$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft File: 823E59BE50593557F29378EC4CAC8BDE16BF5074.mft (raw, json) Hash identifier: ido8JVpYanKqpx5jpzqaWD0f6yfioHrIZ0IPY0yAB8w= Subject key identifier: 0C:84:70:82:3B:CF:FC:72:91:02:8E:95:31:FF:39:0E:7A:27:E9:60 Authority key identifier: 82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74 Certificate issuer: /CN=823E59BE50593557F29378EC4CAC8BDE16BF5074 Certificate serial: 276A374212A7681634BDE427B11FA528B119690D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 10:48:51 +0000 Manifest this update: Fri 25 Sep 2026 10:43:51 +0000 Manifest next update: Sat 26 Sep 2026 12:49:51 +0000 Files and hashes: 1: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: xnCevyudli2t9um2DVMk2wF4GvogAhTTvOVWqK7SaCE=) 2: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: dzAufJOseFap4DRjmnUOc2LvueVNrB6swsyJUi6b4Xw=) 3: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: 8cSHk4Qmt00Rlx//RoPVD8OhEt2winz9iHDLk522or4=) 4: 823E59BE50593557F29378EC4CAC8BDE16BF5074.crl (hash: vmZFesHsRdkqAw+tm5HQMZzAceg2opLE147m7gYFWLE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 12:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:6a:37:42:12:a7:68:16:34:bd:e4:27:b1:1f:a5:28:b1:19:69:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823E59BE50593557F29378EC4CAC8BDE16BF5074 Validity Not Before: Sep 25 10:43:51 2026 GMT Not After : Sep 26 12:49:51 2026 GMT Subject: CN=0C8470823BCFFC7291028E9531FF390E7A27E960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:8a:b6:36:f0:46:c0:7a:31:99:3f:d0:23: 3f:57:6d:a0:ae:78:27:11:c6:a3:9d:3a:9d:7d:54: 65:31:73:e0:85:61:86:ca:4a:14:a2:11:1c:0b:ce: 24:89:3a:70:a6:2d:ca:93:09:d8:1c:26:ac:8f:a3: e3:72:08:74:4f:3c:2d:5e:eb:71:a1:39:39:97:f0: b2:18:a0:42:ec:07:45:8e:62:2a:f0:92:f0:e9:b5: 31:44:1c:f8:43:04:b6:e4:5a:c7:79:2d:59:21:56: 6b:12:de:8d:f9:f8:c3:ca:c4:70:6a:ae:5d:e5:5a: df:6a:5c:63:cc:61:99:23:da:0a:e9:6f:e8:ec:7b: 50:4d:7b:2f:de:fe:bd:b6:07:36:68:60:c9:58:e0: a2:87:e8:91:65:49:43:f9:63:d6:65:b1:e0:03:03: 0e:a7:07:e3:74:d5:ab:55:32:37:9a:d2:b6:4d:03: 83:81:ae:f6:20:d8:85:97:ca:4c:63:11:9c:67:3f: 04:57:12:23:63:60:14:38:f9:88:bd:f7:15:ae:e5: 98:51:cc:5c:90:1c:95:52:c4:6f:1d:d4:16:3c:1c: 80:ec:38:b9:2b:d2:52:05:7f:fa:4d:8c:a7:dd:af: 9b:a9:f2:8f:d2:f8:a9:6e:e7:ad:d3:86:04:8b:0d: 76:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:84:70:82:3B:CF:FC:72:91:02:8E:95:31:FF:39:0E:7A:27:E9:60 X509v3 Authority Key Identifier: keyid:82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:08:29:32:65:ac:97:63:f3:65:87:0d:ae:e8:f3:64:3c:fe: a0:86:d7:40:fa:f1:01:eb:70:bc:7e:d2:56:79:41:d3:95:d5: 6a:13:72:d6:00:7d:63:5b:ec:a7:2a:ce:e8:f2:b3:de:14:f7: 98:23:e9:67:bc:b0:c4:24:f0:fd:ed:c0:54:4f:b6:82:a7:8f: 6b:4d:60:07:5c:3c:00:1a:5a:d9:99:e7:84:54:93:78:9a:d7: e3:91:0f:96:c4:54:1a:13:71:f5:e9:6d:de:85:87:f4:92:d4: 45:b1:84:8a:1c:af:da:47:da:03:01:a7:83:0b:40:d2:1c:10: be:4a:e3:c1:a2:97:62:ed:22:3b:11:0a:40:b6:c1:21:bc:1a: 78:9b:0f:bb:d0:91:24:81:20:68:65:38:1e:4d:1c:48:a3:49: 40:39:81:24:b3:b0:cb:e6:02:bb:9a:bf:8b:54:82:84:4e:ed: 6e:62:f4:97:40:e1:9c:58:7f:e7:88:d6:e2:83:d5:f8:4a:1c: 36:b3:05:c8:98:29:4f:a3:fc:9a:01:2c:01:a5:dc:a3:a3:2f: 47:c9:3e:ec:54:0d:91:65:78:77:4a:18:4e:2d:a8:56:00:29: c5:88:a1:86:77:b2:b3:20:b6:b9:58:65:c6:ab:b7:61:b6:5f: 39:16:57:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ2o3QhKnaBY0veQnsR+lKLEZaQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIzRTU5QkU1MDU5MzU1N0YyOTM3OEVDNENBQzhCREUx NkJGNTA3NDAeFw0yNjA5MjUxMDQzNTFaFw0yNjA5MjYxMjQ5NTFaMDMxMTAvBgNV BAMTKDBDODQ3MDgyM0JDRkZDNzI5MTAyOEU5NTMxRkYzOTBFN0EyN0U5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKOYq2NvBGwHoxmT/QIz9XbaCu eCcRxqOdOp19VGUxc+CFYYbKShSiERwLziSJOnCmLcqTCdgcJqyPo+NyCHRPPC1e 63GhOTmX8LIYoELsB0WOYirwkvDptTFEHPhDBLbkWsd5LVkhVmsS3o35+MPKxHBq rl3lWt9qXGPMYZkj2grpb+jse1BNey/e/r22BzZoYMlY4KKH6JFlSUP5Y9ZlseAD Aw6nB+N01atVMjea0rZNA4OBrvYg2IWXykxjEZxnPwRXEiNjYBQ4+Yi99xWu5ZhR zFyQHJVSxG8d1BY8HIDsOLkr0lIFf/pNjKfdr5up8o/S+Klu563ThgSLDXbhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDIRwgjvP/HKRAo6VMf85Dnon6WAwHwYDVR0j BBgwFoAUgj5ZvlBZNVfyk3jsTKyL3ha/UHQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjU4MzgzZTItMjA2Yy00Yjc0LWJhNGEtY2Q4YTRkN2NkODYxLzAvODIzRTU5QkU1 MDU5MzU1N0YyOTM3OEVDNENBQzhCREUxNkJGNTA3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjNFNTlCRTUwNTkzNTU3RjI5Mzc4RUM0Q0FDOEJERTE2QkY1 MDc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvODIzRTU5QkU1MDU5MzU1N0YyOTM3OEVDNENBQzhC REUxNkJGNTA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUIKTJlrJdj82WHDa7o82Q8/qCG10D68QHr cLx+0lZ5QdOV1WoTctYAfWNb7Kcqzujys94U95gj6We8sMQk8P3twFRPtoKnj2tN YAdcPAAaWtmZ54RUk3ia1+ORD5bEVBoTcfXpbd6Fh/SS1EWxhIocr9pH2gMBp4ML QNIcEL5K48Gil2LtIjsRCkC2wSG8GnibD7vQkSSBIGhlOB5NHEijSUA5gSSzsMvm Aruav4tUgoRO7W5i9JdA4ZxYf+eI1uKD1fhKHDazBciYKU+j/JoBLAGl3KOjL0fJ PuxUDZFleHdKGE4tqFYAKcWIoYZ3srMgtrlYZcart2G2XzkWV54= -----END CERTIFICATE-----Generated at Sat Sep 26 04:00:34 2026 by rpki-client