$ rpki-client -vvf rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft File: 23A948EB16F42F91944CC667D8613DD9AD7F2481.mft (raw, json) Hash identifier: aLbCU1XQtNOyiiM/6DinhISp8AlstbFE8VrZs7U4eco= Subject key identifier: 4B:47:51:01:F2:B2:68:6A:19:9F:88:95:4D:30:CE:81:15:62:FC:D7 Authority key identifier: 23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 Certificate issuer: /CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Certificate serial: 4E906F47AE8012E6C13CB3ABFA9A608453FED0EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 20:35:07 +0000 Manifest this update: Thu 23 Jul 2026 20:30:07 +0000 Manifest next update: Fri 24 Jul 2026 21:38:07 +0000 Files and hashes: 1: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: v65XV+5ddOqAbRU1/IxSl2v0vrbo4M4xD55oScBfz3w=) 2: 23A948EB16F42F91944CC667D8613DD9AD7F2481.crl (hash: +F9B8lnTeRc1W2za9Xkxt6ictqFtXBymhfUIqq2JdxE=) 3: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: 635Ti/3KrhSgNu8Gwnt/QjYuKqvc1Cqug8YI7DrA208=) 4: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: kDGuaA+cqkmx9XuIt8DtLniH0ehk8T8tx9w2wbnmu+I=) 5: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: Iadh95YULNi9WMbGAs3/Q3ZNW5dEBFpEr5CVUQ5/+x0=) 6: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: HXWQguAHiybQ0lNmv6j951fobzx6yk3XQekPS+8DSQI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:90:6f:47:ae:80:12:e6:c1:3c:b3:ab:fa:9a:60:84:53:fe:d0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Validity Not Before: Jul 23 20:30:07 2026 GMT Not After : Jul 24 21:38:07 2026 GMT Subject: CN=4B475101F2B2686A199F88954D30CE811562FCD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:71:7a:fe:68:96:8a:6c:f9:e3:cf:43:05:6c: 29:3f:e4:f6:26:7d:27:45:c2:bb:57:ba:88:e3:20: ac:5c:65:2f:d9:b3:fe:dd:31:6c:fb:09:50:da:e4: c7:05:3a:0d:76:0e:44:28:dc:b5:32:66:d4:88:0e: 17:1d:a3:54:be:d4:f0:5c:cd:ef:cc:17:c4:34:92: 45:1d:45:5c:5b:31:1b:5d:3e:23:5a:92:58:74:64: 3e:14:60:aa:9f:b5:44:2d:87:f1:63:d6:3a:59:5d: 36:f6:e4:05:39:b2:1f:5f:89:4a:70:ef:b1:fd:cc: cf:a2:b5:a1:1e:e6:49:ff:7a:0f:ee:30:24:aa:46: bb:e2:a6:88:67:1d:6c:48:b5:f0:d4:41:40:ff:59: 73:cc:3e:34:fd:24:b1:2b:8b:42:24:15:88:96:09: 73:fd:24:5a:14:81:34:ff:10:09:e3:0d:21:a2:9e: be:0e:22:0d:9e:5c:7d:58:43:92:1d:3d:b2:f8:77: a7:90:85:99:80:01:ca:3d:8d:29:b7:12:bf:bb:62: 2b:de:9f:ef:e9:23:42:33:ac:1f:90:ef:92:49:34: 4e:f8:49:38:09:fe:21:5b:92:72:6f:90:4f:a7:ea: e1:7a:91:52:9a:0f:71:4f:50:b4:89:68:6e:b3:bb: 37:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:47:51:01:F2:B2:68:6A:19:9F:88:95:4D:30:CE:81:15:62:FC:D7 X509v3 Authority Key Identifier: keyid:23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:65:61:aa:6a:f7:e2:7d:0f:3a:fd:81:b9:ad:49:61:31:37: 77:0b:6a:e4:10:e2:94:1f:11:33:ec:25:76:ea:42:23:b1:38: 52:16:1b:9f:ea:85:1a:d7:ac:9d:68:da:9d:92:ed:e7:7c:3a: 9c:78:14:a3:73:22:6f:e7:3e:4d:4c:4a:95:a7:65:e0:12:02: 39:03:dc:71:6d:23:4a:f5:f9:ba:2e:c6:97:7d:01:e5:80:e4: d2:70:5b:fa:cc:fc:f6:80:c6:06:55:7e:f3:85:45:8a:9f:9f: f2:85:23:69:19:86:31:91:ae:de:49:ed:35:dd:15:8e:17:eb: ef:98:4f:5a:86:f9:84:71:fb:44:3b:e3:d6:01:5f:47:f9:f6: 30:6b:cc:f0:ed:cf:99:7b:4d:f0:d4:cc:1a:1d:13:f3:f9:58: bb:75:3e:70:b8:6a:77:89:43:9b:88:e4:ca:13:e6:57:a9:e0: 85:48:f3:5f:19:aa:90:65:77:cc:0b:83:b4:75:6b:a5:84:dd: ac:1f:59:cf:45:e9:69:00:f5:7a:48:1f:82:48:93:b6:89:1a: 4e:de:ed:57:a7:f6:4a:6a:44:bb:dd:8f:a8:14:05:33:c0:30: 56:10:f1:59:de:e9:40:0c:bf:d9:85:c9:02:f7:24:d0:93:b5: 57:48:4a:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTpBvR66AEubBPLOr+ppghFP+0OowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNERDlB RDdGMjQ4MTAeFw0yNjA3MjMyMDMwMDdaFw0yNjA3MjQyMTM4MDdaMDMxMTAvBgNV BAMTKDRCNDc1MTAxRjJCMjY4NkExOTlGODg5NTREMzBDRTgxMTU2MkZDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDscXr+aJaKbPnjz0MFbCk/5PYm fSdFwrtXuojjIKxcZS/Zs/7dMWz7CVDa5McFOg12DkQo3LUyZtSIDhcdo1S+1PBc ze/MF8Q0kkUdRVxbMRtdPiNaklh0ZD4UYKqftUQth/Fj1jpZXTb25AU5sh9fiUpw 77H9zM+itaEe5kn/eg/uMCSqRrvipohnHWxItfDUQUD/WXPMPjT9JLEri0IkFYiW CXP9JFoUgTT/EAnjDSGinr4OIg2eXH1YQ5IdPbL4d6eQhZmAAco9jSm3Er+7Yive n+/pI0IzrB+Q75JJNE74STgJ/iFbknJvkE+n6uF6kVKaD3FPULSJaG6zuzflAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS0dRAfKyaGoZn4iVTTDOgRVi/NcwHwYDVR0j BBgwFoAUI6lI6xb0L5GUTMZn2GE92a1/JIEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJhYzBjYTUtNWNlNy00ZTZlLTlmZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIx NkY0MkY5MTk0NENDNjY3RDg2MTNERDlBRDdGMjQ4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yM0E5NDhFQjE2RjQyRjkxOTQ0Q0M2NjdEODYxM0REOUFEN0Yy NDgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNE RDlBRDdGMjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFlYapq9+J9Dzr9gbmtSWExN3cLauQQ4pQf ETPsJXbqQiOxOFIWG5/qhRrXrJ1o2p2S7ed8Opx4FKNzIm/nPk1MSpWnZeASAjkD 3HFtI0r1+bouxpd9AeWA5NJwW/rM/PaAxgZVfvOFRYqfn/KFI2kZhjGRrt5J7TXd FY4X6++YT1qG+YRx+0Q749YBX0f59jBrzPDtz5l7TfDUzBodE/P5WLt1PnC4aneJ Q5uI5MoT5lep4IVI818ZqpBld8wLg7R1a6WE3awfWc9F6WkA9XpIH4JIk7aJGk7e 7Ven9kpqRLvdj6gUBTPAMFYQ8Vne6UAMv9mFyQL3JNCTtVdISgo= -----END CERTIFICATE-----Generated at Fri Jul 24 03:58:50 2026 by rpki-client