$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft File: C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft (raw, json) Hash identifier: Oq8+MOmxGv0H0X9RVc/GV66ooT2qgGGKX4IVdkuV5EU= Subject key identifier: C4:3B:D2:70:88:99:FC:D7:37:BF:2F:4D:4D:B3:75:E0:A9:2B:4D:C8 Authority key identifier: C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E Certificate issuer: /CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E Certificate serial: 08AFEC2A93DD283C0D4DF578694AA34E1F0BE4AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:48:06 +0000 Manifest this update: Tue 12 May 2026 23:43:06 +0000 Manifest next update: Thu 14 May 2026 01:58:06 +0000 Files and hashes: 1: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: 6fSlTUT4FE6vxiMFjSI/8DBq6Z1TAZClCEVauizzEWY=) 2: C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl (hash: tGUzMeb6NxKY4PtlyDUK1tbBUxFBA22cZ7pShKPCZ6U=) 3: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: 7G6gzgziJNADnBWRinmQJqfiu0VElTbunaLLh9HunCE=) 4: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: /19J6lbfu3WuykzZIAFXcyc9WvzK7MOPaoDjJFgPDAo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:af:ec:2a:93:dd:28:3c:0d:4d:f5:78:69:4a:a3:4e:1f:0b:e4:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E Validity Not Before: May 12 23:43:06 2026 GMT Not After : May 14 01:58:06 2026 GMT Subject: CN=C43BD2708899FCD737BF2F4D4DB375E0A92B4DC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e2:d0:93:b8:72:99:b6:44:14:2f:bf:ea:f2: 4b:85:04:00:26:f7:6b:20:49:e9:cc:29:37:cd:a7: 8e:29:2e:90:c7:21:69:98:ba:78:5b:ff:de:c7:87: 62:c0:a0:fa:28:a5:72:ca:39:f2:cb:34:c0:b5:3c: 8e:b3:b8:9a:c5:57:6a:76:01:d1:38:d8:0b:32:2d: 36:9c:44:af:8f:6f:95:2c:08:5f:02:f0:22:06:5c: ce:fc:00:e0:b6:b8:a6:56:89:58:9a:d9:99:d5:e7: 6f:83:c7:b1:b1:80:db:4b:79:9c:48:d2:74:57:4e: 78:b6:f5:c3:b8:fa:3b:8e:55:98:2d:c0:41:64:8d: 1e:ad:3d:5c:3e:23:e4:78:16:46:5b:61:37:1d:58: 88:56:34:35:2b:0b:ea:3b:2b:1a:93:e6:f3:c1:4d: 00:e0:ab:14:d3:e2:c5:08:1a:16:d2:0c:11:32:9f: 36:e6:99:57:27:d7:17:cc:af:60:cf:29:01:c8:fd: 48:67:ad:e1:00:97:cc:ce:0b:57:a3:db:10:0f:48: 63:29:d0:d4:0f:2c:f7:74:5d:3a:31:c8:e3:9a:a4: f1:31:3a:e5:aa:fe:eb:31:48:26:23:39:75:c7:3c: b5:77:b6:64:07:c2:fd:9a:b5:2d:cf:07:e9:d3:d4: cd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3B:D2:70:88:99:FC:D7:37:BF:2F:4D:4D:B3:75:E0:A9:2B:4D:C8 X509v3 Authority Key Identifier: keyid:C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:15:d6:90:88:0e:7f:a8:81:d0:9f:50:74:e5:c0:12:19:ce: 61:9a:0f:a1:fc:5a:11:6a:d3:7a:a7:31:de:a4:2c:50:5a:72: c8:4c:da:4d:a7:ff:8b:8c:dd:bc:d6:d1:b9:d3:53:7e:d4:50: 67:fa:8e:7a:92:bb:e3:ce:3a:ea:03:a4:9b:1d:3a:a9:07:01: 46:83:b2:b0:6c:8c:f6:99:a2:62:61:24:e7:c7:03:f1:3f:5d: b6:a1:20:c1:73:34:af:90:86:5b:74:d4:58:67:15:1a:30:b7: 9f:3a:27:41:d5:65:f3:41:68:64:1e:d4:69:bc:bd:42:b2:1e: 55:ee:6e:b2:3d:b1:c2:7b:9b:da:68:1d:34:02:c8:5e:13:43: c0:cc:e8:4b:06:9f:96:4e:53:69:38:d0:26:d8:7d:01:89:29: fe:b3:49:7e:b9:6d:e7:b1:9d:bf:e4:a5:37:cc:ab:23:e7:92: bb:8b:bd:cc:34:4e:af:6b:b5:cd:84:46:4d:0a:f2:a4:eb:1c: 15:54:db:51:ce:a2:29:c5:db:4b:53:2c:ed:33:93:a1:6e:8c: 63:40:15:eb:9c:bb:2b:99:16:f2:fa:ba:ed:9b:34:54:72:21: 8c:b8:2f:dc:ab:69:e3:38:6b:e4:7b:3c:4f:55:ad:27:4b:bb: cf:27:ee:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCK/sKpPdKDwNTfV4aUqjTh8L5KwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzQjEzNDIyMEE3Qjk1QjgxRENDODNEOEQ3RTA2QTU1 MTBBNTQ5RTAeFw0yNjA1MTIyMzQzMDZaFw0yNjA1MTQwMTU4MDZaMDMxMTAvBgNV BAMTKEM0M0JEMjcwODg5OUZDRDczN0JGMkY0RDREQjM3NUUwQTkyQjREQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4tCTuHKZtkQUL7/q8kuFBAAm 92sgSenMKTfNp44pLpDHIWmYunhb/97Hh2LAoPoopXLKOfLLNMC1PI6zuJrFV2p2 AdE42AsyLTacRK+Pb5UsCF8C8CIGXM78AOC2uKZWiVia2ZnV52+Dx7GxgNtLeZxI 0nRXTni29cO4+juOVZgtwEFkjR6tPVw+I+R4FkZbYTcdWIhWNDUrC+o7KxqT5vPB TQDgqxTT4sUIGhbSDBEynzbmmVcn1xfMr2DPKQHI/UhnreEAl8zOC1ej2xAPSGMp 0NQPLPd0XToxyOOapPExOuWq/usxSCYjOXXHPLV3tmQHwv2atS3PB+nT1M2JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxDvScIiZ/Nc3vy9NTbN14KkrTcgwHwYDVR0j BBgwFoAUwjsTQiCnuVuB3Mg9jX4GpVEKVJ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ3OWU3YTctMWFhZS00ZTUyLWJhYzMtOGY3YzY3YWUwYTA0LzAvQzIzQjEzNDIy MEE3Qjk1QjgxRENDODNEOEQ3RTA2QTU1MTBBNTQ5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjNCMTM0MjIwQTdCOTVCODFEQ0M4M0Q4RDdFMDZBNTUxMEE1 NDlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQzIzQjEzNDIyMEE3Qjk1QjgxRENDODNEOEQ3RTA2 QTU1MTBBNTQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8V1pCIDn+ogdCfUHTlwBIZzmGaD6H8WhFq 03qnMd6kLFBacshM2k2n/4uM3bzW0bnTU37UUGf6jnqSu+POOuoDpJsdOqkHAUaD srBsjPaZomJhJOfHA/E/XbahIMFzNK+Qhlt01FhnFRowt586J0HVZfNBaGQe1Gm8 vUKyHlXubrI9scJ7m9poHTQCyF4TQ8DM6EsGn5ZOU2k40CbYfQGJKf6zSX65beex nb/kpTfMqyPnkruLvcw0Tq9rtc2ERk0K8qTrHBVU21HOoinF20tTLO0zk6FujGNA FeucuyuZFvL6uu2bNFRyIYy4L9yraeM4a+R7PE9VrSdLu88n7tk= -----END CERTIFICATE-----Generated at Wed May 13 02:27:31 2026 by rpki-client