$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft File: C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft (raw, json) Hash identifier: a+eXHjuzrIx6WTSuvr7/ywWqftYTMsvht6B7l/de2gk= Subject key identifier: D2:EE:53:7F:64:E2:9E:AD:83:E5:69:43:D1:4D:E0:94:91:05:14:45 Authority key identifier: C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E Certificate issuer: /CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E Certificate serial: 4249559C78197F020DF60C80F21F6208B6F3E25B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:37:35 +0000 Manifest this update: Fri 24 Jul 2026 02:32:35 +0000 Manifest next update: Sat 25 Jul 2026 06:10:35 +0000 Files and hashes: 1: C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl (hash: eflYqxKYUsiB5fbzmNlwfDpyzvScRd01a24Y46qU/0Q=) 2: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: 6fSlTUT4FE6vxiMFjSI/8DBq6Z1TAZClCEVauizzEWY=) 3: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: /19J6lbfu3WuykzZIAFXcyc9WvzK7MOPaoDjJFgPDAo=) 4: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: 7G6gzgziJNADnBWRinmQJqfiu0VElTbunaLLh9HunCE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:49:55:9c:78:19:7f:02:0d:f6:0c:80:f2:1f:62:08:b6:f3:e2:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E Validity Not Before: Jul 24 02:32:35 2026 GMT Not After : Jul 25 06:10:35 2026 GMT Subject: CN=D2EE537F64E29EAD83E56943D14DE09491051445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:4a:1b:45:86:7d:15:b6:32:3d:a0:52:8a: b4:56:6e:66:a2:4d:49:43:c4:b6:7c:a1:0d:f1:17: ab:7a:d6:a7:d3:0d:31:66:06:2d:34:de:65:31:26: 95:4b:6e:2b:4b:35:3b:59:fe:e9:1a:4f:66:f9:0e: 3f:d4:06:e2:94:63:41:42:fd:28:e9:44:bf:c7:19: 9a:f2:47:4d:21:3a:25:e5:93:31:1e:89:b0:30:6b: 16:b5:1f:65:90:2a:cd:52:85:03:26:34:43:eb:56: 48:17:91:93:5a:ea:aa:f3:e3:d8:67:80:c1:25:dc: 26:49:27:4e:6b:11:59:78:a8:ef:93:4e:d6:81:7e: 81:4d:41:ec:1a:da:88:d1:f5:e4:1f:fd:00:be:bd: 0a:de:49:6d:8e:fa:93:ff:e5:b4:d3:dc:f0:a9:88: 11:ae:3a:97:57:d7:f9:8f:0b:ff:cf:fb:fb:ad:74: 41:1e:f2:2a:bd:7b:8b:96:a5:c4:1d:aa:63:23:c2: fa:de:63:d0:56:60:8b:d3:78:e2:a1:6c:07:d8:b6: 4a:a6:11:e0:c9:16:db:2d:27:89:83:57:88:43:bc: 04:11:6a:cb:aa:c6:d2:5c:c0:56:ec:7c:e2:67:63: ee:10:f6:1c:f3:10:ec:ef:2b:c1:b4:16:40:98:0c: 81:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EE:53:7F:64:E2:9E:AD:83:E5:69:43:D1:4D:E0:94:91:05:14:45 X509v3 Authority Key Identifier: keyid:C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:68:4e:15:95:9e:82:05:12:39:8e:5a:8c:20:f2:ce:d6:56: 94:7e:23:0d:68:07:e4:2c:ba:b1:5e:f1:b1:15:a8:3c:74:73: 77:fd:9c:11:9f:91:72:f0:17:52:72:33:d2:04:70:bc:91:a0: 9d:c9:66:9c:85:eb:2b:c3:b1:b6:d3:8c:49:bc:6f:9d:aa:4f: b1:9a:96:05:30:23:67:42:75:bd:17:5b:f3:25:99:57:b1:08: ff:9f:17:8a:34:01:ca:10:ee:49:19:e0:57:29:de:ab:f9:4c: 8a:42:d6:80:b0:a2:c3:52:a4:c1:b9:12:a9:4f:7b:bc:03:1a: 21:ab:09:52:e3:1a:b3:13:e4:f4:44:93:b0:9c:74:b7:7c:d8: d1:28:cb:97:07:14:46:68:df:95:b3:70:c5:f1:49:45:0b:a9: 92:03:2b:06:54:ad:c1:60:8f:df:86:b1:cb:83:43:1b:a0:cb: e9:49:aa:7b:56:a3:6b:45:88:ec:04:97:3a:6d:bc:8e:1f:d5: fe:30:32:da:3f:36:92:45:be:8a:54:ad:04:4e:79:e6:21:30: c8:e1:e1:a8:3a:8b:56:4e:ab:14:9b:22:86:f9:34:be:8d:60: a8:ab:d5:94:54:52:70:76:48:c3:3a:f5:3d:66:f5:51:65:ea: d6:05:ca:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQklVnHgZfwIN9gyA8h9iCLbz4lswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzQjEzNDIyMEE3Qjk1QjgxRENDODNEOEQ3RTA2QTU1 MTBBNTQ5RTAeFw0yNjA3MjQwMjMyMzVaFw0yNjA3MjUwNjEwMzVaMDMxMTAvBgNV BAMTKEQyRUU1MzdGNjRFMjlFQUQ4M0U1Njk0M0QxNERFMDk0OTEwNTE0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/QUobRYZ9FbYyPaBSirRWbmai TUlDxLZ8oQ3xF6t61qfTDTFmBi003mUxJpVLbitLNTtZ/ukaT2b5Dj/UBuKUY0FC /SjpRL/HGZryR00hOiXlkzEeibAwaxa1H2WQKs1ShQMmNEPrVkgXkZNa6qrz49hn gMEl3CZJJ05rEVl4qO+TTtaBfoFNQewa2ojR9eQf/QC+vQreSW2O+pP/5bTT3PCp iBGuOpdX1/mPC//P+/utdEEe8iq9e4uWpcQdqmMjwvreY9BWYIvTeOKhbAfYtkqm EeDJFtstJ4mDV4hDvAQRasuqxtJcwFbsfOJnY+4Q9hzzEOzvK8G0FkCYDIFbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0u5Tf2Tinq2D5WlD0U3glJEFFEUwHwYDVR0j BBgwFoAUwjsTQiCnuVuB3Mg9jX4GpVEKVJ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ3OWU3YTctMWFhZS00ZTUyLWJhYzMtOGY3YzY3YWUwYTA0LzAvQzIzQjEzNDIy MEE3Qjk1QjgxRENDODNEOEQ3RTA2QTU1MTBBNTQ5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjNCMTM0MjIwQTdCOTVCODFEQ0M4M0Q4RDdFMDZBNTUxMEE1 NDlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQzIzQjEzNDIyMEE3Qjk1QjgxRENDODNEOEQ3RTA2 QTU1MTBBNTQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9oThWVnoIFEjmOWowg8s7WVpR+Iw1oB+Qs urFe8bEVqDx0c3f9nBGfkXLwF1JyM9IEcLyRoJ3JZpyF6yvDsbbTjEm8b52qT7Ga lgUwI2dCdb0XW/MlmVexCP+fF4o0AcoQ7kkZ4Fcp3qv5TIpC1oCwosNSpMG5EqlP e7wDGiGrCVLjGrMT5PREk7CcdLd82NEoy5cHFEZo35WzcMXxSUULqZIDKwZUrcFg j9+GscuDQxugy+lJqntWo2tFiOwElzptvI4f1f4wMto/NpJFvopUrQROeeYhMMjh 4ag6i1ZOqxSbIob5NL6NYKir1ZRUUnB2SMM69T1m9VFl6tYFyqE= -----END CERTIFICATE-----Generated at Fri Jul 24 05:40:40 2026 by rpki-client