$ rpki-client -vvf rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft File: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft (raw, json) Hash identifier: DgxjCdQUPO9HXcHm4IzXrcjAawBkSbm4gCchhz2NAcU= Subject key identifier: C3:19:02:03:F1:1D:26:86:7E:D0:24:75:B0:B0:CC:6C:E3:E8:AF:D0 Authority key identifier: DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 Certificate issuer: /CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Certificate serial: 6286075D196E3D83D7ED8873DD7F7672A48AC89E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 10:14:33 +0000 Manifest this update: Thu 18 Jun 2026 10:09:33 +0000 Manifest next update: Fri 19 Jun 2026 12:58:33 +0000 Files and hashes: 1: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl (hash: Q75wfE2ISo8rjkdFzpo7MDFa2JXXcD1udPQ8xOZbTq4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:86:07:5d:19:6e:3d:83:d7:ed:88:73:dd:7f:76:72:a4:8a:c8:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Validity Not Before: Jun 18 10:09:33 2026 GMT Not After : Jun 19 12:58:33 2026 GMT Subject: CN=C3190203F11D26867ED02475B0B0CC6CE3E8AFD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:a7:59:91:0d:29:a7:57:9e:fb:6d:cc:5b: 1e:c9:49:7e:c8:1c:ec:97:17:d7:f1:da:79:22:85: f9:6a:34:87:11:78:32:28:80:b8:8b:23:12:f3:06: b8:25:6e:6a:90:79:b2:9c:7d:33:ea:1b:55:db:90: 44:4e:97:ad:aa:17:0b:aa:63:0f:c8:bb:0f:15:15: 28:87:d1:23:6a:f2:47:e8:c2:f9:61:2c:4b:fe:eb: 17:52:bf:70:a8:8e:6c:fa:96:56:81:f6:83:41:60: 9d:95:30:a0:5f:8b:d6:76:80:3e:d7:ef:b4:1e:46: e9:81:5f:2b:18:bd:6c:58:c9:89:07:ef:a6:d8:a5: 3d:50:f7:d1:26:9e:0d:cd:c8:7f:f2:f7:df:d9:35: 85:22:c6:8c:c0:00:58:9e:65:8a:b6:4c:8b:07:be: cb:c5:93:1a:9a:fa:8b:77:3f:d7:19:76:8f:e5:10: f1:69:29:57:03:7f:4d:ff:8e:da:bc:99:65:36:89: e9:88:67:65:c9:63:63:82:ff:84:30:6c:95:ee:2f: 63:fd:07:69:ff:a4:dd:d7:2e:de:dd:b1:30:5e:0b: 57:7d:f4:74:76:77:18:a3:73:fe:4f:46:4a:34:59: 1d:47:27:02:5a:b1:e8:6f:83:cf:27:b4:91:66:bf: ad:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:19:02:03:F1:1D:26:86:7E:D0:24:75:B0:B0:CC:6C:E3:E8:AF:D0 X509v3 Authority Key Identifier: keyid:DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:98:57:11:12:8f:f5:ac:ca:92:1e:76:ed:ae:6b:6c:a6:83: 53:44:92:18:d6:dd:f4:cb:62:47:69:ad:d7:5b:a0:29:3f:9f: 01:99:8c:52:68:78:aa:90:dd:ce:e4:45:94:59:ef:41:16:5e: ee:f2:b0:12:59:34:c8:6c:69:13:b5:e1:d1:dc:03:04:dc:b7: 59:17:e2:82:cd:3e:ba:aa:b2:fa:e4:8b:d3:7b:32:cc:b6:a1: d5:a6:5f:8a:7d:6b:a6:6d:09:2b:1b:56:6b:7e:b7:4d:9b:27: ae:97:62:32:0f:42:0a:c6:2a:f9:72:11:a3:30:c0:e3:7c:05: 93:0a:3f:0c:d1:c1:b1:b9:26:1e:70:84:b1:58:ce:8d:22:6c: cc:99:5e:59:c6:46:12:58:2c:cc:1f:7b:37:60:0f:f5:8a:cb: 6a:94:a9:a0:9c:61:db:4e:b8:93:30:d7:26:bf:e4:fc:f5:62: 52:6f:89:e3:46:e8:41:bd:3f:7c:8a:4d:22:2e:6f:74:8f:88: eb:31:7c:8c:5b:e2:cf:b7:ba:b9:14:4f:aa:9e:1c:02:a6:c2: 6d:56:a5:e8:bf:0d:b2:aa:8b:83:c2:68:a8:42:55:60:87:e0: 00:3f:b6:3b:75:7f:42:7b:f7:ec:1b:e4:57:f8:dc:af:8a:fc: 38:63:4e:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYoYHXRluPYPX7Yhz3X92cqSKyJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0Mx RkM4MUNFNjAeFw0yNjA2MTgxMDA5MzNaFw0yNjA2MTkxMjU4MzNaMDMxMTAvBgNV BAMTKEMzMTkwMjAzRjExRDI2ODY3RUQwMjQ3NUIwQjBDQzZDRTNFOEFGRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnTqdZkQ0pp1ee+23MWx7JSX7I HOyXF9fx2nkihflqNIcReDIogLiLIxLzBrglbmqQebKcfTPqG1XbkEROl62qFwuq Yw/Iuw8VFSiH0SNq8kfowvlhLEv+6xdSv3Cojmz6llaB9oNBYJ2VMKBfi9Z2gD7X 77QeRumBXysYvWxYyYkH76bYpT1Q99Emng3NyH/y99/ZNYUixozAAFieZYq2TIsH vsvFkxqa+ot3P9cZdo/lEPFpKVcDf03/jtq8mWU2iemIZ2XJY2OC/4QwbJXuL2P9 B2n/pN3XLt7dsTBeC1d99HR2dxijc/5PRko0WR1HJwJasehvg88ntJFmv60ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwxkCA/EdJoZ+0CR1sLDMbOPor9AwHwYDVR0j BBgwFoAU2kO1zrOE47p77iyTLYYvPB/IHOYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VC Mzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0MxRkM4MUNFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTQzQjVDRUIzODRFM0JBN0JFRTJDOTMyRDg2MkYzQzFGQzgx Q0U2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2 YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJG M0MxRkM4MUNFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmYVxESj/WsypIedu2ua2ymg1NEkhjW3fTL YkdprddboCk/nwGZjFJoeKqQ3c7kRZRZ70EWXu7ysBJZNMhsaRO14dHcAwTct1kX 4oLNPrqqsvrki9N7Msy2odWmX4p9a6ZtCSsbVmt+t02bJ66XYjIPQgrGKvlyEaMw wON8BZMKPwzRwbG5Jh5whLFYzo0ibMyZXlnGRhJYLMwfezdgD/WKy2qUqaCcYdtO uJMw1ya/5Pz1YlJvieNG6EG9P3yKTSIub3SPiOsxfIxb4s+3urkUT6qeHAKmwm1W pei/DbKqi4PCaKhCVWCH4AA/tjt1f0J79+wb5Ff43K+K/DhjThc= -----END CERTIFICATE-----Generated at Thu Jun 18 17:11:12 2026 by rpki-client