$ rpki-client -vvf rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft File: A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft (raw, json) Hash identifier: txwrstPQWuiaWbQiZnodIyDdLTvx+QpF2in3xT4RUF4= Subject key identifier: DB:C2:8F:61:A4:4D:F7:42:85:77:65:2B:F3:6C:FD:E6:D6:64:82:B5 Authority key identifier: A2:3D:21:70:DA:27:C4:30:D1:B3:E7:D1:24:AB:D6:55:F4:6B:00:1F Certificate issuer: /CN=A23D2170DA27C430D1B3E7D124ABD655F46B001F Certificate serial: 731BEC52DFE9D40E179106CB274F0A9E2CCBF2B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A23D2170DA27C430D1B3E7D124ABD655F46B001F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 10:17:38 +0000 Manifest this update: Thu 23 Jul 2026 10:12:38 +0000 Manifest next update: Fri 24 Jul 2026 12:02:38 +0000 Files and hashes: 1: A23D2170DA27C430D1B3E7D124ABD655F46B001F.crl (hash: 4k1qaiUzHAVLRutR0p1oV8ZFZ+YvPxZxlKCVzC/dF4w=) 2: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: kqAPpNXie+q2l37gsl3EdI8q/ahDj2lY/Z2RQl2axK8=) 3: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: h4LsVnhP761IIN/z9Kk00GAOTaHl3wnyiIWG9ZY5w+g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.crl rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A23D2170DA27C430D1B3E7D124ABD655F46B001F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:1b:ec:52:df:e9:d4:0e:17:91:06:cb:27:4f:0a:9e:2c:cb:f2:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A23D2170DA27C430D1B3E7D124ABD655F46B001F Validity Not Before: Jul 23 10:12:38 2026 GMT Not After : Jul 24 12:02:38 2026 GMT Subject: CN=DBC28F61A44DF7428577652BF36CFDE6D66482B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:92:46:c2:aa:77:7e:97:c4:b6:38:dd:6f:d4: 1c:9c:24:3a:95:49:37:d5:7e:69:7c:f2:2a:29:eb: d2:dd:4a:c7:95:f8:e2:c8:58:0f:6f:7e:a0:e6:35: df:25:29:9e:71:c5:5a:15:6f:e8:61:90:8f:2d:81: dc:4f:74:36:da:c4:e0:6a:9a:01:ab:63:81:1f:68: 21:37:33:06:e9:35:9b:fa:2c:73:59:4c:f7:e2:23: d6:fb:22:cf:c4:6a:d7:95:32:1e:46:3b:ba:f0:2e: 1b:13:73:d2:30:db:5d:b9:9a:be:df:4a:60:9d:cd: 47:78:57:51:94:29:7a:d3:d1:6a:46:ba:bf:25:b7: cd:39:61:b1:7d:2e:52:95:fe:57:df:3f:d5:e6:2a: 4c:f4:9e:7e:2e:98:6c:cf:02:c7:29:77:23:f1:5b: 32:5d:94:19:77:14:22:95:ba:9b:08:c1:7c:9a:d8: 2e:c5:c9:4b:7d:19:c6:eb:29:49:5c:da:b7:ec:6a: de:3b:51:d2:d4:12:58:db:95:76:34:98:ca:7f:7b: 85:a6:9c:dd:86:29:7c:c0:4c:81:d9:2b:d7:b5:49: ef:ea:cb:dc:d2:c7:25:58:cd:c9:f4:37:f7:3c:fa: 66:5d:55:a6:29:a1:10:2e:fe:e4:47:50:22:4e:e1: eb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C2:8F:61:A4:4D:F7:42:85:77:65:2B:F3:6C:FD:E6:D6:64:82:B5 X509v3 Authority Key Identifier: keyid:A2:3D:21:70:DA:27:C4:30:D1:B3:E7:D1:24:AB:D6:55:F4:6B:00:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A23D2170DA27C430D1B3E7D124ABD655F46B001F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:80:7b:40:15:6d:aa:f8:e7:98:68:8f:34:cb:39:f8:f1:34: 12:9a:3c:50:6c:61:c3:6f:3b:cb:56:02:e5:1e:37:3a:e5:c1: 02:d1:41:fd:e5:1c:36:1e:65:ab:81:a2:7c:31:6b:e5:b7:67: 81:09:79:2c:b1:1c:f9:fd:30:46:44:62:84:41:b5:11:0f:7f: 96:4f:9a:5d:b5:2c:43:2b:f7:0c:3e:dc:f9:e1:40:f2:e5:b5: 89:74:34:c9:28:a1:5f:ad:c6:08:d0:30:31:54:22:6e:30:eb: 9a:fb:53:84:f6:aa:ff:5d:09:21:d1:f4:87:3f:5d:a1:ac:4e: 8a:7b:aa:22:64:2d:40:fc:6b:7c:d7:a5:be:4b:7f:d3:05:77: 33:fd:dc:9f:c1:14:88:52:ad:ad:7f:0e:9c:d7:9f:e4:cf:c7: 5a:4c:94:6b:40:5d:01:9a:21:41:d9:3c:37:ce:dc:ab:ab:e2: fb:5e:d3:47:58:20:9a:25:c5:79:b2:78:17:12:87:22:47:80: 83:00:35:d1:2e:57:6d:f6:55:f0:d3:69:56:72:19:15:ef:c8: 9d:db:6e:7b:7e:73:54:12:6d:02:77:8d:b9:7e:c5:51:4a:dc: ad:89:44:01:7d:cd:97:64:41:89:27:26:fe:d5:fe:ba:7e:a2: 99:42:3f:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcxvsUt/p1A4XkQbLJ08KnizL8rUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzRDIxNzBEQTI3QzQzMEQxQjNFN0QxMjRBQkQ2NTVG NDZCMDAxRjAeFw0yNjA3MjMxMDEyMzhaFw0yNjA3MjQxMjAyMzhaMDMxMTAvBgNV BAMTKERCQzI4RjYxQTQ0REY3NDI4NTc3NjUyQkYzNkNGREU2RDY2NDgyQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrkkbCqnd+l8S2ON1v1BycJDqV STfVfml88iop69LdSseV+OLIWA9vfqDmNd8lKZ5xxVoVb+hhkI8tgdxPdDbaxOBq mgGrY4EfaCE3MwbpNZv6LHNZTPfiI9b7Is/EateVMh5GO7rwLhsTc9Iw2125mr7f SmCdzUd4V1GUKXrT0WpGur8lt805YbF9LlKV/lffP9XmKkz0nn4umGzPAscpdyPx WzJdlBl3FCKVupsIwXya2C7FyUt9GcbrKUlc2rfsat47UdLUEljblXY0mMp/e4Wm nN2GKXzATIHZK9e1Se/qy9zSxyVYzcn0N/c8+mZdVaYpoRAu/uRHUCJO4eupAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU28KPYaRN90KFd2Ur82z95tZkgrUwHwYDVR0j BBgwFoAUoj0hcNonxDDRs+fRJKvWVfRrAB8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjFmMDJhODktN2VlOC00YTgzLTgwMDQtMjM0ZDkxNGEwZmQ0LzAvQTIzRDIxNzBE QTI3QzQzMEQxQjNFN0QxMjRBQkQ2NTVGNDZCMDAxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjNEMjE3MERBMjdDNDMwRDFCM0U3RDEyNEFCRDY1NUY0NkIw MDFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvQTIzRDIxNzBEQTI3QzQzMEQxQjNFN0QxMjRBQkQ2 NTVGNDZCMDAxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyAe0AVbar455hojzTLOfjxNBKaPFBsYcNv O8tWAuUeNzrlwQLRQf3lHDYeZauBonwxa+W3Z4EJeSyxHPn9MEZEYoRBtREPf5ZP ml21LEMr9ww+3PnhQPLltYl0NMkooV+txgjQMDFUIm4w65r7U4T2qv9dCSHR9Ic/ XaGsTop7qiJkLUD8a3zXpb5Lf9MFdzP93J/BFIhSra1/DpzXn+TPx1pMlGtAXQGa IUHZPDfO3Kur4vte00dYIJolxXmyeBcShyJHgIMANdEuV232VfDTaVZyGRXvyJ3b bnt+c1QSbQJ3jbl+xVFK3K2JRAF9zZdkQYknJv7V/rp+oplCPwA= -----END CERTIFICATE-----Generated at Fri Jul 24 05:19:39 2026 by rpki-client