$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft File: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft (raw, json) Hash identifier: G0/UBXuzeciQY7FxCjtlDPKECkCJu0/96dCOADsn8ec= Subject key identifier: 83:46:65:F1:7C:C9:C1:66:BC:FE:6C:17:6D:9D:A5:5B:A9:C5:AC:62 Authority key identifier: 23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1 Certificate issuer: /CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1 Certificate serial: 4E5FDB1588DD459442AC6AE88B0F66D1540C7893 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft Manifest number: F9 Signing time: Tue 03 Nov 2026 23:17:02 +0000 Manifest this update: Tue 03 Nov 2026 23:12:02 +0000 Manifest next update: Thu 05 Nov 2026 01:20:02 +0000 Files and hashes: 1: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl (hash: bu8BuTMLJ8yvFY8VMGal7rX/+OyBWV/uaiTKuimnrv4=) 2: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: xY/6i6LUbCTPc3rdGOALXXYogQcfaBFzo3dHge01GCI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 01:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5f:db:15:88:dd:45:94:42:ac:6a:e8:8b:0f:66:d1:54:0c:78:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1 Validity Not Before: Nov 3 23:12:02 2026 GMT Not After : Nov 5 01:20:02 2026 GMT Subject: CN=834665F17CC9C166BCFE6C176D9DA55BA9C5AC62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f6:ca:a1:94:83:42:07:27:b6:41:67:18:93: c1:6d:d1:d5:62:77:fb:d0:c9:32:ca:40:bb:44:53: bc:c2:07:2c:8c:aa:58:ea:62:f2:c4:f5:7a:fb:c9: 50:a0:04:48:a9:a1:d3:3f:7d:32:ec:b2:da:6b:ff: cc:f8:8b:6d:67:48:a7:eb:33:30:c3:e9:ae:6b:a7: 41:fa:00:48:b7:87:9e:70:b8:d1:0d:25:dc:42:c5: c1:a1:99:08:33:93:87:b8:27:50:4b:d1:d4:6c:d6: 35:32:48:79:72:09:c2:4f:1e:dc:54:3c:5f:34:9c: 0e:48:47:03:7a:84:6e:27:13:dd:31:9b:7a:9a:90: 5d:d4:e6:da:73:ce:f4:2d:c6:8a:96:bb:a0:2c:2c: c3:ca:f3:79:98:b4:42:de:88:4e:f4:54:22:d3:b6: 08:a5:dd:ca:88:b3:19:93:9e:83:57:23:d0:be:fd: 68:ee:bb:89:42:12:e3:ad:23:4e:63:e0:76:53:26: f9:15:85:eb:75:94:df:6e:90:b0:c3:9c:84:7b:f7: 09:03:28:a2:4f:66:9b:d6:57:32:cc:30:cb:66:38: ac:e0:84:07:72:41:eb:3f:5d:cd:23:f5:55:15:6d: cf:2f:ee:2b:f8:25:31:b6:2a:8d:53:e2:33:65:9e: 56:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:46:65:F1:7C:C9:C1:66:BC:FE:6C:17:6D:9D:A5:5B:A9:C5:AC:62 X509v3 Authority Key Identifier: keyid:23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:35:fe:a1:10:64:e1:4f:03:74:c8:86:18:a0:99:5e:48:8f: 36:5b:e6:c8:1d:bf:bf:f3:c5:ef:ea:d8:99:13:99:9b:ab:30: d1:59:82:6c:f8:4d:7a:c7:84:4b:83:c4:10:67:e2:3f:7d:dc: 9c:05:5e:bc:d9:ab:8d:17:ca:d4:2c:10:0f:bb:fd:3b:4c:e4: 05:e9:ea:8e:f0:c6:65:e6:e9:b7:d2:4e:16:b3:af:54:a0:8b: b8:ba:86:a4:03:11:32:2f:31:ce:49:f2:30:84:d5:2f:c1:7b: 2e:11:b5:ee:be:5c:95:a9:a7:1e:f6:94:01:84:8e:0f:0d:d8: e2:2d:a7:ff:4b:b4:bb:d2:dd:cc:d6:28:b1:e9:f7:fb:dc:8c: 5d:e2:bf:a2:e8:ac:ab:ed:b2:60:33:ee:63:28:0c:bf:68:2a: 8a:26:54:2a:6b:7f:3c:38:ba:ca:44:86:02:ca:ab:0e:17:b3: 95:8c:a7:14:7c:71:a0:fd:b5:b1:7b:7f:d7:83:26:e5:52:97: 20:e1:7e:76:86:c5:41:1e:93:fa:10:14:66:ea:34:ca:fc:52: db:43:ac:8f:ce:b0:c3:26:b6:7a:9e:1c:5a:57:77:a8:a2:0a: 16:72:bc:d2:6c:14:ed:79:82:ca:9b:50:f4:b3:96:81:2a:e4: 1e:88:8d:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTl/bFYjdRZRCrGroiw9m0VQMeJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3NzhEMTk2Mzg1MUM0MDU0QUJBNjhCQjhGODBFNUU0 NUE3QTdGMTAeFw0yNjExMDMyMzEyMDJaFw0yNjExMDUwMTIwMDJaMDMxMTAvBgNV BAMTKDgzNDY2NUYxN0NDOUMxNjZCQ0ZFNkMxNzZEOURBNTVCQTlDNUFDNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb9sqhlINCBye2QWcYk8Ft0dVi d/vQyTLKQLtEU7zCByyMqljqYvLE9Xr7yVCgBEipodM/fTLsstpr/8z4i21nSKfr MzDD6a5rp0H6AEi3h55wuNENJdxCxcGhmQgzk4e4J1BL0dRs1jUySHlyCcJPHtxU PF80nA5IRwN6hG4nE90xm3qakF3U5tpzzvQtxoqWu6AsLMPK83mYtELeiE70VCLT tgil3cqIsxmTnoNXI9C+/Wjuu4lCEuOtI05j4HZTJvkVhet1lN9ukLDDnIR79wkD KKJPZpvWVzLMMMtmOKzghAdyQes/Xc0j9VUVbc8v7iv4JTG2Ko1T4jNlnlbzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg0Zl8XzJwWa8/mwXbZ2lW6nFrGIwHwYDVR0j BBgwFoAUI3eNGWOFHEBUq6aLuPgOXkWnp/EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzEvMjM3NzhEMTk2 Mzg1MUM0MDU0QUJBNjhCQjhGODBFNUU0NUE3QTdGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzc3OEQxOTYzODUxQzQwNTRBQkE2OEJCOEY4MEU1RTQ1QTdB N0YxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvMjM3NzhEMTk2Mzg1MUM0MDU0QUJBNjhCQjhGODBF NUU0NUE3QTdGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJA1/qEQZOFPA3TIhhigmV5IjzZb5sgdv7/z xe/q2JkTmZurMNFZgmz4TXrHhEuDxBBn4j993JwFXrzZq40XytQsEA+7/TtM5AXp 6o7wxmXm6bfSThazr1Sgi7i6hqQDETIvMc5J8jCE1S/Bey4Rte6+XJWppx72lAGE jg8N2OItp/9LtLvS3czWKLHp9/vcjF3iv6LorKvtsmAz7mMoDL9oKoomVCprfzw4 uspEhgLKqw4Xs5WMpxR8caD9tbF7f9eDJuVSlyDhfnaGxUEek/oQFGbqNMr8UttD rI/OsMMmtnqeHFpXd6iiChZyvNJsFO15gsqbUPSzloEq5B6IjZc= -----END CERTIFICATE-----Generated at Wed Nov 4 10:41:16 2026 by rpki-client