75:09:ad:b6:fc:bb:9f:7a:f8: a9:bf:4f:82:c7:c2:76:f9:52:2f:4b:87:68:68:44: 97:ad:73:62:de:64:93:f0:70:4b:3d:3c:be:f0:a2: 35:36:d7:63:05:3f:27:46:1c:a0:4e:eb:89:ed:71: 0a:44:44:c5:18:eb:aa:f9:fb:c9:9d:32:cb:14:5d: 0e:2b:42:6a:0f:86:c8:1b:7e:c8:4a:3d:f4:18:6d: 50:87:c7:9e:82:f5:34:25:42:94:57:05:5b:64:09: b9:24:75:9a:68:dd:04:1a:56:82:4b:fb:bf:0d:7d: f0:5f:dc:8c:3e:74:78:65:27:17:a3:36:ca:91:28: fa:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:98:57:6E:8E:F2:FD:F7:D7:46:78:A2:81:BE:21:30:71:C6:00:66 X509v3 Authority Key Identifier: keyid:DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:38:64:d3:30:f0:df:c3:30:3f:58:81:e8:89:79:57:21:34: d3:dd:6c:94:d7:3b:76:ba:a5:df:c7:7b:81:2b:f1:dd:5f:f8: 8f:79:90:1c:e8:84:86:80:4a:0d:f4:d2:51:60:fe:87:fd:b2: 38:3a:dd:25:a5:31:9a:dc:47:d6:15:00:f6:53:ef:a0:0a:95: 77:52:fc:3b:92:d6:e6:74:44:7a:4a:7e:ea:96:dd:11:93:bf: e7:c1:06:51:72:aa:b9:3e:7b:3b:08:df:58:42:92:f0:0c:61: 0c:4c:89:ab:ba:81:4e:57:77:b5:92:ff:7f:bc:e2:56:91:c8: aa:c9:d9:91:8d:1f:ad:66:65:35:32:53:cf:25:be:28:5f:d3: 54:1b:e4:b3:09:ce:b1:58:39:15:a3:6c:58:c8:ec:99:80:06: 8a:0e:a6:d0:90:c9:4f:51:df:6a:d4:89:b0:37:10:5c:3f:1c: 52:3c:34:fe:1d:07:2f:b5:75:0c:81:2f:f7:35:7b:49:8c:ea: 77:1b:60:bb:fd:76:eb:f2:a3:b3:dc:08:19:e0:49:ea:6f:de: 19:6c:ad:44:03:70:20:5e:c2:33:82:da:df:a4:ab:88:b4:e9: 36:3f:26:eb:f9:50:83:ca:86:0d:f4:7d:6e:cc:a5:1c:7a:74: b6:1f:e0:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCrVbIqynAok4p5HPdTVsoJPrD3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREExMjM0M0JCRDlGNDc5MTgyMjczQTlGN0I3RDZERDAy OThENUIxQzAeFw0yNjEwMjQwOTI1NTNaFw0yNjEwMjUxMTM2NTNaMDMxMTAvBgNV BAMTKEUxOTg1NzZFOEVGMkZERjdENzQ2NzhBMjgxQkUyMTMwNzFDNjAwNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPgk7JDpJW/sgshDLa/mX9u+Hx Kt9lfm6XZalyMpjSh7c/2dOL1l50StzdOvLx6zJm+HQj83MF+bNhsUAzvcY9baz/ PAaASnVlq2I9oDXLRCq6JcqpK6O1exrwJmCJodaw1VCWto2KXS67cqFpDMjH949a BC2uBd+UK6Y3yHUJrbb8u596+Km/T4LHwnb5Ui9Lh2hoRJetc2LeZJPwcEs9PL7w ojU212MFPydGHKBO64ntcQpERMUY66r5+8mdMssUXQ4rQmoPhsgbfshKPfQYbVCH x56C9TQlQpRXBVtkCbkkdZpo3QQaVoJL+78NffBf3Iw+dHhlJxejNsqRKPoFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4ZhXbo7y/ffXRniigb4hMHHGAGYwHwYDVR0j BBgwFoAU2hI0O72fR5GCJzqfe31t0CmNWxwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzM4NzRjZjMtYWRiMS00OTQ3LWE3ZTQtYTJkMzJjNTRlZDFmLzAvREExMjM0M0JC RDlGNDc5MTgyMjczQTlGN0I3RDZERDAyOThENUIxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTEyMzQzQkJEOUY0NzkxODIyNzNBOUY3QjdENkREMDI5OEQ1 QjFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzM4NzRjZjMtYWRiMS00OTQ3LWE3 ZTQtYTJkMzJjNTRlZDFmLzAvREExMjM0M0JCRDlGNDc5MTgyMjczQTlGN0I3RDZE RDAyOThENUIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACg4ZNMw8N/DMD9YgeiJeVchNNPdbJTXO3a6 pd/He4Er8d1f+I95kBzohIaASg300lFg/of9sjg63SWlMZrcR9YVAPZT76AKlXdS /DuS1uZ0RHpKfuqW3RGTv+fBBlFyqrk+ezsI31hCkvAMYQxMiau6gU5Xd7WS/3+8 4laRyKrJ2ZGNH61mZTUyU88lvihf01Qb5LMJzrFYORWjbFjI7JmABooOptCQyU9R 32rUibA3EFw/HFI8NP4dBy+1dQyBL/c1e0mM6ncbYLv9duvyo7PcCBngSepv3hls rUQDcCBewjOC2t+kq4i06TY/Juv5UIPKhg30fW7MpRx6dLYf4KU= -----END CERTIFICATE-----Generated at Sat Oct 24 20:45:01 2026 by rpki-client