$ rpki-client -vvvf rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft File: A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft (raw, json) Hash identifier: r6vTNNHAzygY2+pKptNBzP/LUwQ4n79yo+PaeXNfyzE= Subject key identifier: BE:F7:BF:78:8D:64:8B:34:79:26:EB:A6:DD:4F:AA:CE:EC:89:B5:F8 Authority key identifier: A2:3D:21:70:DA:27:C4:30:D1:B3:E7:D1:24:AB:D6:55:F4:6B:00:1F Certificate issuer: /CN=A23D2170DA27C430D1B3E7D124ABD655F46B001F Certificate serial: 01CDA406F3756D241F73E99E831982FD3A23FDEE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A23D2170DA27C430D1B3E7D124ABD655F46B001F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:25:27 +0000 Manifest this update: Wed 16 Sep 2026 21:20:27 +0000 Manifest next update: Thu 17 Sep 2026 23:58:27 +0000 Files and hashes: 1: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: kqAPpNXie+q2l37gsl3EdI8q/ahDj2lY/Z2RQl2axK8=) 2: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: h4LsVnhP761IIN/z9Kk00GAOTaHl3wnyiIWG9ZY5w+g=) 3: A23D2170DA27C430D1B3E7D124ABD655F46B001F.crl (hash: DgudhrLYlmzrPrWRtLREfVp9SSP9uBcx7rbxg4quwxs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.crl rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A23D2170DA27C430D1B3E7D124ABD655F46B001F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:cd:a4:06:f3:75:6d:24:1f:73:e9:9e:83:19:82:fd:3a:23:fd:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A23D2170DA27C430D1B3E7D124ABD655F46B001F Validity Not Before: Sep 16 21:20:27 2026 GMT Not After : Sep 17 23:58:27 2026 GMT Subject: CN=BEF7BF788D648B347926EBA6DD4FAACEEC89B5F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cb:2f:0f:bc:46:48:ea:f6:2c:dd:a0:7d:ee: 0e:81:b4:fb:d6:27:c2:b1:cc:32:1a:01:ca:23:9e: 3b:4b:45:bd:c9:0c:81:c3:e5:48:e5:65:7b:93:b1: c7:e8:2b:a1:f3:c2:f9:61:70:ec:19:ed:2e:a9:e8: dc:ff:54:95:3e:62:6a:9c:4b:40:1d:0f:87:43:36: f4:5f:c8:f8:4c:56:ac:82:e4:ca:af:3a:97:3b:4a: 4a:65:c6:13:e5:85:dc:0e:dc:5e:b0:dd:0b:30:4c: 26:20:b3:f8:28:1e:ac:8b:2e:a6:ec:52:7b:08:ef: 0a:f0:9f:15:69:d5:f4:21:02:cf:2e:d6:c7:c9:d0: e6:ab:56:aa:de:34:e0:6b:4c:50:49:53:76:08:00: 82:7b:42:fe:b2:47:5c:8e:44:bd:52:c3:2f:cf:e7: 3e:a8:e2:dd:c2:23:fd:77:9c:62:b0:0d:d0:43:d9: 60:e8:95:b3:02:83:76:c5:3b:6f:42:ab:ab:ac:24: ef:5f:c0:c9:0b:2d:19:ec:98:b3:f6:2b:4b:0f:7e: b2:60:be:5d:6d:e8:9d:46:fc:14:42:83:2f:8e:98: a6:c6:10:d2:bf:a0:05:30:80:8c:68:a0:c4:b1:5f: dc:3c:c7:7a:b5:d1:4c:eb:fb:69:15:18:b5:96:d2: 65:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F7:BF:78:8D:64:8B:34:79:26:EB:A6:DD:4F:AA:CE:EC:89:B5:F8 X509v3 Authority Key Identifier: keyid:A2:3D:21:70:DA:27:C4:30:D1:B3:E7:D1:24:AB:D6:55:F4:6B:00:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A23D2170DA27C430D1B3E7D124ABD655F46B001F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:f4:0c:f0:5e:6a:b4:9a:f8:25:1c:32:e8:1f:7a:ea:12:64: d7:b2:cb:fa:89:eb:6b:4c:99:37:29:cd:75:bf:29:32:ee:04: e8:af:59:76:ad:09:4f:06:ef:b2:34:3b:42:09:b2:cb:94:3a: c4:de:d0:30:3d:03:f1:2a:6d:8f:69:1b:14:8c:39:09:17:dc: 10:b2:df:e1:f5:69:6c:91:2f:cf:06:11:1b:3b:55:4c:53:29: 33:34:04:c2:7c:ed:6a:e6:de:31:47:43:de:99:0a:27:3e:45: 73:9b:e2:fd:e0:f4:39:e7:89:8a:49:3e:6f:3b:b6:33:5a:aa: 17:47:37:5f:5a:27:5b:16:db:59:b4:2a:05:d7:a6:5e:82:f2: 5d:34:54:ab:39:2b:42:19:36:c6:ca:de:4f:70:cc:8c:95:49: 96:cb:44:d0:e4:6c:43:15:11:8f:ce:cc:a0:d6:de:b1:15:8e: 7f:58:5d:68:d5:ba:b6:66:17:17:d7:51:95:68:0b:a2:d9:29: ed:56:27:0a:74:64:1b:3c:84:85:7d:e1:be:a0:b6:0f:46:16: aa:1e:49:92:3e:0e:dc:6a:34:29:61:09:24:e8:b8:d3:5f:2a: 2d:2b:52:64:35:65:7c:2a:dc:82:67:0d:4d:41:9b:e7:af:aa: 1d:0e:ab:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAc2kBvN1bSQfc+megxmC/Toj/e4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzRDIxNzBEQTI3QzQzMEQxQjNFN0QxMjRBQkQ2NTVG NDZCMDAxRjAeFw0yNjA5MTYyMTIwMjdaFw0yNjA5MTcyMzU4MjdaMDMxMTAvBgNV BAMTKEJFRjdCRjc4OEQ2NDhCMzQ3OTI2RUJBNkRENEZBQUNFRUM4OUI1RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfyy8PvEZI6vYs3aB97g6BtPvW J8KxzDIaAcojnjtLRb3JDIHD5UjlZXuTscfoK6HzwvlhcOwZ7S6p6Nz/VJU+Ymqc S0AdD4dDNvRfyPhMVqyC5MqvOpc7SkplxhPlhdwO3F6w3QswTCYgs/goHqyLLqbs UnsI7wrwnxVp1fQhAs8u1sfJ0OarVqreNOBrTFBJU3YIAIJ7Qv6yR1yORL1Swy/P 5z6o4t3CI/13nGKwDdBD2WDolbMCg3bFO29Cq6usJO9fwMkLLRnsmLP2K0sPfrJg vl1t6J1G/BRCgy+OmKbGENK/oAUwgIxooMSxX9w8x3q10Uzr+2kVGLWW0mVzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvve/eI1kizR5Juum3U+qzuyJtfgwHwYDVR0j BBgwFoAUoj0hcNonxDDRs+fRJKvWVfRrAB8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjFmMDJhODktN2VlOC00YTgzLTgwMDQtMjM0ZDkxNGEwZmQ0LzAvQTIzRDIxNzBE QTI3QzQzMEQxQjNFN0QxMjRBQkQ2NTVGNDZCMDAxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjNEMjE3MERBMjdDNDMwRDFCM0U3RDEyNEFCRDY1NUY0NkIw MDFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvQTIzRDIxNzBEQTI3QzQzMEQxQjNFN0QxMjRBQkQ2 NTVGNDZCMDAxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIj0DPBearSa+CUcMugfeuoSZNeyy/qJ62tM mTcpzXW/KTLuBOivWXatCU8G77I0O0IJssuUOsTe0DA9A/EqbY9pGxSMOQkX3BCy 3+H1aWyRL88GERs7VUxTKTM0BMJ87Wrm3jFHQ96ZCic+RXOb4v3g9DnniYpJPm87 tjNaqhdHN19aJ1sW21m0KgXXpl6C8l00VKs5K0IZNsbK3k9wzIyVSZbLRNDkbEMV EY/OzKDW3rEVjn9YXWjVurZmFxfXUZVoC6LZKe1WJwp0ZBs8hIV94b6gtg9GFqoe SZI+DtxqNClhCSTouNNfKi0rUmQ1ZXwq3IJnDU1Bm+evqh0Oq0I= -----END CERTIFICATE-----Generated at Thu Sep 17 09:18:20 2026 by rpki-client