$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft File: C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft (raw, json) Hash identifier: tYzoX2N4GJJHFljPnyTqzt/49M2Ev4aUBiwuwmg56bE= Subject key identifier: 0D:C6:05:A4:E4:B4:F2:C7:D2:5E:B0:6A:9F:42:E6:01:25:65:88:09 Authority key identifier: C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20 Certificate issuer: /CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20 Certificate serial: 2B17B19D3870D6E7C8D5764DD1040057EBC4B621 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft Manifest number: BD Signing time: Sun 20 Sep 2026 22:44:58 +0000 Manifest this update: Sun 20 Sep 2026 22:39:58 +0000 Manifest next update: Mon 21 Sep 2026 23:59:58 +0000 Files and hashes: 1: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: IjCojVCQLVDXso6MfZ5Olpug+HpXiFAkQ/9TrlGdwBg=) 2: C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl (hash: zrsgHLfzGkI9919CnEtp60XQ59OkmY1qMD1RKud6HSg=) 3: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: ENAt0Wj8pAqQGPsWatdFNKTs/QZwprQkkW2hjlJfcA8=) 4: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: baz94lUrN5c1rRyv2s8gFFKO/4uJw+NhpT+Cp/9iDxI=) 5: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: trtJ6caoi9E2cPVadT/x0hsZneaEQLzf3GDB3mta1B8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:17:b1:9d:38:70:d6:e7:c8:d5:76:4d:d1:04:00:57:eb:c4:b6:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20 Validity Not Before: Sep 20 22:39:58 2026 GMT Not After : Sep 21 23:59:58 2026 GMT Subject: CN=0DC605A4E4B4F2C7D25EB06A9F42E60125658809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:65:94:e9:c4:6c:c4:43:28:7c:a8:92:b2: 18:2b:32:2d:10:e5:7a:6f:ac:81:34:a3:f9:95:77: 0e:70:52:3f:87:22:cc:94:27:cc:03:e4:49:2d:9a: 2d:63:ab:fb:fe:87:03:67:81:6d:2f:92:ea:12:4b: 6a:ad:ee:4e:28:8a:a8:66:89:44:38:3a:52:f3:fe: 9b:8a:38:9d:bd:2c:f8:03:57:67:41:be:30:a8:78: 4f:52:5b:4b:d7:c2:1c:23:5f:14:3a:4f:d6:bc:0d: 80:94:87:ec:e5:3c:71:10:2d:6d:4f:32:3e:ea:2d: 97:65:c4:41:fe:f4:90:8c:6a:c6:2e:ef:f3:7a:a3: 14:aa:75:99:2d:fa:9b:96:52:a1:c2:c7:9f:0e:a6: d3:5b:c2:73:cd:d0:24:71:fc:5c:d2:cc:06:28:c4: d4:47:67:e8:06:82:7e:d6:07:1b:7f:20:ad:06:68: 3e:21:9e:ff:a2:aa:6e:06:01:06:0a:5e:3e:cb:8d: de:b0:a0:3e:11:37:62:7f:da:96:91:ad:4d:b2:c5: 8d:83:53:50:98:19:6c:00:d1:30:a5:56:a7:81:1b: 01:89:14:e0:5b:67:25:56:4d:ac:da:fd:dd:3b:8e: df:bd:af:20:ee:b6:e9:5d:98:65:da:bf:4e:82:4d: 30:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C6:05:A4:E4:B4:F2:C7:D2:5E:B0:6A:9F:42:E6:01:25:65:88:09 X509v3 Authority Key Identifier: keyid:C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:73:50:f7:e7:fa:11:3b:09:d1:34:d3:bd:61:99:80:3e:88: 98:b3:27:42:8f:13:8d:03:47:f8:e5:73:0e:a4:38:52:af:e8: 4f:fb:73:bb:2e:ad:49:4b:f2:d7:e9:a3:55:78:ad:ab:92:c2: 7e:0d:3e:16:02:9c:27:96:dd:18:c0:70:56:26:55:0f:d0:88: 9e:57:ff:b8:c5:2c:b3:56:e0:2b:55:2e:bf:9a:ec:4d:9e:37: 52:d1:13:7c:e7:94:a9:c3:b9:33:26:50:e0:e0:fc:d1:52:5d: 91:64:a1:0a:c6:4d:29:5d:5e:b0:7f:48:3c:f5:9a:06:33:8e: 12:53:d8:81:24:96:85:33:b4:3b:62:ec:86:97:62:27:53:0b: d2:23:b9:c8:8d:ee:48:ca:0e:e8:bd:a1:3e:b8:c8:3a:8f:34: 48:c9:75:01:04:9a:38:db:0b:88:8c:32:4d:f1:86:27:65:60: 38:09:2b:50:17:c8:8a:f0:cf:ce:b7:3d:aa:8f:50:ba:54:83: 9f:b5:ca:6a:b1:eb:13:a0:95:0c:ff:ac:b8:d5:52:d1:06:9f: 04:b4:78:e3:0f:74:da:f5:9d:d5:da:81:4b:21:fc:fd:bd:f6: b1:48:d7:77:65:86:53:ef:66:8f:38:55:1d:1b:a9:19:d2:78: b2:97:aa:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKxexnThw1ufI1XZN0QQAV+vEtiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzNzk2MDYwRUYzOUVEMEU2QkI5RjYwNkY5RjQyNUM0 NTVGREMyMDAeFw0yNjA5MjAyMjM5NThaFw0yNjA5MjEyMzU5NThaMDMxMTAvBgNV BAMTKDBEQzYwNUE0RTRCNEYyQzdEMjVFQjA2QTlGNDJFNjAxMjU2NTg4MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKGWU6cRsxEMofKiSshgrMi0Q 5XpvrIE0o/mVdw5wUj+HIsyUJ8wD5Ektmi1jq/v+hwNngW0vkuoSS2qt7k4oiqhm iUQ4OlLz/puKOJ29LPgDV2dBvjCoeE9SW0vXwhwjXxQ6T9a8DYCUh+zlPHEQLW1P Mj7qLZdlxEH+9JCMasYu7/N6oxSqdZkt+puWUqHCx58OptNbwnPN0CRx/FzSzAYo xNRHZ+gGgn7WBxt/IK0GaD4hnv+iqm4GAQYKXj7Ljd6woD4RN2J/2paRrU2yxY2D U1CYGWwA0TClVqeBGwGJFOBbZyVWTaza/d07jt+9ryDutuldmGXav06CTTA7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDcYFpOS08sfSXrBqn0LmASVliAkwHwYDVR0j BBgwFoAUwjeWBg7zntDmu59gb59CXEVf3CAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk5OGQ2ZWUtNmZkNy00ZTJkLWFlNDEtNjkzOWZkYjE1M2VlLzAvQzIzNzk2MDYw RUYzOUVEMEU2QkI5RjYwNkY5RjQyNUM0NTVGREMyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjM3OTYwNjBFRjM5RUQwRTZCQjlGNjA2RjlGNDI1QzQ1NUZE QzIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvQzIzNzk2MDYwRUYzOUVEMEU2QkI5RjYwNkY5RjQy NUM0NTVGREMyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVzUPfn+hE7CdE0071hmYA+iJizJ0KPE40D R/jlcw6kOFKv6E/7c7surUlL8tfpo1V4rauSwn4NPhYCnCeW3RjAcFYmVQ/QiJ5X /7jFLLNW4CtVLr+a7E2eN1LRE3znlKnDuTMmUODg/NFSXZFkoQrGTSldXrB/SDz1 mgYzjhJT2IEkloUztDti7IaXYidTC9IjuciN7kjKDui9oT64yDqPNEjJdQEEmjjb C4iMMk3xhidlYDgJK1AXyIrwz863PaqPULpUg5+1ymqx6xOglQz/rLjVUtEGnwS0 eOMPdNr1ndXagUsh/P299rFI13dlhlPvZo84VR0bqRnSeLKXqmo= -----END CERTIFICATE-----Generated at Mon Sep 21 15:33:56 2026 by rpki-client