$ rpki-client -vvf rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft File: E23AA0021573342645A2DFB669071A3FC460F128.mft (raw, json) Hash identifier: qt6MNR6h+q+u8nDcjMiWpz2htimlwaseaWMLTY9Yn+c= Subject key identifier: 49:F0:68:57:57:35:36:EC:F5:BD:FA:AC:B3:8A:FE:DB:C7:70:BE:A4 Authority key identifier: E2:3A:A0:02:15:73:34:26:45:A2:DF:B6:69:07:1A:3F:C4:60:F1:28 Certificate issuer: /CN=E23AA0021573342645A2DFB669071A3FC460F128 Certificate serial: 02BD9910D68804CFCD774CB1BBA4918336D0C686 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:03:26 +0000 Manifest this update: Thu 23 Jul 2026 18:58:26 +0000 Manifest next update: Fri 24 Jul 2026 21:35:26 +0000 Files and hashes: 1: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: ehJTG/Z8MCWRpYE7Mv6MPXlKzKRx5WpLNTB9Vc1HLns=) 2: E23AA0021573342645A2DFB669071A3FC460F128.crl (hash: S6Dsju6d+6AdxoARO9EqjKDDcfgF1A5VaiRWpXCOE24=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.crl rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:bd:99:10:d6:88:04:cf:cd:77:4c:b1:bb:a4:91:83:36:d0:c6:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E23AA0021573342645A2DFB669071A3FC460F128 Validity Not Before: Jul 23 18:58:26 2026 GMT Not After : Jul 24 21:35:26 2026 GMT Subject: CN=49F06857573536ECF5BDFAACB38AFEDBC770BEA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:eb:94:07:e3:c5:74:04:5a:4e:06:12:00: 2b:c6:20:3b:3c:60:61:92:aa:c0:b4:9d:8f:fd:9f: b1:50:03:7e:d2:2b:75:14:50:92:45:04:90:66:a3: 97:c1:03:29:d0:fe:78:db:63:96:f1:3e:b1:71:2a: 9a:d1:4f:88:dd:92:9b:57:09:7e:18:87:68:15:49: 3f:4e:1d:0f:2a:ee:c8:6c:89:da:e5:8c:89:46:b6: d6:81:2a:ee:fc:38:a3:63:cd:10:b6:d2:25:eb:ac: 97:f2:dc:38:b7:2a:9e:c3:b6:27:ce:46:78:98:64: 2b:ca:9a:f2:2a:f0:89:08:5a:54:48:9b:00:0d:a0: c1:4a:42:9d:bf:d1:34:80:12:5f:74:5c:4f:28:40: 37:5c:93:0f:e6:ad:f0:46:61:95:b9:bd:48:49:80: 8d:63:9a:54:b4:fe:01:86:21:43:f0:a3:c2:7b:f2: 5b:36:be:1a:d0:be:da:d4:a0:c0:1d:e9:2b:b3:44: 71:cd:6d:54:f0:7d:f5:61:6e:c7:ba:9e:f0:aa:0f: fb:7d:bc:a8:bd:eb:c8:56:0f:73:79:72:cc:a3:75: 83:96:6b:cc:7d:6a:01:f0:ba:94:3b:4c:c8:4e:07: 71:d4:2d:f4:f7:bd:9b:4d:cf:ae:42:20:aa:35:3e: 62:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F0:68:57:57:35:36:EC:F5:BD:FA:AC:B3:8A:FE:DB:C7:70:BE:A4 X509v3 Authority Key Identifier: keyid:E2:3A:A0:02:15:73:34:26:45:A2:DF:B6:69:07:1A:3F:C4:60:F1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e5:bc:3f:a6:46:05:2d:79:8c:ad:6f:22:59:9d:52:6f:e4: d6:7f:c6:e2:96:08:53:ac:5e:25:2f:c6:1b:ad:52:b6:44:79: 7d:83:29:2a:bb:87:af:2c:81:1c:22:56:af:55:ee:d1:ec:fa: a3:6b:c4:73:fc:fe:46:b8:21:77:82:13:07:f2:d7:18:b8:1b: 05:ef:34:2b:b4:2a:82:5c:c9:2c:04:0e:a7:4e:d3:b5:bb:ce: 34:22:1a:a4:d3:fa:90:78:09:b6:3c:31:f3:24:ca:c1:ee:1e: 73:ec:3a:7c:78:7b:48:0d:84:43:a0:d0:41:9d:60:27:96:fc: ab:2c:f9:f9:5b:b6:38:74:3f:65:85:09:eb:f9:9a:a2:f2:eb: 8e:d4:6f:44:b5:47:c2:ca:57:4e:d4:1e:a5:b9:4e:52:35:a5: 96:2c:b4:9c:df:80:97:51:0e:00:2e:ca:e2:3c:06:73:e7:67: 31:a4:35:4f:f7:82:4f:e3:c5:eb:7a:3f:52:df:1e:a7:b3:3f: e4:c1:9f:a2:00:ad:cc:f6:ba:26:6c:3c:f0:ef:5b:ad:9e:d3: 32:e0:84:d8:2d:b8:67:9b:4f:0a:bf:0a:21:cb:70:b9:8e:4c: 7a:b4:83:c0:3b:82:2d:61:3f:89:0f:ce:09:d5:cf:f2:7a:48: 4e:92:b4:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAr2ZENaIBM/Nd0yxu6SRgzbQxoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIzQUEwMDIxNTczMzQyNjQ1QTJERkI2NjkwNzFBM0ZD NDYwRjEyODAeFw0yNjA3MjMxODU4MjZaFw0yNjA3MjQyMTM1MjZaMDMxMTAvBgNV BAMTKDQ5RjA2ODU3NTczNTM2RUNGNUJERkFBQ0IzOEFGRURCQzc3MEJFQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+lOuUB+PFdARaTgYSACvGIDs8 YGGSqsC0nY/9n7FQA37SK3UUUJJFBJBmo5fBAynQ/njbY5bxPrFxKprRT4jdkptX CX4Yh2gVST9OHQ8q7shsidrljIlGttaBKu78OKNjzRC20iXrrJfy3Di3Kp7DtifO RniYZCvKmvIq8IkIWlRImwANoMFKQp2/0TSAEl90XE8oQDdckw/mrfBGYZW5vUhJ gI1jmlS0/gGGIUPwo8J78ls2vhrQvtrUoMAd6SuzRHHNbVTwffVhbse6nvCqD/t9 vKi968hWD3N5csyjdYOWa8x9agHwupQ7TMhOB3HULfT3vZtNz65CIKo1PmLFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSfBoV1c1Nuz1vfqss4r+28dwvqQwHwYDVR0j BBgwFoAU4jqgAhVzNCZFot+2aQcaP8Rg8SgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhkMGZjYTgtNWMyZC00ZTM1LWJkN2QtYjQ0OGFhNzVmMmJlLzAvRTIzQUEwMDIx NTczMzQyNjQ1QTJERkI2NjkwNzFBM0ZDNDYwRjEyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMjNBQTAwMjE1NzMzNDI2NDVBMkRGQjY2OTA3MUEzRkM0NjBG MTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhkMGZjYTgtNWMyZC00ZTM1LWJk N2QtYjQ0OGFhNzVmMmJlLzAvRTIzQUEwMDIxNTczMzQyNjQ1QTJERkI2NjkwNzFB M0ZDNDYwRjEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADflvD+mRgUteYytbyJZnVJv5NZ/xuKWCFOs XiUvxhutUrZEeX2DKSq7h68sgRwiVq9V7tHs+qNrxHP8/ka4IXeCEwfy1xi4GwXv NCu0KoJcySwEDqdO07W7zjQiGqTT+pB4CbY8MfMkysHuHnPsOnx4e0gNhEOg0EGd YCeW/Kss+flbtjh0P2WFCev5mqLy647Ub0S1R8LKV07UHqW5TlI1pZYstJzfgJdR DgAuyuI8BnPnZzGkNU/3gk/jxet6P1LfHqezP+TBn6IArcz2uiZsPPDvW62e0zLg hNgtuGebTwq/CiHLcLmOTHq0g8A7gi1hP4kPzgnVz/J6SE6StGg= -----END CERTIFICATE-----Generated at Fri Jul 24 07:29:32 2026 by rpki-client