$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft File: C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft (raw, json) Hash identifier: TS5PzNj8MWhlQUBQqpkQdCQbfmXX9GgSuclH9TRQFUE= Subject key identifier: 0E:EF:02:E8:67:E5:8A:54:E6:2F:3F:80:D9:C8:01:84:BE:45:59:4B Authority key identifier: C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E Certificate issuer: /CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E Certificate serial: 7C86CC3AA510F7C328F97B73A626AD315B84E049 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 16:21:53 +0000 Manifest this update: Tue 28 Jul 2026 16:16:53 +0000 Manifest next update: Wed 29 Jul 2026 19:44:53 +0000 Files and hashes: 1: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: 7G6gzgziJNADnBWRinmQJqfiu0VElTbunaLLh9HunCE=) 2: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: 6fSlTUT4FE6vxiMFjSI/8DBq6Z1TAZClCEVauizzEWY=) 3: C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl (hash: 8wl8sAMYL49AFQJ9+IVCyrSB+ztE4xMswCNZfdvh0j8=) 4: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: /19J6lbfu3WuykzZIAFXcyc9WvzK7MOPaoDjJFgPDAo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:86:cc:3a:a5:10:f7:c3:28:f9:7b:73:a6:26:ad:31:5b:84:e0:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E Validity Not Before: Jul 28 16:16:53 2026 GMT Not After : Jul 29 19:44:53 2026 GMT Subject: CN=0EEF02E867E58A54E62F3F80D9C80184BE45594B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0d:ef:33:a3:59:84:57:b4:bb:54:b1:21:58: 2d:d2:a2:23:9b:6c:52:3c:8f:cd:77:48:71:43:a6: ce:c2:54:a4:8d:e4:45:72:4f:11:48:9c:19:c8:a7: a1:d0:c2:7a:7e:c3:56:28:57:a7:09:7b:61:a9:11: 8b:92:2b:13:f3:ed:4b:17:51:90:35:20:33:8b:44: 40:eb:49:9c:7b:29:9c:9e:22:f2:7f:13:71:e9:35: d4:8e:60:20:be:d8:d1:d5:99:05:15:91:58:50:41: 13:c9:9a:b9:23:27:53:d7:f6:01:ed:d0:99:37:2b: 94:e7:53:ca:46:1b:6e:13:5d:a8:be:cc:b7:1d:41: 88:f2:6e:87:4a:6a:06:52:a2:d2:65:04:75:2f:94: c7:ce:c1:aa:0f:bc:13:28:7a:8e:1a:2f:99:d6:19: 3b:aa:5a:8c:53:1f:9d:e2:a9:86:51:b5:02:de:40: 4c:cb:f9:2b:d7:78:ab:b3:1c:22:6b:74:e3:2a:d6: be:a0:5b:6b:63:b1:de:0c:43:02:dd:77:7c:a2:03: e5:58:d2:73:88:fd:39:37:22:a1:a6:31:05:98:e6: 94:0d:7c:d3:ec:78:27:f5:f4:06:5b:5e:b9:a0:34: 86:d1:6f:81:cc:c3:9b:31:31:73:28:ef:3a:3a:ca: 9c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EF:02:E8:67:E5:8A:54:E6:2F:3F:80:D9:C8:01:84:BE:45:59:4B X509v3 Authority Key Identifier: keyid:C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:45:db:f1:24:d3:9e:4c:b4:c7:e3:6f:3b:55:d2:d5:29:5c: e5:3d:9a:09:43:fd:2b:fe:bf:9f:20:7b:f0:c2:c5:0d:97:94: 4f:2d:f8:e0:e5:7a:ef:6e:7f:2d:26:fe:7f:31:48:44:18:17: 11:98:a4:48:df:cc:83:f5:d6:2e:68:fb:ae:03:9d:3a:73:f4: ac:62:38:bc:73:4d:0a:06:a1:f5:95:10:a6:b0:87:9a:27:e4: c0:07:1c:26:5f:7b:cc:3f:ff:c5:75:27:6d:b2:74:d5:f9:19: 08:54:59:5a:24:69:7b:92:a8:e8:4f:44:bd:d1:96:03:52:23: 86:30:23:4d:59:cb:bb:cf:df:d2:56:6c:2e:48:6b:33:ea:09: 35:13:76:a9:69:51:84:e5:99:a8:75:18:6e:5b:19:19:c8:0b: 0b:b9:2e:d4:54:81:83:f7:bb:1a:e0:0f:d8:04:ec:2b:10:e8: be:d2:0f:e5:43:30:86:73:3f:18:1e:e2:5d:fd:6c:38:9d:97: 33:77:ae:a9:10:0b:04:82:51:d4:b1:32:42:b4:42:a0:f6:09: 0f:e5:f4:fd:ec:62:08:dd:af:e8:4c:69:63:2e:77:52:d0:4c: e0:06:ea:54:97:73:30:e8:7c:92:51:39:df:59:44:9c:42:6e: d4:ef:33:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIbMOqUQ98Mo+XtzpiatMVuE4EkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzQjEzNDIyMEE3Qjk1QjgxRENDODNEOEQ3RTA2QTU1 MTBBNTQ5RTAeFw0yNjA3MjgxNjE2NTNaFw0yNjA3MjkxOTQ0NTNaMDMxMTAvBgNV BAMTKDBFRUYwMkU4NjdFNThBNTRFNjJGM0Y4MEQ5QzgwMTg0QkU0NTU5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDe8zo1mEV7S7VLEhWC3SoiOb bFI8j813SHFDps7CVKSN5EVyTxFInBnIp6HQwnp+w1YoV6cJe2GpEYuSKxPz7UsX UZA1IDOLREDrSZx7KZyeIvJ/E3HpNdSOYCC+2NHVmQUVkVhQQRPJmrkjJ1PX9gHt 0Jk3K5TnU8pGG24TXai+zLcdQYjybodKagZSotJlBHUvlMfOwaoPvBMoeo4aL5nW GTuqWoxTH53iqYZRtQLeQEzL+SvXeKuzHCJrdOMq1r6gW2tjsd4MQwLdd3yiA+VY 0nOI/Tk3IqGmMQWY5pQNfNPseCf19AZbXrmgNIbRb4HMw5sxMXMo7zo6ypyvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDu8C6GflilTmLz+A2cgBhL5FWUswHwYDVR0j BBgwFoAUwjsTQiCnuVuB3Mg9jX4GpVEKVJ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ3OWU3YTctMWFhZS00ZTUyLWJhYzMtOGY3YzY3YWUwYTA0LzAvQzIzQjEzNDIy MEE3Qjk1QjgxRENDODNEOEQ3RTA2QTU1MTBBNTQ5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjNCMTM0MjIwQTdCOTVCODFEQ0M4M0Q4RDdFMDZBNTUxMEE1 NDlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQzIzQjEzNDIyMEE3Qjk1QjgxRENDODNEOEQ3RTA2 QTU1MTBBNTQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBF2/Ek055MtMfjbztV0tUpXOU9mglD/Sv+ v58ge/DCxQ2XlE8t+ODleu9ufy0m/n8xSEQYFxGYpEjfzIP11i5o+64DnTpz9Kxi OLxzTQoGofWVEKawh5on5MAHHCZfe8w//8V1J22ydNX5GQhUWVokaXuSqOhPRL3R lgNSI4YwI01Zy7vP39JWbC5IazPqCTUTdqlpUYTlmah1GG5bGRnICwu5LtRUgYP3 uxrgD9gE7CsQ6L7SD+VDMIZzPxge4l39bDidlzN3rqkQCwSCUdSxMkK0QqD2CQ/l 9P3sYgjdr+hMaWMud1LQTOAG6lSXczDofJJROd9ZRJxCbtTvM1w= -----END CERTIFICATE-----Generated at Wed Jul 29 00:51:56 2026 by rpki-client