$ rpki-client -vvf rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft File: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft (raw, json) Hash identifier: YTvQKdme1PqsPUYob38O7VatLlol0Wj1AcXbeMNibGo= Subject key identifier: B9:49:B9:0C:AB:69:E7:05:D7:62:1E:A8:1A:11:45:04:88:BF:45:2F Authority key identifier: DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 Certificate issuer: /CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Certificate serial: 5F5D51C045EEFF63F0808A5611165AB3E25FDF7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 06:45:41 +0000 Manifest this update: Sun 02 Aug 2026 06:40:41 +0000 Manifest next update: Mon 03 Aug 2026 09:38:41 +0000 Files and hashes: 1: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl (hash: R402tGAflkY26dvTmjePOgr3lXD9xZnKDopOWtgpjR4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5d:51:c0:45:ee:ff:63:f0:80:8a:56:11:16:5a:b3:e2:5f:df:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Validity Not Before: Aug 2 06:40:41 2026 GMT Not After : Aug 3 09:38:41 2026 GMT Subject: CN=B949B90CAB69E705D7621EA81A11450488BF452F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8b:93:0a:88:6e:b4:92:2d:ce:57:73:33:e3: 1e:4d:7c:52:4d:a5:f1:87:89:72:47:22:53:94:72: eb:7b:e3:01:22:95:41:e9:53:f9:9b:95:49:67:ba: c5:25:69:46:c5:f9:0b:53:c9:f7:e8:12:5c:22:60: 3e:95:0e:ae:28:bd:11:36:a5:02:f3:18:37:3b:41: 17:5b:a9:73:9b:29:6c:29:eb:97:e2:4b:35:52:8d: 43:c4:6b:4b:e7:70:70:b4:87:55:f3:cb:d5:a6:05: ba:51:9a:b8:93:b9:3d:2a:d8:77:bd:6d:59:6e:65: 6f:b3:ea:ee:41:71:9e:99:41:fc:58:22:84:fb:f9: 7d:57:ed:b8:f1:02:f6:f0:7e:90:4e:14:6f:c0:d9: 20:61:26:19:4c:74:ce:9b:c1:eb:1f:70:6b:69:91: 1f:c2:8e:14:5d:51:94:f9:6f:bf:58:8d:f5:b8:ea: 8b:ad:cd:39:bf:94:39:d2:c7:14:b3:7d:5b:25:65: a3:29:47:b5:97:b8:dd:1e:58:22:db:16:a6:40:18: a4:71:bb:04:f3:ed:34:82:75:fb:2e:6f:c9:19:80: 09:66:eb:28:d0:e3:bd:4a:91:44:9e:6d:0c:7c:fb: 0a:a7:12:e4:a0:b0:c1:3c:2c:09:25:84:e1:88:11: 94:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:49:B9:0C:AB:69:E7:05:D7:62:1E:A8:1A:11:45:04:88:BF:45:2F X509v3 Authority Key Identifier: keyid:DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:85:66:0f:11:7b:ed:ab:57:9d:7c:cc:b0:5a:af:2e:c3:e9: ad:67:f7:32:79:4b:56:5f:94:53:c7:7e:ae:da:a0:3f:6a:bf: d9:32:80:f4:12:c7:db:8d:e9:b1:08:98:e3:6c:b8:d7:eb:4d: 5e:99:1f:07:9a:b1:2f:a6:19:34:7d:07:26:81:ea:a7:00:36: d7:70:55:77:50:0a:4d:b8:c4:30:61:8b:c5:40:4a:c6:28:1c: 00:f6:6e:60:37:c0:88:cf:6c:8d:16:26:c3:60:ec:2f:ab:ef: 5b:23:12:39:dd:2d:7f:b8:53:f7:8a:66:c6:60:65:b7:fd:b7: d6:d2:6b:d8:cb:62:ff:c8:a1:1d:3a:53:b4:80:65:d9:1a:c0: 5b:aa:cf:4d:5f:8a:39:95:29:a2:e4:cc:63:af:01:54:fd:b1: 28:28:17:dd:a5:77:55:11:4f:c4:f3:f1:bd:de:b9:0f:43:63: a1:a7:27:31:6c:c2:9c:d2:77:4c:4d:60:7d:50:90:0b:4d:25: 2b:05:13:55:43:1b:a2:81:a4:a5:c0:5f:0e:1c:8c:24:71:f1: 37:0e:52:6c:db:a9:27:37:d0:83:24:a8:80:84:f8:b0:39:e7: ce:24:ba:8e:4b:22:30:dd:11:9d:d5:4d:d7:c4:40:1d:32:fe: 4b:86:1b:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX11RwEXu/2PwgIpWERZas+Jf338wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0Mx RkM4MUNFNjAeFw0yNjA4MDIwNjQwNDFaFw0yNjA4MDMwOTM4NDFaMDMxMTAvBgNV BAMTKEI5NDlCOTBDQUI2OUU3MDVENzYyMUVBODFBMTE0NTA0ODhCRjQ1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNi5MKiG60ki3OV3Mz4x5NfFJN pfGHiXJHIlOUcut74wEilUHpU/mblUlnusUlaUbF+QtTyffoElwiYD6VDq4ovRE2 pQLzGDc7QRdbqXObKWwp65fiSzVSjUPEa0vncHC0h1Xzy9WmBbpRmriTuT0q2He9 bVluZW+z6u5BcZ6ZQfxYIoT7+X1X7bjxAvbwfpBOFG/A2SBhJhlMdM6bwesfcGtp kR/CjhRdUZT5b79YjfW46outzTm/lDnSxxSzfVslZaMpR7WXuN0eWCLbFqZAGKRx uwTz7TSCdfsub8kZgAlm6yjQ471KkUSebQx8+wqnEuSgsME8LAklhOGIEZT3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuUm5DKtp5wXXYh6oGhFFBIi/RS8wHwYDVR0j BBgwFoAU2kO1zrOE47p77iyTLYYvPB/IHOYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VC Mzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0MxRkM4MUNFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTQzQjVDRUIzODRFM0JBN0JFRTJDOTMyRDg2MkYzQzFGQzgx Q0U2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2 YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJG M0MxRkM4MUNFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6FZg8Re+2rV518zLBary7D6a1n9zJ5S1Zf lFPHfq7aoD9qv9kygPQSx9uN6bEImONsuNfrTV6ZHweasS+mGTR9ByaB6qcANtdw VXdQCk24xDBhi8VASsYoHAD2bmA3wIjPbI0WJsNg7C+r71sjEjndLX+4U/eKZsZg Zbf9t9bSa9jLYv/IoR06U7SAZdkawFuqz01fijmVKaLkzGOvAVT9sSgoF92ld1UR T8Tz8b3euQ9DY6GnJzFswpzSd0xNYH1QkAtNJSsFE1VDG6KBpKXAXw4cjCRx8TcO UmzbqSc30IMkqICE+LA5584kuo5LIjDdEZ3VTdfEQB0y/kuGG4I= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:29 2026 by rpki-client