$ rpki-client -vvf rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft File: 23A948EB16F42F91944CC667D8613DD9AD7F2481.mft (raw, json) Hash identifier: TSK+ndnYJ22IVJQzvdrrIImP9iQzRpuHhl54Nk2ZsJQ= Subject key identifier: 48:89:FC:C5:45:10:4E:B9:DF:9E:F9:9F:6B:EA:66:B6:77:B1:9F:F9 Authority key identifier: 23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 Certificate issuer: /CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Certificate serial: 60CE56F3A03B47477D2855768CE4BC8F6018D949 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:06:50 +0000 Manifest this update: Tue 12 May 2026 06:01:50 +0000 Manifest next update: Wed 13 May 2026 07:55:50 +0000 Files and hashes: 1: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: 635Ti/3KrhSgNu8Gwnt/QjYuKqvc1Cqug8YI7DrA208=) 2: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: Iadh95YULNi9WMbGAs3/Q3ZNW5dEBFpEr5CVUQ5/+x0=) 3: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: v65XV+5ddOqAbRU1/IxSl2v0vrbo4M4xD55oScBfz3w=) 4: 23A948EB16F42F91944CC667D8613DD9AD7F2481.crl (hash: QP2//eI3i/vbkPcQAt0NSR1hWGVdx/xSZIrqwZdL/AY=) 5: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: kDGuaA+cqkmx9XuIt8DtLniH0ehk8T8tx9w2wbnmu+I=) 6: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: HXWQguAHiybQ0lNmv6j951fobzx6yk3XQekPS+8DSQI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ce:56:f3:a0:3b:47:47:7d:28:55:76:8c:e4:bc:8f:60:18:d9:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Validity Not Before: May 12 06:01:50 2026 GMT Not After : May 13 07:55:50 2026 GMT Subject: CN=4889FCC545104EB9DF9EF99F6BEA66B677B19FF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ea:2f:78:86:4e:61:84:be:d4:03:ce:7d:16: 8b:7e:d0:d6:0c:53:51:ab:8a:a5:bc:9c:10:84:54: 4d:a4:71:3c:c0:5e:af:f4:9d:17:10:72:31:90:92: e3:cd:90:19:57:ca:e5:97:69:2c:e5:ef:0b:78:c5: cc:6c:f2:20:4e:2b:35:47:58:43:93:78:a2:10:20: f1:a2:70:63:bc:fd:82:36:94:59:e7:00:9b:ef:f3: af:21:59:f7:16:c5:6b:75:77:de:08:5e:0f:9e:4a: 51:fe:a2:db:67:85:c4:ab:45:24:49:a1:c1:74:18: eb:65:c1:72:e4:98:c5:34:d8:f6:7c:53:d2:71:a7: e2:3a:4a:a2:c5:09:44:c8:77:93:77:a8:08:a0:5c: 7c:05:35:aa:cd:b3:7e:6d:49:49:bd:9b:ee:83:3b: fc:09:38:eb:bd:e5:92:d0:06:bb:5b:cb:d4:3d:b9: 05:ca:70:5b:c7:73:19:f1:dd:02:44:08:74:af:eb: ce:23:49:15:df:b3:29:fc:4a:24:33:2c:f2:df:5a: f8:96:27:ea:30:93:64:d0:fd:30:80:0b:a6:59:81: 60:bb:5c:cc:c9:d2:e0:ea:2f:5d:e4:5b:2b:ca:1c: 9a:6e:b5:fa:83:38:e2:78:d3:fd:01:41:f9:2a:35: c0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:89:FC:C5:45:10:4E:B9:DF:9E:F9:9F:6B:EA:66:B6:77:B1:9F:F9 X509v3 Authority Key Identifier: keyid:23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:6d:53:b4:9e:c9:cb:69:8f:cc:e8:e1:32:b0:64:0d:c8:b0: c9:4b:52:08:e7:d9:a4:5f:a9:aa:d8:cc:25:ae:6c:46:7e:16: 24:e1:e7:31:98:63:0d:79:68:5e:fb:34:95:67:75:60:80:d0: f1:01:6a:cc:70:67:1f:dd:a7:db:f3:7c:14:b6:42:27:3a:af: ee:29:77:a4:90:0a:30:55:03:66:68:e3:5f:c8:16:ab:51:85: 26:c4:89:cd:ff:ab:93:3e:d6:6d:29:62:1a:e5:12:e6:43:f2: a2:56:ac:3f:9b:23:9e:05:53:6a:31:11:02:83:1f:b0:15:1a: dc:65:f6:d3:5b:4b:54:68:59:fb:69:ae:f7:87:8e:c0:b2:3f: b2:b4:f6:a5:98:6e:90:dd:f3:3e:d8:4e:39:75:9c:6b:41:bc: 5b:18:a6:cb:14:dd:ec:9e:ba:b3:d7:7a:c4:62:0a:b6:a1:b5: e9:1a:cd:98:4d:be:17:3a:26:9f:5a:8e:7a:22:27:ce:c5:ae: bb:1d:71:f6:d2:b4:95:e7:bc:3d:70:ab:c4:f4:da:ff:1c:c9: df:99:d4:d0:e1:e5:c6:3a:ff:8a:b5:98:88:b9:57:36:9f:b2: de:ca:81:6d:11:46:29:2c:54:04:2b:e6:f9:f2:e2:d8:79:5c: b7:0b:6a:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYM5W86A7R0d9KFV2jOS8j2AY2UkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNERDlB RDdGMjQ4MTAeFw0yNjA1MTIwNjAxNTBaFw0yNjA1MTMwNzU1NTBaMDMxMTAvBgNV BAMTKDQ4ODlGQ0M1NDUxMDRFQjlERjlFRjk5RjZCRUE2NkI2NzdCMTlGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe6i94hk5hhL7UA859Fot+0NYM U1GriqW8nBCEVE2kcTzAXq/0nRcQcjGQkuPNkBlXyuWXaSzl7wt4xcxs8iBOKzVH WEOTeKIQIPGicGO8/YI2lFnnAJvv868hWfcWxWt1d94IXg+eSlH+ottnhcSrRSRJ ocF0GOtlwXLkmMU02PZ8U9Jxp+I6SqLFCUTId5N3qAigXHwFNarNs35tSUm9m+6D O/wJOOu95ZLQBrtby9Q9uQXKcFvHcxnx3QJECHSv684jSRXfsyn8SiQzLPLfWviW J+owk2TQ/TCAC6ZZgWC7XMzJ0uDqL13kWyvKHJputfqDOOJ40/0BQfkqNcDdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSIn8xUUQTrnfnvmfa+pmtnexn/kwHwYDVR0j BBgwFoAUI6lI6xb0L5GUTMZn2GE92a1/JIEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJhYzBjYTUtNWNlNy00ZTZlLTlmZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIx NkY0MkY5MTk0NENDNjY3RDg2MTNERDlBRDdGMjQ4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yM0E5NDhFQjE2RjQyRjkxOTQ0Q0M2NjdEODYxM0REOUFEN0Yy NDgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNE RDlBRDdGMjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJtU7Seyctpj8zo4TKwZA3IsMlLUgjn2aRf qarYzCWubEZ+FiTh5zGYYw15aF77NJVndWCA0PEBasxwZx/dp9vzfBS2Qic6r+4p d6SQCjBVA2Zo41/IFqtRhSbEic3/q5M+1m0pYhrlEuZD8qJWrD+bI54FU2oxEQKD H7AVGtxl9tNbS1RoWftprveHjsCyP7K09qWYbpDd8z7YTjl1nGtBvFsYpssU3eye urPXesRiCrahtekazZhNvhc6Jp9ajnoiJ87FrrsdcfbStJXnvD1wq8T02v8cyd+Z 1NDh5cY6/4q1mIi5Vzafst7KgW0RRiksVAQr5vny4th5XLcLavQ= -----END CERTIFICATE-----Generated at Wed May 13 01:37:39 2026 by rpki-client