$ rpki-client -vvf rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft File: A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft (raw, json) Hash identifier: QVCunJqK2/9iT1g/HvLBoLx5BETiuWyDyb0IU9M44W0= Subject key identifier: 91:0B:0D:60:3B:B1:BC:54:11:E0:88:94:21:4D:BF:DC:AC:88:02:3C Authority key identifier: A2:3D:21:70:DA:27:C4:30:D1:B3:E7:D1:24:AB:D6:55:F4:6B:00:1F Certificate issuer: /CN=A23D2170DA27C430D1B3E7D124ABD655F46B001F Certificate serial: 02AEA78FD5167D1513265320D1771DC50901893E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A23D2170DA27C430D1B3E7D124ABD655F46B001F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 04:21:14 +0000 Manifest this update: Tue 21 Jul 2026 04:16:14 +0000 Manifest next update: Wed 22 Jul 2026 07:36:14 +0000 Files and hashes: 1: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: h4LsVnhP761IIN/z9Kk00GAOTaHl3wnyiIWG9ZY5w+g=) 2: A23D2170DA27C430D1B3E7D124ABD655F46B001F.crl (hash: Im0BG6r5lQnBTmgOtVHv614Gx0TgNu13ouflgYSSRmw=) 3: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: kqAPpNXie+q2l37gsl3EdI8q/ahDj2lY/Z2RQl2axK8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.crl rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A23D2170DA27C430D1B3E7D124ABD655F46B001F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ae:a7:8f:d5:16:7d:15:13:26:53:20:d1:77:1d:c5:09:01:89:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A23D2170DA27C430D1B3E7D124ABD655F46B001F Validity Not Before: Jul 21 04:16:14 2026 GMT Not After : Jul 22 07:36:14 2026 GMT Subject: CN=910B0D603BB1BC5411E08894214DBFDCAC88023C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a6:04:81:44:46:ac:32:5c:c4:67:20:dd:62: 8f:d7:43:4e:d5:ba:0d:28:3c:e6:da:db:8f:9f:b7: da:c4:6b:77:17:08:bf:86:35:b5:94:0a:f1:4f:51: c0:e9:cd:a7:0c:22:98:fd:c8:ce:dc:59:df:4b:d2: 86:68:58:84:98:31:28:43:ed:a4:f5:43:20:08:7e: 41:a6:8f:07:09:ea:20:56:fc:02:74:94:3d:03:86: 9d:72:e8:05:3f:77:66:f0:71:15:d2:f5:a7:c5:f7: 15:9d:72:05:8c:7f:93:18:87:d1:3e:4a:c1:fe:9b: 0b:51:70:4b:0d:26:00:67:0c:10:88:ea:3a:37:16: 38:5a:9c:b2:ea:8b:cc:bd:57:a0:69:48:77:8e:ff: 89:98:93:48:e8:06:3c:3b:44:47:9c:54:d4:5c:e7: 4c:86:e5:e8:7a:7f:56:10:c8:56:bf:ee:7e:a8:b9: 77:7e:1c:ea:59:72:30:41:8d:0e:52:eb:73:a1:a1: 76:59:93:a5:df:da:0f:6d:b7:69:ab:1f:3e:74:cf: e2:36:c4:3f:8a:49:91:c8:d0:02:ab:b6:7e:8a:f8: 47:0c:1a:8c:4f:2d:ee:e6:c0:c8:c3:a6:b2:2d:ec: 08:cb:b8:f7:f5:1c:16:34:10:ef:05:f0:e5:42:ad: a0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0B:0D:60:3B:B1:BC:54:11:E0:88:94:21:4D:BF:DC:AC:88:02:3C X509v3 Authority Key Identifier: keyid:A2:3D:21:70:DA:27:C4:30:D1:B3:E7:D1:24:AB:D6:55:F4:6B:00:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A23D2170DA27C430D1B3E7D124ABD655F46B001F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ad:f3:4f:75:38:24:fc:7c:fa:94:23:5d:5f:a5:bf:e1:5c: a0:d5:a1:1b:8c:1f:d2:8e:34:9d:5b:52:19:02:4f:a3:63:39: a3:2f:10:18:83:55:10:6f:4f:7f:88:65:68:c4:06:32:28:1b: 2e:35:18:39:1b:78:23:26:00:00:54:11:d7:88:00:ef:4f:b5: bf:91:e4:60:1b:98:a7:85:a8:d3:4b:27:22:e8:a9:02:30:3a: 64:4e:03:6e:00:d0:4e:92:06:96:75:f6:72:35:b1:fb:b6:46: d7:64:bc:6c:50:2b:76:f2:d6:9c:db:a7:c5:b5:29:b1:69:22: 39:0b:75:ad:d0:90:79:07:1d:68:03:a8:9f:ef:d1:9c:b0:03: 27:05:5c:a5:5a:ae:73:ca:9e:b0:7e:eb:2e:76:73:b2:b1:3a: 63:45:f7:5a:a8:7f:cb:af:c9:ae:61:a8:77:43:00:5b:b4:5c: 23:aa:68:7a:ac:41:36:98:3a:d2:29:c2:e8:1c:02:cd:25:fc: 9f:9e:62:a7:2f:9a:99:1f:1f:d9:b3:7f:29:50:55:7a:0a:d4: 9b:26:7c:32:2c:e6:9b:ea:d9:c7:45:7a:5b:83:53:12:de:94: 89:6f:e0:d6:c5:d5:87:7c:65:32:d9:d8:bb:6a:96:71:14:e0: 7f:f1:50:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAq6nj9UWfRUTJlMg0XcdxQkBiT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzRDIxNzBEQTI3QzQzMEQxQjNFN0QxMjRBQkQ2NTVG NDZCMDAxRjAeFw0yNjA3MjEwNDE2MTRaFw0yNjA3MjIwNzM2MTRaMDMxMTAvBgNV BAMTKDkxMEIwRDYwM0JCMUJDNTQxMUUwODg5NDIxNERCRkRDQUM4ODAyM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCppgSBREasMlzEZyDdYo/XQ07V ug0oPOba24+ft9rEa3cXCL+GNbWUCvFPUcDpzacMIpj9yM7cWd9L0oZoWISYMShD 7aT1QyAIfkGmjwcJ6iBW/AJ0lD0Dhp1y6AU/d2bwcRXS9afF9xWdcgWMf5MYh9E+ SsH+mwtRcEsNJgBnDBCI6jo3FjhanLLqi8y9V6BpSHeO/4mYk0joBjw7REecVNRc 50yG5eh6f1YQyFa/7n6ouXd+HOpZcjBBjQ5S63OhoXZZk6Xf2g9tt2mrHz50z+I2 xD+KSZHI0AKrtn6K+EcMGoxPLe7mwMjDprIt7AjLuPf1HBY0EO8F8OVCraAdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkQsNYDuxvFQR4IiUIU2/3KyIAjwwHwYDVR0j BBgwFoAUoj0hcNonxDDRs+fRJKvWVfRrAB8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjFmMDJhODktN2VlOC00YTgzLTgwMDQtMjM0ZDkxNGEwZmQ0LzAvQTIzRDIxNzBE QTI3QzQzMEQxQjNFN0QxMjRBQkQ2NTVGNDZCMDAxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjNEMjE3MERBMjdDNDMwRDFCM0U3RDEyNEFCRDY1NUY0NkIw MDFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvQTIzRDIxNzBEQTI3QzQzMEQxQjNFN0QxMjRBQkQ2 NTVGNDZCMDAxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKt8091OCT8fPqUI11fpb/hXKDVoRuMH9KO NJ1bUhkCT6NjOaMvEBiDVRBvT3+IZWjEBjIoGy41GDkbeCMmAABUEdeIAO9Ptb+R 5GAbmKeFqNNLJyLoqQIwOmROA24A0E6SBpZ19nI1sfu2RtdkvGxQK3by1pzbp8W1 KbFpIjkLda3QkHkHHWgDqJ/v0ZywAycFXKVarnPKnrB+6y52c7KxOmNF91qof8uv ya5hqHdDAFu0XCOqaHqsQTaYOtIpwugcAs0l/J+eYqcvmpkfH9mzfylQVXoK1Jsm fDIs5pvq2cdFeluDUxLelIlv4NbF1Yd8ZTLZ2LtqlnEU4H/xUCI= -----END CERTIFICATE-----Generated at Tue Jul 21 07:00:44 2026 by rpki-client