$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft File: C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft (raw, json) Hash identifier: NpZUKm+QBY4JVGK/jhr7w4tw+92ZTZ1jG3atlHMnhUk= Subject key identifier: CC:46:4D:8C:DA:16:74:35:72:D6:17:A4:64:32:55:0C:81:6E:BD:1A Authority key identifier: C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E Certificate issuer: /CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E Certificate serial: 1636CACB817D11F43B566390DA61593F2B284222 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 11:59:11 +0000 Manifest this update: Sat 13 Jun 2026 11:54:11 +0000 Manifest next update: Sun 14 Jun 2026 12:18:11 +0000 Files and hashes: 1: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: 6fSlTUT4FE6vxiMFjSI/8DBq6Z1TAZClCEVauizzEWY=) 2: C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl (hash: 7cARqE22wwtPH/koAvwiw8cKZKJYSQkz5maNxvowLmU=) 3: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: 7G6gzgziJNADnBWRinmQJqfiu0VElTbunaLLh9HunCE=) 4: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: /19J6lbfu3WuykzZIAFXcyc9WvzK7MOPaoDjJFgPDAo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:36:ca:cb:81:7d:11:f4:3b:56:63:90:da:61:59:3f:2b:28:42:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E Validity Not Before: Jun 13 11:54:11 2026 GMT Not After : Jun 14 12:18:11 2026 GMT Subject: CN=CC464D8CDA16743572D617A46432550C816EBD1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:15:08:f9:48:c5:5f:fa:54:d6:bf:b8:76:cb: f8:d2:f6:1f:8a:38:fe:20:d6:e7:84:3a:3c:83:df: 63:90:4a:cb:d4:8b:44:5f:18:b1:cb:98:90:3c:c2: 0e:cf:25:98:8e:46:6c:7a:a9:86:4d:37:f5:62:ee: 45:61:34:5e:d0:4b:9e:e4:b9:4b:54:c1:95:93:69: e4:c9:ad:1b:6b:3c:53:81:9e:ac:32:7b:2b:f2:b5: ca:65:91:02:c3:4e:94:8a:33:a7:85:5e:a0:2f:15: a2:df:de:c6:da:80:b9:67:c0:27:fa:83:fd:6f:be: c2:a3:90:83:74:69:70:9d:87:d6:10:24:6c:51:bf: 03:36:a2:9e:5f:45:d5:f4:2b:79:e3:d5:63:17:c9: 9b:62:17:cc:19:73:bc:92:98:6c:40:cf:58:47:91: f6:b1:b7:ac:6f:81:be:12:5f:01:e7:87:23:fd:05: fd:34:59:d5:e1:6a:30:fc:40:65:54:04:8c:c1:fb: 3e:0e:66:25:83:e4:51:43:c3:bd:fa:da:1e:1b:cb: b2:4d:63:af:ca:24:b8:0c:45:46:df:54:56:a3:3e: c9:d3:9d:1c:49:93:c8:97:50:31:14:0f:d3:b2:55: d9:de:63:eb:93:b7:c0:7f:a8:04:47:18:93:5d:79: 82:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:46:4D:8C:DA:16:74:35:72:D6:17:A4:64:32:55:0C:81:6E:BD:1A X509v3 Authority Key Identifier: keyid:C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:b6:1f:95:86:78:9e:fa:2f:a4:a7:e1:4d:3d:e4:81:7c:99: 6d:de:5c:cd:c7:41:94:42:10:cd:47:d8:e1:e3:07:98:8d:eb: 05:48:da:01:9a:e2:fb:64:5a:ea:f5:96:63:56:b1:ae:e4:47: 24:07:3c:96:4d:cc:e0:cc:36:9f:9a:e5:4e:48:83:7a:72:5a: f1:00:b8:ed:0a:1c:77:35:53:79:6a:ac:16:8c:c3:04:1e:c8: b4:73:be:eb:80:a6:8f:81:85:7b:e7:36:92:f1:5a:67:5b:90: f7:54:53:1d:87:55:f8:de:c4:7f:36:2d:28:e2:d6:c9:d5:6d: 28:69:42:dc:94:8a:d2:45:6b:5b:1d:ea:fc:a6:88:07:f0:e0: 6e:7a:a4:83:19:d1:b6:6e:1b:4c:37:2e:0b:8c:dc:16:c6:62: 96:80:11:19:a4:39:4e:e9:79:14:e2:a0:1b:88:49:fd:02:f9: e8:f4:b4:2d:57:cf:bc:6c:58:f6:9b:3e:d7:49:a2:07:52:79: fa:72:99:b3:09:1e:9c:e4:4e:cd:19:3c:65:16:11:9a:87:2f: 6a:e3:7c:e1:df:9f:12:e3:b0:80:52:3c:83:79:6a:5d:82:5c: 72:3d:62:1c:10:18:21:57:0b:fc:27:9c:c9:e6:93:0c:45:40: 33:f5:08:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFjbKy4F9EfQ7VmOQ2mFZPysoQiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzQjEzNDIyMEE3Qjk1QjgxRENDODNEOEQ3RTA2QTU1 MTBBNTQ5RTAeFw0yNjA2MTMxMTU0MTFaFw0yNjA2MTQxMjE4MTFaMDMxMTAvBgNV BAMTKENDNDY0RDhDREExNjc0MzU3MkQ2MTdBNDY0MzI1NTBDODE2RUJEMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNFQj5SMVf+lTWv7h2y/jS9h+K OP4g1ueEOjyD32OQSsvUi0RfGLHLmJA8wg7PJZiORmx6qYZNN/Vi7kVhNF7QS57k uUtUwZWTaeTJrRtrPFOBnqwyeyvytcplkQLDTpSKM6eFXqAvFaLf3sbagLlnwCf6 g/1vvsKjkIN0aXCdh9YQJGxRvwM2op5fRdX0K3nj1WMXyZtiF8wZc7ySmGxAz1hH kfaxt6xvgb4SXwHnhyP9Bf00WdXhajD8QGVUBIzB+z4OZiWD5FFDw7362h4by7JN Y6/KJLgMRUbfVFajPsnTnRxJk8iXUDEUD9OyVdneY+uTt8B/qARHGJNdeYKfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzEZNjNoWdDVy1hekZDJVDIFuvRowHwYDVR0j BBgwFoAUwjsTQiCnuVuB3Mg9jX4GpVEKVJ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ3OWU3YTctMWFhZS00ZTUyLWJhYzMtOGY3YzY3YWUwYTA0LzAvQzIzQjEzNDIy MEE3Qjk1QjgxRENDODNEOEQ3RTA2QTU1MTBBNTQ5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjNCMTM0MjIwQTdCOTVCODFEQ0M4M0Q4RDdFMDZBNTUxMEE1 NDlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQzIzQjEzNDIyMEE3Qjk1QjgxRENDODNEOEQ3RTA2 QTU1MTBBNTQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAS2H5WGeJ76L6Sn4U095IF8mW3eXM3HQZRC EM1H2OHjB5iN6wVI2gGa4vtkWur1lmNWsa7kRyQHPJZNzODMNp+a5U5Ig3pyWvEA uO0KHHc1U3lqrBaMwwQeyLRzvuuApo+BhXvnNpLxWmdbkPdUUx2HVfjexH82LSji 1snVbShpQtyUitJFa1sd6vymiAfw4G56pIMZ0bZuG0w3LguM3BbGYpaAERmkOU7p eRTioBuISf0C+ej0tC1Xz7xsWPabPtdJogdSefpymbMJHpzkTs0ZPGUWEZqHL2rj fOHfnxLjsIBSPIN5al2CXHI9YhwQGCFXC/wnnMnmkwxFQDP1CBo= -----END CERTIFICATE-----Generated at Sat Jun 13 17:03:42 2026 by rpki-client