$ rpki-client -vvf rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft File: 1423B36DE1705432D7FAC72E76D94A011FDE2748.mft (raw, json) Hash identifier: ba233HUR/xBieBVH9S4FBpGnlwyCabBpmx9sEqjhmN8= Subject key identifier: 64:B2:58:B0:C0:32:7A:9C:E9:22:99:D1:81:85:1C:28:5B:A8:05:A9 Authority key identifier: 14:23:B3:6D:E1:70:54:32:D7:FA:C7:2E:76:D9:4A:01:1F:DE:27:48 Certificate issuer: /CN=1423B36DE1705432D7FAC72E76D94A011FDE2748 Certificate serial: 3A3CD5F48A3A174B6E5740E28709F21B14772F45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:03:26 +0000 Manifest this update: Tue 12 May 2026 20:58:26 +0000 Manifest next update: Wed 13 May 2026 23:14:26 +0000 Files and hashes: 1: 1423B36DE1705432D7FAC72E76D94A011FDE2748.crl (hash: abgYRK9K4NoErvl9C/j7OLiePEtUUrQtSJ7ju26XppU=) 2: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: cCEW6l1CmmQEDb9CwJ4tPNqGxyEaPxiJZinIbOgsV2E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.crl rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:3c:d5:f4:8a:3a:17:4b:6e:57:40:e2:87:09:f2:1b:14:77:2f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1423B36DE1705432D7FAC72E76D94A011FDE2748 Validity Not Before: May 12 20:58:26 2026 GMT Not After : May 13 23:14:26 2026 GMT Subject: CN=64B258B0C0327A9CE92299D181851C285BA805A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:76:37:0d:43:7d:3f:37:74:1a:c1:a6:52:14: ef:98:95:4b:2e:06:ec:b1:5c:5f:57:32:03:68:03: 41:04:ea:c3:33:db:67:26:51:04:a1:d1:01:ac:be: 43:76:8d:4f:26:5d:ef:40:fb:55:a9:d9:a7:10:d8: 4c:bc:ae:24:f6:90:b5:5d:29:d4:af:8d:96:04:0f: fa:23:f4:41:a5:1b:0a:e3:ef:b7:42:97:ec:4d:55: be:62:86:15:ca:27:4d:fa:a9:f2:3f:68:ba:71:61: 3e:12:d1:b0:39:44:78:f8:b9:9b:d3:d5:73:e3:40: 83:dd:db:6b:93:ad:ef:b2:ae:14:80:6e:b8:ba:3f: 9f:01:48:c7:8b:79:4f:92:27:5d:15:30:ac:89:cf: 73:5e:dc:e0:20:03:3b:82:fe:36:c5:4b:61:73:16: d5:e7:89:17:52:ce:e9:f5:a9:4e:21:27:39:61:60: e6:8a:2c:89:5b:d6:d3:9b:22:12:ee:8b:b1:05:af: 3a:d1:d0:b1:f5:12:ba:dd:7d:60:02:08:ae:45:13: e6:cf:de:9c:96:d7:54:c8:e1:ba:53:3b:40:39:b7: ab:5b:65:cc:f5:cd:a4:6d:fe:99:c8:7f:8e:5e:24: b6:42:b2:cd:42:05:d0:cf:3f:a5:dd:c7:85:82:e2: b2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B2:58:B0:C0:32:7A:9C:E9:22:99:D1:81:85:1C:28:5B:A8:05:A9 X509v3 Authority Key Identifier: keyid:14:23:B3:6D:E1:70:54:32:D7:FA:C7:2E:76:D9:4A:01:1F:DE:27:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d9:55:c7:a2:f6:e5:4f:91:c7:38:88:1f:68:25:94:19:5a: 10:78:cd:20:5a:66:e7:8b:4c:e3:1b:72:5a:eb:bb:cf:67:47: fe:69:5d:b5:4d:92:d9:eb:1e:74:e5:14:ce:c2:de:06:e5:21: 59:7d:d7:4b:c4:83:c1:cc:51:88:60:6c:ff:4e:87:48:5a:7e: ef:4d:ec:3f:30:3a:91:0c:8f:09:01:dd:30:03:c7:86:8e:8b: 44:a5:63:64:90:12:06:84:62:ff:80:b1:43:96:6f:6f:dc:89: 83:91:2e:50:fb:50:37:28:ce:9c:dc:45:e7:d0:e6:cf:72:fe: f4:6d:f6:cf:ea:50:3c:3c:6c:f6:5b:9d:e0:f1:63:9c:62:d9: 5a:8c:81:55:33:39:15:a0:b2:64:ef:65:88:ea:b4:87:3b:55: 08:7c:8b:d0:ad:44:de:4d:2c:d9:7e:df:f2:b2:62:5d:33:6a: a9:d0:a7:39:d1:4e:18:e4:7b:16:40:bd:46:84:15:d9:88:37: 1e:ed:68:6a:14:0e:f3:1f:42:23:05:d8:bb:87:a7:84:b0:77: df:d2:f9:dc:23:28:1b:1e:53:0f:ae:3e:9d:da:2e:a0:47:7d: 2a:10:c4:13:7c:fb:34:60:4c:4b:33:3d:c1:32:96:f1:d4:61: 22:c9:8c:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOjzV9Io6F0tuV0DihwnyGxR3L0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQyM0IzNkRFMTcwNTQzMkQ3RkFDNzJFNzZEOTRBMDEx RkRFMjc0ODAeFw0yNjA1MTIyMDU4MjZaFw0yNjA1MTMyMzE0MjZaMDMxMTAvBgNV BAMTKDY0QjI1OEIwQzAzMjdBOUNFOTIyOTlEMTgxODUxQzI4NUJBODA1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCadjcNQ30/N3QawaZSFO+YlUsu BuyxXF9XMgNoA0EE6sMz22cmUQSh0QGsvkN2jU8mXe9A+1Wp2acQ2Ey8riT2kLVd KdSvjZYED/oj9EGlGwrj77dCl+xNVb5ihhXKJ036qfI/aLpxYT4S0bA5RHj4uZvT 1XPjQIPd22uTre+yrhSAbri6P58BSMeLeU+SJ10VMKyJz3Ne3OAgAzuC/jbFS2Fz FtXniRdSzun1qU4hJzlhYOaKLIlb1tObIhLui7EFrzrR0LH1ErrdfWACCK5FE+bP 3pyW11TI4bpTO0A5t6tbZcz1zaRt/pnIf45eJLZCss1CBdDPP6Xdx4WC4rKvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZLJYsMAyepzpIpnRgYUcKFuoBakwHwYDVR0j BBgwFoAUFCOzbeFwVDLX+scudtlKAR/eJ0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY1MDZlNzItOGI4Ny00NzAxLWEzNjAtYWViZTI1ODQ4ZjcxLzAvMTQyM0IzNkRF MTcwNTQzMkQ3RkFDNzJFNzZEOTRBMDExRkRFMjc0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDIzQjM2REUxNzA1NDMyRDdGQUM3MkU3NkQ5NEEwMTFGREUy NzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMTQyM0IzNkRFMTcwNTQzMkQ3RkFDNzJFNzZEOTRB MDExRkRFMjc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7ZVcei9uVPkcc4iB9oJZQZWhB4zSBaZueL TOMbclrru89nR/5pXbVNktnrHnTlFM7C3gblIVl910vEg8HMUYhgbP9Oh0hafu9N 7D8wOpEMjwkB3TADx4aOi0SlY2SQEgaEYv+AsUOWb2/ciYORLlD7UDcozpzcRefQ 5s9y/vRt9s/qUDw8bPZbneDxY5xi2VqMgVUzORWgsmTvZYjqtIc7VQh8i9CtRN5N LNl+3/KyYl0zaqnQpznRThjkexZAvUaEFdmINx7taGoUDvMfQiMF2LuHp4Swd9/S +dwjKBseUw+uPp3aLqBHfSoQxBN8+zRgTEszPcEylvHUYSLJjL0= -----END CERTIFICATE-----Generated at Wed May 13 11:50:01 2026 by rpki-client