$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft File: DA4C7EC09188922B406170208997DD586575FFB0.mft (raw, json) Hash identifier: FRoA0RTF48yN4hEW9m7r2FHR34qgeTeTMqiqSzt6pQA= Subject key identifier: 16:C7:E9:29:36:0E:DD:BE:CF:10:9B:00:9F:64:8A:6B:EC:0F:7C:D9 Authority key identifier: DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 Certificate issuer: /CN=DA4C7EC09188922B406170208997DD586575FFB0 Certificate serial: 4221D690239A053DEE2C8132D9D2782CAF2F3122 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft Manifest number: BA Signing time: Thu 17 Sep 2026 03:02:15 +0000 Manifest this update: Thu 17 Sep 2026 02:57:15 +0000 Manifest next update: Fri 18 Sep 2026 03:21:15 +0000 Files and hashes: 1: DA4C7EC09188922B406170208997DD586575FFB0.crl (hash: pE/r+daM9pbw3pefFZ6uAKth3EhYS0ul2xkXe6HVp4c=) 2: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: /A5BVWcPl0ZTjFUSUynQsRiKSne+ZQyE6o9O6kwxRu8=) 3: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: LjLUgvBMy0vDjBtT3AvvXHrDpEIsdVFxx/cTyXnRl4k=) 4: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: +HwPI5t9LV2JhVv1OMpumDZv5OfbCi5N5psEQEHPJ+A=) 5: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: MLj0AUwkGxT9VgNAnaRkUPum+E8mfae8sdJn0VM7fng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:21:d6:90:23:9a:05:3d:ee:2c:81:32:d9:d2:78:2c:af:2f:31:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA4C7EC09188922B406170208997DD586575FFB0 Validity Not Before: Sep 17 02:57:15 2026 GMT Not After : Sep 18 03:21:15 2026 GMT Subject: CN=16C7E929360EDDBECF109B009F648A6BEC0F7CD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:f8:c2:6f:1f:f4:db:ab:a4:ff:54:06:03: 07:b9:f3:15:3c:77:8e:fb:c3:fb:1f:d8:5b:34:ea: 93:24:5e:cd:fb:77:e5:37:69:25:16:f1:24:1c:ea: 36:79:f6:99:ab:35:8e:dc:16:4c:0b:0f:5e:01:91: 27:99:46:4e:0c:2a:4d:dc:d6:64:19:af:8f:ca:5c: 3e:18:b2:86:f2:ac:23:21:70:30:b5:0a:90:49:39: 61:61:0e:4a:33:20:85:2d:05:bd:70:5e:42:d5:21: 17:52:5d:34:50:e1:fd:29:3d:f1:a1:a1:83:9c:ae: 6f:4a:6a:73:7b:99:82:40:0a:61:5f:65:0e:41:9c: 19:68:52:b5:88:70:b4:79:1a:92:fb:84:ca:c3:d5: cd:ae:9a:70:8b:41:a2:36:11:d0:00:7a:aa:41:d5: cc:10:47:7a:9e:df:bd:f4:ea:4a:11:5d:e8:d1:e2: e6:88:12:a6:5d:e7:82:dc:59:37:bf:f9:b7:98:94: 8d:3a:e4:76:8b:27:98:2f:ce:af:a2:e6:79:ac:6c: 07:36:1e:3f:bd:01:70:51:79:74:de:a8:cf:8d:b1: 24:4d:4e:d8:fd:a8:7e:54:f3:da:25:34:a7:26:3b: cd:d4:5b:10:f3:b2:c5:c3:4f:d2:31:ba:96:8b:c9: 32:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C7:E9:29:36:0E:DD:BE:CF:10:9B:00:9F:64:8A:6B:EC:0F:7C:D9 X509v3 Authority Key Identifier: keyid:DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a7:13:36:a0:67:bd:80:40:0b:9d:c8:31:a0:1e:c2:a9:eb: a7:51:bc:ea:5a:48:0c:cc:29:d5:b5:4d:dc:1a:90:48:2f:6f: 10:c8:e7:ef:62:0f:e7:5d:30:36:5b:c1:3f:21:2b:e8:b7:7b: 6f:7c:a3:6c:0f:c9:48:08:84:d1:77:1b:44:3d:d4:c6:b0:9b: a2:d3:67:69:8f:5c:91:8e:98:7f:c3:75:11:fe:cd:62:ec:79: 45:a1:68:fe:75:3d:c1:7a:e6:84:dd:3e:45:2e:4d:dc:c1:e7: 0e:58:e0:94:90:96:bc:9a:5f:92:1a:63:7f:f1:4e:b9:fc:a8: 1c:4a:57:b9:0b:ea:44:2c:03:e6:1d:23:8c:38:26:b0:4c:fe: 81:b5:fc:95:bb:58:71:c7:4f:ef:0b:f2:d8:ca:81:d4:86:95: 63:47:59:43:89:92:f0:44:82:85:02:f8:0c:bd:fc:97:e2:2b: b0:b2:f4:66:d8:50:40:4e:b3:7a:6f:94:e0:f1:3f:70:bc:df: 69:12:44:fc:20:f0:fb:b2:c4:ff:7e:db:5b:80:f8:e0:ec:86: d2:5d:74:0c:45:6b:b0:c6:e3:22:30:39:19:8f:92:09:0d:28: e7:f2:2d:06:6a:82:7d:47:7a:b7:52:b8:5e:c7:20:19:77:0a: 85:9e:a3:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQiHWkCOaBT3uLIEy2dJ4LK8vMSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2 NTc1RkZCMDAeFw0yNjA5MTcwMjU3MTVaFw0yNjA5MTgwMzIxMTVaMDMxMTAvBgNV BAMTKDE2QzdFOTI5MzYwRUREQkVDRjEwOUIwMDlGNjQ4QTZCRUMwRjdDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLkfjCbx/026uk/1QGAwe58xU8 d477w/sf2Fs06pMkXs37d+U3aSUW8SQc6jZ59pmrNY7cFkwLD14BkSeZRk4MKk3c 1mQZr4/KXD4YsobyrCMhcDC1CpBJOWFhDkozIIUtBb1wXkLVIRdSXTRQ4f0pPfGh oYOcrm9KanN7mYJACmFfZQ5BnBloUrWIcLR5GpL7hMrD1c2umnCLQaI2EdAAeqpB 1cwQR3qe37306koRXejR4uaIEqZd54LcWTe/+beYlI065HaLJ5gvzq+i5nmsbAc2 Hj+9AXBReXTeqM+NsSRNTtj9qH5U89olNKcmO83UWxDzssXDT9IxupaLyTLTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFsfpKTYO3b7PEJsAn2SKa+wPfNkwHwYDVR0j BBgwFoAU2kx+wJGIkitAYXAgiZfdWGV1/7AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhjZTIwMDgtODRiNy00YmVmLTk0YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5 MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2NTc1RkZCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTRDN0VDMDkxODg5MjJCNDA2MTcwMjA4OTk3REQ1ODY1NzVG RkIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RE NTg2NTc1RkZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2nEzagZ72AQAudyDGgHsKp66dRvOpaSAzM KdW1TdwakEgvbxDI5+9iD+ddMDZbwT8hK+i3e298o2wPyUgIhNF3G0Q91Mawm6LT Z2mPXJGOmH/DdRH+zWLseUWhaP51PcF65oTdPkUuTdzB5w5Y4JSQlryaX5IaY3/x Trn8qBxKV7kL6kQsA+YdI4w4JrBM/oG1/JW7WHHHT+8L8tjKgdSGlWNHWUOJkvBE goUC+Ay9/JfiK7Cy9GbYUEBOs3pvlODxP3C832kSRPwg8PuyxP9+21uA+ODshtJd dAxFa7DG4yIwORmPkgkNKOfyLQZqgn1HerdSuF7HIBl3CoWeoxY= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:56 2026 by rpki-client