$ rpki-client -vvf rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft File: 23A948EB16F42F91944CC667D8613DD9AD7F2481.mft (raw, json) Hash identifier: 972k9TsBO5CHAHGaykhKb81dI44uOmPJCDUWWjsvRp4= Subject key identifier: B9:69:AD:86:E2:7D:E2:F7:F3:00:42:36:0F:D5:43:4E:80:A1:49:48 Authority key identifier: 23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 Certificate issuer: /CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Certificate serial: 38C33B6F6BEBCA89924E18F157CD4100F4FF90BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 03:15:04 +0000 Manifest this update: Wed 29 Jul 2026 03:10:04 +0000 Manifest next update: Thu 30 Jul 2026 05:02:04 +0000 Files and hashes: 1: 23A948EB16F42F91944CC667D8613DD9AD7F2481.crl (hash: pkugttDKx/qYLZH8rGhggVr6GtFpdoV7LDfJK+68gHQ=) 2: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: 635Ti/3KrhSgNu8Gwnt/QjYuKqvc1Cqug8YI7DrA208=) 3: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: HXWQguAHiybQ0lNmv6j951fobzx6yk3XQekPS+8DSQI=) 4: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: Iadh95YULNi9WMbGAs3/Q3ZNW5dEBFpEr5CVUQ5/+x0=) 5: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: kDGuaA+cqkmx9XuIt8DtLniH0ehk8T8tx9w2wbnmu+I=) 6: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: v65XV+5ddOqAbRU1/IxSl2v0vrbo4M4xD55oScBfz3w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c3:3b:6f:6b:eb:ca:89:92:4e:18:f1:57:cd:41:00:f4:ff:90:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Validity Not Before: Jul 29 03:10:04 2026 GMT Not After : Jul 30 05:02:04 2026 GMT Subject: CN=B969AD86E27DE2F7F30042360FD5434E80A14948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0b:ff:bd:28:eb:1e:cc:65:e2:6d:46:ae:e8: 83:07:50:90:84:68:80:f6:77:68:d6:64:73:98:2d: 71:d5:a8:c1:96:1a:e9:a6:53:72:a8:ff:67:84:c8: be:4d:fe:69:27:92:06:ea:40:83:75:38:77:70:f5: 55:17:55:fc:d0:71:e7:39:6a:eb:1a:1e:88:cb:96: 10:80:6e:90:c4:05:24:8d:e4:8b:e1:49:9d:fe:92: dc:50:08:2a:d8:75:17:38:6f:0b:bf:8e:91:ae:a1: 81:8d:b8:7b:ea:24:ae:56:0f:d6:7a:13:79:a0:c1: ff:4a:b8:01:de:8a:a6:41:6e:6a:e0:6b:4a:4a:af: 39:95:51:fd:78:9a:39:8f:54:7c:85:30:22:9b:de: 0f:0d:f1:16:8c:8b:5c:64:9d:a1:ee:0b:00:a8:f7: da:11:48:9b:8d:bc:d9:cb:e6:62:a0:02:3f:fe:f0: 3b:b8:51:51:d0:b2:d8:c0:fc:92:dd:91:11:b5:1b: c1:3b:ba:9e:23:c4:38:f8:c1:55:d1:d1:85:93:f1: e3:38:e2:ad:84:6d:e8:d2:d9:8c:61:ee:5e:d7:52: 46:60:cd:b4:8b:47:18:ec:a5:72:4c:37:9e:39:b4: f1:f4:a9:c7:a5:98:28:84:05:ee:8c:be:96:23:86: 6a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:69:AD:86:E2:7D:E2:F7:F3:00:42:36:0F:D5:43:4E:80:A1:49:48 X509v3 Authority Key Identifier: keyid:23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:9b:0f:12:49:9d:a7:13:cb:84:d1:b5:37:a0:44:6e:9f:3b: 7c:af:69:f9:92:25:8d:42:b3:2e:ad:86:d5:e4:e9:39:39:39: 4b:2e:d5:d8:9d:ae:9d:ca:42:31:51:e7:81:f0:97:b0:62:2f: bb:36:8f:a0:4b:da:69:3a:30:ff:47:f7:5e:8c:d9:39:33:4e: 43:35:22:d5:d8:0b:e6:7a:44:bc:81:be:28:49:6e:50:39:0f: 27:fc:ba:8f:28:ab:36:72:da:87:6a:18:12:d2:fc:e6:b3:9f: d8:b3:35:3e:b1:a4:70:60:70:44:78:9b:70:ef:5b:6c:50:6b: 40:18:bd:e8:e7:c5:3f:ae:6e:5f:ab:48:41:57:36:b7:5e:d6: 72:a9:a4:26:b1:69:10:92:77:35:48:c9:ac:64:a2:d3:f9:9b: 4a:e5:40:cd:d6:0e:cd:64:69:36:d7:6c:f3:c5:b8:f6:21:88: d4:b7:ca:07:cc:0a:1b:4c:db:54:29:a7:9b:1f:6f:e2:1e:d2: 63:c7:a1:86:f0:ee:18:0d:4a:73:88:e9:03:c5:2e:26:17:0e: 2f:d3:02:b6:37:56:ff:48:d3:30:28:c3:f8:09:b3:43:01:9e: 39:21:4e:34:84:80:1f:f1:89:ba:9a:23:86:2e:7d:ce:1e:d7: 7d:55:28:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOMM7b2vryomSThjxV81BAPT/kL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNERDlB RDdGMjQ4MTAeFw0yNjA3MjkwMzEwMDRaFw0yNjA3MzAwNTAyMDRaMDMxMTAvBgNV BAMTKEI5NjlBRDg2RTI3REUyRjdGMzAwNDIzNjBGRDU0MzRFODBBMTQ5NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0C/+9KOsezGXibUau6IMHUJCE aID2d2jWZHOYLXHVqMGWGummU3Ko/2eEyL5N/mknkgbqQIN1OHdw9VUXVfzQcec5 ausaHojLlhCAbpDEBSSN5IvhSZ3+ktxQCCrYdRc4bwu/jpGuoYGNuHvqJK5WD9Z6 E3mgwf9KuAHeiqZBbmrga0pKrzmVUf14mjmPVHyFMCKb3g8N8RaMi1xknaHuCwCo 99oRSJuNvNnL5mKgAj/+8Du4UVHQstjA/JLdkRG1G8E7up4jxDj4wVXR0YWT8eM4 4q2EbejS2Yxh7l7XUkZgzbSLRxjspXJMN545tPH0qcelmCiEBe6MvpYjhmrVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuWmthuJ94vfzAEI2D9VDToChSUgwHwYDVR0j BBgwFoAUI6lI6xb0L5GUTMZn2GE92a1/JIEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJhYzBjYTUtNWNlNy00ZTZlLTlmZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIx NkY0MkY5MTk0NENDNjY3RDg2MTNERDlBRDdGMjQ4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yM0E5NDhFQjE2RjQyRjkxOTQ0Q0M2NjdEODYxM0REOUFEN0Yy NDgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNE RDlBRDdGMjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGbDxJJnacTy4TRtTegRG6fO3yvafmSJY1C sy6thtXk6Tk5OUsu1didrp3KQjFR54Hwl7BiL7s2j6BL2mk6MP9H916M2TkzTkM1 ItXYC+Z6RLyBvihJblA5Dyf8uo8oqzZy2odqGBLS/Oazn9izNT6xpHBgcER4m3Dv W2xQa0AYvejnxT+ubl+rSEFXNrde1nKppCaxaRCSdzVIyaxkotP5m0rlQM3WDs1k aTbXbPPFuPYhiNS3ygfMChtM21Qpp5sfb+Ie0mPHoYbw7hgNSnOI6QPFLiYXDi/T ArY3Vv9I0zAow/gJs0MBnjkhTjSEgB/xibqaI4Yufc4e131VKOM= -----END CERTIFICATE-----Generated at Wed Jul 29 17:49:24 2026 by rpki-client