$ rpki-client -vvf rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft File: 823E59BE50593557F29378EC4CAC8BDE16BF5074.mft (raw, json) Hash identifier: UimtleHob1v7GeH7q+6Q9UC023J08Eu4fBGu08aXIlk= Subject key identifier: D0:1E:6D:38:76:44:4A:8B:DB:40:99:94:DF:88:A3:1B:E4:E9:73:F3 Authority key identifier: 82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74 Certificate issuer: /CN=823E59BE50593557F29378EC4CAC8BDE16BF5074 Certificate serial: 0A3879620254319859C6550A1D8F931E9F65F0FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 15:25:36 +0000 Manifest this update: Tue 28 Jul 2026 15:20:36 +0000 Manifest next update: Wed 29 Jul 2026 19:19:36 +0000 Files and hashes: 1: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: dzAufJOseFap4DRjmnUOc2LvueVNrB6swsyJUi6b4Xw=) 2: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: 8cSHk4Qmt00Rlx//RoPVD8OhEt2winz9iHDLk522or4=) 3: 823E59BE50593557F29378EC4CAC8BDE16BF5074.crl (hash: uFgJ+IIFZUiRmeXs0IvaAF/BnhhTm7RFrLQe5OyxFjQ=) 4: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: xnCevyudli2t9um2DVMk2wF4GvogAhTTvOVWqK7SaCE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:38:79:62:02:54:31:98:59:c6:55:0a:1d:8f:93:1e:9f:65:f0:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823E59BE50593557F29378EC4CAC8BDE16BF5074 Validity Not Before: Jul 28 15:20:36 2026 GMT Not After : Jul 29 19:19:36 2026 GMT Subject: CN=D01E6D3876444A8BDB409994DF88A31BE4E973F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f6:9e:88:36:7f:f5:1f:7d:6c:42:01:45:9e: e8:cd:c0:1c:c7:ae:7c:c5:33:17:df:0e:74:7b:35: dd:bc:af:12:42:1a:9a:71:e9:87:38:44:a9:d0:a9: fb:2a:32:75:bc:38:52:33:0f:55:52:d7:f4:17:1e: 5d:4c:79:ef:9e:65:25:e6:e6:3d:d4:d7:5a:79:b3: bb:6f:8c:32:e6:62:7e:c6:0f:c2:21:db:7c:22:46: aa:32:93:98:21:02:aa:e5:68:68:33:74:97:1d:49: 29:7f:26:5a:e8:85:80:a1:18:a9:dc:0d:3a:21:64: 52:8d:7b:4d:15:0e:1e:46:07:51:4d:86:a8:79:2e: 98:c7:5c:84:71:f4:3d:b4:a4:6c:cc:70:11:e7:7b: df:16:ef:03:7a:a7:b7:8f:e0:f6:32:43:df:13:f8: 1c:3b:2d:6f:69:11:10:53:19:4e:6f:f3:f6:2a:a7: a2:1d:dd:1e:de:55:f5:20:90:bc:52:b6:30:93:29: c3:3f:3b:0a:25:1c:cb:44:bc:84:34:9b:be:cf:e3: 2d:2c:4f:4e:2b:91:d0:9c:b3:2f:8e:b5:3c:6c:ad: a8:db:16:0f:44:28:86:ae:46:f8:c2:44:e3:8d:eb: e2:0b:2d:a7:fa:a1:32:6c:ac:44:d3:0a:26:e0:e1: 36:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1E:6D:38:76:44:4A:8B:DB:40:99:94:DF:88:A3:1B:E4:E9:73:F3 X509v3 Authority Key Identifier: keyid:82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:3e:92:f7:63:ba:03:a2:cf:a5:95:c2:c7:cd:a5:b7:35:e7: 68:b9:d6:ab:9c:96:23:02:8a:b8:90:87:f0:1b:9f:21:ac:0d: cb:ce:25:db:59:63:b6:3f:56:10:e8:98:94:3d:55:95:bc:55: c7:e9:4b:0d:93:a3:a1:80:22:11:5a:49:76:b7:e9:f6:c1:62: dc:04:34:3f:26:4b:2a:f3:39:56:a2:a7:7f:e4:18:60:a7:b3: 16:be:57:c9:be:f3:55:b5:cb:6e:ce:6e:b4:22:fe:26:c6:4d: 89:1d:86:80:bd:d7:c5:3e:22:1b:4b:62:1c:1a:62:2b:c8:d8: b1:f2:33:b1:7b:af:5e:ee:84:be:f8:25:72:6c:ef:55:25:74: 44:e3:31:a8:4a:2b:4a:9b:7e:74:1e:bb:8c:f5:3d:3f:85:bc: 48:86:ab:2f:b1:d2:e1:4f:43:f2:4c:e9:bf:74:a1:6a:30:41: ed:63:1a:21:92:a0:37:e0:de:e2:e0:33:e6:68:af:37:12:d1: b9:83:9e:08:c3:9a:f6:91:6a:f0:33:c5:2a:d9:64:bb:9d:b7: 89:a1:8b:d8:73:88:9e:19:ac:87:69:b9:73:09:49:d3:9d:1e: 50:92:44:6b:79:cf:b0:d1:01:76:4b:fd:5f:19:d5:26:77:a7: 01:b7:d1:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCjh5YgJUMZhZxlUKHY+THp9l8PswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIzRTU5QkU1MDU5MzU1N0YyOTM3OEVDNENBQzhCREUx NkJGNTA3NDAeFw0yNjA3MjgxNTIwMzZaFw0yNjA3MjkxOTE5MzZaMDMxMTAvBgNV BAMTKEQwMUU2RDM4NzY0NDRBOEJEQjQwOTk5NERGODhBMzFCRTRFOTczRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI9p6INn/1H31sQgFFnujNwBzH rnzFMxffDnR7Nd28rxJCGppx6Yc4RKnQqfsqMnW8OFIzD1VS1/QXHl1Mee+eZSXm 5j3U11p5s7tvjDLmYn7GD8Ih23wiRqoyk5ghAqrlaGgzdJcdSSl/JlrohYChGKnc DTohZFKNe00VDh5GB1FNhqh5LpjHXIRx9D20pGzMcBHne98W7wN6p7eP4PYyQ98T +Bw7LW9pERBTGU5v8/Yqp6Id3R7eVfUgkLxStjCTKcM/OwolHMtEvIQ0m77P4y0s T04rkdCcsy+OtTxsrajbFg9EKIauRvjCROON6+ILLaf6oTJsrETTCibg4TYHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0B5tOHZESovbQJmU34ijG+Tpc/MwHwYDVR0j BBgwFoAUgj5ZvlBZNVfyk3jsTKyL3ha/UHQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjU4MzgzZTItMjA2Yy00Yjc0LWJhNGEtY2Q4YTRkN2NkODYxLzAvODIzRTU5QkU1 MDU5MzU1N0YyOTM3OEVDNENBQzhCREUxNkJGNTA3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjNFNTlCRTUwNTkzNTU3RjI5Mzc4RUM0Q0FDOEJERTE2QkY1 MDc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvODIzRTU5QkU1MDU5MzU1N0YyOTM3OEVDNENBQzhC REUxNkJGNTA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKo+kvdjugOiz6WVwsfNpbc152i51qucliMC iriQh/AbnyGsDcvOJdtZY7Y/VhDomJQ9VZW8VcfpSw2To6GAIhFaSXa36fbBYtwE ND8mSyrzOVaip3/kGGCnsxa+V8m+81W1y27ObrQi/ibGTYkdhoC918U+IhtLYhwa YivI2LHyM7F7r17uhL74JXJs71UldETjMahKK0qbfnQeu4z1PT+FvEiGqy+x0uFP Q/JM6b90oWowQe1jGiGSoDfg3uLgM+ZorzcS0bmDngjDmvaRavAzxSrZZLudt4mh i9hziJ4ZrIdpuXMJSdOdHlCSRGt5z7DRAXZL/V8Z1SZ3pwG30Sg= -----END CERTIFICATE-----Generated at Wed Jul 29 02:29:14 2026 by rpki-client