$ rpki-client -vvf rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft File: C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft (raw, json) Hash identifier: O1JbD9+6Mq7VMMQoV0dUrmXnJCqLajKrV3nr/jl4LkM= Subject key identifier: 83:B6:C8:15:F8:48:7C:F4:E0:33:7B:57:46:F6:B2:95:B2:60:6B:3F Authority key identifier: C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20 Certificate issuer: /CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20 Certificate serial: 12F06D7A2DA106D913D60B5342C0268A5BB5B408 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft Manifest number: 0E Signing time: Tue 12 May 2026 01:54:34 +0000 Manifest this update: Tue 12 May 2026 01:49:34 +0000 Manifest next update: Wed 13 May 2026 05:12:34 +0000 Files and hashes: 1: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: IjCojVCQLVDXso6MfZ5Olpug+HpXiFAkQ/9TrlGdwBg=) 2: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: trtJ6caoi9E2cPVadT/x0hsZneaEQLzf3GDB3mta1B8=) 3: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: ENAt0Wj8pAqQGPsWatdFNKTs/QZwprQkkW2hjlJfcA8=) 4: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: baz94lUrN5c1rRyv2s8gFFKO/4uJw+NhpT+Cp/9iDxI=) 5: C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl (hash: xC8RB7cqHLBi0l5RLtjXJIjV7TFgXUWuGMkCkFn1JD8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f0:6d:7a:2d:a1:06:d9:13:d6:0b:53:42:c0:26:8a:5b:b5:b4:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20 Validity Not Before: May 12 01:49:34 2026 GMT Not After : May 13 05:12:34 2026 GMT Subject: CN=83B6C815F8487CF4E0337B5746F6B295B2606B3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:29:7d:5d:11:20:ab:af:29:53:cd:7a:7a:c8: 1b:70:42:e9:e6:1d:c7:3c:21:a4:40:64:49:37:ec: 9a:f1:07:3d:15:76:64:72:87:20:01:b1:71:11:d9: 49:e5:f7:e1:d9:96:e2:7c:6a:49:00:35:7c:b0:0a: c9:5f:4b:8c:b5:63:3e:64:e3:6a:7d:eb:72:61:6b: 80:b4:72:06:1a:7b:2f:60:da:36:e5:9e:ac:e5:86: 64:70:7b:8c:07:23:c5:83:8b:1f:cd:24:15:30:b0: 6e:05:be:ae:74:32:96:9f:93:b7:9d:ac:5c:bf:55: fe:5e:28:f1:b5:28:c5:dc:2e:87:16:b5:0d:8e:a6: d4:59:75:a1:c7:9e:7f:b1:4d:83:91:66:0a:27:8f: ba:a4:b6:eb:00:38:6f:00:e0:cb:70:47:fe:31:62: 63:30:0a:01:4c:0c:89:97:32:7a:bf:a7:c6:88:73: 85:c4:b4:49:65:b7:37:b5:26:8b:ea:6e:20:06:cc: 4e:6e:76:17:69:84:e1:a7:34:ce:0d:08:62:a4:82: ac:80:b3:dd:d4:59:33:4b:81:24:25:cb:ed:f4:e1: c9:75:52:38:88:cf:9a:57:54:96:b9:96:1f:fe:06: 3a:48:19:bd:d3:5b:3c:99:59:8f:9e:94:dd:52:b6: 9c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B6:C8:15:F8:48:7C:F4:E0:33:7B:57:46:F6:B2:95:B2:60:6B:3F X509v3 Authority Key Identifier: keyid:C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:50:17:6c:55:18:b0:e3:5a:18:48:f4:20:21:4f:63:3d:74: 09:b1:bb:10:03:dc:6f:ca:23:71:04:f6:7d:82:e7:9c:6c:67: 15:cc:4a:5a:6e:2a:39:19:70:08:d0:a0:f6:1a:3f:82:bc:dd: f9:79:00:8d:f7:f6:1b:aa:69:eb:02:99:cf:2e:75:e9:7e:30: 76:5f:48:93:24:87:a6:8e:ef:cc:57:fc:ea:e5:3a:37:72:8d: 6b:0e:a8:41:72:75:99:76:63:2b:1d:5f:e1:c3:b9:f1:02:ce: 84:ff:76:92:83:a6:fe:94:16:98:e0:3a:9d:db:22:d4:3c:8a: c8:9a:c8:bd:b3:81:9e:82:fa:9f:34:a9:6e:c4:9f:e2:a0:37: c7:9a:4d:19:90:b0:86:70:21:a6:c1:0b:2b:c6:cc:40:49:89: 61:e6:61:96:bf:d5:21:86:ef:26:1a:43:fa:3f:5c:3f:09:4f: 89:0c:4c:8c:30:01:3b:da:f8:86:01:3b:03:5e:95:71:7e:7c: e0:5f:90:50:dc:33:c5:31:c7:75:a6:a1:6d:5c:ac:4a:8f:e1: 8d:48:80:3b:9d:5a:95:99:d9:9f:72:49:2c:6b:97:7a:03:cb: 32:73:a0:ba:00:80:90:cc:1d:4a:8d:bb:09:c8:ba:10:fa:79: 17:a1:f6:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEvBtei2hBtkT1gtTQsAmilu1tAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzNzk2MDYwRUYzOUVEMEU2QkI5RjYwNkY5RjQyNUM0 NTVGREMyMDAeFw0yNjA1MTIwMTQ5MzRaFw0yNjA1MTMwNTEyMzRaMDMxMTAvBgNV BAMTKDgzQjZDODE1Rjg0ODdDRjRFMDMzN0I1NzQ2RjZCMjk1QjI2MDZCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmKX1dESCrrylTzXp6yBtwQunm Hcc8IaRAZEk37JrxBz0VdmRyhyABsXER2Unl9+HZluJ8akkANXywCslfS4y1Yz5k 42p963Jha4C0cgYaey9g2jblnqzlhmRwe4wHI8WDix/NJBUwsG4Fvq50Mpafk7ed rFy/Vf5eKPG1KMXcLocWtQ2OptRZdaHHnn+xTYORZgonj7qktusAOG8A4MtwR/4x YmMwCgFMDImXMnq/p8aIc4XEtElltze1JovqbiAGzE5udhdphOGnNM4NCGKkgqyA s93UWTNLgSQly+304cl1UjiIz5pXVJa5lh/+BjpIGb3TWzyZWY+elN1StpwVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg7bIFfhIfPTgM3tXRvaylbJgaz8wHwYDVR0j BBgwFoAUwjeWBg7zntDmu59gb59CXEVf3CAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk5OGQ2ZWUtNmZkNy00ZTJkLWFlNDEtNjkzOWZkYjE1M2VlLzAvQzIzNzk2MDYw RUYzOUVEMEU2QkI5RjYwNkY5RjQyNUM0NTVGREMyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjM3OTYwNjBFRjM5RUQwRTZCQjlGNjA2RjlGNDI1QzQ1NUZE QzIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvQzIzNzk2MDYwRUYzOUVEMEU2QkI5RjYwNkY5RjQy NUM0NTVGREMyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9QF2xVGLDjWhhI9CAhT2M9dAmxuxAD3G/K I3EE9n2C55xsZxXMSlpuKjkZcAjQoPYaP4K83fl5AI339huqaesCmc8udel+MHZf SJMkh6aO78xX/OrlOjdyjWsOqEFydZl2YysdX+HDufECzoT/dpKDpv6UFpjgOp3b ItQ8isiayL2zgZ6C+p80qW7En+KgN8eaTRmQsIZwIabBCyvGzEBJiWHmYZa/1SGG 7yYaQ/o/XD8JT4kMTIwwATva+IYBOwNelXF+fOBfkFDcM8Uxx3WmoW1crEqP4Y1I gDudWpWZ2Z9ySSxrl3oDyzJzoLoAgJDMHUqNuwnIuhD6eReh9t8= -----END CERTIFICATE-----Generated at Tue May 12 22:13:22 2026 by rpki-client