$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft File: 23A948EB16F42F91944CC667D8613DD9AD7F2481.mft (raw, json) Hash identifier: ad5Oco8fJJTLCBpkAmy8TGbn9qYJHe+s6s3hQCMn7bA= Subject key identifier: 06:99:06:60:95:95:20:8D:1B:42:90:B6:DE:D3:33:DF:9A:BD:62:51 Authority key identifier: 23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 Certificate issuer: /CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Certificate serial: 458D95B5FE23C12726B09AA06CCFFB021AF45C8D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 01:56:33 +0000 Manifest this update: Sun 15 Nov 2026 01:51:33 +0000 Manifest next update: Mon 16 Nov 2026 05:53:33 +0000 Files and hashes: 1: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: 635Ti/3KrhSgNu8Gwnt/QjYuKqvc1Cqug8YI7DrA208=) 2: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: v65XV+5ddOqAbRU1/IxSl2v0vrbo4M4xD55oScBfz3w=) 3: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: kDGuaA+cqkmx9XuIt8DtLniH0ehk8T8tx9w2wbnmu+I=) 4: 23A948EB16F42F91944CC667D8613DD9AD7F2481.crl (hash: XdYRmXeUeShauYfawut5OjiVdF/BuTdtmAzXkRSJh0w=) 5: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: HXWQguAHiybQ0lNmv6j951fobzx6yk3XQekPS+8DSQI=) 6: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: Iadh95YULNi9WMbGAs3/Q3ZNW5dEBFpEr5CVUQ5/+x0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 05:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:8d:95:b5:fe:23:c1:27:26:b0:9a:a0:6c:cf:fb:02:1a:f4:5c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Validity Not Before: Nov 15 01:51:33 2026 GMT Not After : Nov 16 05:53:33 2026 GMT Subject: CN=069906609595208D1B4290B6DED333DF9ABD6251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:70:63:97:0a:bf:3a:ef:b3:3d:6b:3f:19:ec: d6:e7:55:c7:87:ac:d1:de:07:ea:e8:ab:16:4b:70: a7:f0:97:3b:36:37:e2:82:cc:87:dc:30:e0:50:5b: 24:9a:2a:0a:ba:29:da:de:e0:e9:1d:d3:7f:46:38: b7:b0:0c:52:ea:33:92:c0:3a:6a:0b:b1:7c:8f:bd: ba:97:e5:60:9b:78:8a:5b:10:79:fe:aa:8c:5e:fd: c1:7c:a4:bf:6f:f1:e1:69:17:e8:36:a9:61:ad:d9: 94:5c:9b:02:ec:70:d3:c9:d1:2b:bc:d4:af:56:79: ec:bb:d1:0d:b6:6a:ec:76:0a:97:63:a4:39:fb:09: 83:3a:83:58:6f:26:70:5c:7f:9a:c5:ab:d3:05:21: 89:ec:c9:fa:f0:02:74:dd:0b:88:75:d4:97:4d:ba: 6e:fc:55:a8:42:23:f2:8e:bd:cf:7b:97:ee:23:dd: dd:3d:31:c9:ed:6d:25:36:1a:01:24:27:45:6f:7e: 52:13:45:2c:cc:f6:b1:cf:9e:2e:7c:42:e3:58:87: 4e:ea:24:ad:45:df:4f:c2:91:4f:55:9b:cf:69:ca: 28:23:6c:75:34:83:18:88:bc:3a:11:43:24:61:8d: 5b:4d:2b:1e:86:e9:18:15:40:b8:31:83:3b:ff:d5: 46:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:99:06:60:95:95:20:8D:1B:42:90:B6:DE:D3:33:DF:9A:BD:62:51 X509v3 Authority Key Identifier: keyid:23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:03:a0:46:d9:88:f1:c4:30:ad:de:4a:ca:bd:00:36:f9:ea: f0:70:b7:1c:9e:6d:34:fc:be:2b:56:01:b1:49:48:e0:80:11: e6:c4:a9:7d:12:19:b0:6a:d7:7a:97:14:8b:f9:31:02:84:79: 04:cc:91:63:a8:b0:2d:e0:9a:41:78:c9:bd:18:c8:f8:68:33: 92:60:47:ec:6f:ef:1f:d4:c5:43:6d:6d:38:54:8e:c5:16:6b: 4f:14:5f:b2:c4:55:21:6c:63:a8:aa:01:21:9a:6e:ed:d9:b5: be:cf:b8:1d:65:63:e4:ac:62:e0:05:3b:4c:a4:81:cb:d6:c4: 9b:f0:99:bd:63:2e:bf:93:aa:a9:10:a1:ca:86:54:f8:45:5a: e9:47:25:62:87:8a:30:12:2a:f6:c3:d2:c8:8b:fc:3f:c4:86: 6a:ef:c4:ce:9c:aa:59:30:97:c3:ff:94:e0:d6:b4:6d:f1:98: f2:89:fa:18:08:48:c5:41:4f:11:2f:d0:82:1e:41:60:d0:93: a9:19:27:90:94:1c:fc:07:56:0a:86:2c:f8:94:e6:3f:23:88: 36:eb:5c:a4:5c:e0:2d:d2:61:12:a9:a4:82:18:f6:4c:01:03: 0e:18:d6:6d:f1:b6:99:5a:7b:0e:61:bc:62:3e:3a:96:8d:5d: fe:14:e3:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURY2Vtf4jwScmsJqgbM/7Ahr0XI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNERDlB RDdGMjQ4MTAeFw0yNjExMTUwMTUxMzNaFw0yNjExMTYwNTUzMzNaMDMxMTAvBgNV BAMTKDA2OTkwNjYwOTU5NTIwOEQxQjQyOTBCNkRFRDMzM0RGOUFCRDYyNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cGOXCr8677M9az8Z7NbnVceH rNHeB+roqxZLcKfwlzs2N+KCzIfcMOBQWySaKgq6Kdre4Okd039GOLewDFLqM5LA OmoLsXyPvbqX5WCbeIpbEHn+qoxe/cF8pL9v8eFpF+g2qWGt2ZRcmwLscNPJ0Su8 1K9Weey70Q22aux2CpdjpDn7CYM6g1hvJnBcf5rFq9MFIYnsyfrwAnTdC4h11JdN um78VahCI/KOvc97l+4j3d09McntbSU2GgEkJ0VvflITRSzM9rHPni58QuNYh07q JK1F30/CkU9Vm89pyigjbHU0gxiIvDoRQyRhjVtNKx6G6RgVQLgxgzv/1UaxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBpkGYJWVII0bQpC23tMz35q9YlEwHwYDVR0j BBgwFoAUI6lI6xb0L5GUTMZn2GE92a1/JIEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJhYzBjYTUtNWNlNy00ZTZlLTlmZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIx NkY0MkY5MTk0NENDNjY3RDg2MTNERDlBRDdGMjQ4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yM0E5NDhFQjE2RjQyRjkxOTQ0Q0M2NjdEODYxM0REOUFEN0Yy NDgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNE RDlBRDdGMjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIDoEbZiPHEMK3eSsq9ADb56vBwtxyebTT8 vitWAbFJSOCAEebEqX0SGbBq13qXFIv5MQKEeQTMkWOosC3gmkF4yb0YyPhoM5Jg R+xv7x/UxUNtbThUjsUWa08UX7LEVSFsY6iqASGabu3Ztb7PuB1lY+SsYuAFO0yk gcvWxJvwmb1jLr+TqqkQocqGVPhFWulHJWKHijASKvbD0siL/D/EhmrvxM6cqlkw l8P/lODWtG3xmPKJ+hgISMVBTxEv0IIeQWDQk6kZJ5CUHPwHVgqGLPiU5j8jiDbr XKRc4C3SYRKppIIY9kwBAw4Y1m3xtplaew5hvGI+OpaNXf4U4/g= -----END CERTIFICATE-----Generated at Sun Nov 15 11:02:15 2026 by rpki-client