$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft File: C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft (raw, json) Hash identifier: 16T+GcTsybQJog0eUqbvU1Mq66SsF1v2CGP3uSH4dec= Subject key identifier: 40:3F:5B:C0:F9:7B:B5:87:5A:8B:B0:3C:C1:3B:22:EC:60:B8:D7:B8 Authority key identifier: C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E Certificate issuer: /CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E Certificate serial: 090C4D842E99E04890D13B3CF879D6E17779ED15 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft Manifest number: BE Signing time: Mon 21 Sep 2026 06:55:09 +0000 Manifest this update: Mon 21 Sep 2026 06:50:09 +0000 Manifest next update: Tue 22 Sep 2026 08:50:09 +0000 Files and hashes: 1: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: 6fSlTUT4FE6vxiMFjSI/8DBq6Z1TAZClCEVauizzEWY=) 2: C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl (hash: gi95xYI7KjOJpUNm3hCNi98Y8sZwbXUVthPICW7Wn70=) 3: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: 7G6gzgziJNADnBWRinmQJqfiu0VElTbunaLLh9HunCE=) 4: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: /19J6lbfu3WuykzZIAFXcyc9WvzK7MOPaoDjJFgPDAo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:0c:4d:84:2e:99:e0:48:90:d1:3b:3c:f8:79:d6:e1:77:79:ed:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E Validity Not Before: Sep 21 06:50:09 2026 GMT Not After : Sep 22 08:50:09 2026 GMT Subject: CN=403F5BC0F97BB5875A8BB03CC13B22EC60B8D7B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:bb:58:7d:ba:e5:cc:ff:a6:fa:58:c3:28:fc: 5b:1f:05:a0:b3:4d:aa:b4:6d:d5:d4:f7:8d:d6:e9: 9f:24:06:09:cc:5a:bd:56:39:c4:95:75:72:31:8b: 0e:81:53:9b:c0:3e:5c:94:27:2a:22:3a:c9:8d:32: 08:c1:4e:5b:84:31:83:7a:e9:5f:94:79:c0:8d:41: bf:74:b7:48:2a:be:4f:df:c1:86:88:4a:6e:94:3a: ac:60:c7:71:02:94:61:fd:27:f3:5a:24:54:f8:4d: 55:f5:c6:2b:53:0c:4d:b0:e0:c4:5d:c3:d8:f2:53: 9f:0f:85:e6:21:e5:70:6e:54:68:ce:b4:0a:c4:ac: e6:7f:68:1c:98:3f:04:9b:ab:e0:00:f1:3b:35:57: 77:c2:b1:a5:c2:c0:65:6f:4d:b0:87:e8:cb:0a:bd: 4c:0c:c2:2d:97:94:b4:3d:d0:6d:72:b7:8e:a0:43: ee:7b:a1:bb:07:7a:38:0b:ba:90:11:91:aa:9a:09: 9a:f9:3b:fc:5f:0b:5c:ba:a8:9c:df:dc:52:d0:47: 35:f4:85:fe:4a:2f:b2:1a:41:16:59:c5:ab:48:2b: c7:54:74:a2:af:0f:18:5a:39:8c:7e:8c:9c:59:4a: b7:6a:7e:34:ad:5e:5f:17:ef:09:d7:c7:ea:ab:2d: 53:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3F:5B:C0:F9:7B:B5:87:5A:8B:B0:3C:C1:3B:22:EC:60:B8:D7:B8 X509v3 Authority Key Identifier: keyid:C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:73:f8:c8:c6:5d:5f:3e:4a:d9:19:cd:4f:43:e8:f6:d3:cb: f1:95:b5:d2:31:0a:df:ec:c2:b7:ca:db:31:fa:c9:d6:86:e4: 2b:ac:42:40:db:c9:1d:87:66:10:69:22:39:23:f9:9d:df:5e: d5:be:c0:1d:ba:f4:d3:34:4f:61:dc:e6:80:bc:4c:e9:b0:48: c4:5c:02:c4:a3:a2:47:ec:4d:97:a7:df:7f:f8:fd:84:bb:80: 45:cd:43:49:4d:1d:e8:b4:45:79:31:a4:e3:12:ed:db:b6:1b: 90:f3:68:97:8f:c3:27:7c:97:81:00:0d:54:29:64:a0:c2:85: 8b:b1:27:26:d5:70:59:41:2d:6f:9f:24:22:f3:8d:51:f5:99: 7e:73:ff:ef:f9:dc:de:63:3b:4a:fe:d3:0a:4d:1b:80:c0:a1: 50:1c:a2:05:13:85:b6:96:a0:05:64:ff:78:8b:c0:f9:1c:4b: 85:49:4e:51:3a:ff:cf:56:bf:f3:62:ff:d3:67:a9:09:cd:f4: c6:8c:ba:06:5a:ce:99:04:64:a2:b9:f3:2a:6b:34:da:0d:59: 5c:1b:f8:f6:a4:10:7f:53:47:8b:c2:72:37:60:dd:ea:1d:66: 96:5c:13:df:8f:c6:63:9c:a4:97:7a:9c:dc:af:d9:a6:25:c2: f8:e5:a5:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCQxNhC6Z4EiQ0Ts8+HnW4Xd57RUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzQjEzNDIyMEE3Qjk1QjgxRENDODNEOEQ3RTA2QTU1 MTBBNTQ5RTAeFw0yNjA5MjEwNjUwMDlaFw0yNjA5MjIwODUwMDlaMDMxMTAvBgNV BAMTKDQwM0Y1QkMwRjk3QkI1ODc1QThCQjAzQ0MxM0IyMkVDNjBCOEQ3QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyu1h9uuXM/6b6WMMo/FsfBaCz Taq0bdXU943W6Z8kBgnMWr1WOcSVdXIxiw6BU5vAPlyUJyoiOsmNMgjBTluEMYN6 6V+UecCNQb90t0gqvk/fwYaISm6UOqxgx3EClGH9J/NaJFT4TVX1xitTDE2w4MRd w9jyU58PheYh5XBuVGjOtArErOZ/aByYPwSbq+AA8Ts1V3fCsaXCwGVvTbCH6MsK vUwMwi2XlLQ90G1yt46gQ+57obsHejgLupARkaqaCZr5O/xfC1y6qJzf3FLQRzX0 hf5KL7IaQRZZxatIK8dUdKKvDxhaOYx+jJxZSrdqfjStXl8X7wnXx+qrLVORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQD9bwPl7tYdai7A8wTsi7GC417gwHwYDVR0j BBgwFoAUwjsTQiCnuVuB3Mg9jX4GpVEKVJ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ3OWU3YTctMWFhZS00ZTUyLWJhYzMtOGY3YzY3YWUwYTA0LzAvQzIzQjEzNDIy MEE3Qjk1QjgxRENDODNEOEQ3RTA2QTU1MTBBNTQ5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjNCMTM0MjIwQTdCOTVCODFEQ0M4M0Q4RDdFMDZBNTUxMEE1 NDlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQzIzQjEzNDIyMEE3Qjk1QjgxRENDODNEOEQ3RTA2 QTU1MTBBNTQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5z+MjGXV8+StkZzU9D6PbTy/GVtdIxCt/s wrfK2zH6ydaG5CusQkDbyR2HZhBpIjkj+Z3fXtW+wB269NM0T2Hc5oC8TOmwSMRc AsSjokfsTZen33/4/YS7gEXNQ0lNHei0RXkxpOMS7du2G5DzaJePwyd8l4EADVQp ZKDChYuxJybVcFlBLW+fJCLzjVH1mX5z/+/53N5jO0r+0wpNG4DAoVAcogUThbaW oAVk/3iLwPkcS4VJTlE6/89Wv/Ni/9NnqQnN9MaMugZazpkEZKK58yprNNoNWVwb +PakEH9TR4vCcjdg3eodZpZcE9+PxmOcpJd6nNyv2aYlwvjlpXo= -----END CERTIFICATE-----Generated at Mon Sep 21 13:35:59 2026 by rpki-client