$ rpki-client -vvf rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft File: 823E59BE50593557F29378EC4CAC8BDE16BF5074.mft (raw, json) Hash identifier: Hdb+uaYhq+V35y9/N/aiKzvCxROE4XHqdPj6vZ8X1/c= Subject key identifier: F9:EF:A9:8F:20:3F:E8:6C:8D:B3:7E:98:64:2A:F3:DC:8A:8E:32:8D Authority key identifier: 82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74 Certificate issuer: /CN=823E59BE50593557F29378EC4CAC8BDE16BF5074 Certificate serial: 7435769C4F3C81BCE3F9D75A36A800ED8F97E8E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 05:05:43 +0000 Manifest this update: Fri 24 Jul 2026 05:00:43 +0000 Manifest next update: Sat 25 Jul 2026 05:12:43 +0000 Files and hashes: 1: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: 8cSHk4Qmt00Rlx//RoPVD8OhEt2winz9iHDLk522or4=) 2: 823E59BE50593557F29378EC4CAC8BDE16BF5074.crl (hash: FY2UcZY4coY3yKQ5XSFPJ5+bmnb14qfVN1t1wTbyVfA=) 3: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: xnCevyudli2t9um2DVMk2wF4GvogAhTTvOVWqK7SaCE=) 4: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: dzAufJOseFap4DRjmnUOc2LvueVNrB6swsyJUi6b4Xw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 05:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:35:76:9c:4f:3c:81:bc:e3:f9:d7:5a:36:a8:00:ed:8f:97:e8:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823E59BE50593557F29378EC4CAC8BDE16BF5074 Validity Not Before: Jul 24 05:00:43 2026 GMT Not After : Jul 25 05:12:43 2026 GMT Subject: CN=F9EFA98F203FE86C8DB37E98642AF3DC8A8E328D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:57:0c:d5:15:f6:3b:4f:f9:8e:e5:e5:14:d2: 69:fc:c8:bd:0e:d1:cc:86:31:2e:4c:49:a9:fe:6c: a5:77:52:59:cd:d4:7e:5d:cc:a3:ea:82:b1:48:6e: 17:4b:cc:af:90:8a:0f:09:37:ea:23:c2:5b:00:dc: 61:5e:90:7e:2c:8d:96:42:33:97:b8:07:6d:d5:3b: 36:a3:dd:e9:18:fe:17:fa:65:9d:84:88:36:13:ff: 83:9f:5c:4d:55:4a:3d:de:e6:b2:44:cc:9e:20:43: 85:1e:5d:49:6e:3e:3e:24:90:d6:8c:86:4f:57:12: ab:f2:68:1a:74:78:89:10:3c:a0:4f:52:d0:9d:49: 35:e1:34:5f:06:39:52:01:5a:0f:8e:8e:01:ad:22: 48:e8:72:6b:a0:a1:96:c5:59:08:e9:9b:3f:51:ad: 80:4d:ec:ee:6b:9b:9f:7f:7f:22:75:3c:0b:d0:f6: 7f:fe:e8:b3:78:1c:a7:36:d1:d5:9c:f5:81:59:99: 0a:b5:0b:91:7c:e0:71:d6:b4:99:63:7c:40:26:21: 77:59:02:de:54:25:bb:cc:98:6c:94:1d:eb:b5:1f: 62:b2:6e:a3:07:94:52:e6:f7:c6:c9:29:71:3d:86: 93:a5:c2:9b:b6:94:9f:b2:02:da:e1:e3:a8:82:02: 79:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EF:A9:8F:20:3F:E8:6C:8D:B3:7E:98:64:2A:F3:DC:8A:8E:32:8D X509v3 Authority Key Identifier: keyid:82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:67:9c:08:1e:9f:2c:fb:da:4f:e2:b9:1e:c8:f1:71:fe:d0: 5f:c1:e0:51:fa:a3:7c:e7:6f:e3:a4:00:9d:3b:9d:c0:8a:0e: b3:a1:1a:4d:c4:2e:67:21:e9:f4:ad:52:88:81:9f:86:5d:08: 2c:2f:5f:93:0e:b2:ee:1b:ba:ae:42:f1:71:ed:f0:3e:95:20: ac:36:1a:f3:a0:ad:a5:2b:25:79:aa:ac:d5:8b:e8:f1:8a:24: 14:a9:de:31:96:fd:b3:28:e1:35:a5:7f:65:8a:b2:f7:e8:64: d9:e6:9f:cb:f3:04:a9:84:5c:a5:34:e6:5f:9c:0a:e5:5d:26: 58:a1:bc:27:fc:2e:0e:93:b0:27:e5:72:df:9b:28:50:2a:72: 56:01:cb:6e:60:7f:da:7e:59:6f:cd:f3:93:09:70:39:d6:94: 1f:ea:bc:35:1a:f4:79:e0:39:17:0d:88:e6:b8:bb:05:67:9e: f9:52:ff:d7:79:e4:b8:1f:a1:e6:e4:a3:0b:48:9a:86:a2:3e: 67:9e:dd:82:55:36:24:7a:d5:f0:29:75:d2:bc:0f:5c:0e:20: 45:d0:a6:5e:52:c3:8d:ef:47:b4:34:ce:a8:6f:ca:c3:c5:08: 59:fc:20:85:1e:45:28:54:68:6c:a9:96:fe:e3:c4:56:e5:1d: e4:30:5c:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdDV2nE88gbzj+ddaNqgA7Y+X6OkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIzRTU5QkU1MDU5MzU1N0YyOTM3OEVDNENBQzhCREUx NkJGNTA3NDAeFw0yNjA3MjQwNTAwNDNaFw0yNjA3MjUwNTEyNDNaMDMxMTAvBgNV BAMTKEY5RUZBOThGMjAzRkU4NkM4REIzN0U5ODY0MkFGM0RDOEE4RTMyOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VwzVFfY7T/mO5eUU0mn8yL0O 0cyGMS5MSan+bKV3UlnN1H5dzKPqgrFIbhdLzK+Qig8JN+ojwlsA3GFekH4sjZZC M5e4B23VOzaj3ekY/hf6ZZ2EiDYT/4OfXE1VSj3e5rJEzJ4gQ4UeXUluPj4kkNaM hk9XEqvyaBp0eIkQPKBPUtCdSTXhNF8GOVIBWg+OjgGtIkjocmugoZbFWQjpmz9R rYBN7O5rm59/fyJ1PAvQ9n/+6LN4HKc20dWc9YFZmQq1C5F84HHWtJljfEAmIXdZ At5UJbvMmGyUHeu1H2KybqMHlFLm98bJKXE9hpOlwpu2lJ+yAtrh46iCAnn/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+e+pjyA/6GyNs36YZCrz3IqOMo0wHwYDVR0j BBgwFoAUgj5ZvlBZNVfyk3jsTKyL3ha/UHQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjU4MzgzZTItMjA2Yy00Yjc0LWJhNGEtY2Q4YTRkN2NkODYxLzAvODIzRTU5QkU1 MDU5MzU1N0YyOTM3OEVDNENBQzhCREUxNkJGNTA3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjNFNTlCRTUwNTkzNTU3RjI5Mzc4RUM0Q0FDOEJERTE2QkY1 MDc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvODIzRTU5QkU1MDU5MzU1N0YyOTM3OEVDNENBQzhC REUxNkJGNTA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhnnAgenyz72k/iuR7I8XH+0F/B4FH6o3zn b+OkAJ07ncCKDrOhGk3ELmch6fStUoiBn4ZdCCwvX5MOsu4buq5C8XHt8D6VIKw2 GvOgraUrJXmqrNWL6PGKJBSp3jGW/bMo4TWlf2WKsvfoZNnmn8vzBKmEXKU05l+c CuVdJlihvCf8Lg6TsCflct+bKFAqclYBy25gf9p+WW/N85MJcDnWlB/qvDUa9Hng ORcNiOa4uwVnnvlS/9d55LgfoebkowtImoaiPmee3YJVNiR61fApddK8D1wOIEXQ pl5Sw43vR7Q0zqhvysPFCFn8IIUeRShUaGyplv7jxFblHeQwXF0= -----END CERTIFICATE-----Generated at Fri Jul 24 10:55:02 2026 by rpki-client