$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft File: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft (raw, json) Hash identifier: tYKAtUqhxWXUkoH8CZ+OFHcfo/ZUHzY4gwb1Uudb+ZM= Subject key identifier: A2:3C:DE:BE:64:C4:D4:97:F5:2C:C1:E3:43:1F:C0:F5:43:3E:C4:E9 Authority key identifier: 23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1 Certificate issuer: /CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1 Certificate serial: 2B77EB2E3C5F87862C5BE779B8E02DF7D57CDFF0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:58:06 +0000 Manifest this update: Tue 12 May 2026 06:53:06 +0000 Manifest next update: Wed 13 May 2026 10:56:06 +0000 Files and hashes: 1: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: xY/6i6LUbCTPc3rdGOALXXYogQcfaBFzo3dHge01GCI=) 2: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl (hash: ZvCc8jMIEqRXB+UYpkuWhqoaX6dLI1UJcYVH/4f6vXA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:77:eb:2e:3c:5f:87:86:2c:5b:e7:79:b8:e0:2d:f7:d5:7c:df:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1 Validity Not Before: May 12 06:53:06 2026 GMT Not After : May 13 10:56:06 2026 GMT Subject: CN=A23CDEBE64C4D497F52CC1E3431FC0F5433EC4E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:06:1f:d8:1f:ae:5a:8c:31:e6:c4:06:6e:c7: fc:e9:6f:8f:c5:e7:49:5d:58:29:3b:e7:dd:c5:65: 80:c2:c4:92:f7:ee:cc:62:d1:3f:45:e8:e8:a5:ee: df:29:26:5c:76:00:56:dd:b0:1e:fb:70:33:64:5c: 61:a1:fa:e8:96:5f:48:e0:25:d8:70:9c:62:d1:ae: d0:01:74:fe:32:2d:02:32:5c:d7:f7:8d:54:9d:83: 69:ac:2c:f5:2c:36:f9:ca:bb:97:2a:f5:c0:b4:d9: 28:be:1f:df:bd:10:e9:fd:a2:f9:f7:71:4a:f1:cd: 1a:a1:0a:ef:d5:fd:af:b2:a2:b2:23:15:28:ec:dd: 51:45:b7:bb:ca:36:c0:ab:3e:50:e9:cb:c7:6e:69: 4b:9f:37:79:45:37:ca:93:90:12:f6:87:30:c8:6c: 07:3b:11:99:a2:94:c3:43:1b:27:5f:5d:b8:d4:a3: 0f:56:7b:66:bf:c5:45:c4:c5:3a:da:55:e0:e7:24: 04:6f:8a:1c:5a:5e:97:b1:5d:11:f1:85:5c:9a:c4: 58:72:38:14:13:dc:8d:48:bb:db:e3:79:0d:df:ef: 14:55:c4:d3:c7:a5:1e:6e:a7:48:d1:73:a9:86:0b: 78:52:65:d6:65:1f:f6:93:1a:5d:f6:87:24:65:14: 7c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3C:DE:BE:64:C4:D4:97:F5:2C:C1:E3:43:1F:C0:F5:43:3E:C4:E9 X509v3 Authority Key Identifier: keyid:23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:08:78:1a:e8:75:4c:42:e1:52:2e:ea:9e:92:03:4d:da:0a: 8d:35:08:b6:14:ea:cd:1b:a7:e8:17:bb:dc:82:e2:5b:46:c2: 26:eb:6b:5d:f9:8c:45:2e:b0:50:6b:32:fc:9a:57:99:39:08: 15:94:fc:51:57:ba:f1:6e:03:93:13:c0:99:fb:e5:09:fd:fe: 16:0c:f6:72:05:7b:b4:a4:a3:28:17:37:07:9c:c9:cd:0d:f3: 72:ab:6b:b7:79:56:e6:44:a4:ba:46:1a:e4:47:c5:9d:47:bc: 40:f6:5d:ff:92:f6:55:35:c5:c8:e9:c2:98:a6:52:15:a7:d3: 02:f0:89:26:ed:c7:d4:66:8d:63:58:99:5f:1e:96:1a:f7:ff: 7c:3d:6c:a1:b2:8d:89:75:22:99:3e:43:f5:09:2d:cd:1a:fb: db:02:c0:e3:35:7f:f3:62:c5:87:b1:91:12:e0:08:6c:c5:8a: ba:3d:f1:32:85:9b:d6:58:90:d1:db:ca:62:c8:94:59:c6:0f: e1:41:d2:2c:58:71:3b:ca:fe:63:e9:51:90:c5:e7:f2:86:d7: 57:3a:f4:ca:60:7b:c1:19:87:07:53:a6:9d:05:cb:28:ad:a2: b0:ee:3f:11:ed:81:e8:c9:5f:d1:54:f5:22:1b:25:25:f9:2e: ac:19:37:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK3frLjxfh4YsW+d5uOAt99V83/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3NzhEMTk2Mzg1MUM0MDU0QUJBNjhCQjhGODBFNUU0 NUE3QTdGMTAeFw0yNjA1MTIwNjUzMDZaFw0yNjA1MTMxMDU2MDZaMDMxMTAvBgNV BAMTKEEyM0NERUJFNjRDNEQ0OTdGNTJDQzFFMzQzMUZDMEY1NDMzRUM0RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUBh/YH65ajDHmxAZux/zpb4/F 50ldWCk7593FZYDCxJL37sxi0T9F6Oil7t8pJlx2AFbdsB77cDNkXGGh+uiWX0jg JdhwnGLRrtABdP4yLQIyXNf3jVSdg2msLPUsNvnKu5cq9cC02Si+H9+9EOn9ovn3 cUrxzRqhCu/V/a+yorIjFSjs3VFFt7vKNsCrPlDpy8duaUufN3lFN8qTkBL2hzDI bAc7EZmilMNDGydfXbjUow9We2a/xUXExTraVeDnJARvihxaXpexXRHxhVyaxFhy OBQT3I1Iu9vjeQ3f7xRVxNPHpR5up0jRc6mGC3hSZdZlH/aTGl32hyRlFHxTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUojzevmTE1Jf1LMHjQx/A9UM+xOkwHwYDVR0j BBgwFoAUI3eNGWOFHEBUq6aLuPgOXkWnp/EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzEvMjM3NzhEMTk2 Mzg1MUM0MDU0QUJBNjhCQjhGODBFNUU0NUE3QTdGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzc3OEQxOTYzODUxQzQwNTRBQkE2OEJCOEY4MEU1RTQ1QTdB N0YxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvMjM3NzhEMTk2Mzg1MUM0MDU0QUJBNjhCQjhGODBF NUU0NUE3QTdGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMIeBrodUxC4VIu6p6SA03aCo01CLYU6s0b p+gXu9yC4ltGwibra135jEUusFBrMvyaV5k5CBWU/FFXuvFuA5MTwJn75Qn9/hYM 9nIFe7SkoygXNwecyc0N83Kra7d5VuZEpLpGGuRHxZ1HvED2Xf+S9lU1xcjpwpim UhWn0wLwiSbtx9RmjWNYmV8elhr3/3w9bKGyjYl1Ipk+Q/UJLc0a+9sCwOM1f/Ni xYexkRLgCGzFiro98TKFm9ZYkNHbymLIlFnGD+FB0ixYcTvK/mPpUZDF5/KG11c6 9Mpge8EZhwdTpp0FyyitorDuPxHtgejJX9FU9SIbJSX5LqwZN6w= -----END CERTIFICATE-----Generated at Wed May 13 00:53:59 2026 by rpki-client