$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft File: C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft (raw, json) Hash identifier: W/wEUw/FSz4YJ8gkPsBPY7xLzLIQ1Vrn8drQtVX4x2o= Subject key identifier: FA:3D:ED:D6:5B:1A:82:A4:20:97:5D:2E:72:FA:67:21:DB:2E:9C:71 Authority key identifier: C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20 Certificate issuer: /CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20 Certificate serial: 73C9FBE9D2B17B546CD4E2FFC1668E778BF55B3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 11:04:10 +0000 Manifest this update: Fri 25 Sep 2026 10:59:10 +0000 Manifest next update: Sat 26 Sep 2026 14:22:10 +0000 Files and hashes: 1: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: trtJ6caoi9E2cPVadT/x0hsZneaEQLzf3GDB3mta1B8=) 2: C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl (hash: 7BJ8DZ0f+vCGbSEzia/8zQt7tsdFLbF1ta5bdSuzwC4=) 3: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: IjCojVCQLVDXso6MfZ5Olpug+HpXiFAkQ/9TrlGdwBg=) 4: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: baz94lUrN5c1rRyv2s8gFFKO/4uJw+NhpT+Cp/9iDxI=) 5: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: ENAt0Wj8pAqQGPsWatdFNKTs/QZwprQkkW2hjlJfcA8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 14:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c9:fb:e9:d2:b1:7b:54:6c:d4:e2:ff:c1:66:8e:77:8b:f5:5b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20 Validity Not Before: Sep 25 10:59:10 2026 GMT Not After : Sep 26 14:22:10 2026 GMT Subject: CN=FA3DEDD65B1A82A420975D2E72FA6721DB2E9C71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:d3:d3:5b:ff:04:6f:ce:9b:27:42:a8:92: fb:e0:d7:dd:3d:46:73:14:82:be:08:5c:23:c8:a1: b8:e4:df:1b:70:9e:04:f2:5e:f0:68:91:d5:47:2e: f8:fa:c9:58:ae:ac:f9:d8:ec:b8:4b:f3:9e:6f:6d: e4:a6:07:03:57:9d:ae:6d:51:fc:48:00:e9:af:90: dc:2a:9f:a8:2f:0d:32:25:3e:d7:9f:b2:8a:63:79: 96:ae:d2:9e:d9:0e:43:16:7a:06:80:a0:be:52:45: 74:e6:5d:a1:0c:cd:79:5c:79:1b:a5:10:25:64:b5: d4:35:0a:73:40:fe:2f:67:9f:a3:de:22:9b:91:2c: 7d:18:8e:5a:92:66:2a:c5:e8:fe:c0:1f:b6:18:48: 94:74:31:3e:65:20:51:24:66:55:25:3b:65:be:fb: ff:2d:b4:f3:67:41:72:11:8b:3f:55:23:a9:4e:4c: 49:10:57:a3:03:06:32:8f:78:6b:2b:d4:ac:78:01: c7:ae:b2:39:c0:05:0d:80:2c:16:49:28:59:9d:e6: 84:fa:a4:b7:3f:3d:7c:8d:36:51:fd:01:87:46:48: 8c:95:bb:79:23:04:3c:eb:94:1f:93:4c:26:25:0b: 53:07:22:a1:94:54:85:eb:3a:70:e0:14:b7:cf:bb: 4e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3D:ED:D6:5B:1A:82:A4:20:97:5D:2E:72:FA:67:21:DB:2E:9C:71 X509v3 Authority Key Identifier: keyid:C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:05:6b:2e:ed:b8:92:14:6c:66:ce:07:77:50:93:f2:08:f4: f3:4b:7a:ee:80:b2:46:9e:4e:44:2a:b5:a1:43:2c:75:f2:85: 17:b8:82:c1:00:44:f2:16:50:58:b1:f0:aa:99:3f:47:da:37: 75:9e:cb:fa:20:69:47:da:cc:5d:63:33:fd:15:30:01:0f:55: fb:9f:70:95:e2:77:54:c7:49:2f:ed:8c:3a:2d:8e:97:22:d9: 0e:a6:e2:31:ef:ba:1e:9b:e8:1b:5b:bb:0a:31:7d:b9:82:a9: df:6f:33:9a:d6:52:9e:d0:d5:a2:36:09:cc:44:92:af:38:4c: 97:c3:71:f5:64:cf:1a:d7:4b:03:60:ee:c2:f0:ad:c8:8d:9f: ea:3f:5f:9b:f3:8c:80:68:93:5b:c6:30:6a:e9:45:66:e2:f7: 61:47:df:98:38:ec:61:76:4f:1d:35:37:b3:67:f6:ef:b1:a4: d9:37:ae:20:35:de:2f:bd:a2:39:63:44:9a:0b:3d:ca:96:57: e9:49:f0:e5:25:8b:be:2b:ea:a6:4b:3d:49:08:68:65:d6:d2: fa:25:bb:8f:c7:a4:8c:95:68:bf:de:76:67:12:c8:04:c6:77: ee:2f:cd:6c:c4:b7:9c:18:53:ea:08:17:a0:57:1f:fe:1a:c7: 33:51:66:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8n76dKxe1Rs1OL/wWaOd4v1Wz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzNzk2MDYwRUYzOUVEMEU2QkI5RjYwNkY5RjQyNUM0 NTVGREMyMDAeFw0yNjA5MjUxMDU5MTBaFw0yNjA5MjYxNDIyMTBaMDMxMTAvBgNV BAMTKEZBM0RFREQ2NUIxQTgyQTQyMDk3NUQyRTcyRkE2NzIxREIyRTlDNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqjNPTW/8Eb86bJ0Kokvvg1909 RnMUgr4IXCPIobjk3xtwngTyXvBokdVHLvj6yViurPnY7LhL855vbeSmBwNXna5t UfxIAOmvkNwqn6gvDTIlPtefsopjeZau0p7ZDkMWegaAoL5SRXTmXaEMzXlceRul ECVktdQ1CnNA/i9nn6PeIpuRLH0YjlqSZirF6P7AH7YYSJR0MT5lIFEkZlUlO2W+ +/8ttPNnQXIRiz9VI6lOTEkQV6MDBjKPeGsr1Kx4AceusjnABQ2ALBZJKFmd5oT6 pLc/PXyNNlH9AYdGSIyVu3kjBDzrlB+TTCYlC1MHIqGUVIXrOnDgFLfPu04lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+j3t1lsagqQgl10ucvpnIdsunHEwHwYDVR0j BBgwFoAUwjeWBg7zntDmu59gb59CXEVf3CAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk5OGQ2ZWUtNmZkNy00ZTJkLWFlNDEtNjkzOWZkYjE1M2VlLzAvQzIzNzk2MDYw RUYzOUVEMEU2QkI5RjYwNkY5RjQyNUM0NTVGREMyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjM3OTYwNjBFRjM5RUQwRTZCQjlGNjA2RjlGNDI1QzQ1NUZE QzIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvQzIzNzk2MDYwRUYzOUVEMEU2QkI5RjYwNkY5RjQy NUM0NTVGREMyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkFay7tuJIUbGbOB3dQk/II9PNLeu6Askae TkQqtaFDLHXyhRe4gsEARPIWUFix8KqZP0faN3Wey/ogaUfazF1jM/0VMAEPVfuf cJXid1THSS/tjDotjpci2Q6m4jHvuh6b6BtbuwoxfbmCqd9vM5rWUp7Q1aI2CcxE kq84TJfDcfVkzxrXSwNg7sLwrciNn+o/X5vzjIBok1vGMGrpRWbi92FH35g47GF2 Tx01N7Nn9u+xpNk3riA13i+9ojljRJoLPcqWV+lJ8OUli74r6qZLPUkIaGXW0vol u4/HpIyVaL/edmcSyATGd+4vzWzEt5wYU+oIF6BXH/4axzNRZt4= -----END CERTIFICATE-----Generated at Fri Sep 25 17:31:40 2026 by rpki-client