$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft File: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft (raw, json) Hash identifier: QRmPUz5ijjz2hK6YtCxusMzgd9jhuDihyq2tMo/wBlc= Subject key identifier: 73:C4:84:B1:FC:04:D1:A6:EC:41:56:54:A7:C0:32:0C:00:8D:77:BB Authority key identifier: 23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1 Certificate issuer: /CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1 Certificate serial: 420964D42D1AD56356508A97E567E6716129C05F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 12:51:49 +0000 Manifest this update: Thu 24 Sep 2026 12:46:49 +0000 Manifest next update: Fri 25 Sep 2026 14:54:49 +0000 Files and hashes: 1: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl (hash: rqJ0XQ+b5KOhB8zDlrndi7xgHcQl9opotvrbELyLDV4=) 2: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: xY/6i6LUbCTPc3rdGOALXXYogQcfaBFzo3dHge01GCI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:09:64:d4:2d:1a:d5:63:56:50:8a:97:e5:67:e6:71:61:29:c0:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1 Validity Not Before: Sep 24 12:46:49 2026 GMT Not After : Sep 25 14:54:49 2026 GMT Subject: CN=73C484B1FC04D1A6EC415654A7C0320C008D77BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ec:3b:4e:66:0a:12:9a:17:a9:8c:df:cb:ed: 1c:58:43:1b:4a:a4:8e:8b:5c:5c:f2:30:61:be:09: b4:b0:79:4a:9b:a1:08:30:df:d2:a4:b0:b2:37:0c: eb:e4:71:c5:c4:60:d5:30:6c:4b:09:fe:a3:99:6e: 3c:5a:25:b2:86:a1:f0:fb:a3:a6:42:5e:50:b7:08: 35:b3:45:7c:30:34:c4:a3:23:71:75:c8:80:91:94: c8:19:58:f6:78:0a:4a:70:2c:93:0f:f0:3f:53:eb: 07:25:e5:54:da:64:d5:6e:5a:90:d8:b5:00:e4:66: ab:0b:79:fb:01:12:8a:d2:ee:82:16:08:2d:20:16: 42:b5:a9:f9:97:b4:e7:8c:30:a0:3b:4c:f3:bf:76: 2c:62:ce:74:2c:d9:f9:6f:48:92:e2:79:0e:ef:04: 9b:38:19:84:44:91:44:53:03:2d:49:24:39:5e:ef: 56:c3:c3:f4:83:81:a9:2c:cb:31:1d:c2:6a:60:6b: 9c:47:94:a8:67:30:06:43:95:4d:a0:71:66:c9:bd: 00:91:5d:ea:e5:5e:0e:e0:8c:b1:17:7b:12:4e:72: 20:7e:57:2a:bb:e6:ba:a3:f5:c5:ad:3d:96:43:d0: 7a:db:2c:2e:b2:70:8e:91:50:9e:a2:3a:0e:7b:08: 7e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C4:84:B1:FC:04:D1:A6:EC:41:56:54:A7:C0:32:0C:00:8D:77:BB X509v3 Authority Key Identifier: keyid:23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:6f:92:0c:37:97:b2:4b:78:1a:18:51:93:a6:36:66:ee:63: 39:e3:cd:72:f4:a1:34:48:f1:5b:c2:87:82:8c:c7:11:e7:53: 77:86:31:48:15:6a:f2:7a:83:05:14:76:60:d6:1d:50:cd:54: 80:d1:bb:ee:76:eb:46:e9:89:f5:b7:f3:57:60:4a:df:7e:6a: b6:42:d1:be:d2:2d:ca:ac:25:34:64:cf:9d:f0:58:9d:dc:ea: b9:e6:1a:83:6a:68:93:c0:1f:5c:a7:01:b0:54:e5:8e:cb:06: 27:2c:13:c4:5d:4d:d8:09:79:a8:ad:b5:ff:2a:6c:95:11:12: 24:c1:86:de:c4:ed:75:56:db:2a:cf:67:17:1e:45:3e:8d:1d: 5f:6a:3f:cd:4d:1e:d4:f6:7d:36:55:46:b2:f1:cc:c3:7a:bf: ed:e3:a5:d7:c4:25:90:c1:87:13:da:f0:bd:73:fb:00:86:e2: 71:a9:12:b7:39:21:18:78:69:9b:9b:5e:72:6d:da:90:aa:4d: f8:ee:9c:32:2a:89:a1:ad:9e:43:9a:c3:4a:67:8e:83:30:de: 79:dc:ee:8c:0e:47:2c:71:f6:7d:4d:20:18:f7:9d:e2:1b:d0: a0:cf:21:2d:05:ff:87:65:55:7d:c4:43:56:5e:1d:05:74:e2: 16:7c:c2:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQglk1C0a1WNWUIqX5WfmcWEpwF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3NzhEMTk2Mzg1MUM0MDU0QUJBNjhCQjhGODBFNUU0 NUE3QTdGMTAeFw0yNjA5MjQxMjQ2NDlaFw0yNjA5MjUxNDU0NDlaMDMxMTAvBgNV BAMTKDczQzQ4NEIxRkMwNEQxQTZFQzQxNTY1NEE3QzAzMjBDMDA4RDc3QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm7DtOZgoSmhepjN/L7RxYQxtK pI6LXFzyMGG+CbSweUqboQgw39KksLI3DOvkccXEYNUwbEsJ/qOZbjxaJbKGofD7 o6ZCXlC3CDWzRXwwNMSjI3F1yICRlMgZWPZ4CkpwLJMP8D9T6wcl5VTaZNVuWpDY tQDkZqsLefsBEorS7oIWCC0gFkK1qfmXtOeMMKA7TPO/dixiznQs2flvSJLieQ7v BJs4GYREkURTAy1JJDle71bDw/SDgaksyzEdwmpga5xHlKhnMAZDlU2gcWbJvQCR XerlXg7gjLEXexJOciB+Vyq75rqj9cWtPZZD0HrbLC6ycI6RUJ6iOg57CH7xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc8SEsfwE0absQVZUp8AyDACNd7swHwYDVR0j BBgwFoAUI3eNGWOFHEBUq6aLuPgOXkWnp/EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzEvMjM3NzhEMTk2 Mzg1MUM0MDU0QUJBNjhCQjhGODBFNUU0NUE3QTdGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzc3OEQxOTYzODUxQzQwNTRBQkE2OEJCOEY4MEU1RTQ1QTdB N0YxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvMjM3NzhEMTk2Mzg1MUM0MDU0QUJBNjhCQjhGODBF NUU0NUE3QTdGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJvkgw3l7JLeBoYUZOmNmbuYznjzXL0oTRI 8VvCh4KMxxHnU3eGMUgVavJ6gwUUdmDWHVDNVIDRu+5260bpifW381dgSt9+arZC 0b7SLcqsJTRkz53wWJ3c6rnmGoNqaJPAH1ynAbBU5Y7LBicsE8RdTdgJeaittf8q bJUREiTBht7E7XVW2yrPZxceRT6NHV9qP81NHtT2fTZVRrLxzMN6v+3jpdfEJZDB hxPa8L1z+wCG4nGpErc5IRh4aZubXnJt2pCqTfjunDIqiaGtnkOaw0pnjoMw3nnc 7owORyxx9n1NIBj3neIb0KDPIS0F/4dlVX3EQ1ZeHQV04hZ8wkI= -----END CERTIFICATE-----Generated at Fri Sep 25 02:51:57 2026 by rpki-client