$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft File: 23A948EB16F42F91944CC667D8613DD9AD7F2481.mft (raw, json) Hash identifier: viHRjKM7j06OjuCcfuPyemYygNnfMePoNjgKI2urmRw= Subject key identifier: F4:CD:F1:AC:7E:7F:8A:57:43:5A:05:63:07:67:B5:DD:57:C2:AC:58 Authority key identifier: 23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 Certificate issuer: /CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Certificate serial: 0C8CD5AC5C0A585FE93AD74D605AF1FD64108FD2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft Manifest number: F4 Signing time: Sat 31 Oct 2026 22:56:19 +0000 Manifest this update: Sat 31 Oct 2026 22:51:19 +0000 Manifest next update: Mon 02 Nov 2026 02:01:19 +0000 Files and hashes: 1: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: 635Ti/3KrhSgNu8Gwnt/QjYuKqvc1Cqug8YI7DrA208=) 2: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: HXWQguAHiybQ0lNmv6j951fobzx6yk3XQekPS+8DSQI=) 3: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: kDGuaA+cqkmx9XuIt8DtLniH0ehk8T8tx9w2wbnmu+I=) 4: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: Iadh95YULNi9WMbGAs3/Q3ZNW5dEBFpEr5CVUQ5/+x0=) 5: 23A948EB16F42F91944CC667D8613DD9AD7F2481.crl (hash: qgp2Mcruw/VNRh/DQ2YIkeu9KsWjK5mHSTUvYqUdfH4=) 6: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: v65XV+5ddOqAbRU1/IxSl2v0vrbo4M4xD55oScBfz3w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 23:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:8c:d5:ac:5c:0a:58:5f:e9:3a:d7:4d:60:5a:f1:fd:64:10:8f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Validity Not Before: Oct 31 22:51:19 2026 GMT Not After : Nov 2 02:01:19 2026 GMT Subject: CN=F4CDF1AC7E7F8A57435A05630767B5DD57C2AC58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d7:14:fa:09:e6:e7:e3:40:37:8d:89:4d:a0: 83:d7:62:94:77:b4:4a:ed:06:2b:9b:ba:ae:1c:2a: f8:08:d6:d1:7a:d5:db:fc:5b:4f:14:80:db:ad:2b: 14:1b:51:bf:7e:1a:c2:91:41:3d:67:6f:44:c7:01: 51:86:ed:67:35:1b:55:86:03:08:c8:ea:fa:de:28: 14:22:66:be:4b:27:8c:ad:57:f3:e4:d7:7f:4d:2f: 86:20:15:6f:13:db:90:34:14:5d:c6:c4:22:41:e2: 94:14:59:5c:94:de:fa:57:94:c8:b2:fc:f1:e4:92: aa:2c:fa:fd:cf:37:10:f1:e7:de:55:aa:bc:e0:99: b6:a0:66:9a:0d:80:02:9c:a7:6b:52:df:52:39:cb: 1e:84:e8:57:74:79:ae:88:af:12:89:6c:f9:9d:ea: cd:5e:bb:b1:a2:01:7d:0a:61:68:11:76:01:a2:6d: b4:a9:86:d1:03:45:0c:6a:89:6d:82:43:2d:fd:b7: 67:6f:b7:98:a1:26:14:d6:5c:75:eb:f1:5c:50:b7: 1b:a2:d1:5f:80:21:be:c2:e8:15:7d:14:07:93:6f: 03:2f:50:0c:97:17:24:28:e3:23:d2:90:39:7a:20: 35:c3:02:6a:48:d5:7e:c6:d2:09:ab:34:25:df:64: 88:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CD:F1:AC:7E:7F:8A:57:43:5A:05:63:07:67:B5:DD:57:C2:AC:58 X509v3 Authority Key Identifier: keyid:23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:1f:03:d2:0e:9d:e8:af:92:eb:12:35:7a:7d:e7:b3:b4:de: d6:5b:c9:5e:3d:99:1d:26:ce:01:2f:58:10:23:05:0a:e4:8a: 25:ca:f8:d0:a2:a3:65:b3:f6:8f:70:27:c2:8f:bf:4a:c1:fe: ce:c7:2d:2a:54:22:19:0c:48:a6:bf:4a:19:e0:83:54:47:e3: bd:90:26:a1:12:a3:0e:46:a0:b3:b5:e7:c2:99:d7:b8:5c:2a: 67:7d:3c:40:d2:e1:70:27:9c:7f:40:80:d1:82:c7:2b:44:f3: 51:c3:a4:60:ff:f2:ff:69:fd:53:48:77:2a:6e:cd:f2:d7:84: 0c:f7:47:13:94:31:c8:e9:c7:9f:81:67:28:1c:00:0c:76:3b: 8e:a4:da:59:16:a6:12:ad:a2:91:bc:4c:e5:0c:1f:a5:4f:4f: 3e:d0:6b:b0:51:46:34:55:8b:53:32:61:f8:3b:a3:03:51:65: 2c:47:99:f1:12:50:ca:d6:b4:73:89:35:a3:d8:cd:4c:2d:78: 73:dd:6b:d4:af:1d:af:59:76:ef:f6:b7:7d:28:2d:0f:83:86: 1b:e7:2c:24:e0:76:c6:3f:5c:67:32:3b:8e:0b:35:6b:a1:f5: 26:91:20:18:fc:2c:7f:da:f7:ed:a6:79:f0:b4:d9:21:ed:6d: 30:af:19:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDIzVrFwKWF/pOtdNYFrx/WQQj9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNERDlB RDdGMjQ4MTAeFw0yNjEwMzEyMjUxMTlaFw0yNjExMDIwMjAxMTlaMDMxMTAvBgNV BAMTKEY0Q0RGMUFDN0U3RjhBNTc0MzVBMDU2MzA3NjdCNURENTdDMkFDNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh1xT6Cebn40A3jYlNoIPXYpR3 tErtBiubuq4cKvgI1tF61dv8W08UgNutKxQbUb9+GsKRQT1nb0THAVGG7Wc1G1WG AwjI6vreKBQiZr5LJ4ytV/Pk139NL4YgFW8T25A0FF3GxCJB4pQUWVyU3vpXlMiy /PHkkqos+v3PNxDx595VqrzgmbagZpoNgAKcp2tS31I5yx6E6Fd0ea6IrxKJbPmd 6s1eu7GiAX0KYWgRdgGibbSphtEDRQxqiW2CQy39t2dvt5ihJhTWXHXr8VxQtxui 0V+AIb7C6BV9FAeTbwMvUAyXFyQo4yPSkDl6IDXDAmpI1X7G0gmrNCXfZIh3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9M3xrH5/ildDWgVjB2e13VfCrFgwHwYDVR0j BBgwFoAUI6lI6xb0L5GUTMZn2GE92a1/JIEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJhYzBjYTUtNWNlNy00ZTZlLTlmZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIx NkY0MkY5MTk0NENDNjY3RDg2MTNERDlBRDdGMjQ4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yM0E5NDhFQjE2RjQyRjkxOTQ0Q0M2NjdEODYxM0REOUFEN0Yy NDgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNE RDlBRDdGMjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkfA9IOneivkusSNXp957O03tZbyV49mR0m zgEvWBAjBQrkiiXK+NCio2Wz9o9wJ8KPv0rB/s7HLSpUIhkMSKa/Shngg1RH472Q JqESow5GoLO158KZ17hcKmd9PEDS4XAnnH9AgNGCxytE81HDpGD/8v9p/VNIdypu zfLXhAz3RxOUMcjpx5+BZygcAAx2O46k2lkWphKtopG8TOUMH6VPTz7Qa7BRRjRV i1MyYfg7owNRZSxHmfESUMrWtHOJNaPYzUwteHPda9SvHa9Zdu/2t30oLQ+Dhhvn LCTgdsY/XGcyO44LNWuh9SaRIBj8LH/a9+2mefC02SHtbTCvGV4= -----END CERTIFICATE-----Generated at Sun Nov 1 16:56:35 2026 by rpki-client