$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft File: 23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft (raw, json) Hash identifier: LoZ8fDoFOXe9j2dhbvIGUEGKF7zvEsj0Hs0lHjd2PIM= Subject key identifier: 6F:B9:A1:DD:1C:CB:3A:11:8B:62:2B:74:11:43:AD:F9:5E:F9:55:62 Authority key identifier: 23:A0:F6:8C:EA:18:94:A3:2A:4A:04:BD:7E:64:F0:CF:0F:3D:EA:A0 Certificate issuer: /CN=23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0 Certificate serial: 696001854DF1A9D91FDEAF4398684CA7ADEFC3E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 06:22:07 +0000 Manifest this update: Fri 24 Jul 2026 06:17:07 +0000 Manifest next update: Sat 25 Jul 2026 07:41:07 +0000 Files and hashes: 1: 23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl (hash: KjkrJFU5jqGGBfcJCgVni93ovxgOB7kGhxZa+vPFjds=) 2: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: l/X2cP22D0Wy7RA8I5HP0mcO1xVHiIblMcBaMiAvS8U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:60:01:85:4d:f1:a9:d9:1f:de:af:43:98:68:4c:a7:ad:ef:c3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0 Validity Not Before: Jul 24 06:17:07 2026 GMT Not After : Jul 25 07:41:07 2026 GMT Subject: CN=6FB9A1DD1CCB3A118B622B741143ADF95EF95562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d7:8d:fe:54:8d:59:cb:5f:99:61:5f:3e:bf: 4e:88:3d:6f:e6:40:72:df:3d:f1:4e:ed:d0:bd:aa: de:bb:26:27:40:30:75:4a:30:0b:45:8c:3f:36:11: 9f:e7:c5:0f:7f:db:09:82:41:df:b5:34:e9:20:d1: 0a:77:b9:f6:f0:8f:23:73:b5:90:fb:55:6f:75:63: 02:ba:19:63:b0:66:8d:4d:86:d2:88:0e:78:fd:6c: 0f:1a:8d:72:5f:d0:84:c9:44:c7:bf:6e:c5:16:83: 64:90:1c:05:a4:f8:db:6f:fd:41:c5:cc:15:c1:8d: 87:7c:f6:50:e0:15:30:a1:07:69:1c:88:b8:d5:1b: 51:be:a3:9c:6d:41:da:fe:e3:ec:57:4b:af:dc:cd: 71:0b:7a:b6:36:4b:ac:99:d6:63:ab:a4:fe:f2:aa: cd:4d:2d:1a:f9:18:d7:ca:08:6f:f4:92:1a:4c:99: fb:14:e2:8f:7e:7c:37:a7:52:2d:f0:68:01:31:d1: db:39:78:af:1d:b7:ce:28:e9:d7:52:a1:f1:71:9e: 9f:c2:1f:6c:30:d5:5d:92:5f:3a:d9:12:3f:ca:2f: 15:04:d3:b1:9d:a6:fc:c9:f8:e9:fd:b7:cd:d5:6b: dc:6d:59:14:79:c5:1b:2d:cc:a6:eb:b0:21:e8:87: 05:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B9:A1:DD:1C:CB:3A:11:8B:62:2B:74:11:43:AD:F9:5E:F9:55:62 X509v3 Authority Key Identifier: keyid:23:A0:F6:8C:EA:18:94:A3:2A:4A:04:BD:7E:64:F0:CF:0F:3D:EA:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ff:c5:5f:af:78:41:20:51:6b:ab:c8:2f:10:a9:7b:9d:64: 2b:2e:33:24:d2:c6:4c:47:2c:79:3f:f6:49:d5:01:29:e0:89: 16:c5:a6:10:90:29:1c:16:a6:32:3d:cf:76:bd:b5:57:0f:56: d3:e5:cb:c8:52:d2:77:51:e1:8e:be:c2:e5:1b:29:18:b2:90: 0f:90:4f:77:d2:35:02:13:4f:3f:9b:84:1c:00:2b:89:6a:82: e8:9c:d0:5c:70:5e:a2:c9:d8:9a:1b:57:54:bf:24:91:d5:27: b2:6b:9b:d7:72:16:f3:07:31:10:62:00:43:1f:92:4e:bb:82: 3a:43:14:5a:91:ae:af:ad:2c:30:8a:a3:ef:41:bf:56:09:64: 9f:1c:ba:8d:ff:ad:f8:46:12:db:11:d9:6d:1d:74:a0:c3:a1: f0:de:3d:37:09:f7:a2:2c:46:14:c5:c2:1d:86:d6:12:d1:84: e4:ad:8c:9a:c6:22:cc:9d:cb:bf:a6:d2:9e:76:6d:e0:a5:4b: 6b:f1:63:a9:a7:98:a0:ed:06:b4:6d:05:03:31:e3:b0:5a:51: 8d:bb:4e:84:46:f5:c5:97:b4:f4:ac:d7:f4:3b:c0:65:37:9b: 81:a6:0c:bc:a6:ee:56:af:51:59:3c:be:c5:9f:75:16:60:27: e1:99:59:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaWABhU3xqdkf3q9DmGhMp63vw+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBMEY2OENFQTE4OTRBMzJBNEEwNEJEN0U2NEYwQ0Yw RjNERUFBMDAeFw0yNjA3MjQwNjE3MDdaFw0yNjA3MjUwNzQxMDdaMDMxMTAvBgNV BAMTKDZGQjlBMUREMUNDQjNBMTE4QjYyMkI3NDExNDNBREY5NUVGOTU1NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT143+VI1Zy1+ZYV8+v06IPW/m QHLfPfFO7dC9qt67JidAMHVKMAtFjD82EZ/nxQ9/2wmCQd+1NOkg0Qp3ufbwjyNz tZD7VW91YwK6GWOwZo1NhtKIDnj9bA8ajXJf0ITJRMe/bsUWg2SQHAWk+Ntv/UHF zBXBjYd89lDgFTChB2kciLjVG1G+o5xtQdr+4+xXS6/czXELerY2S6yZ1mOrpP7y qs1NLRr5GNfKCG/0khpMmfsU4o9+fDenUi3waAEx0ds5eK8dt84o6ddSofFxnp/C H2ww1V2SXzrZEj/KLxUE07GdpvzJ+On9t83Va9xtWRR5xRstzKbrsCHohwVhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb7mh3RzLOhGLYit0EUOt+V75VWIwHwYDVR0j BBgwFoAUI6D2jOoYlKMqSgS9fmTwzw896qAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1NGE4Y2UtMThmNC00OTg4LWE5NTEtOTY2NGRkMTc2Y2Q5LzAvMjNBMEY2OENF QTE4OTRBMzJBNEEwNEJEN0U2NEYwQ0YwRjNERUFBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yM0EwRjY4Q0VBMTg5NEEzMkE0QTA0QkQ3RTY0RjBDRjBGM0RF QUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvMjNBMEY2OENFQTE4OTRBMzJBNEEwNEJEN0U2NEYw Q0YwRjNERUFBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEn/xV+veEEgUWuryC8QqXudZCsuMyTSxkxH LHk/9knVASngiRbFphCQKRwWpjI9z3a9tVcPVtPly8hS0ndR4Y6+wuUbKRiykA+Q T3fSNQITTz+bhBwAK4lqguic0FxwXqLJ2JobV1S/JJHVJ7Jrm9dyFvMHMRBiAEMf kk67gjpDFFqRrq+tLDCKo+9Bv1YJZJ8cuo3/rfhGEtsR2W0ddKDDofDePTcJ96Is RhTFwh2G1hLRhOStjJrGIsydy7+m0p52beClS2vxY6mnmKDtBrRtBQMx47BaUY27 ToRG9cWXtPSs1/Q7wGU3m4GmDLym7lavUVk8vsWfdRZgJ+GZWR0= -----END CERTIFICATE-----Generated at Fri Jul 24 11:34:10 2026 by rpki-client