$ rpki-client -vvf rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft File: A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft (raw, json) Hash identifier: Rv70s90bfODw6wc72TMbACxgdZ4SWouEaFwtQU1yFCk= Subject key identifier: AE:4C:6F:79:D6:55:F1:C9:B9:0D:63:92:1C:0D:F5:68:2C:62:E6:D9 Authority key identifier: A2:3D:21:70:DA:27:C4:30:D1:B3:E7:D1:24:AB:D6:55:F4:6B:00:1F Certificate issuer: /CN=A23D2170DA27C430D1B3E7D124ABD655F46B001F Certificate serial: 3C3880C7E4B5B2BF2927623D09644AFCC6EEC81F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A23D2170DA27C430D1B3E7D124ABD655F46B001F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:37:38 +0000 Manifest this update: Tue 12 May 2026 23:32:38 +0000 Manifest next update: Thu 14 May 2026 01:49:38 +0000 Files and hashes: 1: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: h4LsVnhP761IIN/z9Kk00GAOTaHl3wnyiIWG9ZY5w+g=) 2: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: kqAPpNXie+q2l37gsl3EdI8q/ahDj2lY/Z2RQl2axK8=) 3: A23D2170DA27C430D1B3E7D124ABD655F46B001F.crl (hash: v7OaliiLYm+3oua7XYWSCGyANp1qrgV3NrGUYpTmYOs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.crl rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A23D2170DA27C430D1B3E7D124ABD655F46B001F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:38:80:c7:e4:b5:b2:bf:29:27:62:3d:09:64:4a:fc:c6:ee:c8:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A23D2170DA27C430D1B3E7D124ABD655F46B001F Validity Not Before: May 12 23:32:38 2026 GMT Not After : May 14 01:49:38 2026 GMT Subject: CN=AE4C6F79D655F1C9B90D63921C0DF5682C62E6D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:82:c4:60:a3:37:74:16:fb:57:8f:ca:28:a1: 9a:63:e9:de:d0:ce:10:53:56:b2:e5:9e:4b:68:82: 24:12:8b:67:7b:16:00:c5:06:3a:5e:c0:95:52:65: 81:50:9d:f4:98:7d:2c:c7:3f:c0:36:d8:25:df:c3: d3:5a:07:7d:59:83:47:f3:e2:94:08:9a:28:ff:53: 7e:e0:23:cd:ac:66:d0:8b:8e:c1:08:7c:5a:77:d5: e2:0a:a0:23:ea:18:f5:93:1a:ae:ea:68:e5:09:76: 76:4d:d1:f2:8a:3c:a2:7f:ed:22:6f:0a:77:6d:72: dd:bf:2e:83:e4:2d:67:11:1d:59:d1:56:a1:20:c0: 58:e8:e7:85:d3:09:d1:df:56:ab:f0:8c:e9:63:fd: bc:03:27:2d:33:47:63:36:61:28:e5:5d:92:96:9c: 83:92:91:4b:de:4d:3f:61:de:83:e9:33:dd:7f:b0: 9a:6f:14:27:4f:9e:65:ee:67:b7:29:85:be:56:4a: 4d:0c:58:75:9c:0e:de:58:0a:0b:d0:40:86:f2:f9: a2:f1:d4:22:07:61:54:6d:55:84:6c:db:17:75:36: 48:ac:79:f5:56:94:e3:99:97:1a:05:57:00:fc:99: 3e:6d:d5:d3:37:95:66:1f:08:33:c5:c9:71:3b:66: 1d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4C:6F:79:D6:55:F1:C9:B9:0D:63:92:1C:0D:F5:68:2C:62:E6:D9 X509v3 Authority Key Identifier: keyid:A2:3D:21:70:DA:27:C4:30:D1:B3:E7:D1:24:AB:D6:55:F4:6B:00:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A23D2170DA27C430D1B3E7D124ABD655F46B001F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:51:b7:01:90:af:af:23:58:1d:88:84:f8:33:40:cb:77:94: 35:8b:e3:5f:c4:0b:71:f0:98:21:ea:8f:45:5d:f2:30:29:c2: e5:02:6e:36:4d:52:82:c4:04:94:5f:2f:67:e6:43:a0:06:8c: 2a:2e:61:23:87:9f:2e:b1:b7:77:53:6d:54:8e:fa:e7:f9:fb: 40:33:99:ff:c8:8a:b8:5a:17:19:64:97:3f:73:7b:1a:38:b0: 44:2a:10:c6:0c:cf:08:d2:2e:3b:2b:5f:fb:d7:5a:72:f6:be: 1e:60:a4:d6:b7:41:37:e3:7a:c2:03:40:01:b8:23:90:e8:1c: 98:1f:10:01:12:e1:7a:d7:c4:3b:46:e1:94:57:52:fb:e0:22: 3d:7a:84:4b:4d:3c:7e:61:74:75:42:e2:8d:2b:69:85:78:97: 44:ae:71:42:83:e3:a1:7f:f3:2a:1c:f0:c7:8b:86:37:a3:b7: 4c:0f:64:6f:25:d4:d5:fb:01:ef:4b:08:b3:88:9d:d9:f6:6c: ab:7b:ec:c6:09:7f:75:3b:17:d8:6e:31:49:18:a7:82:af:e9: 00:b6:04:d0:1c:25:19:24:16:a0:92:3f:ff:83:85:26:af:94: a5:e2:59:4d:91:a0:6b:fc:5e:a2:d5:6d:b0:90:e0:6c:c2:31: f4:61:90:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPDiAx+S1sr8pJ2I9CWRK/MbuyB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzRDIxNzBEQTI3QzQzMEQxQjNFN0QxMjRBQkQ2NTVG NDZCMDAxRjAeFw0yNjA1MTIyMzMyMzhaFw0yNjA1MTQwMTQ5MzhaMDMxMTAvBgNV BAMTKEFFNEM2Rjc5RDY1NUYxQzlCOTBENjM5MjFDMERGNTY4MkM2MkU2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUgsRgozd0FvtXj8oooZpj6d7Q zhBTVrLlnktogiQSi2d7FgDFBjpewJVSZYFQnfSYfSzHP8A22CXfw9NaB31Zg0fz 4pQImij/U37gI82sZtCLjsEIfFp31eIKoCPqGPWTGq7qaOUJdnZN0fKKPKJ/7SJv Cndtct2/LoPkLWcRHVnRVqEgwFjo54XTCdHfVqvwjOlj/bwDJy0zR2M2YSjlXZKW nIOSkUveTT9h3oPpM91/sJpvFCdPnmXuZ7cphb5WSk0MWHWcDt5YCgvQQIby+aLx 1CIHYVRtVYRs2xd1NkisefVWlOOZlxoFVwD8mT5t1dM3lWYfCDPFyXE7Zh3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrkxvedZV8cm5DWOSHA31aCxi5tkwHwYDVR0j BBgwFoAUoj0hcNonxDDRs+fRJKvWVfRrAB8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjFmMDJhODktN2VlOC00YTgzLTgwMDQtMjM0ZDkxNGEwZmQ0LzAvQTIzRDIxNzBE QTI3QzQzMEQxQjNFN0QxMjRBQkQ2NTVGNDZCMDAxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjNEMjE3MERBMjdDNDMwRDFCM0U3RDEyNEFCRDY1NUY0NkIw MDFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvQTIzRDIxNzBEQTI3QzQzMEQxQjNFN0QxMjRBQkQ2 NTVGNDZCMDAxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlRtwGQr68jWB2IhPgzQMt3lDWL41/EC3Hw mCHqj0Vd8jApwuUCbjZNUoLEBJRfL2fmQ6AGjCouYSOHny6xt3dTbVSO+uf5+0Az mf/IirhaFxlklz9zexo4sEQqEMYMzwjSLjsrX/vXWnL2vh5gpNa3QTfjesIDQAG4 I5DoHJgfEAES4XrXxDtG4ZRXUvvgIj16hEtNPH5hdHVC4o0raYV4l0SucUKD46F/ 8yoc8MeLhjejt0wPZG8l1NX7Ae9LCLOIndn2bKt77MYJf3U7F9huMUkYp4Kv6QC2 BNAcJRkkFqCSP/+DhSavlKXiWU2RoGv8XqLVbbCQ4GzCMfRhkIQ= -----END CERTIFICATE-----Generated at Wed May 13 05:47:21 2026 by rpki-client