$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft File: 23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft (raw, json) Hash identifier: PL312pYwuySrvG9LhzUj7sbTgbWWmwh9VzZqMXeFgQ4= Subject key identifier: FD:E0:C9:EE:EF:97:42:13:89:58:83:E0:CA:39:F5:18:01:0D:78:1F Authority key identifier: 23:A0:F6:8C:EA:18:94:A3:2A:4A:04:BD:7E:64:F0:CF:0F:3D:EA:A0 Certificate issuer: /CN=23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0 Certificate serial: 7E788EE9CD5F954941F5550127398E08E6AD91B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:11:52 +0000 Manifest this update: Tue 02 Jun 2026 18:06:52 +0000 Manifest next update: Wed 03 Jun 2026 21:43:52 +0000 Files and hashes: 1: 23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl (hash: EzlrwbN/Em2zxEUQRjT0+YSokteDtnG/L3zVY7TF5Ts=) 2: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: l/X2cP22D0Wy7RA8I5HP0mcO1xVHiIblMcBaMiAvS8U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 21:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:78:8e:e9:cd:5f:95:49:41:f5:55:01:27:39:8e:08:e6:ad:91:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0 Validity Not Before: Jun 2 18:06:52 2026 GMT Not After : Jun 3 21:43:52 2026 GMT Subject: CN=FDE0C9EEEF974213895883E0CA39F518010D781F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:41:0a:83:91:ff:ce:ca:ec:4c:29:0e:88:d0: 2b:2d:1a:f5:db:e2:35:41:9c:16:8e:44:21:5d:b9: 85:b8:22:6c:21:04:3c:75:28:e6:f8:b6:30:c0:92: 6e:41:9f:f4:4b:4f:a2:25:ae:3f:01:88:b4:62:13: d6:ff:aa:71:64:2d:b6:3d:71:78:a1:d9:c4:ae:ca: 53:c7:96:f3:e2:77:02:ad:73:5c:d1:cd:5c:8a:ab: bc:e7:54:86:88:0d:84:d5:7e:61:dc:23:92:8f:bd: a8:fc:d4:05:b0:8e:40:68:09:60:75:8a:82:b1:da: 55:a2:fe:6f:7d:f5:20:71:d2:84:7c:8c:58:6d:ad: 58:55:06:ed:f1:83:5f:e2:af:ff:cd:18:3a:0f:ca: dd:a6:7e:59:40:2b:4d:f7:23:d3:1a:90:cf:9d:ca: c1:4e:51:42:69:d8:8c:97:18:9e:16:1d:56:74:61: 53:73:4f:cc:a4:22:8a:9c:59:95:49:61:f9:95:e5: 04:1e:50:ef:cc:8c:e4:e9:69:6f:dd:f0:c8:5c:90: d5:0f:df:02:b7:b0:89:50:37:26:5b:53:db:e9:fb: fd:e9:4d:9a:9e:44:53:8e:c5:7d:e2:a6:15:dc:3b: a5:3b:11:2d:97:54:28:86:1d:75:0a:94:81:ed:f1: 23:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E0:C9:EE:EF:97:42:13:89:58:83:E0:CA:39:F5:18:01:0D:78:1F X509v3 Authority Key Identifier: keyid:23:A0:F6:8C:EA:18:94:A3:2A:4A:04:BD:7E:64:F0:CF:0F:3D:EA:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:0d:cb:a7:ed:fa:31:5f:bb:08:15:2a:04:a6:1a:ba:33:b2: 58:69:ea:10:63:a7:5a:91:3b:c3:35:6e:e6:de:ae:34:43:30: 46:df:d3:be:f4:90:41:0d:1b:e4:9f:81:bc:5e:56:f7:d1:76: 39:4e:8c:99:b5:9e:31:c5:d9:27:eb:a1:41:3b:2a:d4:48:68: a6:0f:bc:e9:cf:26:db:3d:52:6f:cc:20:07:42:4d:4a:bc:b9: 76:58:6a:79:66:e5:85:5a:78:d0:9d:37:fc:b7:ea:fc:56:9b: e8:8d:d9:f8:6a:b8:fb:a9:9c:4f:1c:8b:0e:a2:03:f8:22:80: 87:31:36:02:cd:b0:8d:2a:3e:cc:3a:d5:57:05:cb:0d:f4:ec: af:28:0f:06:99:11:e5:48:0c:80:43:2b:8d:57:b2:23:a3:46: 7d:5c:5c:6b:00:be:a8:fc:a1:cb:13:a4:22:a1:c0:38:30:eb: f6:8e:9f:05:81:e6:e0:56:98:06:49:65:6a:f9:31:30:3e:57: 07:d5:73:e0:38:fd:2d:a3:aa:a2:c8:8b:8e:b4:e9:e3:d6:ef: 4c:6c:75:e9:f6:49:33:6c:55:c5:74:2c:f4:c5:d0:a9:72:ef: 86:23:b5:65:56:74:c1:c5:eb:09:73:26:76:de:e5:61:12:cb: 38:bf:6a:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfniO6c1flUlB9VUBJzmOCOatkbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBMEY2OENFQTE4OTRBMzJBNEEwNEJEN0U2NEYwQ0Yw RjNERUFBMDAeFw0yNjA2MDIxODA2NTJaFw0yNjA2MDMyMTQzNTJaMDMxMTAvBgNV BAMTKEZERTBDOUVFRUY5NzQyMTM4OTU4ODNFMENBMzlGNTE4MDEwRDc4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQQqDkf/OyuxMKQ6I0CstGvXb 4jVBnBaORCFduYW4ImwhBDx1KOb4tjDAkm5Bn/RLT6Ilrj8BiLRiE9b/qnFkLbY9 cXih2cSuylPHlvPidwKtc1zRzVyKq7znVIaIDYTVfmHcI5KPvaj81AWwjkBoCWB1 ioKx2lWi/m999SBx0oR8jFhtrVhVBu3xg1/ir//NGDoPyt2mfllAK033I9MakM+d ysFOUUJp2IyXGJ4WHVZ0YVNzT8ykIoqcWZVJYfmV5QQeUO/MjOTpaW/d8MhckNUP 3wK3sIlQNyZbU9vp+/3pTZqeRFOOxX3iphXcO6U7ES2XVCiGHXUKlIHt8SPfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/eDJ7u+XQhOJWIPgyjn1GAENeB8wHwYDVR0j BBgwFoAUI6D2jOoYlKMqSgS9fmTwzw896qAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1NGE4Y2UtMThmNC00OTg4LWE5NTEtOTY2NGRkMTc2Y2Q5LzAvMjNBMEY2OENF QTE4OTRBMzJBNEEwNEJEN0U2NEYwQ0YwRjNERUFBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yM0EwRjY4Q0VBMTg5NEEzMkE0QTA0QkQ3RTY0RjBDRjBGM0RF QUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvMjNBMEY2OENFQTE4OTRBMzJBNEEwNEJEN0U2NEYw Q0YwRjNERUFBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgNy6ft+jFfuwgVKgSmGrozslhp6hBjp1qR O8M1buberjRDMEbf0770kEENG+SfgbxeVvfRdjlOjJm1njHF2SfroUE7KtRIaKYP vOnPJts9Um/MIAdCTUq8uXZYanlm5YVaeNCdN/y36vxWm+iN2fhquPupnE8ciw6i A/gigIcxNgLNsI0qPsw61VcFyw307K8oDwaZEeVIDIBDK41XsiOjRn1cXGsAvqj8 ocsTpCKhwDgw6/aOnwWB5uBWmAZJZWr5MTA+VwfVc+A4/S2jqqLIi4606ePW70xs den2STNsVcV0LPTF0Kly74YjtWVWdMHF6wlzJnbe5WESyzi/ai0= -----END CERTIFICATE-----Generated at Wed Jun 3 04:34:25 2026 by rpki-client