$ rpki-client -vvf rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft File: 1423B36DE1705432D7FAC72E76D94A011FDE2748.mft (raw, json) Hash identifier: /BGAGvkzaYBMmAD7wm0YgGL0GbFwjJvRhxRU73pNzRM= Subject key identifier: F8:84:5E:A0:A3:6F:AB:D1:F2:C0:6D:97:72:1C:50:7C:40:E2:22:50 Authority key identifier: 14:23:B3:6D:E1:70:54:32:D7:FA:C7:2E:76:D9:4A:01:1F:DE:27:48 Certificate issuer: /CN=1423B36DE1705432D7FAC72E76D94A011FDE2748 Certificate serial: 623CF45CAAD84319768F85CB19BC6320CB30700E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft Manifest number: 61 Signing time: Mon 13 Jul 2026 02:52:35 +0000 Manifest this update: Mon 13 Jul 2026 02:47:35 +0000 Manifest next update: Tue 14 Jul 2026 03:45:35 +0000 Files and hashes: 1: 1423B36DE1705432D7FAC72E76D94A011FDE2748.crl (hash: DcpJVGwxhmc8MWgTHpv+NyYimris13mtx1YPqerm3Uk=) 2: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: cCEW6l1CmmQEDb9CwJ4tPNqGxyEaPxiJZinIbOgsV2E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.crl rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 03:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:3c:f4:5c:aa:d8:43:19:76:8f:85:cb:19:bc:63:20:cb:30:70:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1423B36DE1705432D7FAC72E76D94A011FDE2748 Validity Not Before: Jul 13 02:47:35 2026 GMT Not After : Jul 14 03:45:35 2026 GMT Subject: CN=F8845EA0A36FABD1F2C06D97721C507C40E22250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:80:42:29:77:8b:e6:8f:c2:8e:57:41:79:cb: c1:f2:d5:5a:a9:27:54:45:f3:44:65:06:54:7f:c0: 68:0d:6b:b0:0a:1f:f0:09:66:ed:f8:e8:00:cb:b2: b5:a9:fc:36:1a:f3:c9:19:7f:8c:58:8b:e8:16:5c: c7:e2:f6:ce:db:87:30:42:3d:d2:28:72:98:64:13: a9:65:a1:2e:d7:da:3b:96:2c:61:34:8e:4c:76:e0: 7a:ea:4f:85:c5:ca:85:6b:4e:ca:f6:99:0e:8b:c1: 83:1a:b7:99:56:2e:8f:07:73:34:93:a5:27:40:a9: 8e:a9:c8:22:e5:c3:29:53:1a:97:66:5b:98:60:bc: fd:b7:40:67:2a:4b:eb:1c:f6:4b:9d:70:5b:e6:1c: b2:7a:47:05:2e:dd:69:bd:5e:3d:ac:38:d8:2a:a0: f2:dd:c3:41:97:37:a4:87:f0:fa:62:67:83:4a:a2: 54:a3:f5:85:88:fb:5c:86:e9:bf:d3:8f:34:9f:3f: 71:b7:51:93:84:de:04:bd:94:97:99:84:96:dd:1b: ce:31:e6:a1:52:b0:c7:86:be:5a:4e:55:36:2d:31: 02:1f:a7:ae:7e:86:58:eb:0d:1e:54:77:77:00:64: 2d:75:bd:7d:32:e4:e0:04:b4:04:5e:9d:4c:1c:40: be:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:84:5E:A0:A3:6F:AB:D1:F2:C0:6D:97:72:1C:50:7C:40:E2:22:50 X509v3 Authority Key Identifier: keyid:14:23:B3:6D:E1:70:54:32:D7:FA:C7:2E:76:D9:4A:01:1F:DE:27:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:71:05:34:57:d9:b4:96:b5:86:48:f4:d1:77:27:49:be:20: 60:20:d4:30:8a:6a:90:27:71:ae:a5:ba:ca:0d:a6:64:bb:a5: cc:25:16:cc:8f:ae:9f:cc:7c:1f:84:b7:5e:82:ee:d2:b2:49: fa:90:f4:84:ab:9e:5f:bd:70:34:b6:b8:36:b2:38:2f:a9:62: 85:90:6d:2d:b5:ec:07:4f:5b:d6:8e:66:c4:12:b9:43:f6:ae: 56:f0:25:1d:f2:3b:b8:fa:db:3c:1b:3b:08:4d:58:55:7c:59: 81:6e:c3:c6:9e:fc:9b:1c:0b:1b:f0:19:b7:4c:21:9a:12:c2: 19:36:f2:e2:36:8d:c7:51:24:ff:92:36:08:e7:9b:d8:db:7e: 52:fa:15:3c:1e:99:2f:84:a8:12:6d:38:fd:d0:3f:ff:f7:ea: 26:36:44:29:3a:55:7a:66:11:ba:b9:17:2d:cc:e8:25:8b:74: b4:74:c0:e2:2e:97:a9:2f:c4:2e:ef:e1:8a:c3:ac:0e:e0:01: 89:52:cc:d2:e1:5a:cc:00:d2:d3:a5:26:8f:bd:3a:4c:58:87: a3:a8:cf:1b:dd:61:1e:19:9b:0f:6d:56:e1:d8:14:53:7c:85: 32:2b:68:47:88:e3:60:9a:fc:fb:51:d7:cd:6d:16:67:54:73: 4c:56:8e:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYjz0XKrYQxl2j4XLGbxjIMswcA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQyM0IzNkRFMTcwNTQzMkQ3RkFDNzJFNzZEOTRBMDEx RkRFMjc0ODAeFw0yNjA3MTMwMjQ3MzVaFw0yNjA3MTQwMzQ1MzVaMDMxMTAvBgNV BAMTKEY4ODQ1RUEwQTM2RkFCRDFGMkMwNkQ5NzcyMUM1MDdDNDBFMjIyNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVgEIpd4vmj8KOV0F5y8Hy1Vqp J1RF80RlBlR/wGgNa7AKH/AJZu346ADLsrWp/DYa88kZf4xYi+gWXMfi9s7bhzBC PdIocphkE6lloS7X2juWLGE0jkx24HrqT4XFyoVrTsr2mQ6LwYMat5lWLo8HczST pSdAqY6pyCLlwylTGpdmW5hgvP23QGcqS+sc9kudcFvmHLJ6RwUu3Wm9Xj2sONgq oPLdw0GXN6SH8PpiZ4NKolSj9YWI+1yG6b/TjzSfP3G3UZOE3gS9lJeZhJbdG84x 5qFSsMeGvlpOVTYtMQIfp65+hljrDR5Ud3cAZC11vX0y5OAEtARenUwcQL6NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+IReoKNvq9HywG2XchxQfEDiIlAwHwYDVR0j BBgwFoAUFCOzbeFwVDLX+scudtlKAR/eJ0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY1MDZlNzItOGI4Ny00NzAxLWEzNjAtYWViZTI1ODQ4ZjcxLzAvMTQyM0IzNkRF MTcwNTQzMkQ3RkFDNzJFNzZEOTRBMDExRkRFMjc0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDIzQjM2REUxNzA1NDMyRDdGQUM3MkU3NkQ5NEEwMTFGREUy NzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMTQyM0IzNkRFMTcwNTQzMkQ3RkFDNzJFNzZEOTRB MDExRkRFMjc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxxBTRX2bSWtYZI9NF3J0m+IGAg1DCKapAn ca6lusoNpmS7pcwlFsyPrp/MfB+Et16C7tKySfqQ9ISrnl+9cDS2uDayOC+pYoWQ bS217AdPW9aOZsQSuUP2rlbwJR3yO7j62zwbOwhNWFV8WYFuw8ae/JscCxvwGbdM IZoSwhk28uI2jcdRJP+SNgjnm9jbflL6FTwemS+EqBJtOP3QP//36iY2RCk6VXpm Ebq5Fy3M6CWLdLR0wOIul6kvxC7v4YrDrA7gAYlSzNLhWswA0tOlJo+9OkxYh6Oo zxvdYR4Zmw9tVuHYFFN8hTIraEeI42Ca/PtR181tFmdUc0xWjvU= -----END CERTIFICATE-----Generated at Mon Jul 13 11:45:22 2026 by rpki-client