$ rpki-client -vvvf rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft File: E23AA0021573342645A2DFB669071A3FC460F128.mft (raw, json) Hash identifier: +quBFXxVKgS4vVJqWsnb6Uh7b3uubkBR5CPx1XKDpUw= Subject key identifier: 2F:BA:B0:D7:AB:B6:BF:14:43:A2:5E:6B:85:1E:17:86:63:99:AC:88 Authority key identifier: E2:3A:A0:02:15:73:34:26:45:A2:DF:B6:69:07:1A:3F:C4:60:F1:28 Certificate issuer: /CN=E23AA0021573342645A2DFB669071A3FC460F128 Certificate serial: 625135D797CFEC7C4B3B1CF2AC22C779EFE94FC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft Manifest number: BD Signing time: Mon 21 Sep 2026 01:28:18 +0000 Manifest this update: Mon 21 Sep 2026 01:23:18 +0000 Manifest next update: Tue 22 Sep 2026 05:22:18 +0000 Files and hashes: 1: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: ehJTG/Z8MCWRpYE7Mv6MPXlKzKRx5WpLNTB9Vc1HLns=) 2: E23AA0021573342645A2DFB669071A3FC460F128.crl (hash: dhj89eoqL55PQdh9WskU43Lqw1P3gvzB1CMhmFPZBrM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.crl rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:51:35:d7:97:cf:ec:7c:4b:3b:1c:f2:ac:22:c7:79:ef:e9:4f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E23AA0021573342645A2DFB669071A3FC460F128 Validity Not Before: Sep 21 01:23:18 2026 GMT Not After : Sep 22 05:22:18 2026 GMT Subject: CN=2FBAB0D7ABB6BF1443A25E6B851E17866399AC88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:90:a7:f2:bf:0d:72:ea:dc:bf:9d:79:51:03: fc:39:54:5e:26:64:7a:97:6d:a5:f9:46:f3:ae:b0: b4:de:52:56:19:37:13:ca:90:74:a4:54:39:13:b6: ce:8e:36:0d:d0:ae:17:94:ec:9d:66:17:8f:9e:40: 15:88:26:da:b8:ca:34:2f:e4:5d:56:bf:a5:0f:11: 87:18:42:25:02:2c:3a:f1:4b:b1:93:0a:8c:e6:02: 25:d4:45:57:4d:cf:be:c1:64:21:18:df:9a:1e:24: 63:02:01:e4:57:c5:af:8b:3a:cf:80:7a:1f:e8:15: 6f:45:1b:c8:35:1c:0f:52:b4:91:7d:21:39:f6:09: 9a:c0:02:50:b5:27:6d:8b:28:1f:63:ac:26:36:f4: d3:48:22:17:3a:f2:b6:a9:79:7b:bb:80:72:b5:99: c2:de:f3:86:51:00:c9:82:36:1a:a3:09:3e:ea:cd: f2:8f:90:cc:7f:86:c9:6b:0b:a8:00:b7:81:ea:76: dd:83:17:1c:18:f1:1a:1d:8d:f8:47:00:31:92:f2: 86:52:9a:d4:f2:3f:37:37:8f:38:86:25:70:8e:e2: c2:bf:1d:73:48:2a:9c:6e:13:93:d3:79:53:45:46: 98:38:11:85:ef:15:59:f5:54:94:ee:2c:26:0c:05: 8a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BA:B0:D7:AB:B6:BF:14:43:A2:5E:6B:85:1E:17:86:63:99:AC:88 X509v3 Authority Key Identifier: keyid:E2:3A:A0:02:15:73:34:26:45:A2:DF:B6:69:07:1A:3F:C4:60:F1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ba:51:eb:65:36:11:12:ff:5d:e7:52:93:55:20:55:3c:23: 21:40:eb:5d:f1:16:d0:8d:b3:4a:b3:e5:6a:33:0b:44:4d:c1: 00:ae:ef:21:fd:ba:97:b0:14:dc:01:e8:cf:03:62:30:c9:29: 28:39:76:33:c2:16:ac:57:91:c9:17:45:fb:28:ab:f2:96:b8: c0:47:0a:d0:e2:21:5a:09:79:a5:45:c0:da:95:10:1d:44:90: 4b:61:fa:17:1d:b5:ab:b2:bc:e2:48:80:22:59:47:84:09:76: ef:5c:b8:4a:2e:21:1b:bf:06:9e:42:f1:7b:ca:a7:d4:56:95: 06:c3:18:4c:8a:ed:23:22:37:55:f8:65:3a:f5:0a:06:a5:00: 80:15:35:a3:1c:ea:c8:66:f0:5e:b2:12:ce:b5:e7:cf:a1:36: 2a:d5:a4:5a:6e:a6:6f:a4:fb:38:79:25:4e:03:72:4c:75:a0: 1a:28:ac:0f:2f:67:d5:e0:2c:de:09:ed:61:74:09:7a:c0:04: 85:75:20:fe:8f:d4:b3:63:de:ea:c0:78:a3:c2:5f:07:c5:ad: a8:62:d0:01:cf:5f:2a:da:02:47:8f:f8:76:3b:40:35:06:c0: ac:6c:4e:97:4c:03:37:77:b1:2d:24:7b:17:21:ae:e0:1d:23: 74:c0:ed:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYlE115fP7HxLOxzyrCLHee/pT8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIzQUEwMDIxNTczMzQyNjQ1QTJERkI2NjkwNzFBM0ZD NDYwRjEyODAeFw0yNjA5MjEwMTIzMThaFw0yNjA5MjIwNTIyMThaMDMxMTAvBgNV BAMTKDJGQkFCMEQ3QUJCNkJGMTQ0M0EyNUU2Qjg1MUUxNzg2NjM5OUFDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2kKfyvw1y6ty/nXlRA/w5VF4m ZHqXbaX5RvOusLTeUlYZNxPKkHSkVDkTts6ONg3QrheU7J1mF4+eQBWIJtq4yjQv 5F1Wv6UPEYcYQiUCLDrxS7GTCozmAiXURVdNz77BZCEY35oeJGMCAeRXxa+LOs+A eh/oFW9FG8g1HA9StJF9ITn2CZrAAlC1J22LKB9jrCY29NNIIhc68rapeXu7gHK1 mcLe84ZRAMmCNhqjCT7qzfKPkMx/hslrC6gAt4Hqdt2DFxwY8RodjfhHADGS8oZS mtTyPzc3jziGJXCO4sK/HXNIKpxuE5PTeVNFRpg4EYXvFVn1VJTuLCYMBYp5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL7qw16u2vxRDol5rhR4XhmOZrIgwHwYDVR0j BBgwFoAU4jqgAhVzNCZFot+2aQcaP8Rg8SgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhkMGZjYTgtNWMyZC00ZTM1LWJkN2QtYjQ0OGFhNzVmMmJlLzAvRTIzQUEwMDIx NTczMzQyNjQ1QTJERkI2NjkwNzFBM0ZDNDYwRjEyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMjNBQTAwMjE1NzMzNDI2NDVBMkRGQjY2OTA3MUEzRkM0NjBG MTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhkMGZjYTgtNWMyZC00ZTM1LWJk N2QtYjQ0OGFhNzVmMmJlLzAvRTIzQUEwMDIxNTczMzQyNjQ1QTJERkI2NjkwNzFB M0ZDNDYwRjEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIO6UetlNhES/13nUpNVIFU8IyFA613xFtCN s0qz5WozC0RNwQCu7yH9upewFNwB6M8DYjDJKSg5djPCFqxXkckXRfsoq/KWuMBH CtDiIVoJeaVFwNqVEB1EkEth+hcdtauyvOJIgCJZR4QJdu9cuEouIRu/Bp5C8XvK p9RWlQbDGEyK7SMiN1X4ZTr1CgalAIAVNaMc6shm8F6yEs6158+hNirVpFpupm+k +zh5JU4Dckx1oBoorA8vZ9XgLN4J7WF0CXrABIV1IP6P1LNj3urAeKPCXwfFrahi 0AHPXyraAkeP+HY7QDUGwKxsTpdMAzd3sS0kexchruAdI3TA7SY= -----END CERTIFICATE-----Generated at Mon Sep 21 12:20:51 2026 by rpki-client