$ rpki-client -vvf rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft File: 23A948EB16F42F91944CC667D8613DD9AD7F2481.mft (raw, json) Hash identifier: xYOM3PrItzx6rOvMPn1bhCdsKm6pizk3XLPxe1ZIIW4= Subject key identifier: 53:69:8F:8A:C3:9B:00:4B:6E:FC:AB:B0:A4:EC:24:D7:8A:A1:F6:73 Authority key identifier: 23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 Certificate issuer: /CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Certificate serial: 148EE65DA8534C7095BE9CFE8D26134B1DC96DA4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 16:27:19 +0000 Manifest this update: Sun 02 Aug 2026 16:22:19 +0000 Manifest next update: Mon 03 Aug 2026 16:34:19 +0000 Files and hashes: 1: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: kDGuaA+cqkmx9XuIt8DtLniH0ehk8T8tx9w2wbnmu+I=) 2: 23A948EB16F42F91944CC667D8613DD9AD7F2481.crl (hash: m9lk4Bbo0xi5q/PGIZg/b9AHNFPTyiA5fVi1H8wBqpc=) 3: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: v65XV+5ddOqAbRU1/IxSl2v0vrbo4M4xD55oScBfz3w=) 4: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: 635Ti/3KrhSgNu8Gwnt/QjYuKqvc1Cqug8YI7DrA208=) 5: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: HXWQguAHiybQ0lNmv6j951fobzx6yk3XQekPS+8DSQI=) 6: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: Iadh95YULNi9WMbGAs3/Q3ZNW5dEBFpEr5CVUQ5/+x0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:8e:e6:5d:a8:53:4c:70:95:be:9c:fe:8d:26:13:4b:1d:c9:6d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Validity Not Before: Aug 2 16:22:19 2026 GMT Not After : Aug 3 16:34:19 2026 GMT Subject: CN=53698F8AC39B004B6EFCABB0A4EC24D78AA1F673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:10:63:58:cf:b1:4a:d8:b0:be:d5:3c:6d:34: e9:c8:5c:18:05:16:59:61:ca:66:2e:76:05:9e:68: 21:31:3b:5d:de:42:60:1e:4b:4c:e8:c6:57:1b:fd: d5:a3:7d:9a:04:8a:88:9c:6f:cf:dc:3b:92:92:5a: 12:3b:10:ba:57:39:d0:71:1a:aa:67:97:cb:bd:9d: fe:5f:76:e3:64:26:2c:df:4b:25:42:0e:20:51:e3: 95:fe:51:55:1f:da:aa:7f:40:a3:0f:5a:2b:d2:4b: ce:41:3f:3f:ee:29:e3:23:d7:a4:0c:95:5f:4f:cc: f7:72:b1:3f:16:bf:0a:2b:84:52:5e:af:01:da:8e: 31:f2:9d:f4:fe:0d:54:34:8d:36:05:93:f4:df:ca: ec:a2:e7:71:19:7b:09:55:f3:a8:f8:ec:d8:58:44: df:3e:3c:18:40:3b:ef:10:b7:7d:6b:05:c8:76:a1: db:14:dc:b8:44:6a:e1:0c:3a:bc:f5:7b:19:f3:6d: 92:be:08:85:ff:bb:72:b8:e5:56:6d:1d:48:38:a1: 2a:d9:93:0f:6d:6d:07:d0:31:61:a5:01:fb:fe:5a: c1:a8:6b:5b:77:66:99:ea:21:32:ae:f8:32:90:56: 70:eb:1d:0e:1c:07:7c:97:08:96:0b:3f:55:9a:38: 9c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:69:8F:8A:C3:9B:00:4B:6E:FC:AB:B0:A4:EC:24:D7:8A:A1:F6:73 X509v3 Authority Key Identifier: keyid:23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d8:b0:a3:f9:ee:32:46:34:b8:0c:a5:4f:a7:04:e7:c8:37: d6:8d:63:b3:b8:7a:88:af:75:77:be:ba:04:9b:15:33:56:e1: 93:9d:06:ef:fb:c2:9c:c2:38:c2:88:13:03:97:fd:79:a8:3a: e5:4a:4a:7b:54:2a:6c:33:e7:6c:b2:ec:d4:fe:6b:a5:3e:75: 7f:b5:ad:c4:46:ff:bb:91:55:63:16:4e:74:8e:15:10:3c:d5: bc:98:dc:89:03:2b:4b:bc:ac:e7:ec:1e:4a:b3:5c:41:06:f0: dd:d9:2c:14:ee:7b:aa:45:a0:a5:5a:fe:2a:9d:8a:61:13:c9: 38:af:64:d3:69:07:9f:54:6a:c1:eb:22:31:1a:3e:f3:f8:20: b6:65:1a:83:42:76:25:89:4e:99:b5:12:51:c4:83:02:90:02: 3a:03:46:c6:6d:2c:c8:fd:f3:5e:8c:65:e1:7d:b5:9d:df:c4: af:86:be:ae:ac:b2:21:6b:0f:e1:6f:d4:72:74:c6:48:4d:c5: 7a:a4:05:4d:25:4b:ae:38:75:cb:cc:5c:8b:8b:a5:9b:1e:24: b1:60:8b:eb:7a:7c:c2:09:48:c1:83:fa:b8:f9:3c:09:34:29: b7:3b:52:4d:f3:db:3d:9e:57:99:b6:5c:08:d2:06:11:f8:9a: e2:6b:c5:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFI7mXahTTHCVvpz+jSYTSx3JbaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNERDlB RDdGMjQ4MTAeFw0yNjA4MDIxNjIyMTlaFw0yNjA4MDMxNjM0MTlaMDMxMTAvBgNV BAMTKDUzNjk4RjhBQzM5QjAwNEI2RUZDQUJCMEE0RUMyNEQ3OEFBMUY2NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQEGNYz7FK2LC+1TxtNOnIXBgF FllhymYudgWeaCExO13eQmAeS0zoxlcb/dWjfZoEioicb8/cO5KSWhI7ELpXOdBx Gqpnl8u9nf5fduNkJizfSyVCDiBR45X+UVUf2qp/QKMPWivSS85BPz/uKeMj16QM lV9PzPdysT8WvworhFJerwHajjHynfT+DVQ0jTYFk/Tfyuyi53EZewlV86j47NhY RN8+PBhAO+8Qt31rBch2odsU3LhEauEMOrz1exnzbZK+CIX/u3K45VZtHUg4oSrZ kw9tbQfQMWGlAfv+WsGoa1t3ZpnqITKu+DKQVnDrHQ4cB3yXCJYLP1WaOJytAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU2mPisObAEtu/KuwpOwk14qh9nMwHwYDVR0j BBgwFoAUI6lI6xb0L5GUTMZn2GE92a1/JIEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJhYzBjYTUtNWNlNy00ZTZlLTlmZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIx NkY0MkY5MTk0NENDNjY3RDg2MTNERDlBRDdGMjQ4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yM0E5NDhFQjE2RjQyRjkxOTQ0Q0M2NjdEODYxM0REOUFEN0Yy NDgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNE RDlBRDdGMjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3YsKP57jJGNLgMpU+nBOfIN9aNY7O4eoiv dXe+ugSbFTNW4ZOdBu/7wpzCOMKIEwOX/XmoOuVKSntUKmwz52yy7NT+a6U+dX+1 rcRG/7uRVWMWTnSOFRA81byY3IkDK0u8rOfsHkqzXEEG8N3ZLBTue6pFoKVa/iqd imETyTivZNNpB59UasHrIjEaPvP4ILZlGoNCdiWJTpm1ElHEgwKQAjoDRsZtLMj9 816MZeF9tZ3fxK+Gvq6ssiFrD+Fv1HJ0xkhNxXqkBU0lS644dcvMXIuLpZseJLFg i+t6fMIJSMGD+rj5PAk0Kbc7Uk3z2z2eV5m2XAjSBhH4muJrxQ8= -----END CERTIFICATE-----Generated at Sun Aug 2 22:43:33 2026 by rpki-client