$ rpki-client -vvvf rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft File: E23AA0021573342645A2DFB669071A3FC460F128.mft (raw, json) Hash identifier: Vv8tCOsFWucNvHhd2JtaijnVixKrv3PBOvHaAVINeTg= Subject key identifier: 69:C2:1D:16:E8:AC:82:0B:3A:3D:61:47:0C:8E:18:07:E7:67:BD:C2 Authority key identifier: E2:3A:A0:02:15:73:34:26:45:A2:DF:B6:69:07:1A:3F:C4:60:F1:28 Certificate issuer: /CN=E23AA0021573342645A2DFB669071A3FC460F128 Certificate serial: 778AB4194DDE894D7F280B672072D6D43186705B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 08:29:03 +0000 Manifest this update: Thu 17 Sep 2026 08:24:03 +0000 Manifest next update: Fri 18 Sep 2026 10:51:03 +0000 Files and hashes: 1: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: ehJTG/Z8MCWRpYE7Mv6MPXlKzKRx5WpLNTB9Vc1HLns=) 2: E23AA0021573342645A2DFB669071A3FC460F128.crl (hash: NTlFdj1JMqBmthZuoQuvrkAtKPEkFxpCTv5a94blJgQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.crl rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:8a:b4:19:4d:de:89:4d:7f:28:0b:67:20:72:d6:d4:31:86:70:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E23AA0021573342645A2DFB669071A3FC460F128 Validity Not Before: Sep 17 08:24:03 2026 GMT Not After : Sep 18 10:51:03 2026 GMT Subject: CN=69C21D16E8AC820B3A3D61470C8E1807E767BDC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8c:28:f1:ae:c8:60:4a:90:a8:ad:57:94:4c: 73:9a:e2:ee:9b:24:41:7a:31:d6:d7:8c:49:91:3c: ea:e1:b7:b3:9b:12:00:87:a5:f0:06:4d:3c:40:1b: f6:df:98:62:e9:c0:b1:58:62:c5:fe:4d:55:ba:66: 97:a5:11:a3:4d:7c:50:69:fc:a2:31:76:24:e6:6a: 30:16:19:fd:7a:00:b0:9a:f5:46:a1:7c:eb:17:b9: f0:5c:88:92:05:f4:2e:77:18:01:c9:a9:46:06:38: d0:1b:1d:96:8c:e6:5c:8b:5a:98:89:91:70:3a:ae: 97:9f:ba:18:ae:e8:ee:6a:b0:b5:5c:8a:c3:02:88: 01:6c:ec:3e:b6:b3:d9:ea:98:29:fb:4f:36:48:cc: 4d:6f:14:80:45:5f:48:88:10:e7:a6:11:39:23:f2: 8b:d5:08:24:77:de:0e:36:53:cd:47:a8:d8:e0:b6: 96:06:13:64:f3:d8:1c:3a:eb:d4:07:87:b9:07:cf: d3:36:b9:5b:4b:7f:4b:b2:71:cf:b9:b7:f5:41:c7: 5b:41:9b:3c:67:8e:10:ef:c5:c5:f7:b2:9c:de:76: ba:dd:4a:16:bf:3f:f7:c4:ce:11:6e:b2:b6:db:11: e9:77:ae:4d:c1:3f:29:a5:8c:00:ce:40:63:0b:f3: f3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C2:1D:16:E8:AC:82:0B:3A:3D:61:47:0C:8E:18:07:E7:67:BD:C2 X509v3 Authority Key Identifier: keyid:E2:3A:A0:02:15:73:34:26:45:A2:DF:B6:69:07:1A:3F:C4:60:F1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:10:e6:14:01:27:b6:cb:11:67:fa:f9:64:80:20:c0:58:d5: da:5d:b3:9d:a9:35:52:83:56:23:30:c8:20:a4:f7:5e:82:21: 54:45:a0:a4:e7:0f:f5:c8:98:93:ab:d9:a5:e9:45:e7:37:09: 28:a0:ec:aa:87:3c:14:da:68:fe:e9:41:9a:bb:00:d5:ef:e1: af:d3:4d:f6:b2:4f:8f:d2:f0:2a:bb:44:c2:97:37:e8:13:ed: 9d:c0:bd:10:d4:18:b1:26:55:d3:8c:a7:2a:0c:0f:69:0b:5b: 9a:15:ef:b1:49:7c:68:32:5c:a2:7d:78:0b:25:ba:e1:c3:37: 85:12:d6:7c:f4:dd:7b:ac:d8:97:81:57:3c:03:9b:37:d3:d9: 64:12:2e:29:df:44:58:f4:18:99:5d:a0:fd:74:38:66:15:5e: 8c:e0:c7:1a:9a:3c:33:83:44:64:ba:c1:92:98:94:2a:df:e9: 3d:b2:46:3b:b5:bc:58:d5:7f:b1:b1:97:6d:89:48:e3:02:e1: 84:79:0c:b6:13:6f:eb:e2:4a:7c:85:c5:f7:1a:9f:4d:99:e4: 8f:7e:da:1a:9a:f3:86:cf:f7:30:14:e4:60:2c:90:f8:85:90: 7e:da:01:1a:8b:49:35:7d:46:ff:d4:c8:33:6b:33:b2:0c:38: 01:d8:71:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd4q0GU3eiU1/KAtnIHLW1DGGcFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIzQUEwMDIxNTczMzQyNjQ1QTJERkI2NjkwNzFBM0ZD NDYwRjEyODAeFw0yNjA5MTcwODI0MDNaFw0yNjA5MTgxMDUxMDNaMDMxMTAvBgNV BAMTKDY5QzIxRDE2RThBQzgyMEIzQTNENjE0NzBDOEUxODA3RTc2N0JEQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSjCjxrshgSpCorVeUTHOa4u6b JEF6MdbXjEmRPOrht7ObEgCHpfAGTTxAG/bfmGLpwLFYYsX+TVW6ZpelEaNNfFBp /KIxdiTmajAWGf16ALCa9UahfOsXufBciJIF9C53GAHJqUYGONAbHZaM5lyLWpiJ kXA6rpefuhiu6O5qsLVcisMCiAFs7D62s9nqmCn7TzZIzE1vFIBFX0iIEOemETkj 8ovVCCR33g42U81HqNjgtpYGE2Tz2Bw669QHh7kHz9M2uVtLf0uycc+5t/VBx1tB mzxnjhDvxcX3spzedrrdSha/P/fEzhFusrbbEel3rk3BPymljADOQGML8/PRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUacIdFuisggs6PWFHDI4YB+dnvcIwHwYDVR0j BBgwFoAU4jqgAhVzNCZFot+2aQcaP8Rg8SgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhkMGZjYTgtNWMyZC00ZTM1LWJkN2QtYjQ0OGFhNzVmMmJlLzAvRTIzQUEwMDIx NTczMzQyNjQ1QTJERkI2NjkwNzFBM0ZDNDYwRjEyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMjNBQTAwMjE1NzMzNDI2NDVBMkRGQjY2OTA3MUEzRkM0NjBG MTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhkMGZjYTgtNWMyZC00ZTM1LWJk N2QtYjQ0OGFhNzVmMmJlLzAvRTIzQUEwMDIxNTczMzQyNjQ1QTJERkI2NjkwNzFB M0ZDNDYwRjEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAQ5hQBJ7bLEWf6+WSAIMBY1dpds52pNVKD ViMwyCCk916CIVRFoKTnD/XImJOr2aXpRec3CSig7KqHPBTaaP7pQZq7ANXv4a/T TfayT4/S8Cq7RMKXN+gT7Z3AvRDUGLEmVdOMpyoMD2kLW5oV77FJfGgyXKJ9eAsl uuHDN4US1nz03Xus2JeBVzwDmzfT2WQSLinfRFj0GJldoP10OGYVXozgxxqaPDOD RGS6wZKYlCrf6T2yRju1vFjVf7Gxl22JSOMC4YR5DLYTb+viSnyFxfcan02Z5I9+ 2hqa84bP9zAU5GAskPiFkH7aARqLSTV9Rv/UyDNrM7IMOAHYcdw= -----END CERTIFICATE-----Generated at Thu Sep 17 10:43:47 2026 by rpki-client