$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft File: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft (raw, json) Hash identifier: v6paz/J8eGG+pi7kMiYpHpslgCuW0+fWyNqe1cT+zGs= Subject key identifier: 63:41:4B:03:08:B2:BC:3C:EC:50:BD:3E:E6:24:B6:9C:B5:06:FC:29 Authority key identifier: 23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1 Certificate issuer: /CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1 Certificate serial: 50F3F24CF90172BCCF37AD4A841FD77A8B206822 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft Manifest number: BE Signing time: Sun 20 Sep 2026 15:41:22 +0000 Manifest this update: Sun 20 Sep 2026 15:36:22 +0000 Manifest next update: Mon 21 Sep 2026 18:57:22 +0000 Files and hashes: 1: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: xY/6i6LUbCTPc3rdGOALXXYogQcfaBFzo3dHge01GCI=) 2: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl (hash: axKbzYY8MO3jHii3arI753sIHtdXGXYDDToJaKaNDCE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 18:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f3:f2:4c:f9:01:72:bc:cf:37:ad:4a:84:1f:d7:7a:8b:20:68:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1 Validity Not Before: Sep 20 15:36:22 2026 GMT Not After : Sep 21 18:57:22 2026 GMT Subject: CN=63414B0308B2BC3CEC50BD3EE624B69CB506FC29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:49:0e:94:5f:fd:21:bf:a6:cc:24:d1:53:7b: dc:9a:55:dc:7c:50:5d:63:ae:e3:04:ad:52:ba:00: c6:83:f4:2e:9a:c9:52:9a:86:14:0b:83:64:df:85: e1:24:75:44:f7:37:0b:b0:a1:78:18:c9:fc:26:cf: 6a:5d:9e:55:9e:4f:eb:a1:8d:ae:01:d6:6b:cf:38: 76:de:cd:39:fd:15:2d:05:28:e3:b9:fd:cc:85:3a: 88:32:b6:1d:52:bc:36:97:b5:aa:b3:c4:21:2c:59: 16:e9:51:ff:eb:1d:dc:8b:78:02:5c:dc:6e:13:c3: 40:c0:3a:3e:e2:35:33:f1:dc:2f:f1:7f:2c:c9:75: e8:be:63:f0:35:05:bd:3c:4e:4e:3d:99:24:e2:04: d8:51:f0:54:1d:4e:39:4f:24:0c:33:9e:bf:72:d9: 28:e6:7f:3d:1b:af:6a:26:7f:41:f7:8f:91:54:21: c2:d0:cd:8e:2c:3e:59:79:98:d1:14:97:e1:af:a8: f1:d0:ee:3d:01:91:78:6e:3b:2b:8c:44:70:15:b9: 2b:3a:e6:cc:7c:0d:b6:c6:2b:9a:0b:af:bd:76:be: f1:2a:e4:01:5c:5f:90:fe:89:5c:67:ab:bf:49:48: 25:41:29:a7:51:5a:02:0f:de:16:31:39:b2:ea:f2: 16:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:41:4B:03:08:B2:BC:3C:EC:50:BD:3E:E6:24:B6:9C:B5:06:FC:29 X509v3 Authority Key Identifier: keyid:23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:85:ba:e3:b3:01:3c:07:be:f2:d8:dd:47:68:42:db:76:59: 2a:7c:33:a7:e6:2e:f4:90:a5:3d:cb:3d:a5:34:23:5f:ae:83: 28:ee:94:71:19:6b:fb:eb:aa:e4:99:0f:4a:87:e5:55:48:6c: c3:4a:45:23:5d:a4:d3:a9:42:aa:0d:91:bd:9f:e9:30:36:f2: 6b:d5:6b:d0:4c:1e:53:1e:67:b7:53:a3:ea:c1:ff:a5:3f:e5: 17:f2:ee:e2:1f:1e:2a:9c:46:4e:54:f1:7d:38:77:14:95:d4: fe:a7:b1:85:34:97:a7:32:4a:86:45:4f:94:d5:9f:98:c0:c1: db:4a:5a:ce:98:e2:79:63:7b:84:52:63:d1:4d:01:16:c3:32: ff:54:d6:23:11:40:c8:44:4f:b8:52:42:f9:24:c3:36:21:9f: 8a:d8:e0:a7:da:7f:6e:b0:2d:76:d4:7a:54:0e:7d:ef:ce:c9: 07:ea:14:e1:0d:2d:54:fc:fb:86:ce:a8:df:c9:e8:65:dd:4e: c2:23:49:65:a5:63:db:83:37:99:06:af:30:f7:45:ca:e9:0d: 42:af:e9:d2:b1:90:49:17:ba:d3:39:86:a2:85:09:7c:b4:19: 4a:cd:e5:e4:74:60:49:af:bb:ef:fa:4c:3b:e5:55:48:03:8c: 60:3d:0c:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUPPyTPkBcrzPN61KhB/XeosgaCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3NzhEMTk2Mzg1MUM0MDU0QUJBNjhCQjhGODBFNUU0 NUE3QTdGMTAeFw0yNjA5MjAxNTM2MjJaFw0yNjA5MjExODU3MjJaMDMxMTAvBgNV BAMTKDYzNDE0QjAzMDhCMkJDM0NFQzUwQkQzRUU2MjRCNjlDQjUwNkZDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDISQ6UX/0hv6bMJNFTe9yaVdx8 UF1jruMErVK6AMaD9C6ayVKahhQLg2TfheEkdUT3NwuwoXgYyfwmz2pdnlWeT+uh ja4B1mvPOHbezTn9FS0FKOO5/cyFOogyth1SvDaXtaqzxCEsWRbpUf/rHdyLeAJc 3G4Tw0DAOj7iNTPx3C/xfyzJdei+Y/A1Bb08Tk49mSTiBNhR8FQdTjlPJAwznr9y 2Sjmfz0br2omf0H3j5FUIcLQzY4sPll5mNEUl+GvqPHQ7j0BkXhuOyuMRHAVuSs6 5sx8DbbGK5oLr712vvEq5AFcX5D+iVxnq79JSCVBKadRWgIP3hYxObLq8hY/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY0FLAwiyvDzsUL0+5iS2nLUG/CkwHwYDVR0j BBgwFoAUI3eNGWOFHEBUq6aLuPgOXkWnp/EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzEvMjM3NzhEMTk2 Mzg1MUM0MDU0QUJBNjhCQjhGODBFNUU0NUE3QTdGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzc3OEQxOTYzODUxQzQwNTRBQkE2OEJCOEY4MEU1RTQ1QTdB N0YxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvMjM3NzhEMTk2Mzg1MUM0MDU0QUJBNjhCQjhGODBF NUU0NUE3QTdGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6FuuOzATwHvvLY3UdoQtt2WSp8M6fmLvSQ pT3LPaU0I1+ugyjulHEZa/vrquSZD0qH5VVIbMNKRSNdpNOpQqoNkb2f6TA28mvV a9BMHlMeZ7dTo+rB/6U/5Rfy7uIfHiqcRk5U8X04dxSV1P6nsYU0l6cySoZFT5TV n5jAwdtKWs6Y4nlje4RSY9FNARbDMv9U1iMRQMhET7hSQvkkwzYhn4rY4Kfaf26w LXbUelQOfe/OyQfqFOENLVT8+4bOqN/J6GXdTsIjSWWlY9uDN5kGrzD3RcrpDUKv 6dKxkEkXutM5hqKFCXy0GUrN5eR0YEmvu+/6TDvlVUgDjGA9DO8= -----END CERTIFICATE-----Generated at Mon Sep 21 10:11:32 2026 by rpki-client