$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft File: 23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft (raw, json) Hash identifier: itgjnQlILUy+U3L1XwGrgMjX30cGNJ+6swxXEl30rF0= Subject key identifier: 5E:1E:B1:8F:F0:7D:30:FB:9E:8E:8A:C5:4F:E4:67:F3:11:A3:0E:FB Authority key identifier: 23:A0:F6:8C:EA:18:94:A3:2A:4A:04:BD:7E:64:F0:CF:0F:3D:EA:A0 Certificate issuer: /CN=23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0 Certificate serial: 58DBF88E31E1CDF8D28CBE62107BE1B9C224CED1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 05:22:28 +0000 Manifest this update: Tue 21 Jul 2026 05:17:28 +0000 Manifest next update: Wed 22 Jul 2026 08:53:28 +0000 Files and hashes: 1: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: l/X2cP22D0Wy7RA8I5HP0mcO1xVHiIblMcBaMiAvS8U=) 2: 23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl (hash: 2slaJQZu8Pe3M2DCil7E49KlDLH+rVwhPn40UwG9gZU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:db:f8:8e:31:e1:cd:f8:d2:8c:be:62:10:7b:e1:b9:c2:24:ce:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0 Validity Not Before: Jul 21 05:17:28 2026 GMT Not After : Jul 22 08:53:28 2026 GMT Subject: CN=5E1EB18FF07D30FB9E8E8AC54FE467F311A30EFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:6a:ad:18:9e:a3:4f:b6:ed:fd:17:31:c9: c4:0d:81:d9:bf:c8:7a:73:1d:5f:3b:b3:dd:80:3e: a8:f1:88:c0:cf:ab:b8:64:0d:9a:e8:a8:1f:a5:70: 0f:ed:7f:d3:61:e8:a5:7e:7a:88:f2:ba:c7:d8:d8: 90:ce:39:8b:77:fd:19:67:aa:5d:7d:d7:d5:5d:d7: ca:91:42:30:c2:2a:ee:21:2f:79:07:01:67:0b:47: 14:70:d6:3f:49:4e:6a:f0:7d:eb:8c:9a:51:36:81: 22:1c:0b:d2:73:17:11:e5:f3:e6:52:c1:ce:16:9c: f6:c5:cd:c2:1a:5e:db:e0:71:76:da:a3:9f:de:c5: e1:ac:d2:3f:08:f2:61:fa:92:1e:06:7a:5d:e1:0b: bc:59:01:2b:a4:68:39:23:83:98:ab:71:14:2d:ef: 2a:f0:4d:39:97:03:81:03:e7:1e:54:d0:df:ba:35: 7a:5f:2c:ab:4b:c1:3f:db:5d:93:45:d7:bc:2d:eb: 4b:a9:a2:4c:05:eb:a7:04:e9:9f:17:bf:af:d6:61: 20:7e:bd:b9:ee:c7:3a:24:8c:32:03:0b:be:61:49: b9:86:3a:a7:6d:22:e0:ed:e8:ce:59:d9:19:53:8e: 9b:87:30:75:6a:db:05:7a:1b:25:13:36:ad:a3:8b: e2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1E:B1:8F:F0:7D:30:FB:9E:8E:8A:C5:4F:E4:67:F3:11:A3:0E:FB X509v3 Authority Key Identifier: keyid:23:A0:F6:8C:EA:18:94:A3:2A:4A:04:BD:7E:64:F0:CF:0F:3D:EA:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:01:f4:58:4e:82:82:f5:47:ee:ce:b3:9e:9e:d6:e6:fd:82: dc:15:a3:95:4a:cb:3c:70:2c:76:c5:57:68:5a:f6:c0:93:67: 35:16:a0:66:7f:0c:8d:8b:4e:0b:46:ac:5a:81:2d:56:4d:3c: 0b:e6:e1:6a:a4:93:65:16:09:b6:48:17:9c:9a:25:7c:ea:3f: f1:91:7e:55:19:c7:b7:f9:f5:a9:70:68:f9:65:cd:77:e8:f1: da:ae:22:0f:19:13:fd:55:cf:60:48:da:95:b1:33:b4:31:3b: b1:b6:28:08:d2:7c:c1:68:a2:67:58:74:de:4e:fc:89:3f:14: 38:c1:4e:c7:61:6c:ea:fc:ea:0b:ed:85:bc:6a:d6:76:24:18: 64:69:18:35:86:d3:33:53:f4:73:f7:06:8f:16:ff:d4:8c:82: c1:ae:ec:a6:f3:05:6e:f2:d8:98:7d:52:e1:e0:72:68:c0:64: a5:a0:d7:9e:88:2c:59:28:f8:55:ca:7b:c0:8a:3b:f6:93:de: 58:0f:23:35:d7:04:e7:6b:e3:b1:0b:c3:c2:46:a2:c9:d5:0d: 65:cc:5f:51:c7:e1:41:8c:0e:17:f3:c0:51:1a:e3:bc:e8:ec: 90:f6:01:79:ab:32:37:ee:8d:34:ee:de:b1:9b:45:8a:e4:b6: 44:53:c7:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNv4jjHhzfjSjL5iEHvhucIkztEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBMEY2OENFQTE4OTRBMzJBNEEwNEJEN0U2NEYwQ0Yw RjNERUFBMDAeFw0yNjA3MjEwNTE3MjhaFw0yNjA3MjIwODUzMjhaMDMxMTAvBgNV BAMTKDVFMUVCMThGRjA3RDMwRkI5RThFOEFDNTRGRTQ2N0YzMTFBMzBFRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7NWqtGJ6jT7bt/RcxycQNgdm/ yHpzHV87s92APqjxiMDPq7hkDZroqB+lcA/tf9Nh6KV+eojyusfY2JDOOYt3/Rln ql1919Vd18qRQjDCKu4hL3kHAWcLRxRw1j9JTmrwfeuMmlE2gSIcC9JzFxHl8+ZS wc4WnPbFzcIaXtvgcXbao5/exeGs0j8I8mH6kh4Gel3hC7xZASukaDkjg5ircRQt 7yrwTTmXA4ED5x5U0N+6NXpfLKtLwT/bXZNF17wt60upokwF66cE6Z8Xv6/WYSB+ vbnuxzokjDIDC75hSbmGOqdtIuDt6M5Z2RlTjpuHMHVq2wV6GyUTNq2ji+JXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXh6xj/B9MPuejorFT+Rn8xGjDvswHwYDVR0j BBgwFoAUI6D2jOoYlKMqSgS9fmTwzw896qAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1NGE4Y2UtMThmNC00OTg4LWE5NTEtOTY2NGRkMTc2Y2Q5LzAvMjNBMEY2OENF QTE4OTRBMzJBNEEwNEJEN0U2NEYwQ0YwRjNERUFBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yM0EwRjY4Q0VBMTg5NEEzMkE0QTA0QkQ3RTY0RjBDRjBGM0RF QUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvMjNBMEY2OENFQTE4OTRBMzJBNEEwNEJEN0U2NEYw Q0YwRjNERUFBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgB9FhOgoL1R+7Os56e1ub9gtwVo5VKyzxw LHbFV2ha9sCTZzUWoGZ/DI2LTgtGrFqBLVZNPAvm4Wqkk2UWCbZIF5yaJXzqP/GR flUZx7f59alwaPllzXfo8dquIg8ZE/1Vz2BI2pWxM7QxO7G2KAjSfMFoomdYdN5O /Ik/FDjBTsdhbOr86gvthbxq1nYkGGRpGDWG0zNT9HP3Bo8W/9SMgsGu7KbzBW7y 2Jh9UuHgcmjAZKWg156ILFko+FXKe8CKO/aT3lgPIzXXBOdr47ELw8JGosnVDWXM X1HH4UGMDhfzwFEa47zo7JD2AXmrMjfujTTu3rGbRYrktkRTx6w= -----END CERTIFICATE-----Generated at Tue Jul 21 08:39:32 2026 by rpki-client