$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft File: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft (raw, json) Hash identifier: H6M0uGklAe/OjrTB5GimPeXhJPQoBQAQavzD9ZdK0ZQ= Subject key identifier: E6:5B:48:87:59:73:F3:F4:D7:28:04:A2:5B:3A:18:00:F9:61:79:6A Authority key identifier: 23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1 Certificate issuer: /CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1 Certificate serial: 6C4DE4CB5B04C617880C234F69F019AF1FC4BD39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 06:42:10 +0000 Manifest this update: Sat 13 Jun 2026 06:37:10 +0000 Manifest next update: Sun 14 Jun 2026 07:11:10 +0000 Files and hashes: 1: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl (hash: vYMvc81Jc1grh+LFEx/m+HY2s1CLLrZO88brEH3aJnw=) 2: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: xY/6i6LUbCTPc3rdGOALXXYogQcfaBFzo3dHge01GCI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 07:11:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:4d:e4:cb:5b:04:c6:17:88:0c:23:4f:69:f0:19:af:1f:c4:bd:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1 Validity Not Before: Jun 13 06:37:10 2026 GMT Not After : Jun 14 07:11:10 2026 GMT Subject: CN=E65B48875973F3F4D72804A25B3A1800F961796A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d3:55:98:c5:1e:58:62:32:a5:63:55:4c:ef: 23:ff:73:d9:2a:01:f2:35:dd:7f:58:0f:fc:61:4e: 81:76:47:68:e3:b3:d7:7c:4a:ee:6a:93:db:ad:76: bd:5c:fa:8e:e1:6a:c4:a1:d2:e6:c0:61:1c:79:a4: 1d:0c:d9:b5:95:77:59:32:00:a7:18:a1:16:d0:c7: 74:1e:18:a4:95:3e:e0:cb:b3:fd:3b:19:c7:25:13: 28:06:27:27:f0:23:8c:25:c4:31:03:56:c1:c4:a9: 45:01:90:c8:56:94:a3:e8:7e:cb:f9:14:50:c4:85: aa:bd:49:13:d8:45:77:58:d2:6a:b2:9e:3f:83:47: 0f:bc:6d:8e:9b:04:88:f6:1b:8a:dc:d5:fb:87:79: 38:af:4e:69:7a:99:19:44:f8:73:b1:a4:15:54:65: c9:00:c9:6c:38:2d:c8:7c:58:f7:2b:c4:58:e9:05: 02:ad:d0:0c:e4:f7:19:f9:8a:77:47:78:33:71:ce: 86:6a:69:1d:28:a7:2d:84:28:8e:a8:03:90:f1:7e: fc:90:b6:98:f6:41:0c:52:ef:c4:90:40:63:53:4d: 86:14:a2:30:90:5b:cf:3b:12:c6:4a:c0:6c:5f:ca: a9:97:8e:85:5d:7b:3f:03:de:b6:27:c4:05:8f:46: 5c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5B:48:87:59:73:F3:F4:D7:28:04:A2:5B:3A:18:00:F9:61:79:6A X509v3 Authority Key Identifier: keyid:23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e0:df:01:a0:65:9e:a6:bb:1f:bd:b2:07:8c:f3:24:28:05: ae:c0:8a:19:03:75:a8:f0:95:fc:f6:c1:11:84:37:74:9f:03: 4b:d2:6b:58:03:83:76:f9:ce:fe:e5:45:98:4e:e6:23:c3:d8: 1d:d5:82:68:c5:06:e1:87:21:b2:fc:df:86:4e:50:ec:45:d7: 54:5f:1b:f2:3d:0a:43:b9:61:18:be:6f:e0:93:c4:4e:c3:e8: 25:a3:84:fe:18:6f:c9:15:c2:ea:f2:ef:eb:b2:ea:94:99:eb: 54:d3:42:0f:62:80:40:29:90:71:26:52:2f:c1:15:0b:05:3e: 6b:b5:fb:8b:b8:07:c4:37:58:de:2a:17:2f:76:29:f5:32:fc: 49:46:9d:53:a8:62:1a:e8:d4:d5:e8:19:f9:91:8a:c1:65:c1: 22:24:a0:ce:27:c3:04:38:b7:7d:de:95:84:84:f7:36:e4:1c: 50:af:6a:55:52:bb:62:16:1d:86:12:03:a7:ec:9b:21:5a:3a: 07:06:fb:4b:53:ae:d3:76:29:ab:c1:0b:2c:b7:71:29:3c:6a: c3:1b:e2:b6:8d:28:95:e8:2f:c2:0b:ab:af:6d:2d:13:00:94: a9:f6:12:f0:34:73:f0:73:1d:d0:22:c2:f6:5b:18:19:ac:e5: f1:63:f3:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbE3ky1sExheIDCNPafAZrx/EvTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3NzhEMTk2Mzg1MUM0MDU0QUJBNjhCQjhGODBFNUU0 NUE3QTdGMTAeFw0yNjA2MTMwNjM3MTBaFw0yNjA2MTQwNzExMTBaMDMxMTAvBgNV BAMTKEU2NUI0ODg3NTk3M0YzRjRENzI4MDRBMjVCM0ExODAwRjk2MTc5NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp01WYxR5YYjKlY1VM7yP/c9kq AfI13X9YD/xhToF2R2jjs9d8Su5qk9utdr1c+o7hasSh0ubAYRx5pB0M2bWVd1ky AKcYoRbQx3QeGKSVPuDLs/07GcclEygGJyfwI4wlxDEDVsHEqUUBkMhWlKPofsv5 FFDEhaq9SRPYRXdY0mqynj+DRw+8bY6bBIj2G4rc1fuHeTivTml6mRlE+HOxpBVU ZckAyWw4Lch8WPcrxFjpBQKt0Azk9xn5indHeDNxzoZqaR0opy2EKI6oA5DxfvyQ tpj2QQxS78SQQGNTTYYUojCQW887EsZKwGxfyqmXjoVdez8D3rYnxAWPRlyXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ltIh1lz8/TXKASiWzoYAPlheWowHwYDVR0j BBgwFoAUI3eNGWOFHEBUq6aLuPgOXkWnp/EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzEvMjM3NzhEMTk2 Mzg1MUM0MDU0QUJBNjhCQjhGODBFNUU0NUE3QTdGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzc3OEQxOTYzODUxQzQwNTRBQkE2OEJCOEY4MEU1RTQ1QTdB N0YxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvMjM3NzhEMTk2Mzg1MUM0MDU0QUJBNjhCQjhGODBF NUU0NUE3QTdGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3g3wGgZZ6mux+9sgeM8yQoBa7AihkDdajw lfz2wRGEN3SfA0vSa1gDg3b5zv7lRZhO5iPD2B3VgmjFBuGHIbL834ZOUOxF11Rf G/I9CkO5YRi+b+CTxE7D6CWjhP4Yb8kVwury7+uy6pSZ61TTQg9igEApkHEmUi/B FQsFPmu1+4u4B8Q3WN4qFy92KfUy/ElGnVOoYhro1NXoGfmRisFlwSIkoM4nwwQ4 t33elYSE9zbkHFCvalVSu2IWHYYSA6fsmyFaOgcG+0tTrtN2KavBCyy3cSk8asMb 4raNKJXoL8ILq69tLRMAlKn2EvA0c/BzHdAiwvZbGBms5fFj80A= -----END CERTIFICATE-----Generated at Sat Jun 13 21:19:47 2026 by rpki-client