$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft File: 23A948EB16F42F91944CC667D8613DD9AD7F2481.mft (raw, json) Hash identifier: dI9lX/9iY4ZDNGIFWMfOhvYV4+sjjLwQHrwUfeOcXiA= Subject key identifier: D2:E5:70:5E:E7:1E:8E:8B:50:6F:84:E3:27:B8:25:9E:2C:63:8C:69 Authority key identifier: 23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 Certificate issuer: /CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Certificate serial: 46F50B097E41967070C00425CD87A30EE7E250C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 09:58:31 +0000 Manifest this update: Wed 23 Sep 2026 09:53:31 +0000 Manifest next update: Thu 24 Sep 2026 11:40:31 +0000 Files and hashes: 1: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: Iadh95YULNi9WMbGAs3/Q3ZNW5dEBFpEr5CVUQ5/+x0=) 2: 23A948EB16F42F91944CC667D8613DD9AD7F2481.crl (hash: O4bh2FR5xbj4Y3zt/M5qF9JJyWnJQeAepy5rx73Wgj0=) 3: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: HXWQguAHiybQ0lNmv6j951fobzx6yk3XQekPS+8DSQI=) 4: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: 635Ti/3KrhSgNu8Gwnt/QjYuKqvc1Cqug8YI7DrA208=) 5: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: kDGuaA+cqkmx9XuIt8DtLniH0ehk8T8tx9w2wbnmu+I=) 6: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: v65XV+5ddOqAbRU1/IxSl2v0vrbo4M4xD55oScBfz3w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:f5:0b:09:7e:41:96:70:70:c0:04:25:cd:87:a3:0e:e7:e2:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Validity Not Before: Sep 23 09:53:31 2026 GMT Not After : Sep 24 11:40:31 2026 GMT Subject: CN=D2E5705EE71E8E8B506F84E327B8259E2C638C69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1a:dc:2c:78:96:c5:76:fe:fc:93:51:52:b9: 1a:b7:19:1a:df:28:7f:8d:a7:b1:62:13:9e:1a:14: ce:34:70:ec:86:d5:5a:d9:e0:a2:fc:0d:67:9b:6b: 67:0a:73:cf:1c:0d:ff:ae:3d:b8:90:67:be:79:ad: e4:e3:63:d3:af:43:a9:5e:85:91:d7:dc:73:3b:82: f8:42:37:1f:48:cd:4c:4e:fc:7e:af:15:8d:62:59: 80:45:c8:3a:6e:d5:e3:51:12:12:01:4b:31:8a:93: 08:c7:7a:0c:14:7e:29:53:56:8d:67:d9:08:b6:b4: 51:b5:4e:ef:44:ed:58:49:7e:5c:9a:c3:54:d3:07: a5:a6:03:38:69:cd:7e:6a:fa:97:d0:8b:8f:21:1e: b2:be:c5:0a:73:18:f9:0c:3e:9c:96:3a:5f:81:1c: e5:da:21:4e:be:65:89:16:10:b5:d2:0f:d1:27:df: 79:15:e9:ac:02:44:70:3d:58:2f:87:8d:dd:28:85: 86:c8:6b:6f:0f:59:cb:be:02:37:08:d8:a2:bf:12: 10:80:0d:a7:6f:29:19:ee:f9:22:b3:8e:ef:9e:e7: e7:aa:be:18:5a:1e:40:52:08:4d:3e:3f:7b:86:1a: 64:d0:3d:ee:de:a4:c4:d2:db:60:86:ec:61:db:75: ed:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E5:70:5E:E7:1E:8E:8B:50:6F:84:E3:27:B8:25:9E:2C:63:8C:69 X509v3 Authority Key Identifier: keyid:23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:92:15:6a:09:c9:23:a9:c7:f3:69:36:66:b0:dc:5f:05:40: 52:40:aa:43:ff:55:97:61:a4:2d:a7:59:28:31:78:ed:1b:c2: 68:4a:da:bd:bd:af:7b:c1:10:d8:10:a5:2b:f6:e1:5f:0b:2b: b2:36:1d:7c:2c:39:60:df:4d:72:a5:39:38:2a:15:d9:94:42: ed:f7:00:2c:c7:07:50:c2:76:98:8b:7d:04:11:e1:d5:5c:02: 5f:41:cb:c2:47:b8:46:89:ea:7d:1a:f2:7f:7f:06:e0:d1:3c: 94:7f:74:43:53:a9:af:95:77:4b:9d:e3:dd:41:1d:65:5a:56: 5b:ba:ab:90:a6:46:7c:d3:d6:7e:7d:a2:30:72:42:ae:eb:5e: db:6d:3b:36:36:98:0c:ab:e4:75:ae:51:16:30:ad:de:11:f8: ad:9a:cb:e7:0a:26:65:a7:dd:68:2b:39:c6:81:36:ae:a9:0e: d5:fd:91:a0:31:6a:4f:7c:73:15:c7:da:da:fe:13:ea:4d:69: 33:2f:fe:c7:b5:3e:60:94:ea:56:05:73:5d:e6:e2:e2:d1:05: 24:23:9f:79:d8:aa:e9:9a:8b:8c:fd:21:c7:39:e6:4f:a2:3e: c7:98:be:2d:24:d3:f8:73:09:0a:c9:04:4b:47:9c:59:ff:b4: eb:70:ac:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURvULCX5BlnBwwAQlzYejDufiUMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNERDlB RDdGMjQ4MTAeFw0yNjA5MjMwOTUzMzFaFw0yNjA5MjQxMTQwMzFaMDMxMTAvBgNV BAMTKEQyRTU3MDVFRTcxRThFOEI1MDZGODRFMzI3QjgyNTlFMkM2MzhDNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOGtwseJbFdv78k1FSuRq3GRrf KH+Np7FiE54aFM40cOyG1VrZ4KL8DWeba2cKc88cDf+uPbiQZ755reTjY9OvQ6le hZHX3HM7gvhCNx9IzUxO/H6vFY1iWYBFyDpu1eNREhIBSzGKkwjHegwUfilTVo1n 2Qi2tFG1Tu9E7VhJflyaw1TTB6WmAzhpzX5q+pfQi48hHrK+xQpzGPkMPpyWOl+B HOXaIU6+ZYkWELXSD9En33kV6awCRHA9WC+Hjd0ohYbIa28PWcu+AjcI2KK/EhCA DadvKRnu+SKzju+e5+eqvhhaHkBSCE0+P3uGGmTQPe7epMTS22CG7GHbde03AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0uVwXucejotQb4TjJ7glnixjjGkwHwYDVR0j BBgwFoAUI6lI6xb0L5GUTMZn2GE92a1/JIEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJhYzBjYTUtNWNlNy00ZTZlLTlmZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIx NkY0MkY5MTk0NENDNjY3RDg2MTNERDlBRDdGMjQ4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yM0E5NDhFQjE2RjQyRjkxOTQ0Q0M2NjdEODYxM0REOUFEN0Yy NDgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNE RDlBRDdGMjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESSFWoJySOpx/NpNmaw3F8FQFJAqkP/VZdh pC2nWSgxeO0bwmhK2r29r3vBENgQpSv24V8LK7I2HXwsOWDfTXKlOTgqFdmUQu33 ACzHB1DCdpiLfQQR4dVcAl9By8JHuEaJ6n0a8n9/BuDRPJR/dENTqa+Vd0ud491B HWVaVlu6q5CmRnzT1n59ojByQq7rXtttOzY2mAyr5HWuURYwrd4R+K2ay+cKJmWn 3WgrOcaBNq6pDtX9kaAxak98cxXH2tr+E+pNaTMv/se1PmCU6lYFc13m4uLRBSQj n3nYqumai4z9Icc55k+iPseYvi0k0/hzCQrJBEtHnFn/tOtwrGI= -----END CERTIFICATE-----Generated at Thu Sep 24 00:49:17 2026 by rpki-client