$ rpki-client -vvvf rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft File: A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft (raw, json) Hash identifier: rNuY0E4ZObOu2ve0+VzfG/cvz79YC0tv+/uNC6IcX60= Subject key identifier: 74:1E:30:6E:2C:D6:FB:BE:A0:0D:D8:C1:04:E1:9B:BA:F1:5D:BD:34 Authority key identifier: A2:3D:21:70:DA:27:C4:30:D1:B3:E7:D1:24:AB:D6:55:F4:6B:00:1F Certificate issuer: /CN=A23D2170DA27C430D1B3E7D124ABD655F46B001F Certificate serial: 3E1C1167F050CFEFB4893C60200CD0BD7203FA6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A23D2170DA27C430D1B3E7D124ABD655F46B001F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 17:02:04 +0000 Manifest this update: Wed 23 Sep 2026 16:57:04 +0000 Manifest next update: Thu 24 Sep 2026 20:49:04 +0000 Files and hashes: 1: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: h4LsVnhP761IIN/z9Kk00GAOTaHl3wnyiIWG9ZY5w+g=) 2: A23D2170DA27C430D1B3E7D124ABD655F46B001F.crl (hash: ZJm9vKm/QXMcaMaJvO6L8oQInpRomp/y1Q7XbzbQ0vs=) 3: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: kqAPpNXie+q2l37gsl3EdI8q/ahDj2lY/Z2RQl2axK8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.crl rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A23D2170DA27C430D1B3E7D124ABD655F46B001F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:1c:11:67:f0:50:cf:ef:b4:89:3c:60:20:0c:d0:bd:72:03:fa:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A23D2170DA27C430D1B3E7D124ABD655F46B001F Validity Not Before: Sep 23 16:57:04 2026 GMT Not After : Sep 24 20:49:04 2026 GMT Subject: CN=741E306E2CD6FBBEA00DD8C104E19BBAF15DBD34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:09:4d:30:b9:8a:ab:c1:43:33:10:0c:e4:57: 8f:79:e6:c0:6f:58:d1:8c:05:0b:02:5d:20:76:e0: b1:75:ba:a0:db:01:7d:dd:58:8f:8b:ae:4a:d3:49: 12:eb:17:db:66:a8:44:d9:bd:9e:e8:aa:31:4c:c5: c1:fa:0e:c3:bb:44:5a:af:f0:0a:fa:62:15:3c:1b: 0a:1c:d8:7b:be:3b:6d:d1:c8:1f:75:e2:87:21:87: df:93:53:e5:f6:f9:20:78:73:fc:06:3c:4f:46:6e: 2a:5c:9e:9e:e9:8d:3b:88:bd:fb:d0:7b:75:e7:c4: 6d:f9:df:ef:96:e6:f3:43:e8:7d:4c:7d:81:8b:e6: 7a:d1:00:cf:fd:3d:77:d2:68:04:00:e1:0d:55:60: 21:26:b3:54:cc:7c:42:18:d5:62:a8:d3:d0:fe:90: b4:40:97:dd:66:c5:e4:0d:2b:7f:12:24:d8:95:ee: dd:72:e0:5b:e2:12:3f:00:8d:a4:e2:97:a6:e0:87: b7:3f:5d:97:fb:5f:7b:95:c6:ac:d3:55:17:61:93: 74:94:0a:1c:54:b7:0b:4c:13:50:21:d4:26:36:3a: fb:d1:63:c3:83:ed:6c:fd:97:75:55:61:ab:2d:fa: 7b:c0:67:23:d1:3d:82:49:02:67:57:3b:4a:d0:a0: d1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1E:30:6E:2C:D6:FB:BE:A0:0D:D8:C1:04:E1:9B:BA:F1:5D:BD:34 X509v3 Authority Key Identifier: keyid:A2:3D:21:70:DA:27:C4:30:D1:B3:E7:D1:24:AB:D6:55:F4:6B:00:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A23D2170DA27C430D1B3E7D124ABD655F46B001F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:65:b2:e6:ef:4a:58:27:c2:15:70:a5:1b:bc:ac:ed:a5:0b: 73:a8:b2:45:44:9b:7f:02:c3:2b:ff:19:51:18:d3:8f:2a:67: cb:a5:90:a5:5f:a1:e0:75:24:94:4b:18:8d:8e:6c:13:51:87: 2d:a3:f3:3a:a6:d3:f9:ed:a0:39:07:f5:ed:7f:9c:83:88:18: 34:f4:64:bc:87:47:91:2c:61:18:9f:27:1b:c3:d9:ca:ab:55: 3b:0f:f0:27:9d:f5:e1:16:1c:74:71:bf:57:d3:bc:d8:8f:94: 39:f0:09:53:72:1b:f4:ff:8c:e5:67:57:3c:64:26:f9:b6:11: 8f:58:0d:d3:74:9f:44:40:6f:b4:92:6b:e1:49:17:1d:30:95: 40:29:7b:1f:07:79:07:40:b2:5d:db:18:bf:e9:21:f3:0e:5a: da:51:0e:24:1e:76:7b:bf:6a:ab:14:b4:85:70:be:e3:62:7b: 98:66:a4:8b:a4:27:23:a5:37:04:f9:f4:5d:c5:60:3e:ee:dd: 7f:9f:a2:58:45:8a:d1:fe:c5:80:24:64:63:f0:27:83:54:dd: 24:26:7f:0a:bc:99:af:23:85:84:95:1c:ff:99:72:35:d3:f3: a3:f6:45:9c:ec:20:0c:73:78:e3:76:0d:2b:12:d0:54:c3:64: 2f:46:6d:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPhwRZ/BQz++0iTxgIAzQvXID+m0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzRDIxNzBEQTI3QzQzMEQxQjNFN0QxMjRBQkQ2NTVG NDZCMDAxRjAeFw0yNjA5MjMxNjU3MDRaFw0yNjA5MjQyMDQ5MDRaMDMxMTAvBgNV BAMTKDc0MUUzMDZFMkNENkZCQkVBMDBERDhDMTA0RTE5QkJBRjE1REJEMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCU0wuYqrwUMzEAzkV4955sBv WNGMBQsCXSB24LF1uqDbAX3dWI+LrkrTSRLrF9tmqETZvZ7oqjFMxcH6DsO7RFqv 8Ar6YhU8Gwoc2Hu+O23RyB914ochh9+TU+X2+SB4c/wGPE9Gbipcnp7pjTuIvfvQ e3XnxG353++W5vND6H1MfYGL5nrRAM/9PXfSaAQA4Q1VYCEms1TMfEIY1WKo09D+ kLRAl91mxeQNK38SJNiV7t1y4FviEj8AjaTil6bgh7c/XZf7X3uVxqzTVRdhk3SU ChxUtwtME1Ah1CY2OvvRY8OD7Wz9l3VVYast+nvAZyPRPYJJAmdXO0rQoNHhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdB4wbizW+76gDdjBBOGbuvFdvTQwHwYDVR0j BBgwFoAUoj0hcNonxDDRs+fRJKvWVfRrAB8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjFmMDJhODktN2VlOC00YTgzLTgwMDQtMjM0ZDkxNGEwZmQ0LzAvQTIzRDIxNzBE QTI3QzQzMEQxQjNFN0QxMjRBQkQ2NTVGNDZCMDAxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjNEMjE3MERBMjdDNDMwRDFCM0U3RDEyNEFCRDY1NUY0NkIw MDFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvQTIzRDIxNzBEQTI3QzQzMEQxQjNFN0QxMjRBQkQ2 NTVGNDZCMDAxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZlsubvSlgnwhVwpRu8rO2lC3OoskVEm38C wyv/GVEY048qZ8ulkKVfoeB1JJRLGI2ObBNRhy2j8zqm0/ntoDkH9e1/nIOIGDT0 ZLyHR5EsYRifJxvD2cqrVTsP8Ced9eEWHHRxv1fTvNiPlDnwCVNyG/T/jOVnVzxk Jvm2EY9YDdN0n0RAb7SSa+FJFx0wlUApex8HeQdAsl3bGL/pIfMOWtpRDiQednu/ aqsUtIVwvuNie5hmpIukJyOlNwT59F3FYD7u3X+folhFitH+xYAkZGPwJ4NU3SQm fwq8ma8jhYSVHP+ZcjXT86P2RZzsIAxzeON2DSsS0FTDZC9GbQg= -----END CERTIFICATE-----Generated at Wed Sep 23 23:33:53 2026 by rpki-client