$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft File: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft (raw, json) Hash identifier: erFjms8zAI+5gPsVKzlErB1zdrp46BJezAeghKZQAow= Subject key identifier: 6D:90:60:42:63:73:FA:B4:D9:C4:61:CD:2B:1B:8A:FD:5D:33:29:61 Authority key identifier: 23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1 Certificate issuer: /CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1 Certificate serial: 73A337B00BD5F2BC94F38BC16F484F213184070D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 23:15:28 +0000 Manifest this update: Tue 28 Jul 2026 23:10:28 +0000 Manifest next update: Thu 30 Jul 2026 00:30:28 +0000 Files and hashes: 1: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: xY/6i6LUbCTPc3rdGOALXXYogQcfaBFzo3dHge01GCI=) 2: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl (hash: gjrsGQFtyVHA85xOrK0k5h5J7TrFF3thgMCMpCc+sZ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a3:37:b0:0b:d5:f2:bc:94:f3:8b:c1:6f:48:4f:21:31:84:07:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1 Validity Not Before: Jul 28 23:10:28 2026 GMT Not After : Jul 30 00:30:28 2026 GMT Subject: CN=6D9060426373FAB4D9C461CD2B1B8AFD5D332961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e3:78:b8:79:32:1f:99:b9:b7:30:20:d3:a7: b2:1d:7d:80:bf:0d:04:5a:46:0d:57:8a:f7:81:45: 12:95:e8:c0:33:10:57:68:51:dd:4f:bb:36:22:d6: ba:6d:59:59:a3:a0:de:e1:9b:3c:da:8b:98:5b:74: f1:80:d4:59:89:12:f1:c4:e7:16:64:74:ee:93:9e: 84:e1:60:d4:8c:98:7d:cf:cf:d8:63:e5:dd:c3:96: 2f:8c:0a:6a:92:47:b1:13:05:3c:b1:d3:cb:18:02: 2b:c1:a6:92:6c:04:13:47:e9:bf:ff:d1:00:db:8f: 20:6a:ed:f7:4e:3c:df:c1:e6:52:ba:8d:34:fa:d3: 01:09:48:77:56:cd:73:34:7d:72:e3:fd:e9:75:3b: 8a:17:33:de:59:00:d4:02:a7:9e:7b:56:6c:85:b0: 3a:7c:1c:82:05:6c:db:db:54:63:87:33:19:00:fc: 84:cc:4b:04:a2:ba:cb:b7:ab:f2:13:7b:21:e1:4e: f3:47:f8:0e:e3:58:f2:96:d9:e9:40:fd:22:df:5c: d1:cd:68:9f:b9:1c:9c:eb:63:a5:61:2d:71:a3:dc: 5b:9e:a5:56:88:39:6f:d1:be:69:f1:79:45:96:ee: 16:be:3b:7f:9d:9c:40:30:03:73:a0:e6:da:9c:67: d2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:90:60:42:63:73:FA:B4:D9:C4:61:CD:2B:1B:8A:FD:5D:33:29:61 X509v3 Authority Key Identifier: keyid:23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:eb:25:8c:42:18:ac:1c:ef:59:39:f2:c6:bc:2e:97:90:5b: 35:25:a5:bd:5e:7a:77:07:ac:6f:6a:45:fb:36:2e:9f:94:c2: 71:21:ff:c1:3a:b5:18:8f:41:8c:59:a0:3b:03:b3:a3:ac:94: d4:82:df:06:5a:68:75:8e:0f:4f:17:f7:ce:e9:b4:c2:76:78: 95:9b:da:2e:f7:03:6d:82:91:48:7b:fb:ed:5f:28:46:62:ab: 98:46:c7:fc:4b:03:3d:85:c6:6e:1c:2d:24:01:26:8d:96:de: 6e:ea:a0:d6:db:09:e7:ee:13:36:ec:ef:62:8d:d6:21:81:9e: 1d:2a:da:3a:9e:7d:02:36:aa:68:50:63:0c:a5:22:4c:e0:cf: c0:c7:95:36:cf:d1:67:9b:b0:91:60:7a:7f:af:5f:a0:d4:21: 13:14:cf:17:f3:75:65:9a:f6:d6:fb:80:b9:d1:5e:2e:ac:1d: 21:fc:c5:86:bc:46:48:10:57:35:0d:ec:f9:04:37:6b:9b:22: a6:9b:02:7f:2e:ef:0d:9e:a8:c3:b2:9f:e5:98:a9:81:e3:95: 4b:ef:ce:84:bd:87:f9:c6:2f:c0:ab:0a:a9:a2:b4:98:cc:9b: ca:b7:7b:95:c8:c0:a8:e1:07:f0:05:c9:16:28:9f:c0:ba:05: ab:61:4a:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc6M3sAvV8ryU84vBb0hPITGEBw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3NzhEMTk2Mzg1MUM0MDU0QUJBNjhCQjhGODBFNUU0 NUE3QTdGMTAeFw0yNjA3MjgyMzEwMjhaFw0yNjA3MzAwMDMwMjhaMDMxMTAvBgNV BAMTKDZEOTA2MDQyNjM3M0ZBQjREOUM0NjFDRDJCMUI4QUZENUQzMzI5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK43i4eTIfmbm3MCDTp7IdfYC/ DQRaRg1XiveBRRKV6MAzEFdoUd1PuzYi1rptWVmjoN7hmzzai5hbdPGA1FmJEvHE 5xZkdO6TnoThYNSMmH3Pz9hj5d3Dli+MCmqSR7ETBTyx08sYAivBppJsBBNH6b// 0QDbjyBq7fdOPN/B5lK6jTT60wEJSHdWzXM0fXLj/el1O4oXM95ZANQCp557VmyF sDp8HIIFbNvbVGOHMxkA/ITMSwSiusu3q/ITeyHhTvNH+A7jWPKW2elA/SLfXNHN aJ+5HJzrY6VhLXGj3FuepVaIOW/RvmnxeUWW7ha+O3+dnEAwA3Og5tqcZ9LTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbZBgQmNz+rTZxGHNKxuK/V0zKWEwHwYDVR0j BBgwFoAUI3eNGWOFHEBUq6aLuPgOXkWnp/EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzEvMjM3NzhEMTk2 Mzg1MUM0MDU0QUJBNjhCQjhGODBFNUU0NUE3QTdGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzc3OEQxOTYzODUxQzQwNTRBQkE2OEJCOEY4MEU1RTQ1QTdB N0YxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvMjM3NzhEMTk2Mzg1MUM0MDU0QUJBNjhCQjhGODBF NUU0NUE3QTdGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjrJYxCGKwc71k58sa8LpeQWzUlpb1eencH rG9qRfs2Lp+UwnEh/8E6tRiPQYxZoDsDs6OslNSC3wZaaHWOD08X987ptMJ2eJWb 2i73A22CkUh7++1fKEZiq5hGx/xLAz2Fxm4cLSQBJo2W3m7qoNbbCefuEzbs72KN 1iGBnh0q2jqefQI2qmhQYwylIkzgz8DHlTbP0WebsJFgen+vX6DUIRMUzxfzdWWa 9tb7gLnRXi6sHSH8xYa8RkgQVzUN7PkEN2ubIqabAn8u7w2eqMOyn+WYqYHjlUvv zoS9h/nGL8CrCqmitJjMm8q3e5XIwKjhB/AFyRYon8C6BathSo4= -----END CERTIFICATE-----Generated at Wed Jul 29 13:10:14 2026 by rpki-client