$ rpki-client -vvf rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft File: 823E59BE50593557F29378EC4CAC8BDE16BF5074.mft (raw, json) Hash identifier: ubr8lL59Hqm92H0eldxcmf1AiU1FkLbO2VtK85BcXAE= Subject key identifier: 2F:64:8B:42:15:3B:B2:8C:10:C1:6C:A6:D5:FA:10:B4:C3:D8:2B:B2 Authority key identifier: 82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74 Certificate issuer: /CN=823E59BE50593557F29378EC4CAC8BDE16BF5074 Certificate serial: 58A90173EFA35A359A26CDC4A6B7F6365CBC637B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 09:04:50 +0000 Manifest this update: Sat 13 Jun 2026 08:59:50 +0000 Manifest next update: Sun 14 Jun 2026 10:09:50 +0000 Files and hashes: 1: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: 8cSHk4Qmt00Rlx//RoPVD8OhEt2winz9iHDLk522or4=) 2: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: xnCevyudli2t9um2DVMk2wF4GvogAhTTvOVWqK7SaCE=) 3: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: dzAufJOseFap4DRjmnUOc2LvueVNrB6swsyJUi6b4Xw=) 4: 823E59BE50593557F29378EC4CAC8BDE16BF5074.crl (hash: 8pSatSglWUcjiBRxtjcpxzwSNsCzdITVXrwipDNi+NU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 10:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a9:01:73:ef:a3:5a:35:9a:26:cd:c4:a6:b7:f6:36:5c:bc:63:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823E59BE50593557F29378EC4CAC8BDE16BF5074 Validity Not Before: Jun 13 08:59:50 2026 GMT Not After : Jun 14 10:09:50 2026 GMT Subject: CN=2F648B42153BB28C10C16CA6D5FA10B4C3D82BB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:70:b2:c1:c6:1f:06:06:57:07:0c:d7:16:db: f0:6e:ed:d9:bd:b9:d1:b6:77:10:e6:b6:f2:d7:74: b0:7e:fa:8f:d5:e0:d9:de:71:45:b0:5e:cd:f6:f8: 4d:3c:d7:02:9a:b4:8b:51:8d:27:1c:f2:79:f8:57: 6f:1b:7d:66:ee:10:d9:41:ea:9c:21:cf:93:6b:be: 47:bc:55:87:46:6a:e1:fe:e0:10:46:f9:fa:55:23: 83:77:dd:3a:e5:70:54:4f:e6:54:74:51:e0:13:01: 62:21:72:c6:fe:da:ee:03:c0:76:dc:21:35:d4:02: b3:dc:7c:c3:e7:1d:fb:c1:d8:15:92:e2:d2:59:3b: 1b:dd:cc:c7:ec:6c:a5:b5:63:bd:c6:7f:55:47:9d: 99:17:f9:d2:15:71:39:d7:8e:e0:e7:59:64:d4:cd: 5a:c7:9d:90:3e:4c:0e:38:09:9c:ac:fd:34:03:29: 0c:7c:80:25:1d:06:60:64:f5:ff:f3:f8:62:27:14: 86:af:0b:2d:95:52:46:eb:7c:2e:b4:ea:86:e1:87: f8:90:7f:c6:4f:33:91:d5:be:2b:fc:62:13:76:22: 81:3b:d4:2d:06:2b:0e:69:c6:d7:c1:5e:48:b3:7d: 7d:b3:40:65:d7:25:f3:48:d2:d7:4d:63:8e:13:54: 47:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:64:8B:42:15:3B:B2:8C:10:C1:6C:A6:D5:FA:10:B4:C3:D8:2B:B2 X509v3 Authority Key Identifier: keyid:82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f5:b9:15:ff:bd:1d:50:c8:38:4d:45:41:e5:c4:2a:4d:4e: 25:dc:e1:ce:15:17:ce:20:d2:17:77:e9:f9:ab:70:e8:32:5c: 65:85:af:5c:e6:22:dd:d9:8b:c4:20:a4:50:95:14:fb:75:5a: 46:6f:eb:b7:aa:d9:de:62:c5:1e:1d:7d:60:84:39:c0:03:16: 1e:6b:85:bb:3b:6c:f7:7d:b2:79:1a:29:2f:5b:37:f0:dd:1a: bb:f4:97:75:ca:2e:7a:c4:2f:b8:d0:87:43:c5:b1:36:51:88: 67:8e:4e:04:17:bc:a1:b6:5c:78:aa:21:c4:eb:77:8f:44:9b: 44:02:79:68:d6:0f:8b:0f:36:e6:ea:f1:f7:d5:2e:e0:cc:bb: ab:ff:02:5e:73:51:53:f0:31:14:bf:a2:72:17:25:93:70:2c: 00:cf:58:88:b5:9b:e0:14:4f:3a:c6:2d:d9:76:c1:f9:e1:86: b9:11:70:7c:46:be:68:ff:6e:e3:ee:ac:f6:a9:e0:2b:74:71: 55:fd:82:39:5c:dc:74:ae:81:ce:23:72:31:d6:c2:7b:24:7d: 23:2a:67:9a:ae:94:3b:11:69:77:51:7c:0f:f6:25:df:d4:64: 67:18:a9:1a:12:1a:ce:87:c9:63:60:93:f6:92:4a:3c:44:48: 9c:d1:3a:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKkBc++jWjWaJs3Eprf2Nly8Y3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIzRTU5QkU1MDU5MzU1N0YyOTM3OEVDNENBQzhCREUx NkJGNTA3NDAeFw0yNjA2MTMwODU5NTBaFw0yNjA2MTQxMDA5NTBaMDMxMTAvBgNV BAMTKDJGNjQ4QjQyMTUzQkIyOEMxMEMxNkNBNkQ1RkExMEI0QzNEODJCQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWcLLBxh8GBlcHDNcW2/Bu7dm9 udG2dxDmtvLXdLB++o/V4NnecUWwXs32+E081wKatItRjScc8nn4V28bfWbuENlB 6pwhz5Nrvke8VYdGauH+4BBG+fpVI4N33TrlcFRP5lR0UeATAWIhcsb+2u4DwHbc ITXUArPcfMPnHfvB2BWS4tJZOxvdzMfsbKW1Y73Gf1VHnZkX+dIVcTnXjuDnWWTU zVrHnZA+TA44CZys/TQDKQx8gCUdBmBk9f/z+GInFIavCy2VUkbrfC606obhh/iQ f8ZPM5HVviv8YhN2IoE71C0GKw5pxtfBXkizfX2zQGXXJfNI0tdNY44TVEfLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL2SLQhU7sowQwWym1foQtMPYK7IwHwYDVR0j BBgwFoAUgj5ZvlBZNVfyk3jsTKyL3ha/UHQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjU4MzgzZTItMjA2Yy00Yjc0LWJhNGEtY2Q4YTRkN2NkODYxLzAvODIzRTU5QkU1 MDU5MzU1N0YyOTM3OEVDNENBQzhCREUxNkJGNTA3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjNFNTlCRTUwNTkzNTU3RjI5Mzc4RUM0Q0FDOEJERTE2QkY1 MDc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvODIzRTU5QkU1MDU5MzU1N0YyOTM3OEVDNENBQzhC REUxNkJGNTA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHT1uRX/vR1QyDhNRUHlxCpNTiXc4c4VF84g 0hd36fmrcOgyXGWFr1zmIt3Zi8QgpFCVFPt1WkZv67eq2d5ixR4dfWCEOcADFh5r hbs7bPd9snkaKS9bN/DdGrv0l3XKLnrEL7jQh0PFsTZRiGeOTgQXvKG2XHiqIcTr d49Em0QCeWjWD4sPNubq8ffVLuDMu6v/Al5zUVPwMRS/onIXJZNwLADPWIi1m+AU TzrGLdl2wfnhhrkRcHxGvmj/buPurPap4Ct0cVX9gjlc3HSugc4jcjHWwnskfSMq Z5qulDsRaXdRfA/2Jd/UZGcYqRoSGs6HyWNgk/aSSjxESJzROrE= -----END CERTIFICATE-----Generated at Sat Jun 13 14:45:26 2026 by rpki-client