$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft File: 23A948EB16F42F91944CC667D8613DD9AD7F2481.mft (raw, json) Hash identifier: jpsP7zS1U9CoLx0bYjYGziylF+WCcPHRSUpU6FsxCxQ= Subject key identifier: 03:C7:24:D7:C8:AB:B2:C6:28:52:32:07:84:C9:B1:61:5C:A8:07:55 Authority key identifier: 23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 Certificate issuer: /CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Certificate serial: 098B4DB8A49A35AF8DB9D0DD2C1E588AD622A36E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft Manifest number: BE Signing time: Mon 21 Sep 2026 03:51:16 +0000 Manifest this update: Mon 21 Sep 2026 03:46:16 +0000 Manifest next update: Tue 22 Sep 2026 06:02:16 +0000 Files and hashes: 1: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: Iadh95YULNi9WMbGAs3/Q3ZNW5dEBFpEr5CVUQ5/+x0=) 2: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: v65XV+5ddOqAbRU1/IxSl2v0vrbo4M4xD55oScBfz3w=) 3: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: kDGuaA+cqkmx9XuIt8DtLniH0ehk8T8tx9w2wbnmu+I=) 4: 23A948EB16F42F91944CC667D8613DD9AD7F2481.crl (hash: 4IgS7LiYOlxf2kyjf8jNZy9c6Pqht1+tcFpgwA/jzUs=) 5: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: HXWQguAHiybQ0lNmv6j951fobzx6yk3XQekPS+8DSQI=) 6: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: 635Ti/3KrhSgNu8Gwnt/QjYuKqvc1Cqug8YI7DrA208=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8b:4d:b8:a4:9a:35:af:8d:b9:d0:dd:2c:1e:58:8a:d6:22:a3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Validity Not Before: Sep 21 03:46:16 2026 GMT Not After : Sep 22 06:02:16 2026 GMT Subject: CN=03C724D7C8ABB2C62852320784C9B1615CA80755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1d:47:a8:fa:2d:2b:83:68:d0:be:5e:47:c2: 1f:f5:9b:ec:53:38:77:b8:81:72:58:bf:88:fb:b6: d5:bd:6e:18:e3:81:9e:ea:7c:a8:7a:20:dc:8b:50: df:e1:a1:de:c7:1a:93:a4:65:36:3b:8e:6a:7f:c5: 46:90:51:e1:d5:5a:32:68:82:25:1f:66:ad:cd:e5: 51:73:07:55:c0:15:64:aa:53:6a:9a:8e:c2:0f:7d: f0:81:d0:6f:e5:cb:e0:05:e9:58:54:c2:ad:01:7f: cb:59:e5:81:68:ff:67:d8:0d:53:84:17:4c:fa:de: 51:b7:3d:0f:d9:ed:ff:74:d0:38:35:a2:89:05:d8: dd:1c:9c:a0:46:8b:52:17:54:b9:2e:8f:9b:02:0c: e1:35:aa:fb:f0:4e:82:2e:7e:6a:c9:3e:4c:33:41: 26:78:16:bb:8e:a4:bc:da:45:a0:83:11:84:e2:58: 21:0a:a7:d5:50:30:61:b7:73:5d:96:4a:14:15:36: 91:43:66:7a:bf:f9:e5:6c:76:a1:fd:90:65:62:42: 3f:84:40:c0:8a:06:c3:49:8b:ad:c5:86:bd:0f:7d: 48:b2:29:1e:a7:69:32:f8:8a:3d:69:ce:70:33:f1: 61:dc:99:41:a8:95:64:40:b1:e0:33:64:7c:7d:86: f1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C7:24:D7:C8:AB:B2:C6:28:52:32:07:84:C9:B1:61:5C:A8:07:55 X509v3 Authority Key Identifier: keyid:23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:94:bc:9c:e7:8c:56:c6:85:85:9f:90:f1:8f:cb:24:f1:7f: c5:41:17:f0:a0:8a:1e:59:f1:9d:a3:e0:bf:bc:66:46:a5:98: 4f:32:4f:33:0c:6b:57:3b:8a:aa:d1:bb:9d:da:b2:08:a7:0d: 71:c2:e5:7f:48:b7:fd:42:3f:43:f2:04:70:79:ad:66:79:e3: 73:35:8f:f8:58:17:d8:f9:84:d1:04:fd:25:6a:c9:82:b2:1f: 14:6c:25:99:42:6e:69:b6:8f:cf:8e:dd:62:3d:41:ae:08:1b: 22:25:d9:1e:1b:96:c0:fa:36:24:f6:cc:92:de:b0:7b:b0:96: f7:29:c8:1a:fd:21:18:04:72:bb:76:59:e0:2c:f8:5b:be:d7: 26:f9:f5:da:60:1a:37:d3:7c:8d:c5:fc:0f:59:f7:80:7c:ef: 64:22:b4:e2:33:6d:1e:8b:d9:7e:c5:56:41:ea:86:a5:22:34: 71:1f:dd:83:6a:a8:58:f4:64:b0:51:c2:87:56:7e:28:bc:38: d5:5b:c3:1b:4e:90:36:72:4f:d2:33:15:d3:ee:a6:a3:3c:9d: 64:50:38:4d:73:9e:4c:3c:ed:30:a3:74:ec:0a:5f:35:59:88: ee:5c:b9:4c:9e:b1:d3:30:9e:1b:2b:ed:38:40:51:2c:30:80: 69:af:81:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCYtNuKSaNa+NudDdLB5YitYio24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNERDlB RDdGMjQ4MTAeFw0yNjA5MjEwMzQ2MTZaFw0yNjA5MjIwNjAyMTZaMDMxMTAvBgNV BAMTKDAzQzcyNEQ3QzhBQkIyQzYyODUyMzIwNzg0QzlCMTYxNUNBODA3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuHUeo+i0rg2jQvl5Hwh/1m+xT OHe4gXJYv4j7ttW9bhjjgZ7qfKh6INyLUN/hod7HGpOkZTY7jmp/xUaQUeHVWjJo giUfZq3N5VFzB1XAFWSqU2qajsIPffCB0G/ly+AF6VhUwq0Bf8tZ5YFo/2fYDVOE F0z63lG3PQ/Z7f900Dg1ookF2N0cnKBGi1IXVLkuj5sCDOE1qvvwToIufmrJPkwz QSZ4FruOpLzaRaCDEYTiWCEKp9VQMGG3c12WShQVNpFDZnq/+eVsdqH9kGViQj+E QMCKBsNJi63Fhr0PfUiyKR6naTL4ij1pznAz8WHcmUGolWRAseAzZHx9hvFVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA8ck18irssYoUjIHhMmxYVyoB1UwHwYDVR0j BBgwFoAUI6lI6xb0L5GUTMZn2GE92a1/JIEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJhYzBjYTUtNWNlNy00ZTZlLTlmZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIx NkY0MkY5MTk0NENDNjY3RDg2MTNERDlBRDdGMjQ4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yM0E5NDhFQjE2RjQyRjkxOTQ0Q0M2NjdEODYxM0REOUFEN0Yy NDgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNE RDlBRDdGMjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASUvJznjFbGhYWfkPGPyyTxf8VBF/Cgih5Z 8Z2j4L+8ZkalmE8yTzMMa1c7iqrRu53asginDXHC5X9It/1CP0PyBHB5rWZ543M1 j/hYF9j5hNEE/SVqyYKyHxRsJZlCbmm2j8+O3WI9Qa4IGyIl2R4blsD6NiT2zJLe sHuwlvcpyBr9IRgEcrt2WeAs+Fu+1yb59dpgGjfTfI3F/A9Z94B872QitOIzbR6L 2X7FVkHqhqUiNHEf3YNqqFj0ZLBRwodWfii8ONVbwxtOkDZyT9IzFdPupqM8nWRQ OE1znkw87TCjdOwKXzVZiO5cuUyesdMwnhsr7ThAUSwwgGmvgXA= -----END CERTIFICATE-----Generated at Mon Sep 21 16:36:22 2026 by rpki-client