$ rpki-client -vvf rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft File: 23A948EB16F42F91944CC667D8613DD9AD7F2481.mft (raw, json) Hash identifier: L6vdmlUQdKW0g+XfOYB/F0qYZC40r5XcVrjhFSmNZhY= Subject key identifier: 80:33:FF:F3:B5:49:D4:33:49:8D:3C:D7:C4:37:36:F1:6F:E8:58:07 Authority key identifier: 23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 Certificate issuer: /CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Certificate serial: 7CB179DF427D06D83FDF7A6844950CC40F678A59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 15:10:09 +0000 Manifest this update: Thu 18 Jun 2026 15:05:09 +0000 Manifest next update: Fri 19 Jun 2026 16:49:09 +0000 Files and hashes: 1: 23A948EB16F42F91944CC667D8613DD9AD7F2481.crl (hash: 3ytMsSf9OE2ae03qvw+mCLrh/9mPRPT5orQWtLrptbQ=) 2: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: HXWQguAHiybQ0lNmv6j951fobzx6yk3XQekPS+8DSQI=) 3: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: Iadh95YULNi9WMbGAs3/Q3ZNW5dEBFpEr5CVUQ5/+x0=) 4: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: 635Ti/3KrhSgNu8Gwnt/QjYuKqvc1Cqug8YI7DrA208=) 5: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: v65XV+5ddOqAbRU1/IxSl2v0vrbo4M4xD55oScBfz3w=) 6: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: kDGuaA+cqkmx9XuIt8DtLniH0ehk8T8tx9w2wbnmu+I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b1:79:df:42:7d:06:d8:3f:df:7a:68:44:95:0c:c4:0f:67:8a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Validity Not Before: Jun 18 15:05:09 2026 GMT Not After : Jun 19 16:49:09 2026 GMT Subject: CN=8033FFF3B549D433498D3CD7C43736F16FE85807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f0:fa:2b:70:1d:76:b8:45:f3:21:d9:e5:65: a8:b8:c9:aa:6d:ac:a7:33:0d:8b:97:f7:ea:4f:40: 87:8a:2f:b5:06:3c:04:6f:aa:96:ea:ca:8d:70:25: 7f:bc:43:20:4b:fb:9f:ba:97:5e:87:b9:ee:b5:45: 49:c9:96:8a:ce:78:e2:3a:17:11:e9:06:b8:05:30: 0f:3c:1d:6b:6c:0a:4a:60:b7:25:6b:58:b5:af:21: 1b:93:f0:6b:a2:7b:bf:58:de:7a:39:6f:16:64:7f: 3b:60:78:2d:25:c5:bd:02:6f:99:71:b1:fe:1a:63: b9:f4:e3:a1:a8:f6:90:9c:52:7c:2a:ee:a0:73:ec: 8c:7a:ee:86:27:27:61:4e:88:bc:53:3e:3d:18:54: dd:30:cc:c1:b3:67:ce:b4:5b:4a:7b:18:9b:03:06: 96:38:4c:6a:83:9b:39:d1:64:90:8f:8f:77:38:bf: 8d:ad:98:e9:f0:0d:f9:1d:dd:fe:e6:d7:a4:49:81: 73:60:64:0c:34:ef:17:c5:69:85:54:fe:6c:18:14: 84:83:24:69:75:f6:e5:4e:83:0c:71:2d:7f:2d:9c: af:8a:b6:b2:00:c4:4d:ca:93:88:75:e8:4c:87:cf: 8a:46:79:ac:9e:4c:b1:07:10:77:e5:6c:f3:c9:7e: b6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:33:FF:F3:B5:49:D4:33:49:8D:3C:D7:C4:37:36:F1:6F:E8:58:07 X509v3 Authority Key Identifier: keyid:23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:81:f3:f8:8c:8b:09:d2:a5:56:40:4a:ee:4c:78:b5:de:12: 77:5b:3d:a1:3c:77:32:34:43:d7:b3:63:0d:20:29:0c:e0:84: 92:7f:94:65:f0:88:cf:db:a0:5b:51:fe:ec:53:63:9f:97:e0: 55:e9:43:01:8e:b9:87:6f:8a:99:8c:4c:74:72:13:d4:c1:7c: 14:22:ed:31:47:ef:0f:34:4e:63:e0:9a:14:b5:7d:dc:5c:e3: 21:45:e6:a4:f1:5f:e9:7f:1e:d4:a9:40:4e:bf:7f:75:a1:19: 77:c0:22:4d:2b:6a:63:8d:c9:93:f2:f0:d8:23:c0:25:3c:b5: c4:ca:05:80:24:1b:04:ae:e0:af:c5:9b:86:b6:d9:11:25:c7: c6:04:dd:32:64:1e:e8:e2:3c:4e:ae:23:69:a0:11:3a:c7:9a: 7e:84:4a:81:39:53:80:3f:ed:1a:0b:b9:d2:a2:ae:d8:df:a0: 11:9e:a7:9e:6a:25:e2:1f:4c:23:e4:8d:61:3c:c1:42:e5:8a: f0:e4:26:57:0d:1c:de:d9:db:15:b6:e7:b1:06:8c:fe:b2:6e: b1:db:6f:71:3a:55:3a:31:05:fe:fe:12:30:a6:10:2d:65:5c: 2f:4f:5d:3b:27:62:3e:fe:3b:b0:7f:e9:43:47:50:d2:cb:05: ff:56:a1:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfLF530J9Btg/33poRJUMxA9nilkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNERDlB RDdGMjQ4MTAeFw0yNjA2MTgxNTA1MDlaFw0yNjA2MTkxNjQ5MDlaMDMxMTAvBgNV BAMTKDgwMzNGRkYzQjU0OUQ0MzM0OThEM0NEN0M0MzczNkYxNkZFODU4MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ8PorcB12uEXzIdnlZai4yapt rKczDYuX9+pPQIeKL7UGPARvqpbqyo1wJX+8QyBL+5+6l16Hue61RUnJlorOeOI6 FxHpBrgFMA88HWtsCkpgtyVrWLWvIRuT8Guie79Y3no5bxZkfztgeC0lxb0Cb5lx sf4aY7n046Go9pCcUnwq7qBz7Ix67oYnJ2FOiLxTPj0YVN0wzMGzZ860W0p7GJsD BpY4TGqDmznRZJCPj3c4v42tmOnwDfkd3f7m16RJgXNgZAw07xfFaYVU/mwYFISD JGl19uVOgwxxLX8tnK+KtrIAxE3Kk4h16EyHz4pGeayeTLEHEHflbPPJfrbDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgDP/87VJ1DNJjTzXxDc28W/oWAcwHwYDVR0j BBgwFoAUI6lI6xb0L5GUTMZn2GE92a1/JIEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJhYzBjYTUtNWNlNy00ZTZlLTlmZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIx NkY0MkY5MTk0NENDNjY3RDg2MTNERDlBRDdGMjQ4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yM0E5NDhFQjE2RjQyRjkxOTQ0Q0M2NjdEODYxM0REOUFEN0Yy NDgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNE RDlBRDdGMjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmB8/iMiwnSpVZASu5MeLXeEndbPaE8dzI0 Q9ezYw0gKQzghJJ/lGXwiM/boFtR/uxTY5+X4FXpQwGOuYdvipmMTHRyE9TBfBQi 7TFH7w80TmPgmhS1fdxc4yFF5qTxX+l/HtSpQE6/f3WhGXfAIk0ramONyZPy8Ngj wCU8tcTKBYAkGwSu4K/Fm4a22RElx8YE3TJkHujiPE6uI2mgETrHmn6ESoE5U4A/ 7RoLudKirtjfoBGep55qJeIfTCPkjWE8wULlivDkJlcNHN7Z2xW257EGjP6ybrHb b3E6VToxBf7+EjCmEC1lXC9PXTsnYj7+O7B/6UNHUNLLBf9Woes= -----END CERTIFICATE-----Generated at Thu Jun 18 19:03:01 2026 by rpki-client