$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft File: C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft (raw, json) Hash identifier: 0h0+DIClsj9bWknuCJroJx60HAcNu32SqSk7eEDm3So= Subject key identifier: 9A:9F:1E:81:E9:37:51:13:D8:35:C2:4B:4E:33:1E:CF:A5:0D:9F:B1 Authority key identifier: C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20 Certificate issuer: /CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20 Certificate serial: 06105581F17984C1AC8B7D772E03182595E37896 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 05:14:32 +0000 Manifest this update: Tue 03 Nov 2026 05:09:32 +0000 Manifest next update: Wed 04 Nov 2026 06:00:32 +0000 Files and hashes: 1: C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl (hash: JEzvI+eEGyAkTlKFTWm8Cquo1f3OFnR0vf8255XKfII=) 2: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: baz94lUrN5c1rRyv2s8gFFKO/4uJw+NhpT+Cp/9iDxI=) 3: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: IjCojVCQLVDXso6MfZ5Olpug+HpXiFAkQ/9TrlGdwBg=) 4: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: trtJ6caoi9E2cPVadT/x0hsZneaEQLzf3GDB3mta1B8=) 5: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: ENAt0Wj8pAqQGPsWatdFNKTs/QZwprQkkW2hjlJfcA8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 04:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:10:55:81:f1:79:84:c1:ac:8b:7d:77:2e:03:18:25:95:e3:78:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20 Validity Not Before: Nov 3 05:09:32 2026 GMT Not After : Nov 4 06:00:32 2026 GMT Subject: CN=9A9F1E81E9375113D835C24B4E331ECFA50D9FB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ac:2a:54:04:40:54:e2:3b:cb:94:c6:e1:80: 99:28:38:94:5c:7a:0b:32:7f:88:e6:f2:c5:60:19: f7:21:26:ef:9f:6f:9e:d2:f8:a6:ca:9d:22:b3:87: 59:64:ad:92:7f:ed:2e:8e:ee:b8:8c:6c:90:87:3d: 00:7c:1b:51:08:38:44:74:ea:01:94:e3:d7:f6:44: 94:cd:3b:07:97:25:fa:aa:0e:68:88:7b:e8:68:fd: 38:79:0a:00:ab:fa:dc:79:91:5d:65:7e:52:b1:d6: bd:e7:dd:1b:33:1a:f0:d5:c3:10:29:70:62:39:c3: 90:ba:ec:03:92:8d:a4:b8:bd:a9:ab:69:f1:3c:09: 00:20:58:a8:e3:18:03:43:41:ca:06:72:48:91:b7: 28:ed:09:2a:ef:ec:98:3c:26:75:2a:fb:fb:ef:3b: b3:d0:ff:e3:79:c8:3b:5b:30:09:be:60:11:fd:1a: 5a:a4:09:4d:ea:f8:15:f6:33:a5:2d:c3:66:a8:0f: 57:20:a9:e2:2c:35:29:07:ad:a7:be:c2:95:38:dc: 8b:04:c1:a8:46:20:ef:6e:f6:f1:b1:a9:85:9a:85: 4b:b9:ab:95:b9:b7:61:64:5d:ff:f1:62:5d:b8:b5: 89:cb:e7:57:b8:d9:16:f0:f9:a2:bd:aa:90:a3:ca: ce:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9F:1E:81:E9:37:51:13:D8:35:C2:4B:4E:33:1E:CF:A5:0D:9F:B1 X509v3 Authority Key Identifier: keyid:C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:fd:36:f9:bd:f4:79:cd:5d:09:ae:40:4c:54:f7:b5:c8:f6: 6a:2b:ab:09:22:a7:aa:e7:da:f9:58:97:56:f7:51:08:35:46: 61:57:06:86:45:66:c1:09:db:35:21:25:9f:da:91:82:98:3e: 36:cb:9e:a4:53:62:aa:86:5b:92:bc:b3:25:52:ff:39:e1:91: c0:68:f3:0b:3c:5f:17:99:09:d5:2a:17:82:4d:c6:ed:09:b1: 3e:bc:e5:6e:00:ab:6b:04:24:d7:a6:b9:69:37:37:b0:7b:cd: 42:9f:6f:15:c8:b9:89:04:67:dd:67:c1:f4:8e:a3:1b:55:9b: a6:04:f7:9a:1a:a4:d4:66:5c:e7:f1:1d:5a:57:e3:e8:b4:a4: 22:a4:6f:21:9a:87:5b:34:70:f2:7b:00:94:af:e3:8e:e1:16: d8:d3:f8:3d:b6:88:35:2e:11:ec:65:9f:ea:cf:86:48:bd:69: 0d:7c:df:12:d1:db:63:dc:33:bc:83:9d:74:79:c2:a0:c9:81: 20:c1:8c:62:37:b8:8f:b0:f0:61:63:d0:72:d9:12:9d:68:c8: c3:d0:2b:41:60:b4:1e:04:0b:9f:15:f6:bf:96:cd:b7:3f:8d: e7:0c:29:db:67:b4:43:c4:9d:ea:96:0b:5b:17:c8:61:28:d8: 7f:57:34:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBhBVgfF5hMGsi313LgMYJZXjeJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzNzk2MDYwRUYzOUVEMEU2QkI5RjYwNkY5RjQyNUM0 NTVGREMyMDAeFw0yNjExMDMwNTA5MzJaFw0yNjExMDQwNjAwMzJaMDMxMTAvBgNV BAMTKDlBOUYxRTgxRTkzNzUxMTNEODM1QzI0QjRFMzMxRUNGQTUwRDlGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rCpUBEBU4jvLlMbhgJkoOJRc egsyf4jm8sVgGfchJu+fb57S+KbKnSKzh1lkrZJ/7S6O7riMbJCHPQB8G1EIOER0 6gGU49f2RJTNOweXJfqqDmiIe+ho/Th5CgCr+tx5kV1lflKx1r3n3RszGvDVwxAp cGI5w5C67AOSjaS4vamrafE8CQAgWKjjGANDQcoGckiRtyjtCSrv7Jg8JnUq+/vv O7PQ/+N5yDtbMAm+YBH9GlqkCU3q+BX2M6Utw2aoD1cgqeIsNSkHrae+wpU43IsE wahGIO9u9vGxqYWahUu5q5W5t2FkXf/xYl24tYnL51e42Rbw+aK9qpCjys6pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmp8egek3URPYNcJLTjMez6UNn7EwHwYDVR0j BBgwFoAUwjeWBg7zntDmu59gb59CXEVf3CAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk5OGQ2ZWUtNmZkNy00ZTJkLWFlNDEtNjkzOWZkYjE1M2VlLzAvQzIzNzk2MDYw RUYzOUVEMEU2QkI5RjYwNkY5RjQyNUM0NTVGREMyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjM3OTYwNjBFRjM5RUQwRTZCQjlGNjA2RjlGNDI1QzQ1NUZE QzIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvQzIzNzk2MDYwRUYzOUVEMEU2QkI5RjYwNkY5RjQy NUM0NTVGREMyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANX9Nvm99HnNXQmuQExU97XI9morqwkip6rn 2vlYl1b3UQg1RmFXBoZFZsEJ2zUhJZ/akYKYPjbLnqRTYqqGW5K8syVS/znhkcBo 8ws8XxeZCdUqF4JNxu0JsT685W4Aq2sEJNemuWk3N7B7zUKfbxXIuYkEZ91nwfSO oxtVm6YE95oapNRmXOfxHVpX4+i0pCKkbyGah1s0cPJ7AJSv447hFtjT+D22iDUu Eexln+rPhki9aQ183xLR22PcM7yDnXR5wqDJgSDBjGI3uI+w8GFj0HLZEp1oyMPQ K0FgtB4EC58V9r+Wzbc/jecMKdtntEPEneqWC1sXyGEo2H9XNKE= -----END CERTIFICATE-----Generated at Tue Nov 3 08:25:09 2026 by rpki-client