$ rpki-client -vvf rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft File: C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft (raw, json) Hash identifier: iDRkPvX3uOnVriyRdZ4qczPHFLLhAwl3Wp97pfsB51M= Subject key identifier: 85:57:59:DB:1C:F3:59:A7:90:E6:DE:C4:BA:3C:75:A8:20:C1:4D:13 Authority key identifier: C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20 Certificate issuer: /CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20 Certificate serial: 1026B727257863DE4C28A760151FD1B1B717B96E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 14:57:17 +0000 Manifest this update: Tue 16 Jun 2026 14:52:17 +0000 Manifest next update: Wed 17 Jun 2026 15:56:17 +0000 Files and hashes: 1: C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl (hash: uEozw2+kx+zLw52vqaNoXHYfft2PEypCUR1D4GltECY=) 2: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: baz94lUrN5c1rRyv2s8gFFKO/4uJw+NhpT+Cp/9iDxI=) 3: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: IjCojVCQLVDXso6MfZ5Olpug+HpXiFAkQ/9TrlGdwBg=) 4: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: ENAt0Wj8pAqQGPsWatdFNKTs/QZwprQkkW2hjlJfcA8=) 5: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: trtJ6caoi9E2cPVadT/x0hsZneaEQLzf3GDB3mta1B8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 15:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:26:b7:27:25:78:63:de:4c:28:a7:60:15:1f:d1:b1:b7:17:b9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20 Validity Not Before: Jun 16 14:52:17 2026 GMT Not After : Jun 17 15:56:17 2026 GMT Subject: CN=855759DB1CF359A790E6DEC4BA3C75A820C14D13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:16:c8:32:31:bd:ee:7e:cc:b8:fd:76:d4:91: 2c:fb:e6:63:4a:42:12:08:97:b7:91:83:bf:ff:a8: ba:ed:93:57:10:6b:54:61:8f:38:be:57:04:8d:42: c4:66:57:6b:8f:a7:35:0a:0a:89:c5:9d:ed:96:ec: 68:84:c1:23:ce:df:a1:77:4c:f1:74:94:4f:41:22: 23:fa:cc:a9:b7:17:b9:52:4c:60:4f:d2:e9:c4:7b: 5f:2f:f0:3a:ad:02:f0:96:12:5a:54:59:b9:cd:00: 61:f7:d9:40:20:aa:2a:62:14:a7:53:0b:37:16:6c: 79:05:3f:51:11:cf:37:de:b8:24:a3:e4:09:df:ba: 9b:b6:f3:c6:d2:38:fd:10:50:12:84:61:63:d6:35: 62:8a:e6:7c:79:ba:60:d4:35:f9:47:ff:ae:8a:f4: f9:cb:af:64:36:21:68:96:34:19:42:23:1c:41:b4: c1:ec:95:be:bc:0b:4a:f5:59:fd:e1:11:fe:8f:57: f9:d5:7b:b8:86:aa:dd:20:8f:26:66:24:d4:93:60: 5b:72:b6:76:31:b0:c1:ee:de:be:3b:ab:c7:c0:32: 06:16:5f:10:ae:ce:a1:fc:d1:6c:9c:7c:16:d3:fe: 72:f9:cd:5a:3e:5a:c1:58:35:b6:86:f3:b7:d2:b7: 64:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:57:59:DB:1C:F3:59:A7:90:E6:DE:C4:BA:3C:75:A8:20:C1:4D:13 X509v3 Authority Key Identifier: keyid:C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:36:c6:57:de:a6:b0:f5:95:10:34:1b:92:d8:b4:27:7a:79: 54:e9:3c:50:c2:07:69:1d:12:fd:e4:ec:b3:2d:1f:1f:de:ae: a6:11:74:d9:04:13:f5:95:3d:da:50:ed:34:89:cb:cb:c1:ef: 19:66:24:ab:53:dd:16:b6:81:e7:3b:3f:53:0a:9e:b2:72:a7: be:ce:13:48:c7:24:3d:a7:f3:fa:83:d0:9c:82:66:51:ef:d3: d0:2a:23:05:c3:d4:2b:03:06:c1:c4:68:b6:8e:94:99:a3:54: c4:70:de:71:8d:f7:4c:5c:80:f2:96:22:15:06:4b:b2:09:b4: 33:31:44:90:74:8e:e8:74:d6:c1:e2:b4:cf:d5:2d:4f:82:4a: c6:31:e4:a1:be:42:84:fb:67:1d:06:55:2f:2e:3b:67:28:bb: 7e:71:19:51:97:02:10:ba:0a:a8:5c:08:6e:bb:00:bb:7b:04: 84:6e:b0:db:44:ee:3f:26:8e:fb:ab:a1:16:cf:cf:6e:de:7e: a2:4e:21:56:d8:48:8a:53:56:e7:b6:a1:c1:30:e0:01:76:df: f4:48:35:7c:9c:f4:15:60:e9:e6:7d:54:04:8c:c6:62:85:71: cf:df:cb:f6:5a:0e:f5:46:c1:c9:37:d4:36:32:86:1d:f8:54: 8a:6c:49:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUECa3JyV4Y95MKKdgFR/RsbcXuW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzNzk2MDYwRUYzOUVEMEU2QkI5RjYwNkY5RjQyNUM0 NTVGREMyMDAeFw0yNjA2MTYxNDUyMTdaFw0yNjA2MTcxNTU2MTdaMDMxMTAvBgNV BAMTKDg1NTc1OURCMUNGMzU5QTc5MEU2REVDNEJBM0M3NUE4MjBDMTREMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2FsgyMb3ufsy4/XbUkSz75mNK QhIIl7eRg7//qLrtk1cQa1Rhjzi+VwSNQsRmV2uPpzUKConFne2W7GiEwSPO36F3 TPF0lE9BIiP6zKm3F7lSTGBP0unEe18v8DqtAvCWElpUWbnNAGH32UAgqipiFKdT CzcWbHkFP1ERzzfeuCSj5Anfupu288bSOP0QUBKEYWPWNWKK5nx5umDUNflH/66K 9PnLr2Q2IWiWNBlCIxxBtMHslb68C0r1Wf3hEf6PV/nVe7iGqt0gjyZmJNSTYFty tnYxsMHu3r47q8fAMgYWXxCuzqH80WycfBbT/nL5zVo+WsFYNbaG87fSt2QpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhVdZ2xzzWaeQ5t7Eujx1qCDBTRMwHwYDVR0j BBgwFoAUwjeWBg7zntDmu59gb59CXEVf3CAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk5OGQ2ZWUtNmZkNy00ZTJkLWFlNDEtNjkzOWZkYjE1M2VlLzAvQzIzNzk2MDYw RUYzOUVEMEU2QkI5RjYwNkY5RjQyNUM0NTVGREMyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjM3OTYwNjBFRjM5RUQwRTZCQjlGNjA2RjlGNDI1QzQ1NUZE QzIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvQzIzNzk2MDYwRUYzOUVEMEU2QkI5RjYwNkY5RjQy NUM0NTVGREMyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEk2xlfeprD1lRA0G5LYtCd6eVTpPFDCB2kd Ev3k7LMtHx/erqYRdNkEE/WVPdpQ7TSJy8vB7xlmJKtT3Ra2gec7P1MKnrJyp77O E0jHJD2n8/qD0JyCZlHv09AqIwXD1CsDBsHEaLaOlJmjVMRw3nGN90xcgPKWIhUG S7IJtDMxRJB0juh01sHitM/VLU+CSsYx5KG+QoT7Zx0GVS8uO2cou35xGVGXAhC6 CqhcCG67ALt7BIRusNtE7j8mjvuroRbPz27efqJOIVbYSIpTVue2ocEw4AF23/RI NXyc9BVg6eZ9VASMxmKFcc/fy/ZaDvVGwck31DYyhh34VIpsSSY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:26 2026 by rpki-client