$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft File: 23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft (raw, json) Hash identifier: c+LQQ52Jo0ahRoulxLFlELYR2Hx36vBp4LGJHUSy88Q= Subject key identifier: 6F:7B:41:85:7B:59:2E:AF:87:FF:C6:C0:10:DD:D0:35:36:A2:5E:74 Authority key identifier: 23:A0:F6:8C:EA:18:94:A3:2A:4A:04:BD:7E:64:F0:CF:0F:3D:EA:A0 Certificate issuer: /CN=23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0 Certificate serial: 344E4F64110B558D18BC90D9B8CB68DE5A9D9C86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft Manifest number: D1 Signing time: Mon 05 Oct 2026 20:48:09 +0000 Manifest this update: Mon 05 Oct 2026 20:43:09 +0000 Manifest next update: Tue 06 Oct 2026 22:11:09 +0000 Files and hashes: 1: 23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl (hash: Nr/icTtgLMDdmn4wdblwd+aGDPE/c+8j8irUbABnJcU=) 2: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: l/X2cP22D0Wy7RA8I5HP0mcO1xVHiIblMcBaMiAvS8U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 22:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:4e:4f:64:11:0b:55:8d:18:bc:90:d9:b8:cb:68:de:5a:9d:9c:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0 Validity Not Before: Oct 5 20:43:09 2026 GMT Not After : Oct 6 22:11:09 2026 GMT Subject: CN=6F7B41857B592EAF87FFC6C010DDD03536A25E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bf:6b:9d:94:90:1f:4f:79:2a:f6:bf:ec:0b: 92:1c:f8:cf:31:5b:41:e0:43:37:b7:2d:75:81:90: 1f:58:ed:dd:b8:2a:a8:30:4f:8d:fb:e2:62:ed:ae: a6:3a:55:41:43:d5:ea:47:a9:0c:c2:c3:08:9c:7b: e4:e1:81:e4:fa:d2:27:b2:81:89:cb:65:25:c1:63: 62:1c:20:09:a8:58:0a:9a:c6:f3:86:6e:f9:0b:71: bb:96:2c:e1:1f:33:1f:4e:77:a1:85:87:d1:9e:d9: 0a:dc:10:48:bb:55:d6:93:bd:66:5f:80:64:39:34: 7f:0c:87:5e:46:9f:6b:98:38:12:b0:ec:83:aa:7c: 90:16:40:c3:d2:41:f2:9c:9c:98:b1:56:6c:80:4a: e0:92:93:7a:73:fc:37:93:a1:7c:d1:12:30:d6:d4: c2:55:81:da:20:9f:3e:bb:b5:34:39:52:3a:0f:91: 1e:c8:20:eb:f1:9d:61:90:d6:aa:fe:ce:89:a2:01: 28:1d:2d:ed:11:0b:cc:84:8e:ad:09:4e:92:11:56: 74:27:a5:fc:85:61:dc:b7:64:d7:cf:5f:08:bc:f7: 0e:80:3e:20:f2:9a:84:08:ca:03:0a:ed:ba:b3:21: 24:f1:9c:38:9f:0f:39:f8:1a:c8:48:2e:3c:e8:71: f4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7B:41:85:7B:59:2E:AF:87:FF:C6:C0:10:DD:D0:35:36:A2:5E:74 X509v3 Authority Key Identifier: keyid:23:A0:F6:8C:EA:18:94:A3:2A:4A:04:BD:7E:64:F0:CF:0F:3D:EA:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:be:36:35:71:34:25:c2:71:01:7f:07:dd:6c:29:ce:f2:f2: fe:d4:3a:8b:4d:6b:0c:d1:ea:5d:93:ee:ce:8c:52:eb:82:d3: b0:84:78:2a:03:51:9c:a8:22:de:58:97:8e:4c:52:47:7d:f0: 49:90:13:56:e2:db:16:30:95:3e:7a:57:97:f4:fe:6c:4c:68: e5:1c:d5:84:6c:40:0f:63:17:25:2f:3d:19:3e:44:d3:a6:08: d0:26:d6:43:07:9f:75:8e:b3:c6:b1:96:67:74:a8:39:2e:56: ff:64:5f:6a:70:dd:73:1c:14:6e:28:5d:09:3a:67:41:4c:17: c2:24:22:66:6f:9f:c1:9f:14:80:54:69:03:02:7c:9a:4c:53: a9:f6:2d:f1:76:e2:88:bc:d0:bb:c9:eb:89:a6:06:3b:fe:26: dd:e1:84:4d:ab:03:f1:61:fc:37:40:25:3f:18:c8:98:6b:18: 09:ae:12:fe:07:5f:14:58:da:d8:fc:0f:45:7c:99:b9:85:1a: cc:04:58:d2:75:a1:72:a4:e7:4d:9b:51:68:d2:90:6f:89:00: d7:b4:0f:5f:7c:a1:e9:ab:32:58:c8:b5:9c:0d:3b:38:5c:d4: 6a:06:9b:6b:f1:e9:56:f4:d7:e1:a2:84:78:01:d6:e4:74:e8: c2:c9:fa:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNE5PZBELVY0YvJDZuMto3lqdnIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBMEY2OENFQTE4OTRBMzJBNEEwNEJEN0U2NEYwQ0Yw RjNERUFBMDAeFw0yNjEwMDUyMDQzMDlaFw0yNjEwMDYyMjExMDlaMDMxMTAvBgNV BAMTKDZGN0I0MTg1N0I1OTJFQUY4N0ZGQzZDMDEwREREMDM1MzZBMjVFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGv2udlJAfT3kq9r/sC5Ic+M8x W0HgQze3LXWBkB9Y7d24KqgwT4374mLtrqY6VUFD1epHqQzCwwice+ThgeT60iey gYnLZSXBY2IcIAmoWAqaxvOGbvkLcbuWLOEfMx9Od6GFh9Ge2QrcEEi7VdaTvWZf gGQ5NH8Mh15Gn2uYOBKw7IOqfJAWQMPSQfKcnJixVmyASuCSk3pz/DeToXzREjDW 1MJVgdognz67tTQ5UjoPkR7IIOvxnWGQ1qr+zomiASgdLe0RC8yEjq0JTpIRVnQn pfyFYdy3ZNfPXwi89w6APiDymoQIygMK7bqzISTxnDifDzn4GshILjzocfQdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb3tBhXtZLq+H/8bAEN3QNTaiXnQwHwYDVR0j BBgwFoAUI6D2jOoYlKMqSgS9fmTwzw896qAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1NGE4Y2UtMThmNC00OTg4LWE5NTEtOTY2NGRkMTc2Y2Q5LzAvMjNBMEY2OENF QTE4OTRBMzJBNEEwNEJEN0U2NEYwQ0YwRjNERUFBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yM0EwRjY4Q0VBMTg5NEEzMkE0QTA0QkQ3RTY0RjBDRjBGM0RF QUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvMjNBMEY2OENFQTE4OTRBMzJBNEEwNEJEN0U2NEYw Q0YwRjNERUFBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADG+NjVxNCXCcQF/B91sKc7y8v7UOotNawzR 6l2T7s6MUuuC07CEeCoDUZyoIt5Yl45MUkd98EmQE1bi2xYwlT56V5f0/mxMaOUc 1YRsQA9jFyUvPRk+RNOmCNAm1kMHn3WOs8axlmd0qDkuVv9kX2pw3XMcFG4oXQk6 Z0FMF8IkImZvn8GfFIBUaQMCfJpMU6n2LfF24oi80LvJ64mmBjv+Jt3hhE2rA/Fh /DdAJT8YyJhrGAmuEv4HXxRY2tj8D0V8mbmFGswEWNJ1oXKk502bUWjSkG+JANe0 D198oemrMljItZwNOzhc1GoGm2vx6Vb01+GihHgB1uR06MLJ+rk= -----END CERTIFICATE-----Generated at Tue Oct 6 15:29:25 2026 by rpki-client