$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft File: 23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft (raw, json) Hash identifier: u5Spybsc90YuLxwZE6dcfEzvj/S4mvHNVp7TybdpeBI= Subject key identifier: 81:28:9A:1D:DD:25:E1:15:44:E6:CB:80:AB:0F:F7:EA:5E:AB:66:B1 Authority key identifier: 23:A0:F6:8C:EA:18:94:A3:2A:4A:04:BD:7E:64:F0:CF:0F:3D:EA:A0 Certificate issuer: /CN=23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0 Certificate serial: 6C34E11D03B49300BDF903033768ADC421DC0D86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 22:54:19 +0000 Manifest this update: Wed 23 Sep 2026 22:49:19 +0000 Manifest next update: Fri 25 Sep 2026 00:57:19 +0000 Files and hashes: 1: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: l/X2cP22D0Wy7RA8I5HP0mcO1xVHiIblMcBaMiAvS8U=) 2: 23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl (hash: aAvYTILz7Qrd329QgmuLt/zSWDQIu7nz78DmcPP1u8Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:34:e1:1d:03:b4:93:00:bd:f9:03:03:37:68:ad:c4:21:dc:0d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0 Validity Not Before: Sep 23 22:49:19 2026 GMT Not After : Sep 25 00:57:19 2026 GMT Subject: CN=81289A1DDD25E11544E6CB80AB0FF7EA5EAB66B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:aa:91:ef:c3:b7:ec:dd:57:39:42:0b:ac: 1c:03:1e:d3:a6:b4:08:da:f7:01:06:df:f7:23:1a: 07:3d:77:fb:22:02:1d:7b:a7:26:1e:da:45:64:99: d6:65:5d:e4:f7:d5:60:bd:29:43:26:5d:1e:1c:16: 55:be:46:8c:ab:2e:17:21:a4:f2:ea:03:40:65:e7: 89:46:da:93:b5:f3:f6:17:2b:b1:a8:24:45:2a:33: 57:2a:ae:5c:f5:7d:6e:34:9a:38:4f:bb:ec:bc:f6: e5:6d:7f:66:0a:52:c1:8d:f2:8a:e7:50:03:4e:ed: fd:74:87:8f:fe:76:cd:36:d5:e4:5b:0c:1b:ee:c4: 3d:e7:f9:f7:d8:52:81:48:a5:61:b5:74:ab:d4:7c: 16:32:08:96:2f:89:9d:19:24:71:97:3d:73:38:97: 7b:d8:1a:a3:77:a8:b0:5d:4c:33:81:3f:73:c5:ed: 36:11:eb:db:c7:7e:41:ac:5a:b8:c1:f1:d7:c5:d7: cc:3c:c6:08:a2:23:ea:19:d7:65:58:a7:18:3f:29: b6:c6:90:84:62:3a:70:eb:ab:c3:ee:b6:a0:fd:bd: de:01:26:90:f0:fa:9c:c0:05:d2:a7:b1:58:00:12: 0f:fd:05:6f:b0:1e:2f:05:70:fe:51:c1:08:82:bc: 0b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:28:9A:1D:DD:25:E1:15:44:E6:CB:80:AB:0F:F7:EA:5E:AB:66:B1 X509v3 Authority Key Identifier: keyid:23:A0:F6:8C:EA:18:94:A3:2A:4A:04:BD:7E:64:F0:CF:0F:3D:EA:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:20:92:19:77:91:65:74:82:f9:01:d7:e8:59:c3:ba:15:8c: 03:2a:43:ac:55:45:47:65:f0:6a:5a:34:32:5e:ea:4e:e6:4c: c2:27:38:7f:22:cf:57:a5:2f:25:5f:06:94:65:e7:76:3a:0d: 82:29:17:e6:d0:5c:d5:3d:ee:e4:df:dc:40:7f:d7:ed:df:8d: 92:63:71:2e:fa:c8:4e:aa:35:be:36:60:b4:1b:7b:7c:32:01: 32:3f:3e:6f:56:67:2b:62:20:6a:47:1f:59:15:41:4a:61:78: 05:64:6a:50:52:83:d9:05:ca:a2:97:5a:d4:0b:07:dd:f8:c2: e5:c5:ec:9e:59:89:92:62:8f:be:01:c2:34:24:2d:3b:41:e3: 05:97:d1:6a:4f:93:48:27:45:8f:8e:02:35:05:0d:62:39:5f: b6:fe:59:40:9b:7e:14:ff:c2:ac:f6:a3:88:aa:a0:50:f0:3e: f4:cc:de:e0:be:3a:08:14:f2:3d:e8:2a:d3:05:69:cc:c7:74: 3c:ee:a9:0a:6b:52:bf:ce:f8:93:e9:5d:4b:3b:ed:48:5e:f6: de:72:c6:14:8a:f3:cb:dc:49:cb:67:18:c0:fa:ac:22:27:8a: 1d:68:d4:6d:75:48:71:6d:d3:e3:6f:39:db:9b:4c:08:58:0d: 3d:89:0e:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbDThHQO0kwC9+QMDN2itxCHcDYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBMEY2OENFQTE4OTRBMzJBNEEwNEJEN0U2NEYwQ0Yw RjNERUFBMDAeFw0yNjA5MjMyMjQ5MTlaFw0yNjA5MjUwMDU3MTlaMDMxMTAvBgNV BAMTKDgxMjg5QTFEREQyNUUxMTU0NEU2Q0I4MEFCMEZGN0VBNUVBQjY2QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63KqR78O37N1XOUILrBwDHtOm tAja9wEG3/cjGgc9d/siAh17pyYe2kVkmdZlXeT31WC9KUMmXR4cFlW+RoyrLhch pPLqA0Bl54lG2pO18/YXK7GoJEUqM1cqrlz1fW40mjhPu+y89uVtf2YKUsGN8orn UANO7f10h4/+ds021eRbDBvuxD3n+ffYUoFIpWG1dKvUfBYyCJYviZ0ZJHGXPXM4 l3vYGqN3qLBdTDOBP3PF7TYR69vHfkGsWrjB8dfF18w8xgiiI+oZ12VYpxg/KbbG kIRiOnDrq8PutqD9vd4BJpDw+pzABdKnsVgAEg/9BW+wHi8FcP5RwQiCvAthAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgSiaHd0l4RVE5suAqw/36l6rZrEwHwYDVR0j BBgwFoAUI6D2jOoYlKMqSgS9fmTwzw896qAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1NGE4Y2UtMThmNC00OTg4LWE5NTEtOTY2NGRkMTc2Y2Q5LzAvMjNBMEY2OENF QTE4OTRBMzJBNEEwNEJEN0U2NEYwQ0YwRjNERUFBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yM0EwRjY4Q0VBMTg5NEEzMkE0QTA0QkQ3RTY0RjBDRjBGM0RF QUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvMjNBMEY2OENFQTE4OTRBMzJBNEEwNEJEN0U2NEYw Q0YwRjNERUFBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIogkhl3kWV0gvkB1+hZw7oVjAMqQ6xVRUdl 8GpaNDJe6k7mTMInOH8iz1elLyVfBpRl53Y6DYIpF+bQXNU97uTf3EB/1+3fjZJj cS76yE6qNb42YLQbe3wyATI/Pm9WZytiIGpHH1kVQUpheAVkalBSg9kFyqKXWtQL B934wuXF7J5ZiZJij74BwjQkLTtB4wWX0WpPk0gnRY+OAjUFDWI5X7b+WUCbfhT/ wqz2o4iqoFDwPvTM3uC+OggU8j3oKtMFaczHdDzuqQprUr/O+JPpXUs77Uhe9t5y xhSK88vcSctnGMD6rCInih1o1G11SHFt0+NvOdubTAhYDT2JDis= -----END CERTIFICATE-----Generated at Thu Sep 24 09:31:33 2026 by rpki-client