$ rpki-client -vvf rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft File: 23A948EB16F42F91944CC667D8613DD9AD7F2481.mft (raw, json) Hash identifier: 0cjAdBEkz2YAPO4hiRmi9dBjWMVCwYfG0+dtWELLQuI= Subject key identifier: C2:72:0B:6F:AA:6E:F6:BE:56:87:2B:46:54:6E:25:3D:F8:72:B8:E3 Authority key identifier: 23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 Certificate issuer: /CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Certificate serial: 0CE0294010DC38C9A10033671060CD712F1346CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 00:48:51 +0000 Manifest this update: Sun 14 Jun 2026 00:43:51 +0000 Manifest next update: Mon 15 Jun 2026 02:47:51 +0000 Files and hashes: 1: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: 635Ti/3KrhSgNu8Gwnt/QjYuKqvc1Cqug8YI7DrA208=) 2: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: Iadh95YULNi9WMbGAs3/Q3ZNW5dEBFpEr5CVUQ5/+x0=) 3: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: v65XV+5ddOqAbRU1/IxSl2v0vrbo4M4xD55oScBfz3w=) 4: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: kDGuaA+cqkmx9XuIt8DtLniH0ehk8T8tx9w2wbnmu+I=) 5: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: HXWQguAHiybQ0lNmv6j951fobzx6yk3XQekPS+8DSQI=) 6: 23A948EB16F42F91944CC667D8613DD9AD7F2481.crl (hash: Ye7rDKbL5e42I6bpW5/WFANkY1P8o7j5BsbTGTMeggk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 02:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e0:29:40:10:dc:38:c9:a1:00:33:67:10:60:cd:71:2f:13:46:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Validity Not Before: Jun 14 00:43:51 2026 GMT Not After : Jun 15 02:47:51 2026 GMT Subject: CN=C2720B6FAA6EF6BE56872B46546E253DF872B8E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:56:f5:16:a0:a3:4e:aa:eb:2d:ff:81:5a:97: f7:b6:0c:15:10:0d:26:23:8d:12:6a:35:e5:36:c0: 1c:63:16:f4:f3:09:5c:79:00:f1:fc:b4:75:81:4f: bd:bf:98:6a:d9:fc:48:c2:f0:a8:b1:5b:1f:50:7f: 9d:91:50:bb:40:04:67:7f:1e:df:1a:11:5d:b8:b1: ef:ad:ea:e1:cf:31:c6:8b:b8:18:e9:6a:7c:93:37: 2a:f3:ab:59:41:f6:e9:b8:15:f4:67:22:ab:a7:0c: dd:51:0f:40:de:af:ae:9d:43:99:1a:ae:dd:67:c9: 0d:2d:58:9a:ef:c9:8c:7f:db:e1:fc:b4:a9:33:bc: 10:8e:0f:9c:62:42:ba:97:b0:a0:3e:bd:3c:3e:47: 0a:f4:61:71:26:73:43:a8:be:cb:81:c8:90:35:ea: 6e:47:e3:57:aa:c7:3b:37:ef:9d:40:45:25:83:42: 91:6b:92:2f:6d:13:38:cd:a8:10:35:7d:e9:d4:8a: d9:94:da:25:8b:63:76:56:a5:9e:ae:c9:56:e5:0f: ab:d2:b5:8b:59:cb:17:9f:a4:f5:c1:94:f0:c9:65: 1c:f0:d0:7e:d9:5e:05:0a:07:0a:10:e4:df:79:2d: 84:20:10:d5:54:c3:49:fb:5c:f6:2c:9a:a4:64:8d: 2f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:72:0B:6F:AA:6E:F6:BE:56:87:2B:46:54:6E:25:3D:F8:72:B8:E3 X509v3 Authority Key Identifier: keyid:23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:2f:0e:99:02:25:e5:14:ed:38:62:3f:bc:26:a4:fa:40:b4: 3a:d3:d1:da:a0:c2:89:4b:73:93:49:64:7d:97:40:2e:ba:a5: 9a:60:66:d3:31:08:0a:f0:31:f9:c4:6b:44:96:a7:47:28:1b: 78:68:0a:8c:90:48:78:f5:ea:51:73:8f:b2:bc:b9:c3:5d:bd: f7:d3:d4:7a:42:e3:dd:2b:b7:9a:78:0f:1b:d9:1b:69:31:6b: 93:3b:62:43:31:84:7d:61:c3:44:4d:62:67:c3:f3:cd:81:27: fb:f0:85:20:5d:6f:54:46:26:1b:16:49:3e:8a:67:62:9e:59: df:9f:1f:9b:20:fa:6c:01:1a:c6:d3:23:63:15:37:1e:36:3b: a1:8f:48:54:eb:b0:72:13:b1:9a:db:8e:0a:a5:56:1e:98:77: 0d:59:c5:4f:22:77:f5:00:60:7a:a4:e3:33:25:7a:9e:be:30: 9c:32:75:f0:d5:cc:57:fc:56:78:58:68:86:83:57:7d:36:3e: c7:3b:40:a6:d5:b2:55:c5:f8:54:bd:61:b3:c9:25:af:92:02: e0:b1:ad:54:16:db:b5:ea:4b:e8:a3:56:eb:82:35:72:8b:12: 9d:59:03:0f:78:51:21:2e:fd:69:77:3a:bc:2f:bd:a6:ef:3d: f7:b9:77:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDOApQBDcOMmhADNnEGDNcS8TRsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNERDlB RDdGMjQ4MTAeFw0yNjA2MTQwMDQzNTFaFw0yNjA2MTUwMjQ3NTFaMDMxMTAvBgNV BAMTKEMyNzIwQjZGQUE2RUY2QkU1Njg3MkI0NjU0NkUyNTNERjg3MkI4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNVvUWoKNOqust/4Fal/e2DBUQ DSYjjRJqNeU2wBxjFvTzCVx5APH8tHWBT72/mGrZ/EjC8KixWx9Qf52RULtABGd/ Ht8aEV24se+t6uHPMcaLuBjpanyTNyrzq1lB9um4FfRnIqunDN1RD0Der66dQ5ka rt1nyQ0tWJrvyYx/2+H8tKkzvBCOD5xiQrqXsKA+vTw+Rwr0YXEmc0OovsuByJA1 6m5H41eqxzs3751ARSWDQpFrki9tEzjNqBA1fenUitmU2iWLY3ZWpZ6uyVblD6vS tYtZyxefpPXBlPDJZRzw0H7ZXgUKBwoQ5N95LYQgENVUw0n7XPYsmqRkjS8TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwnILb6pu9r5WhytGVG4lPfhyuOMwHwYDVR0j BBgwFoAUI6lI6xb0L5GUTMZn2GE92a1/JIEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJhYzBjYTUtNWNlNy00ZTZlLTlmZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIx NkY0MkY5MTk0NENDNjY3RDg2MTNERDlBRDdGMjQ4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yM0E5NDhFQjE2RjQyRjkxOTQ0Q0M2NjdEODYxM0REOUFEN0Yy NDgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNE RDlBRDdGMjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0vDpkCJeUU7ThiP7wmpPpAtDrT0dqgwolL c5NJZH2XQC66pZpgZtMxCArwMfnEa0SWp0coG3hoCoyQSHj16lFzj7K8ucNdvffT 1HpC490rt5p4DxvZG2kxa5M7YkMxhH1hw0RNYmfD882BJ/vwhSBdb1RGJhsWST6K Z2KeWd+fH5sg+mwBGsbTI2MVNx42O6GPSFTrsHITsZrbjgqlVh6Ydw1ZxU8id/UA YHqk4zMlep6+MJwydfDVzFf8VnhYaIaDV302Psc7QKbVslXF+FS9YbPJJa+SAuCx rVQW27XqS+ijVuuCNXKLEp1ZAw94USEu/Wl3OrwvvabvPfe5d2k= -----END CERTIFICATE-----Generated at Sun Jun 14 12:16:55 2026 by rpki-client