$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft File: 23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft (raw, json) Hash identifier: cbETehR6bwTf70anF0UE+7u0MnsXlpYwStwcKTMpd5U= Subject key identifier: 54:AE:61:AC:75:4B:B2:81:38:19:D1:BD:67:EE:7C:0B:B3:BE:12:F0 Authority key identifier: 23:A0:F6:8C:EA:18:94:A3:2A:4A:04:BD:7E:64:F0:CF:0F:3D:EA:A0 Certificate issuer: /CN=23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0 Certificate serial: 439869951698DB8A8710ECF023F469901C9D2F30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:17:40 +0000 Manifest this update: Wed 16 Sep 2026 23:12:40 +0000 Manifest next update: Fri 18 Sep 2026 00:25:40 +0000 Files and hashes: 1: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: l/X2cP22D0Wy7RA8I5HP0mcO1xVHiIblMcBaMiAvS8U=) 2: 23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl (hash: xiCbSnDL83sBcUcqKyhIMZ7I34Jocu0B88gJUUghaXE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:98:69:95:16:98:db:8a:87:10:ec:f0:23:f4:69:90:1c:9d:2f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0 Validity Not Before: Sep 16 23:12:40 2026 GMT Not After : Sep 18 00:25:40 2026 GMT Subject: CN=54AE61AC754BB2813819D1BD67EE7C0BB3BE12F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:64:d9:82:72:70:3d:c1:0d:fb:2c:4b:96:6d: e4:e5:55:4a:32:73:ce:74:fd:ad:f2:11:0f:fe:8d: 27:98:aa:0b:38:27:03:cc:58:10:de:95:f7:bb:c0: dd:be:50:2f:e8:92:a9:bb:5c:d6:7f:40:1d:ab:e2: da:f7:5f:db:77:48:af:82:6c:c3:4c:4f:20:96:f4: 91:7f:f4:27:10:4f:ab:d5:28:0c:99:cf:dc:fb:a0: b1:31:b4:2e:fc:20:0f:a8:aa:a9:af:67:5f:34:99: da:99:06:a9:42:03:3a:5a:5c:40:35:2b:cf:b5:d5: 04:9f:76:54:8f:0a:f5:dc:a2:85:e3:1a:33:ac:43: 18:9b:67:33:fd:1a:5f:c4:3a:8f:bc:fd:80:b8:d2: 66:5d:90:09:c6:3a:86:8e:23:25:e2:a2:83:ab:28: 27:c0:fe:df:77:70:67:f5:79:48:d6:3f:74:dd:40: 67:2f:de:fa:af:13:1d:9d:ed:a8:86:03:f8:2e:f9: c9:92:11:01:06:0f:6e:59:25:88:a6:43:46:e8:a8: 9e:73:d4:5c:e9:87:08:5f:36:4f:5e:f3:8f:0c:76: 81:1c:da:18:00:8d:c0:03:ec:fd:d0:06:f4:40:98: 55:8f:56:2a:b1:3f:7d:9b:96:75:24:9e:18:f6:a8: 8c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AE:61:AC:75:4B:B2:81:38:19:D1:BD:67:EE:7C:0B:B3:BE:12:F0 X509v3 Authority Key Identifier: keyid:23:A0:F6:8C:EA:18:94:A3:2A:4A:04:BD:7E:64:F0:CF:0F:3D:EA:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/23A0F68CEA1894A32A4A04BD7E64F0CF0F3DEAA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:9c:d2:b3:38:b2:ba:8b:a5:3d:3d:2f:18:36:89:5f:76:9f: 2e:f2:a0:34:a6:e6:77:b5:1c:86:44:28:ce:a2:b4:92:4f:f0: f3:26:d0:66:20:f8:c4:73:92:14:da:a7:e8:13:ae:d3:01:d1: d7:8e:f4:34:74:84:51:ae:fd:b7:77:1e:6d:f8:56:5e:b6:8e: 64:2d:95:ba:16:35:0f:95:77:52:42:b0:c3:fc:93:59:b3:85: a9:e6:ee:62:fa:5e:5e:2e:e5:92:0f:7f:a6:a4:7c:ca:4e:02: 58:c2:bf:8a:dc:dc:f1:02:97:d7:e4:49:d1:22:13:ed:d8:ae: 95:fc:fe:8d:f9:06:59:c2:99:bd:7d:54:e0:1b:c2:0c:d0:e0: 2d:4c:94:cf:f4:bb:6a:3e:d1:7f:64:8d:d2:a0:13:7a:5d:32: a5:73:46:14:de:3b:0b:6a:6c:f9:39:c7:c6:20:35:c5:91:ef: 5b:39:49:13:d1:9a:8d:b8:d8:4e:b7:c3:7d:51:59:b4:d8:0d: a3:62:61:a9:a3:da:3a:6a:68:da:aa:cb:1d:c1:3c:2c:f6:fa: 01:84:cf:92:7e:76:4a:a3:e8:62:ff:9b:ac:53:5c:7b:a5:c0: f8:41:26:b6:c1:46:90:7e:06:d0:80:ed:f4:c9:2c:04:82:f2: d8:72:bb:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5hplRaY24qHEOzwI/RpkBydLzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBMEY2OENFQTE4OTRBMzJBNEEwNEJEN0U2NEYwQ0Yw RjNERUFBMDAeFw0yNjA5MTYyMzEyNDBaFw0yNjA5MTgwMDI1NDBaMDMxMTAvBgNV BAMTKDU0QUU2MUFDNzU0QkIyODEzODE5RDFCRDY3RUU3QzBCQjNCRTEyRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZNmCcnA9wQ37LEuWbeTlVUoy c850/a3yEQ/+jSeYqgs4JwPMWBDelfe7wN2+UC/okqm7XNZ/QB2r4tr3X9t3SK+C bMNMTyCW9JF/9CcQT6vVKAyZz9z7oLExtC78IA+oqqmvZ180mdqZBqlCAzpaXEA1 K8+11QSfdlSPCvXcooXjGjOsQxibZzP9Gl/EOo+8/YC40mZdkAnGOoaOIyXiooOr KCfA/t93cGf1eUjWP3TdQGcv3vqvEx2d7aiGA/gu+cmSEQEGD25ZJYimQ0boqJ5z 1FzphwhfNk9e848MdoEc2hgAjcAD7P3QBvRAmFWPViqxP32blnUknhj2qIy5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVK5hrHVLsoE4GdG9Z+58C7O+EvAwHwYDVR0j BBgwFoAUI6D2jOoYlKMqSgS9fmTwzw896qAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1NGE4Y2UtMThmNC00OTg4LWE5NTEtOTY2NGRkMTc2Y2Q5LzAvMjNBMEY2OENF QTE4OTRBMzJBNEEwNEJEN0U2NEYwQ0YwRjNERUFBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yM0EwRjY4Q0VBMTg5NEEzMkE0QTA0QkQ3RTY0RjBDRjBGM0RF QUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvMjNBMEY2OENFQTE4OTRBMzJBNEEwNEJEN0U2NEYw Q0YwRjNERUFBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSc0rM4srqLpT09Lxg2iV92ny7yoDSm5ne1 HIZEKM6itJJP8PMm0GYg+MRzkhTap+gTrtMB0deO9DR0hFGu/bd3Hm34Vl62jmQt lboWNQ+Vd1JCsMP8k1mzhanm7mL6Xl4u5ZIPf6akfMpOAljCv4rc3PECl9fkSdEi E+3YrpX8/o35BlnCmb19VOAbwgzQ4C1MlM/0u2o+0X9kjdKgE3pdMqVzRhTeOwtq bPk5x8YgNcWR71s5SRPRmo242E63w31RWbTYDaNiYamj2jpqaNqqyx3BPCz2+gGE z5J+dkqj6GL/m6xTXHulwPhBJrbBRpB+BtCA7fTJLASC8thyu38= -----END CERTIFICATE-----Generated at Thu Sep 17 14:48:01 2026 by rpki-client