$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft File: 1423B36DE1705432D7FAC72E76D94A011FDE2748.mft (raw, json) Hash identifier: WLyIOYWMaqMY2jSXazszZiVNt2ePVne9+CeZD2UOeio= Subject key identifier: 4C:05:C1:56:E1:59:34:E0:3D:69:8F:DA:18:4D:FC:E8:64:95:80:63 Authority key identifier: 14:23:B3:6D:E1:70:54:32:D7:FA:C7:2E:76:D9:4A:01:1F:DE:27:48 Certificate issuer: /CN=1423B36DE1705432D7FAC72E76D94A011FDE2748 Certificate serial: 5EA00C14FB953CFC1529AFBA638A2E7A05C41287 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft Manifest number: A4 Signing time: Mon 31 Aug 2026 23:23:45 +0000 Manifest this update: Mon 31 Aug 2026 23:18:45 +0000 Manifest next update: Wed 02 Sep 2026 03:21:45 +0000 Files and hashes: 1: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: cCEW6l1CmmQEDb9CwJ4tPNqGxyEaPxiJZinIbOgsV2E=) 2: 1423B36DE1705432D7FAC72E76D94A011FDE2748.crl (hash: hIJhgXxYcIjYyf3+AdVV2LTzH4CZ6eH5OzzOeT3OGnc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.crl rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 02:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a0:0c:14:fb:95:3c:fc:15:29:af:ba:63:8a:2e:7a:05:c4:12:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1423B36DE1705432D7FAC72E76D94A011FDE2748 Validity Not Before: Aug 31 23:18:45 2026 GMT Not After : Sep 2 03:21:45 2026 GMT Subject: CN=4C05C156E15934E03D698FDA184DFCE864958063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:0e:c2:97:91:58:b7:c6:dc:04:88:ca:12: 82:28:6a:ee:86:17:9a:6f:83:7c:65:e4:ed:e5:c8: 13:cb:74:e7:a6:06:dd:f6:45:e9:35:26:5e:88:e3: 44:bf:4b:3e:f8:12:44:09:03:e0:39:e1:a7:25:38: 77:bb:4a:22:53:a9:0e:20:e3:96:16:6f:a6:21:56: 5a:12:15:48:d9:3e:81:6b:10:79:21:12:f1:f2:21: 43:42:ec:74:42:1c:4d:a6:27:be:70:b1:58:5c:eb: 4e:70:d3:8c:34:14:c9:92:e6:c0:60:e7:e6:2a:e2: 26:d8:e2:20:e9:5f:f6:3e:0c:3d:89:ad:3f:20:2a: e6:b3:0e:86:99:5f:ae:b2:c7:6f:3d:40:a7:b6:65: 5a:f4:5e:2d:4e:8b:e2:af:da:07:3d:66:3f:25:4e: 08:e2:45:9a:37:da:c8:ea:a5:b8:b4:10:be:e8:d7: 10:a0:7d:80:a6:ec:e6:48:91:a3:8d:0e:fe:08:60: 68:fa:13:a5:cf:d8:30:f5:88:8f:29:87:71:bc:9a: 6e:f6:f9:62:11:6c:78:50:cc:01:71:ac:ca:e6:ad: d6:d4:fc:f6:9a:21:b4:cd:e8:29:e4:c3:5f:5c:ae: 70:44:8e:8c:8c:b4:cb:ef:c0:98:5c:c6:c9:86:dc: cc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:05:C1:56:E1:59:34:E0:3D:69:8F:DA:18:4D:FC:E8:64:95:80:63 X509v3 Authority Key Identifier: keyid:14:23:B3:6D:E1:70:54:32:D7:FA:C7:2E:76:D9:4A:01:1F:DE:27:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:5a:b2:4d:f0:68:f5:d6:b7:2e:9e:5d:22:c5:68:c5:7c:07: a4:ad:9c:ab:14:b8:ce:47:79:bf:4d:a7:95:f4:78:1e:91:35: 42:eb:ce:88:ac:26:a0:7c:83:61:8b:95:81:a3:77:46:e7:52: 2c:9f:f6:6a:0e:9d:a0:da:33:85:18:fa:ae:13:71:2e:af:72: 2e:7c:34:f5:7d:e4:23:55:47:48:c3:7b:6b:3c:0a:c2:c0:89: df:c7:a4:81:0b:92:4a:7b:8a:52:27:11:ba:6c:37:67:64:35: d0:0e:b4:b2:0a:2d:60:84:a2:7d:c4:8d:c7:7b:0f:a1:da:2c: 47:78:5b:a2:fd:ed:34:83:b7:63:80:07:c5:94:cf:5a:e0:95: 16:9c:53:05:55:18:08:1d:c2:c9:1c:01:0a:61:80:97:e3:52: 36:32:06:fc:27:32:4d:94:45:02:fe:97:75:7f:7b:aa:84:4e: 07:38:5c:50:be:40:85:b8:b3:54:e8:f6:53:37:4b:d8:15:12: ea:bf:be:8b:c8:98:f9:bf:69:fe:a6:ff:76:53:6a:74:14:10: 87:e1:0e:f3:c3:ca:5c:94:88:51:37:17:11:cf:26:1b:b6:08: 67:61:fa:85:61:13:a2:52:75:7d:f6:09:d1:1f:71:33:e7:4c: 73:a5:a2:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXqAMFPuVPPwVKa+6Y4ouegXEEocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQyM0IzNkRFMTcwNTQzMkQ3RkFDNzJFNzZEOTRBMDEx RkRFMjc0ODAeFw0yNjA4MzEyMzE4NDVaFw0yNjA5MDIwMzIxNDVaMDMxMTAvBgNV BAMTKDRDMDVDMTU2RTE1OTM0RTAzRDY5OEZEQTE4NERGQ0U4NjQ5NTgwNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA4Q7Cl5FYt8bcBIjKEoIoau6G F5pvg3xl5O3lyBPLdOemBt32Rek1Jl6I40S/Sz74EkQJA+A54aclOHe7SiJTqQ4g 45YWb6YhVloSFUjZPoFrEHkhEvHyIUNC7HRCHE2mJ75wsVhc605w04w0FMmS5sBg 5+Yq4ibY4iDpX/Y+DD2JrT8gKuazDoaZX66yx289QKe2ZVr0Xi1Oi+Kv2gc9Zj8l TgjiRZo32sjqpbi0EL7o1xCgfYCm7OZIkaONDv4IYGj6E6XP2DD1iI8ph3G8mm72 +WIRbHhQzAFxrMrmrdbU/PaaIbTN6Cnkw19crnBEjoyMtMvvwJhcxsmG3MwpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTAXBVuFZNOA9aY/aGE386GSVgGMwHwYDVR0j BBgwFoAUFCOzbeFwVDLX+scudtlKAR/eJ0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY1MDZlNzItOGI4Ny00NzAxLWEzNjAtYWViZTI1ODQ4ZjcxLzAvMTQyM0IzNkRF MTcwNTQzMkQ3RkFDNzJFNzZEOTRBMDExRkRFMjc0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDIzQjM2REUxNzA1NDMyRDdGQUM3MkU3NkQ5NEEwMTFGREUy NzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMTQyM0IzNkRFMTcwNTQzMkQ3RkFDNzJFNzZEOTRB MDExRkRFMjc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlask3waPXWty6eXSLFaMV8B6StnKsUuM5H eb9Np5X0eB6RNULrzoisJqB8g2GLlYGjd0bnUiyf9moOnaDaM4UY+q4TcS6vci58 NPV95CNVR0jDe2s8CsLAid/HpIELkkp7ilInEbpsN2dkNdAOtLIKLWCEon3Ejcd7 D6HaLEd4W6L97TSDt2OAB8WUz1rglRacUwVVGAgdwskcAQphgJfjUjYyBvwnMk2U RQL+l3V/e6qETgc4XFC+QIW4s1To9lM3S9gVEuq/vovImPm/af6m/3ZTanQUEIfh DvPDylyUiFE3FxHPJhu2CGdh+oVhE6JSdX32CdEfcTPnTHOlohw= -----END CERTIFICATE-----Generated at Tue Sep 1 06:22:23 2026 by rpki-client