$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft File: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft (raw, json) Hash identifier: sIVceeNkjHh827nfvFllm1DcCzQb0LrwBzVBsRvkk8o= Subject key identifier: 4D:D4:10:B4:85:2E:44:3C:C3:9A:E3:2E:2D:6E:5A:63:C2:93:BB:B2 Authority key identifier: DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 Certificate issuer: /CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Certificate serial: 1337FE1069529371C63C881BF733BC7D75264535 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 18:52:34 +0000 Manifest this update: Wed 16 Sep 2026 18:47:34 +0000 Manifest next update: Thu 17 Sep 2026 22:43:34 +0000 Files and hashes: 1: DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl (hash: aZslJjSNvVL/22PlwudCzj6fp+LZMrfkTfHSa5q73IY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:37:fe:10:69:52:93:71:c6:3c:88:1b:f7:33:bc:7d:75:26:45:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6 Validity Not Before: Sep 16 18:47:34 2026 GMT Not After : Sep 17 22:43:34 2026 GMT Subject: CN=4DD410B4852E443CC39AE32E2D6E5A63C293BBB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:98:d3:e3:47:c7:9d:f5:dd:aa:f7:36:e7:d0: 45:d0:f2:3c:d8:54:3b:45:4e:c2:c3:23:81:e4:fd: 19:a8:fe:42:03:26:58:a9:81:75:80:94:bb:cf:ae: b7:ab:89:55:7f:6e:0a:81:8a:8a:7c:34:5c:15:63: 87:f9:90:e4:3c:7b:a8:11:59:d2:7c:95:48:e0:85: 14:76:ae:4d:ab:8e:2c:a0:10:35:34:db:9c:87:85: e5:99:b4:cd:eb:b9:d1:f4:d9:b2:1c:2e:f3:e8:60: a4:8b:7d:02:3d:61:d0:c7:3e:18:02:e2:9a:f7:e8: 5e:0d:e4:63:2e:2c:f4:5b:9d:73:e2:39:ce:2e:b6: 71:45:c8:5a:9b:71:a0:fe:97:8e:e6:8c:b2:77:e9: 6f:3f:27:7f:68:a9:d5:57:f0:d8:a0:0d:a1:35:9e: f0:66:17:ed:6b:a7:ae:93:14:73:a1:f1:9e:7a:74: a6:98:a3:e3:dc:9c:ef:3e:5a:f6:a1:c1:cf:03:1f: 0b:f6:e1:53:00:fb:7f:d2:de:60:3b:0d:c2:1f:73: 48:37:07:b5:34:77:63:f4:7f:67:9f:75:0a:c7:1f: 1b:1c:a6:e2:db:41:cf:d4:20:bb:8e:80:af:9e:dd: d1:86:b3:b6:54:84:6e:be:f3:b3:f0:38:6d:dd:4b: 75:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D4:10:B4:85:2E:44:3C:C3:9A:E3:2E:2D:6E:5A:63:C2:93:BB:B2 X509v3 Authority Key Identifier: keyid:DA:43:B5:CE:B3:84:E3:BA:7B:EE:2C:93:2D:86:2F:3C:1F:C8:1C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/DA43B5CEB384E3BA7BEE2C932D862F3C1FC81CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:aa:61:2b:09:4d:a3:4c:05:54:68:17:80:82:30:e0:4e:f1: a7:d8:a5:38:64:7e:01:84:91:05:8b:18:cb:04:7e:af:85:4a: 2e:99:82:cb:06:d8:20:42:bb:78:ee:77:0b:38:de:ac:92:e6: 6c:7e:0d:84:9c:44:bd:f2:c8:64:ed:05:76:77:55:ed:07:3b: 54:3a:fe:74:3b:b0:17:c7:70:70:15:ec:37:2f:1d:d3:0f:99: 46:3d:94:dc:55:01:fa:0b:61:88:a9:61:f6:b5:fb:d1:b2:54: 3e:89:73:78:c3:ff:23:3d:b6:bd:61:15:c3:86:ef:cb:76:6b: ac:4a:6b:de:62:be:f3:53:ea:ee:e8:09:0d:e3:07:2e:70:63: ba:f0:b9:8b:20:7e:7a:1d:41:84:cf:2f:37:70:0e:37:32:b7: 29:67:3d:9b:15:9e:8b:65:80:b3:9b:72:25:4f:71:2f:51:41: 78:43:2c:41:04:01:bf:f0:d4:62:f5:72:75:91:43:ec:39:f9: 15:44:4d:16:1a:55:36:2b:eb:8e:c7:fe:1d:21:92:a4:de:82: b5:d2:9d:50:61:bd:59:f8:3b:a3:1e:8f:e3:2c:04:89:82:d8: cf:8e:c3:e3:29:40:be:16:5f:51:00:92:09:89:21:9a:10:b6: 63:42:9b:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEzf+EGlSk3HGPIgb9zO8fXUmRTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0Mx RkM4MUNFNjAeFw0yNjA5MTYxODQ3MzRaFw0yNjA5MTcyMjQzMzRaMDMxMTAvBgNV BAMTKDRERDQxMEI0ODUyRTQ0M0NDMzlBRTMyRTJENkU1QTYzQzI5M0JCQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJmNPjR8ed9d2q9zbn0EXQ8jzY VDtFTsLDI4Hk/Rmo/kIDJlipgXWAlLvPrreriVV/bgqBiop8NFwVY4f5kOQ8e6gR WdJ8lUjghRR2rk2rjiygEDU025yHheWZtM3rudH02bIcLvPoYKSLfQI9YdDHPhgC 4pr36F4N5GMuLPRbnXPiOc4utnFFyFqbcaD+l47mjLJ36W8/J39oqdVX8NigDaE1 nvBmF+1rp66TFHOh8Z56dKaYo+PcnO8+Wvahwc8DHwv24VMA+3/S3mA7DcIfc0g3 B7U0d2P0f2efdQrHHxscpuLbQc/UILuOgK+e3dGGs7ZUhG6+87PwOG3dS3W1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTdQQtIUuRDzDmuMuLW5aY8KTu7IwHwYDVR0j BBgwFoAU2kO1zrOE47p77iyTLYYvPB/IHOYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VC Mzg0RTNCQTdCRUUyQzkzMkQ4NjJGM0MxRkM4MUNFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQTQzQjVDRUIzODRFM0JBN0JFRTJDOTMyRDg2MkYzQzFGQzgx Q0U2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2 YzAtNjRjZjIyYTViMGZmLzAvREE0M0I1Q0VCMzg0RTNCQTdCRUUyQzkzMkQ4NjJG M0MxRkM4MUNFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKqYSsJTaNMBVRoF4CCMOBO8afYpThkfgGE kQWLGMsEfq+FSi6ZgssG2CBCu3judws43qyS5mx+DYScRL3yyGTtBXZ3Ve0HO1Q6 /nQ7sBfHcHAV7DcvHdMPmUY9lNxVAfoLYYipYfa1+9GyVD6Jc3jD/yM9tr1hFcOG 78t2a6xKa95ivvNT6u7oCQ3jBy5wY7rwuYsgfnodQYTPLzdwDjcytylnPZsVnotl gLObciVPcS9RQXhDLEEEAb/w1GL1cnWRQ+w5+RVETRYaVTYr647H/h0hkqTegrXS nVBhvVn4O6Mej+MsBImC2M+Ow+MpQL4WX1EAkgmJIZoQtmNCm0I= -----END CERTIFICATE-----Generated at Thu Sep 17 12:18:30 2026 by rpki-client