$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft File: 23A948EB16F42F91944CC667D8613DD9AD7F2481.mft (raw, json) Hash identifier: PnGtvMqK4CsZXjSn6jy6eCdUGH4Mi49TwI5h7LLGzDQ= Subject key identifier: 60:50:36:29:5D:30:93:49:FA:8B:D1:5D:A1:47:87:A6:27:6E:B4:20 Authority key identifier: 23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 Certificate issuer: /CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Certificate serial: 74F6F6C94C2854A70FA87286F33DD47CF8E448A6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 16:34:35 +0000 Manifest this update: Wed 16 Sep 2026 16:29:35 +0000 Manifest next update: Thu 17 Sep 2026 19:23:35 +0000 Files and hashes: 1: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: kDGuaA+cqkmx9XuIt8DtLniH0ehk8T8tx9w2wbnmu+I=) 2: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: v65XV+5ddOqAbRU1/IxSl2v0vrbo4M4xD55oScBfz3w=) 3: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: HXWQguAHiybQ0lNmv6j951fobzx6yk3XQekPS+8DSQI=) 4: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: Iadh95YULNi9WMbGAs3/Q3ZNW5dEBFpEr5CVUQ5/+x0=) 5: 23A948EB16F42F91944CC667D8613DD9AD7F2481.crl (hash: nVD2g5g/K4QL97bXFnyb4blCw2dGl8pCWTupmfRaJPA=) 6: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: 635Ti/3KrhSgNu8Gwnt/QjYuKqvc1Cqug8YI7DrA208=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f6:f6:c9:4c:28:54:a7:0f:a8:72:86:f3:3d:d4:7c:f8:e4:48:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A948EB16F42F91944CC667D8613DD9AD7F2481 Validity Not Before: Sep 16 16:29:35 2026 GMT Not After : Sep 17 19:23:35 2026 GMT Subject: CN=605036295D309349FA8BD15DA14787A6276EB420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:84:ee:48:2e:22:47:ba:f4:89:48:42:b3: 55:6d:83:fd:16:f6:82:91:4b:5f:ee:86:b1:91:03: 3a:88:43:61:be:72:c5:04:f0:ac:20:12:6a:65:74: 7e:1e:50:74:f6:60:37:c3:b8:7c:be:d7:75:24:11: 06:35:7e:56:b3:1d:59:91:1a:00:a4:89:c6:4f:00: 0a:be:e6:ac:d4:b0:42:d6:f8:ef:33:ee:db:99:3b: 7b:de:c5:22:d5:e2:b8:0f:fb:d7:61:18:88:1e:c3: f7:8f:a0:57:bc:a5:08:8a:bb:e0:68:35:89:4c:2b: 2d:a4:d8:36:43:4d:39:51:e1:14:bf:ee:24:1b:ec: cb:1b:3b:7b:59:36:37:f1:b2:82:17:37:cf:a8:14: d1:0d:2d:1d:6a:98:33:08:ec:8c:5d:0c:f4:f5:1a: ca:26:00:1e:d1:63:21:f8:8e:94:8b:d6:6f:e9:57: ef:b7:0d:b9:b4:45:63:4b:f8:da:e5:e7:e3:17:7d: 59:ba:e4:42:43:e4:0f:19:67:7d:67:dc:11:1e:7d: 32:dd:4d:4f:ba:08:f4:77:2d:d9:aa:c7:65:c4:25: 46:b4:d8:e3:54:eb:3f:de:a5:06:e7:54:e6:bd:ae: ef:77:54:9d:e2:45:8c:f4:77:5d:80:6d:4c:97:78: b3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:50:36:29:5D:30:93:49:FA:8B:D1:5D:A1:47:87:A6:27:6E:B4:20 X509v3 Authority Key Identifier: keyid:23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:3b:f9:38:d4:cb:64:85:e5:9e:ea:2e:3b:5f:83:62:b3:f8: 25:8b:d8:fe:f5:30:8e:cf:9b:b9:55:bd:04:82:a6:de:79:f8: 90:67:77:0c:9a:86:9b:76:e1:f5:8b:2d:b2:55:4b:82:bb:34: e5:45:06:a4:b3:86:66:c8:d8:99:4b:5a:08:cf:1c:cf:1d:c6: bc:6c:56:47:03:ab:83:4c:4e:23:70:3f:43:f2:2c:42:80:6b: 61:a6:51:2c:3e:37:68:12:75:82:de:5c:06:ef:03:74:17:32: 84:67:e0:bb:a6:39:17:af:7b:a4:94:fa:5c:86:00:99:96:fd: a2:c9:7d:ba:fa:ab:08:93:b5:cd:c2:b7:6c:56:1c:39:3e:2e: 19:ce:88:3c:75:83:86:ce:12:53:87:b6:94:b3:21:4f:7c:76: 6e:34:71:e0:37:a1:c8:b7:8f:55:8f:d6:f2:70:a1:ea:2a:e6: ac:4a:1b:95:fb:93:09:76:9d:2d:ce:07:50:4a:09:32:df:00: 9e:3b:4f:9c:52:8e:6e:c6:01:e4:a2:8f:1b:d4:b0:60:30:2b: af:4f:22:b1:ff:d2:d9:c0:30:90:97:83:61:a0:74:b6:8b:19: 91:00:d7:8f:dd:de:ab:e6:cd:9f:97:bd:2c:ac:9b:ba:d7:33: bb:a2:54:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdPb2yUwoVKcPqHKG8z3UfPjkSKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNERDlB RDdGMjQ4MTAeFw0yNjA5MTYxNjI5MzVaFw0yNjA5MTcxOTIzMzVaMDMxMTAvBgNV BAMTKDYwNTAzNjI5NUQzMDkzNDlGQThCRDE1REExNDc4N0E2Mjc2RUI0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG0oTuSC4iR7r0iUhCs1Vtg/0W 9oKRS1/uhrGRAzqIQ2G+csUE8KwgEmpldH4eUHT2YDfDuHy+13UkEQY1flazHVmR GgCkicZPAAq+5qzUsELW+O8z7tuZO3vexSLV4rgP+9dhGIgew/ePoFe8pQiKu+Bo NYlMKy2k2DZDTTlR4RS/7iQb7MsbO3tZNjfxsoIXN8+oFNENLR1qmDMI7IxdDPT1 GsomAB7RYyH4jpSL1m/pV++3Dbm0RWNL+Nrl5+MXfVm65EJD5A8ZZ31n3BEefTLd TU+6CPR3Ldmqx2XEJUa02ONU6z/epQbnVOa9ru93VJ3iRYz0d12AbUyXeLMLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYFA2KV0wk0n6i9FdoUeHpidutCAwHwYDVR0j BBgwFoAUI6lI6xb0L5GUTMZn2GE92a1/JIEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJhYzBjYTUtNWNlNy00ZTZlLTlmZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIx NkY0MkY5MTk0NENDNjY3RDg2MTNERDlBRDdGMjQ4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yM0E5NDhFQjE2RjQyRjkxOTQ0Q0M2NjdEODYxM0REOUFEN0Yy NDgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvMjNBOTQ4RUIxNkY0MkY5MTk0NENDNjY3RDg2MTNE RDlBRDdGMjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFU7+TjUy2SF5Z7qLjtfg2Kz+CWL2P71MI7P m7lVvQSCpt55+JBndwyahpt24fWLLbJVS4K7NOVFBqSzhmbI2JlLWgjPHM8dxrxs VkcDq4NMTiNwP0PyLEKAa2GmUSw+N2gSdYLeXAbvA3QXMoRn4LumOReve6SU+lyG AJmW/aLJfbr6qwiTtc3Ct2xWHDk+LhnOiDx1g4bOElOHtpSzIU98dm40ceA3oci3 j1WP1vJwoeoq5qxKG5X7kwl2nS3OB1BKCTLfAJ47T5xSjm7GAeSijxvUsGAwK69P IrH/0tnAMJCXg2GgdLaLGZEA14/d3qvmzZ+XvSysm7rXM7uiVCo= -----END CERTIFICATE-----Generated at Thu Sep 17 10:04:29 2026 by rpki-client