$ rpki-client -vvf rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft File: 823E59BE50593557F29378EC4CAC8BDE16BF5074.mft (raw, json) Hash identifier: kv+Vh+j1z8TQmgu6gKLaty7CMtayN0558cIPhskK1UM= Subject key identifier: 79:9A:92:8A:CE:57:37:F3:C6:00:59:22:95:D2:ED:03:82:A0:50:FD Authority key identifier: 82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74 Certificate issuer: /CN=823E59BE50593557F29378EC4CAC8BDE16BF5074 Certificate serial: 3A438164DF1A5F767C2C8AC648BCC654CF524D4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:03:04 +0000 Manifest this update: Tue 12 May 2026 17:58:04 +0000 Manifest next update: Wed 13 May 2026 18:53:04 +0000 Files and hashes: 1: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: dzAufJOseFap4DRjmnUOc2LvueVNrB6swsyJUi6b4Xw=) 2: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: xnCevyudli2t9um2DVMk2wF4GvogAhTTvOVWqK7SaCE=) 3: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: 8cSHk4Qmt00Rlx//RoPVD8OhEt2winz9iHDLk522or4=) 4: 823E59BE50593557F29378EC4CAC8BDE16BF5074.crl (hash: HcJFOQdZw+8zzTKOsZRzbjdcLjjjX9W3dGVQJc3aVC0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:43:81:64:df:1a:5f:76:7c:2c:8a:c6:48:bc:c6:54:cf:52:4d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823E59BE50593557F29378EC4CAC8BDE16BF5074 Validity Not Before: May 12 17:58:04 2026 GMT Not After : May 13 18:53:04 2026 GMT Subject: CN=799A928ACE5737F3C600592295D2ED0382A050FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:52:6c:3c:79:63:e9:27:3e:f5:5d:93:31: 10:2f:09:90:32:02:62:9e:c1:4a:1b:bb:45:6f:17: 28:ca:4e:1c:0c:5b:dc:4a:c9:c8:35:bb:36:d5:fb: 89:18:f5:99:6b:fa:34:be:c9:2d:1b:3a:cb:5b:7b: 21:19:e1:e8:96:29:e9:38:a7:f4:bd:eb:8c:36:24: e5:eb:0f:f3:5b:6b:1a:97:0c:3f:c7:94:70:31:ad: 19:64:15:69:8e:76:d4:2c:f9:c7:b2:8f:76:e0:81: 16:c4:e2:93:eb:e4:fd:68:54:f4:fa:a9:e3:4e:05: 75:57:87:5b:93:6b:86:35:76:00:06:29:68:33:cb: df:38:20:d2:e1:7e:b0:66:7a:f4:3f:77:b8:93:a3: 84:6d:73:34:20:e5:8f:70:41:6f:62:27:0f:43:db: b6:19:e0:37:06:5d:7d:be:88:c0:f6:07:18:35:99: eb:62:a5:1e:31:a1:3d:87:3e:ff:7b:0f:0f:a2:65: d8:68:19:d9:29:c6:eb:b4:6e:85:2a:6a:b3:0f:10: 22:e5:67:4a:f2:f6:2f:f5:1f:06:44:31:b1:73:4a: 12:d9:52:cd:e1:c9:50:7d:80:ed:df:4f:33:95:31: f2:63:18:71:ef:79:4a:78:7d:bd:c3:87:0d:08:c0: f0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9A:92:8A:CE:57:37:F3:C6:00:59:22:95:D2:ED:03:82:A0:50:FD X509v3 Authority Key Identifier: keyid:82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ab:13:d9:90:e3:f5:5a:c4:de:3e:5a:83:9e:5a:00:b3:99: 6d:9e:b7:ec:8f:e1:fe:98:ad:30:d6:da:f3:22:7d:13:55:96: 5a:96:4e:da:7c:d5:8c:da:a4:dd:aa:86:fd:d4:70:dd:7e:43: 1b:d8:26:c4:bb:32:86:80:04:91:d9:70:b2:b1:6c:a6:77:ca: bf:d4:8c:62:c8:f8:cb:82:19:b1:72:27:17:c7:a3:ac:f9:f9: 8d:7d:0b:4b:31:61:97:36:ad:44:25:8f:fb:c9:b0:69:39:7d: 1d:b9:e9:ef:f0:38:7a:cf:9d:2d:57:63:d5:bd:bc:c6:79:3a: 94:83:fd:61:7d:2d:ff:27:5b:99:94:40:4a:51:06:cb:c5:dc: e2:1f:1f:23:d5:3f:0c:f8:56:2c:f9:da:7c:27:53:a8:ba:a0: 65:0f:80:a3:68:ee:c9:06:73:8f:00:e1:44:70:b5:7e:81:af: a5:cc:a8:ad:25:e1:28:f9:72:f4:7e:a0:3c:10:47:f2:12:7a: f3:c4:4d:e1:64:08:45:34:f2:1d:08:a4:e7:7d:93:4e:eb:8e: 03:59:b2:ff:c0:75:4a:a9:8d:dd:a9:26:1b:5d:7b:59:18:14: 89:25:54:22:4e:6a:05:38:6e:7d:db:51:41:43:a0:6d:38:e4: da:a0:7f:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOkOBZN8aX3Z8LIrGSLzGVM9STU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIzRTU5QkU1MDU5MzU1N0YyOTM3OEVDNENBQzhCREUx NkJGNTA3NDAeFw0yNjA1MTIxNzU4MDRaFw0yNjA1MTMxODUzMDRaMDMxMTAvBgNV BAMTKDc5OUE5MjhBQ0U1NzM3RjNDNjAwNTkyMjk1RDJFRDAzODJBMDUwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyi1JsPHlj6Sc+9V2TMRAvCZAy AmKewUobu0VvFyjKThwMW9xKycg1uzbV+4kY9Zlr+jS+yS0bOstbeyEZ4eiWKek4 p/S964w2JOXrD/NbaxqXDD/HlHAxrRlkFWmOdtQs+ceyj3bggRbE4pPr5P1oVPT6 qeNOBXVXh1uTa4Y1dgAGKWgzy984INLhfrBmevQ/d7iTo4RtczQg5Y9wQW9iJw9D 27YZ4DcGXX2+iMD2Bxg1metipR4xoT2HPv97Dw+iZdhoGdkpxuu0boUqarMPECLl Z0ry9i/1HwZEMbFzShLZUs3hyVB9gO3fTzOVMfJjGHHveUp4fb3Dhw0IwPC9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeZqSis5XN/PGAFkildLtA4KgUP0wHwYDVR0j BBgwFoAUgj5ZvlBZNVfyk3jsTKyL3ha/UHQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjU4MzgzZTItMjA2Yy00Yjc0LWJhNGEtY2Q4YTRkN2NkODYxLzAvODIzRTU5QkU1 MDU5MzU1N0YyOTM3OEVDNENBQzhCREUxNkJGNTA3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjNFNTlCRTUwNTkzNTU3RjI5Mzc4RUM0Q0FDOEJERTE2QkY1 MDc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvODIzRTU5QkU1MDU5MzU1N0YyOTM3OEVDNENBQzhC REUxNkJGNTA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6rE9mQ4/VaxN4+WoOeWgCzmW2et+yP4f6Y rTDW2vMifRNVllqWTtp81YzapN2qhv3UcN1+QxvYJsS7MoaABJHZcLKxbKZ3yr/U jGLI+MuCGbFyJxfHo6z5+Y19C0sxYZc2rUQlj/vJsGk5fR256e/wOHrPnS1XY9W9 vMZ5OpSD/WF9Lf8nW5mUQEpRBsvF3OIfHyPVPwz4Viz52nwnU6i6oGUPgKNo7skG c48A4URwtX6Br6XMqK0l4Sj5cvR+oDwQR/ISevPETeFkCEU08h0IpOd9k07rjgNZ sv/AdUqpjd2pJhtde1kYFIklVCJOagU4bn3bUUFDoG045Nqgf1M= -----END CERTIFICATE-----Generated at Wed May 13 05:14:23 2026 by rpki-client