$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft File: C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft (raw, json) Hash identifier: zXmvgTi2GpicG/CShFJHhbHbvtDMVXl4cN44ssHDmNs= Subject key identifier: 4F:11:7E:C0:9C:FD:41:51:79:9F:14:16:75:C3:E7:81:36:7F:F1:C4 Authority key identifier: C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E Certificate issuer: /CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E Certificate serial: 4DE2D31C9B17E778F7DB45ACBEDFB63248F87A60 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 13:50:18 +0000 Manifest this update: Wed 02 Sep 2026 13:45:18 +0000 Manifest next update: Thu 03 Sep 2026 17:39:18 +0000 Files and hashes: 1: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: 7G6gzgziJNADnBWRinmQJqfiu0VElTbunaLLh9HunCE=) 2: C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl (hash: pizG+Lx0fOKWMm3W8wVguB9CtZbS5alnozYcibU3G/Q=) 3: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: /19J6lbfu3WuykzZIAFXcyc9WvzK7MOPaoDjJFgPDAo=) 4: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: 6fSlTUT4FE6vxiMFjSI/8DBq6Z1TAZClCEVauizzEWY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 17:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e2:d3:1c:9b:17:e7:78:f7:db:45:ac:be:df:b6:32:48:f8:7a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E Validity Not Before: Sep 2 13:45:18 2026 GMT Not After : Sep 3 17:39:18 2026 GMT Subject: CN=4F117EC09CFD4151799F141675C3E781367FF1C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:79:fe:a8:ec:42:07:d8:ca:d3:85:c6:80:cb: e5:cf:af:11:00:e1:4f:45:52:3a:6b:5d:2f:53:f3: 31:ca:cf:85:3a:08:ea:47:52:82:f5:5b:ae:ca:9a: b9:75:d0:bb:6d:4c:72:47:dd:4c:b0:43:07:bc:76: 8b:ba:80:e7:72:a8:16:7f:6e:43:12:bd:ae:18:e1: ae:9b:87:82:ad:7b:7a:d6:74:d3:80:d7:d0:25:74: 25:86:02:15:5c:b8:e1:59:d0:27:e4:13:d1:43:b0: 82:f9:36:e3:6c:0b:b2:01:c0:f6:92:b5:1d:63:2d: 56:9e:25:77:eb:00:74:7f:f0:ca:0a:aa:fb:ea:04: a6:87:25:bf:28:e0:59:b3:82:85:71:1a:ff:ef:fe: 85:7f:c5:33:bc:d2:5a:55:7d:9d:eb:f8:e3:61:7b: 64:25:e6:81:69:2e:ec:ce:55:78:b2:3c:a8:4d:09: be:da:8a:fc:93:78:fb:4a:a8:de:c5:bb:a3:61:1f: 7d:bf:af:85:b8:ff:bf:d3:95:ba:4f:d3:33:cc:86: b1:b9:b7:82:dd:4d:4c:de:10:9b:e5:94:a9:ca:74: 8c:44:de:6c:0a:d5:b9:8a:0f:a6:b6:92:b2:4a:b8: 11:55:68:b6:73:54:07:6d:36:c5:a3:4d:74:07:02: f9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:11:7E:C0:9C:FD:41:51:79:9F:14:16:75:C3:E7:81:36:7F:F1:C4 X509v3 Authority Key Identifier: keyid:C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:0f:b5:a8:d0:e6:6e:1b:46:27:a6:88:26:f4:24:6e:9b:37: fd:4a:00:5b:f3:33:53:91:1c:24:b6:dc:8a:5c:ae:99:48:b8: 07:77:6e:93:bd:02:48:6b:09:17:b8:69:c9:00:c8:bc:c0:c3: 92:6d:64:a0:af:ca:c5:45:54:ab:e9:81:0b:1c:66:57:07:21: c9:2b:63:c4:35:75:f6:54:dc:c4:fd:35:8d:9a:8d:05:3f:4f: 81:0c:f8:a5:c2:9a:71:f3:63:f5:ee:da:8b:52:60:81:b8:8f: 6e:c6:71:71:c0:b1:a1:1c:f1:12:e2:9c:b6:22:b3:e2:98:7a: 9f:47:a7:02:03:4e:ed:54:da:63:fd:16:e4:85:e6:ae:d5:ae: e9:88:82:a9:fd:e5:ba:01:fb:bc:23:1f:09:80:4f:6d:1f:18: 43:9e:1a:5e:d0:ab:9a:99:33:58:89:3e:74:d2:ee:08:a1:57: a6:90:75:54:d9:5d:90:93:7f:da:2c:5b:36:31:c5:0c:c1:96: 58:88:ce:33:d9:10:63:7d:29:53:43:43:c5:a6:60:9a:14:a0: 79:ab:60:a5:0f:10:44:8b:a8:2f:2b:2c:29:fe:8b:4a:5c:7f: 54:d7:26:09:6c:64:f7:91:c9:8e:ce:19:9f:c1:0d:0a:57:23: 5e:ec:f6:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTeLTHJsX53j320Wsvt+2Mkj4emAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzQjEzNDIyMEE3Qjk1QjgxRENDODNEOEQ3RTA2QTU1 MTBBNTQ5RTAeFw0yNjA5MDIxMzQ1MThaFw0yNjA5MDMxNzM5MThaMDMxMTAvBgNV BAMTKDRGMTE3RUMwOUNGRDQxNTE3OTlGMTQxNjc1QzNFNzgxMzY3RkYxQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ef6o7EIH2MrThcaAy+XPrxEA 4U9FUjprXS9T8zHKz4U6COpHUoL1W67Kmrl10LttTHJH3UywQwe8dou6gOdyqBZ/ bkMSva4Y4a6bh4Kte3rWdNOA19AldCWGAhVcuOFZ0CfkE9FDsIL5NuNsC7IBwPaS tR1jLVaeJXfrAHR/8MoKqvvqBKaHJb8o4FmzgoVxGv/v/oV/xTO80lpVfZ3r+ONh e2Ql5oFpLuzOVXiyPKhNCb7aivyTePtKqN7Fu6NhH32/r4W4/7/TlbpP0zPMhrG5 t4LdTUzeEJvllKnKdIxE3mwK1bmKD6a2krJKuBFVaLZzVAdtNsWjTXQHAvn/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTxF+wJz9QVF5nxQWdcPngTZ/8cQwHwYDVR0j BBgwFoAUwjsTQiCnuVuB3Mg9jX4GpVEKVJ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ3OWU3YTctMWFhZS00ZTUyLWJhYzMtOGY3YzY3YWUwYTA0LzAvQzIzQjEzNDIy MEE3Qjk1QjgxRENDODNEOEQ3RTA2QTU1MTBBNTQ5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjNCMTM0MjIwQTdCOTVCODFEQ0M4M0Q4RDdFMDZBNTUxMEE1 NDlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQzIzQjEzNDIyMEE3Qjk1QjgxRENDODNEOEQ3RTA2 QTU1MTBBNTQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIPtajQ5m4bRiemiCb0JG6bN/1KAFvzM1OR HCS23IpcrplIuAd3bpO9AkhrCRe4ackAyLzAw5JtZKCvysVFVKvpgQscZlcHIckr Y8Q1dfZU3MT9NY2ajQU/T4EM+KXCmnHzY/Xu2otSYIG4j27GcXHAsaEc8RLinLYi s+KYep9HpwIDTu1U2mP9FuSF5q7VrumIgqn95boB+7wjHwmAT20fGEOeGl7Qq5qZ M1iJPnTS7gihV6aQdVTZXZCTf9osWzYxxQzBlliIzjPZEGN9KVNDQ8WmYJoUoHmr YKUPEESLqC8rLCn+i0pcf1TXJglsZPeRyY7OGZ/BDQpXI17s9so= -----END CERTIFICATE-----Generated at Thu Sep 3 09:27:24 2026 by rpki-client