$ rpki-client -vvf rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft File: 823E59BE50593557F29378EC4CAC8BDE16BF5074.mft (raw, json) Hash identifier: 8HHVEMJVS5VZBSWXSFePCJ7dIobkQ3mduAzP/5HFbqk= Subject key identifier: BF:E8:82:91:DE:BE:3C:D7:77:6D:B3:53:58:40:0E:7D:72:20:F5:3B Authority key identifier: 82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74 Certificate issuer: /CN=823E59BE50593557F29378EC4CAC8BDE16BF5074 Certificate serial: 247DD3E3F56B76DFA82D3CF711256E9D87D5F036 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:00:56 +0000 Manifest this update: Thu 23 Jul 2026 12:55:56 +0000 Manifest next update: Fri 24 Jul 2026 13:04:56 +0000 Files and hashes: 1: 823E59BE50593557F29378EC4CAC8BDE16BF5074.crl (hash: TFGa3dSWZmy4tD3HHze6D616C1GRmluTO3BGBZLqJlY=) 2: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: 8cSHk4Qmt00Rlx//RoPVD8OhEt2winz9iHDLk522or4=) 3: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: dzAufJOseFap4DRjmnUOc2LvueVNrB6swsyJUi6b4Xw=) 4: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: xnCevyudli2t9um2DVMk2wF4GvogAhTTvOVWqK7SaCE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:7d:d3:e3:f5:6b:76:df:a8:2d:3c:f7:11:25:6e:9d:87:d5:f0:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823E59BE50593557F29378EC4CAC8BDE16BF5074 Validity Not Before: Jul 23 12:55:56 2026 GMT Not After : Jul 24 13:04:56 2026 GMT Subject: CN=BFE88291DEBE3CD7776DB35358400E7D7220F53B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e1:0e:5c:f0:36:17:de:53:64:54:32:ee:35: 30:4c:9b:0f:a5:71:09:9f:25:44:55:df:27:f1:e6: 44:14:1f:7b:05:2a:6d:40:33:0c:3f:f0:b6:0f:0b: d0:87:3b:e8:ed:89:3f:62:d4:7a:5e:3c:64:39:2c: 90:d5:5b:89:88:05:30:08:32:72:d7:e5:b7:40:70: a8:69:89:b4:4f:b9:f1:d4:c0:32:67:39:1c:d2:1f: 1f:b8:7f:47:a0:6e:d4:98:30:f4:81:7b:dc:f1:2a: 0d:31:13:05:f7:55:47:4e:0a:42:b2:9a:c9:34:57: 4b:2d:c5:15:8c:d7:c5:4f:50:2b:5b:6c:a0:e7:c8: b7:3d:80:1f:94:9f:84:a0:cd:0a:fa:94:3f:c0:cc: 8b:ad:ac:dd:77:13:60:66:fd:bd:2a:aa:c8:15:b6: e2:d3:86:75:13:86:c9:df:bd:85:10:69:b8:00:77: 03:64:1d:f2:ca:79:89:15:14:18:6f:66:4e:c9:83: 9a:92:83:9d:d6:fb:c0:28:f7:b4:a0:40:d2:bf:63: 49:6f:4d:76:73:df:68:c9:cf:6b:86:e9:59:8f:3d: 51:da:6b:1d:8b:d8:dd:81:cc:44:e7:70:62:b8:e5: 3e:16:f0:06:5d:bb:58:53:fb:a0:ef:c9:69:c3:e6: 20:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E8:82:91:DE:BE:3C:D7:77:6D:B3:53:58:40:0E:7D:72:20:F5:3B X509v3 Authority Key Identifier: keyid:82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:88:d2:5d:23:3f:fa:2a:ab:41:5d:b7:1d:40:a1:6b:ed:12: 0a:1f:de:a2:01:b8:85:e8:4e:97:ba:22:39:9e:04:6d:87:42: 2a:63:f6:54:31:d6:cb:3c:de:ee:e3:79:66:7c:5b:8c:00:e0: ab:a1:93:33:5d:5a:80:a0:53:bb:4b:3d:7c:ea:20:0b:bd:08: f1:ad:f2:4a:d2:c5:da:9c:28:b4:27:3e:fd:71:a9:3c:34:bd: 53:f8:4d:7a:e0:91:88:fd:00:66:2d:37:f8:0f:53:9e:04:4b: ec:5e:7b:10:67:b4:73:3e:b7:e7:a6:42:14:b2:98:6f:11:20: 02:02:b3:05:23:55:fd:42:0a:76:8c:01:a9:19:a6:45:fd:8b: ef:e8:43:30:57:1e:86:e4:13:2d:10:94:42:0b:0d:bb:b8:6e: c3:57:bd:38:9a:fa:af:7f:c3:49:2f:37:a0:7c:17:2e:96:c7: bb:9a:2d:19:d1:b0:90:4c:b6:1f:83:e0:24:cc:1b:22:96:df: 72:ec:85:ce:4e:f0:4f:d1:07:7a:0a:24:c5:6e:c8:46:35:d6: 9d:51:2a:90:3f:cf:6c:52:f0:d7:b7:fa:03:4c:9c:fd:08:4e: 45:f0:73:19:f8:7a:bc:44:33:3b:03:19:8c:3f:6c:67:95:7b: 45:f3:31:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJH3T4/Vrdt+oLTz3ESVunYfV8DYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIzRTU5QkU1MDU5MzU1N0YyOTM3OEVDNENBQzhCREUx NkJGNTA3NDAeFw0yNjA3MjMxMjU1NTZaFw0yNjA3MjQxMzA0NTZaMDMxMTAvBgNV BAMTKEJGRTg4MjkxREVCRTNDRDc3NzZEQjM1MzU4NDAwRTdENzIyMEY1M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL4Q5c8DYX3lNkVDLuNTBMmw+l cQmfJURV3yfx5kQUH3sFKm1AMww/8LYPC9CHO+jtiT9i1HpePGQ5LJDVW4mIBTAI MnLX5bdAcKhpibRPufHUwDJnORzSHx+4f0egbtSYMPSBe9zxKg0xEwX3VUdOCkKy msk0V0stxRWM18VPUCtbbKDnyLc9gB+Un4SgzQr6lD/AzIutrN13E2Bm/b0qqsgV tuLThnUThsnfvYUQabgAdwNkHfLKeYkVFBhvZk7Jg5qSg53W+8Ao97SgQNK/Y0lv TXZz32jJz2uG6VmPPVHaax2L2N2BzETncGK45T4W8AZdu1hT+6DvyWnD5iBfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv+iCkd6+PNd3bbNTWEAOfXIg9TswHwYDVR0j BBgwFoAUgj5ZvlBZNVfyk3jsTKyL3ha/UHQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjU4MzgzZTItMjA2Yy00Yjc0LWJhNGEtY2Q4YTRkN2NkODYxLzAvODIzRTU5QkU1 MDU5MzU1N0YyOTM3OEVDNENBQzhCREUxNkJGNTA3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjNFNTlCRTUwNTkzNTU3RjI5Mzc4RUM0Q0FDOEJERTE2QkY1 MDc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvODIzRTU5QkU1MDU5MzU1N0YyOTM3OEVDNENBQzhC REUxNkJGNTA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6I0l0jP/oqq0Fdtx1AoWvtEgof3qIBuIXo Tpe6IjmeBG2HQipj9lQx1ss83u7jeWZ8W4wA4KuhkzNdWoCgU7tLPXzqIAu9CPGt 8krSxdqcKLQnPv1xqTw0vVP4TXrgkYj9AGYtN/gPU54ES+xeexBntHM+t+emQhSy mG8RIAICswUjVf1CCnaMAakZpkX9i+/oQzBXHobkEy0QlEILDbu4bsNXvTia+q9/ w0kvN6B8Fy6Wx7uaLRnRsJBMth+D4CTMGyKW33Lshc5O8E/RB3oKJMVuyEY11p1R KpA/z2xS8Ne3+gNMnP0ITkXwcxn4erxEMzsDGYw/bGeVe0XzMeI= -----END CERTIFICATE-----Generated at Fri Jul 24 05:56:03 2026 by rpki-client