$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft File: 23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft (raw, json) Hash identifier: mLE05ywupre+G/xyKAz4mwR2FaMfFf49vYsA9XpeTiw= Subject key identifier: 89:AA:1F:B7:3F:F1:95:5F:6B:04:48:C0:4B:AF:01:F4:52:08:B4:AA Authority key identifier: 23:A0:F6:8C:EA:18:94:A3:2A:4A:04:BD:7E:64:F0:CF:0F:3D:EA:A0 Certificate issuer: /CN=23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0 Certificate serial: 70FA02B5CEA9772FC5A9455253C84A97D4AFEFAA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 15:22:47 +0000 Manifest this update: Tue 16 Jun 2026 15:17:47 +0000 Manifest next update: Wed 17 Jun 2026 18:09:47 +0000 Files and hashes: 1: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: l/X2cP22D0Wy7RA8I5HP0mcO1xVHiIblMcBaMiAvS8U=) 2: 23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl (hash: m3QVVwwyqysgKjsDoPcH/R9M88Wu3Vgl0n/85mdW08k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:fa:02:b5:ce:a9:77:2f:c5:a9:45:52:53:c8:4a:97:d4:af:ef:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0 Validity Not Before: Jun 16 15:17:47 2026 GMT Not After : Jun 17 18:09:47 2026 GMT Subject: CN=89AA1FB73FF1955F6B0448C04BAF01F45208B4AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cc:c9:67:2e:02:47:fd:5b:7f:d7:4c:90:7e: 71:38:9d:d6:5f:7e:e0:50:d3:8d:f9:0e:ed:40:34: da:4a:3b:44:56:1e:54:f0:ba:78:ba:04:73:b7:5f: 04:a0:9a:a6:d2:fc:a1:e9:73:5e:31:e9:91:6e:71: 7a:76:c2:2a:c4:36:ba:04:ce:91:78:e6:49:97:5f: 16:5c:12:b5:db:e7:30:7d:3b:0a:09:46:92:c4:4e: 23:ff:cf:aa:30:6d:27:7a:5a:c3:eb:04:83:fb:1f: 6a:c6:0f:0d:f0:68:4c:25:85:1f:4a:07:d0:52:8e: 61:5b:87:8f:43:12:d4:01:16:e4:91:18:2c:b8:a4: ba:d2:31:c6:4d:04:da:b8:d2:11:7e:fd:c8:4c:90: dd:75:9b:19:f7:15:22:2d:c4:87:88:4f:74:1b:99: 7f:f9:d2:e8:d3:c7:c7:c5:1f:1b:ec:02:dd:4a:fb: fd:81:46:bf:b7:2c:99:f8:1f:7f:57:42:dc:9c:1b: e1:7e:cf:a8:4e:30:df:e8:80:47:de:dd:72:aa:0c: e4:d5:6a:01:41:19:74:78:fc:1d:a0:2e:ec:ac:eb: 15:e8:8e:92:ba:48:a1:7b:01:a1:fa:5e:21:c4:64: 88:cd:34:3f:98:ad:73:aa:8f:0c:44:25:9b:56:c6: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AA:1F:B7:3F:F1:95:5F:6B:04:48:C0:4B:AF:01:F4:52:08:B4:AA X509v3 Authority Key Identifier: keyid:23:A0:F6:8C:EA:18:94:A3:2A:4A:04:BD:7E:64:F0:CF:0F:3D:EA:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:83:85:92:bd:b7:fe:52:3d:e3:4b:06:ea:28:cc:23:73:29: 27:ba:a0:75:fb:61:a2:5d:e3:77:d6:ef:33:c7:22:4a:43:27: fa:79:f7:e7:bf:db:00:db:4e:80:de:97:e6:7d:34:64:a9:27: ce:a4:15:87:d7:e2:54:f4:08:26:81:fc:49:a0:77:fc:a6:2b: 40:9c:06:99:b8:76:1c:a9:b7:4b:7c:1c:da:a9:af:98:51:77: 6c:45:8a:aa:54:58:ae:b4:ce:d9:99:0b:2a:b8:f1:6a:5a:6d: 44:5c:e6:63:b0:13:37:d1:65:51:85:a2:a6:ef:42:fc:fe:73: f9:16:d1:8e:b2:02:2b:93:4d:eb:42:48:d4:ca:d2:8f:3f:d4: 49:cf:e6:86:3b:b5:f9:ed:35:ad:69:3c:02:a5:92:35:5a:16: aa:44:2a:11:9c:94:dd:cf:2b:5f:ee:0a:bd:e5:26:35:ca:83: 20:07:0a:ed:d5:e3:97:86:a2:83:95:d8:0b:09:be:eb:61:96: 12:63:2d:ff:93:e5:7c:24:bb:b3:4f:43:53:21:76:63:6e:3e: 72:51:e8:5d:87:54:3d:6b:c7:1e:0c:d4:af:48:03:52:d1:7c: 29:43:de:80:6c:19:ed:82:c0:88:9a:c9:a2:b9:f2:7d:0c:f4: d2:22:4a:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcPoCtc6pdy/FqUVSU8hKl9Sv76owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBMEY2OENFQTE4OTRBMzJBNEEwNEJEN0U2NEYwQ0Yw RjNERUFBMDAeFw0yNjA2MTYxNTE3NDdaFw0yNjA2MTcxODA5NDdaMDMxMTAvBgNV BAMTKDg5QUExRkI3M0ZGMTk1NUY2QjA0NDhDMDRCQUYwMUY0NTIwOEI0QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDizMlnLgJH/Vt/10yQfnE4ndZf fuBQ0435Du1ANNpKO0RWHlTwuni6BHO3XwSgmqbS/KHpc14x6ZFucXp2wirENroE zpF45kmXXxZcErXb5zB9OwoJRpLETiP/z6owbSd6WsPrBIP7H2rGDw3waEwlhR9K B9BSjmFbh49DEtQBFuSRGCy4pLrSMcZNBNq40hF+/chMkN11mxn3FSItxIeIT3Qb mX/50ujTx8fFHxvsAt1K+/2BRr+3LJn4H39XQtycG+F+z6hOMN/ogEfe3XKqDOTV agFBGXR4/B2gLuys6xXojpK6SKF7AaH6XiHEZIjNND+YrXOqjwxEJZtWxu7BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiaoftz/xlV9rBEjAS68B9FIItKowHwYDVR0j BBgwFoAUI6D2jOoYlKMqSgS9fmTwzw896qAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1NGE4Y2UtMThmNC00OTg4LWE5NTEtOTY2NGRkMTc2Y2Q5LzAvMjNBMEY2OENF QTE4OTRBMzJBNEEwNEJEN0U2NEYwQ0YwRjNERUFBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yM0EwRjY4Q0VBMTg5NEEzMkE0QTA0QkQ3RTY0RjBDRjBGM0RF QUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvMjNBMEY2OENFQTE4OTRBMzJBNEEwNEJEN0U2NEYw Q0YwRjNERUFBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIuDhZK9t/5SPeNLBuoozCNzKSe6oHX7YaJd 43fW7zPHIkpDJ/p59+e/2wDbToDel+Z9NGSpJ86kFYfX4lT0CCaB/Emgd/ymK0Cc Bpm4dhypt0t8HNqpr5hRd2xFiqpUWK60ztmZCyq48WpabURc5mOwEzfRZVGFoqbv Qvz+c/kW0Y6yAiuTTetCSNTK0o8/1EnP5oY7tfntNa1pPAKlkjVaFqpEKhGclN3P K1/uCr3lJjXKgyAHCu3V45eGooOV2AsJvuthlhJjLf+T5Xwku7NPQ1MhdmNuPnJR 6F2HVD1rxx4M1K9IA1LRfClD3oBsGe2CwIiayaK58n0M9NIiSjg= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:31 2026 by rpki-client