$ rpki-client -vvvf rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft File: E23AA0021573342645A2DFB669071A3FC460F128.mft (raw, json) Hash identifier: i/GlpyEorNwyMQ8JajOMKF7yJM1zRtypAwPsCQ9D3GI= Subject key identifier: 0E:6A:9C:E8:F7:D6:17:8E:3A:1B:81:52:D7:AF:DA:A2:B1:AC:8E:E0 Authority key identifier: E2:3A:A0:02:15:73:34:26:45:A2:DF:B6:69:07:1A:3F:C4:60:F1:28 Certificate issuer: /CN=E23AA0021573342645A2DFB669071A3FC460F128 Certificate serial: 3908B4B5156255F09C865D45668E6E6C524C9FBC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 09:32:55 +0000 Manifest this update: Wed 23 Sep 2026 09:27:55 +0000 Manifest next update: Thu 24 Sep 2026 09:58:55 +0000 Files and hashes: 1: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: ehJTG/Z8MCWRpYE7Mv6MPXlKzKRx5WpLNTB9Vc1HLns=) 2: E23AA0021573342645A2DFB669071A3FC460F128.crl (hash: Lspg0mF3qeflp50W1XUjXUzsbt2GyIPwhNq1bIlXLm8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.crl rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:08:b4:b5:15:62:55:f0:9c:86:5d:45:66:8e:6e:6c:52:4c:9f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E23AA0021573342645A2DFB669071A3FC460F128 Validity Not Before: Sep 23 09:27:55 2026 GMT Not After : Sep 24 09:58:55 2026 GMT Subject: CN=0E6A9CE8F7D6178E3A1B8152D7AFDAA2B1AC8EE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:24:9c:3c:ee:34:22:73:6c:85:1e:49:28:e7: 14:42:fa:02:de:18:64:38:05:ce:06:f1:79:a9:93: 8f:86:bb:c6:b7:05:4f:21:cd:46:b1:65:11:10:75: 3a:93:8e:47:93:47:4c:cf:12:51:2b:1a:72:da:b0: 3b:03:46:8e:f6:24:96:60:8f:6d:ae:35:60:14:28: 48:9b:bc:60:45:38:64:5f:e5:41:09:4a:bf:20:6e: cb:0d:ed:15:af:f6:8c:e7:03:e7:1f:48:87:66:cd: c9:b6:14:46:fd:8b:51:77:32:a3:c8:40:dc:cf:32: df:5a:8b:60:ee:cb:75:8a:79:2f:f0:24:a1:22:57: db:f4:e7:ba:6a:50:ec:7e:bf:9d:0d:0a:d2:57:b4: 58:7a:b1:f3:78:e6:73:72:a8:2a:c2:6b:e7:c1:70: 96:62:40:5f:23:ad:15:2d:56:2d:e0:71:ca:11:7d: 6e:7b:b2:52:d0:0e:c0:b1:19:31:18:eb:df:a2:2d: 19:24:f3:44:c9:43:ce:4c:bd:41:96:ee:e7:86:7b: 0d:9e:d0:d0:87:05:2e:b5:52:92:a8:2c:db:a6:6f: 51:94:bd:ba:80:52:26:ac:db:cb:08:d4:4b:e4:3d: ca:5b:5d:d1:7d:0b:bd:de:cb:65:69:41:25:41:aa: 4f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6A:9C:E8:F7:D6:17:8E:3A:1B:81:52:D7:AF:DA:A2:B1:AC:8E:E0 X509v3 Authority Key Identifier: keyid:E2:3A:A0:02:15:73:34:26:45:A2:DF:B6:69:07:1A:3F:C4:60:F1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f9:81:f2:ff:28:69:bf:cc:b7:66:f0:9f:a1:3d:f9:30:25: 47:6d:6b:fc:c8:e8:7d:ba:d6:c4:cc:bb:4a:ee:55:2a:23:81: a4:69:d7:07:1d:91:04:a6:ba:28:a0:3b:91:f2:ad:09:f9:77: b6:d1:c7:39:5b:d5:22:7e:9e:a8:c1:15:80:e5:7a:76:24:42: 64:e6:a1:52:5f:c1:d9:e6:9e:8a:3e:42:4c:a5:1c:4f:e7:f7: 91:55:f5:d6:2f:7e:77:43:aa:70:c2:14:1d:7a:e2:61:5b:11: a1:32:be:71:9f:40:d4:e4:3f:f3:e1:a6:0d:ad:91:1f:be:96: c0:c9:32:e0:5b:e3:bc:93:0d:fd:86:5a:e3:cd:64:a5:87:5f: 3d:7f:3f:7f:40:5b:8e:3e:5c:22:33:65:7a:89:a0:d9:33:e7: b9:36:b3:c0:83:80:9d:27:74:13:3a:f0:a7:70:19:be:bc:15: 60:2a:04:a9:5a:e9:a5:7a:c2:52:64:46:76:c0:3f:0a:0f:28: b1:be:fd:83:67:9e:76:50:bd:27:db:93:08:33:25:38:e4:d2: ba:e3:8f:e2:2e:ce:10:23:75:eb:84:3d:83:2b:d4:34:8f:63: 17:e2:0f:89:ba:e5:12:a8:0c:2b:94:7d:a3:da:a3:67:26:dc: 8a:f2:bb:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOQi0tRViVfCchl1FZo5ubFJMn7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIzQUEwMDIxNTczMzQyNjQ1QTJERkI2NjkwNzFBM0ZD NDYwRjEyODAeFw0yNjA5MjMwOTI3NTVaFw0yNjA5MjQwOTU4NTVaMDMxMTAvBgNV BAMTKDBFNkE5Q0U4RjdENjE3OEUzQTFCODE1MkQ3QUZEQUEyQjFBQzhFRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHJJw87jQic2yFHkko5xRC+gLe GGQ4Bc4G8Xmpk4+Gu8a3BU8hzUaxZREQdTqTjkeTR0zPElErGnLasDsDRo72JJZg j22uNWAUKEibvGBFOGRf5UEJSr8gbssN7RWv9oznA+cfSIdmzcm2FEb9i1F3MqPI QNzPMt9ai2Duy3WKeS/wJKEiV9v057pqUOx+v50NCtJXtFh6sfN45nNyqCrCa+fB cJZiQF8jrRUtVi3gccoRfW57slLQDsCxGTEY69+iLRkk80TJQ85MvUGW7ueGew2e 0NCHBS61UpKoLNumb1GUvbqAUias28sI1EvkPcpbXdF9C73ey2VpQSVBqk/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDmqc6PfWF446G4FS16/aorGsjuAwHwYDVR0j BBgwFoAU4jqgAhVzNCZFot+2aQcaP8Rg8SgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhkMGZjYTgtNWMyZC00ZTM1LWJkN2QtYjQ0OGFhNzVmMmJlLzAvRTIzQUEwMDIx NTczMzQyNjQ1QTJERkI2NjkwNzFBM0ZDNDYwRjEyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMjNBQTAwMjE1NzMzNDI2NDVBMkRGQjY2OTA3MUEzRkM0NjBG MTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhkMGZjYTgtNWMyZC00ZTM1LWJk N2QtYjQ0OGFhNzVmMmJlLzAvRTIzQUEwMDIxNTczMzQyNjQ1QTJERkI2NjkwNzFB M0ZDNDYwRjEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACn5gfL/KGm/zLdm8J+hPfkwJUdta/zI6H26 1sTMu0ruVSojgaRp1wcdkQSmuiigO5HyrQn5d7bRxzlb1SJ+nqjBFYDlenYkQmTm oVJfwdnmnoo+QkylHE/n95FV9dYvfndDqnDCFB164mFbEaEyvnGfQNTkP/Phpg2t kR++lsDJMuBb47yTDf2GWuPNZKWHXz1/P39AW44+XCIzZXqJoNkz57k2s8CDgJ0n dBM68KdwGb68FWAqBKla6aV6wlJkRnbAPwoPKLG+/YNnnnZQvSfbkwgzJTjk0rrj j+IuzhAjdeuEPYMr1DSPYxfiD4m65RKoDCuUfaPao2cm3Iryu9M= -----END CERTIFICATE-----Generated at Thu Sep 24 03:43:39 2026 by rpki-client