$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft File: C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft (raw, json) Hash identifier: Vt3D6wlhOjW3zTEV/dVyWkd2t9Dk8DpGtNN74Cg6vKs= Subject key identifier: 37:49:D0:13:36:0D:BD:D7:5E:7A:D4:67:5D:86:FD:0D:5C:15:E8:5A Authority key identifier: C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20 Certificate issuer: /CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20 Certificate serial: 326DDCBC12A94D7B6A54A956D7AD80ED299DB689 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:21:24 +0000 Manifest this update: Thu 17 Sep 2026 02:16:24 +0000 Manifest next update: Fri 18 Sep 2026 04:58:24 +0000 Files and hashes: 1: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: baz94lUrN5c1rRyv2s8gFFKO/4uJw+NhpT+Cp/9iDxI=) 2: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: IjCojVCQLVDXso6MfZ5Olpug+HpXiFAkQ/9TrlGdwBg=) 3: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: ENAt0Wj8pAqQGPsWatdFNKTs/QZwprQkkW2hjlJfcA8=) 4: C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl (hash: qBXt/eBBJzePD/RlaMQYClB1nBYr3kNLsxJOWDP15EA=) 5: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: trtJ6caoi9E2cPVadT/x0hsZneaEQLzf3GDB3mta1B8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:6d:dc:bc:12:a9:4d:7b:6a:54:a9:56:d7:ad:80:ed:29:9d:b6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20 Validity Not Before: Sep 17 02:16:24 2026 GMT Not After : Sep 18 04:58:24 2026 GMT Subject: CN=3749D013360DBDD75E7AD4675D86FD0D5C15E85A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1e:86:a6:69:f3:5a:b2:cc:71:09:8a:e2:f2: fc:9d:64:17:66:a4:f5:6f:ac:ff:19:91:bd:e4:bc: ff:44:aa:4a:c1:a5:3b:17:66:56:3f:e2:9a:74:91: e4:69:e5:13:84:ae:04:59:e7:c8:41:d8:a3:75:2e: d0:b6:ba:01:79:3e:ae:8d:d5:cd:d1:1c:16:7d:e3: 85:74:2d:73:66:45:69:e7:09:0e:7e:5c:78:a3:c0: 43:5b:fe:e5:6a:31:8e:e8:94:c0:c7:72:37:c8:bc: fa:25:fd:3d:ab:8d:f0:2b:e2:f9:f8:6a:10:fd:20: 48:5d:0f:09:dd:bb:ea:d8:3a:b8:d1:9e:c2:05:75: dd:e7:00:c6:0e:d6:33:86:f6:4f:a8:5e:6c:1b:d2: d5:59:be:f5:a9:da:d1:60:6d:54:6b:cc:5e:78:7f: 71:6a:79:e6:54:96:fd:76:d6:fc:02:f4:a6:e6:c4: 76:64:f4:9d:14:65:41:a5:c8:c4:82:fb:a6:d8:82: 74:20:c7:d5:56:43:bf:4d:8e:c8:ec:69:30:3c:06: 9b:43:51:63:42:e4:21:99:ee:9e:fe:a7:df:0c:11: 03:60:c3:f0:bd:82:6e:27:49:71:bd:16:8a:0e:a4: f3:72:60:c8:f5:4f:a2:d1:b2:8f:6e:10:5a:0b:f3: 23:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:49:D0:13:36:0D:BD:D7:5E:7A:D4:67:5D:86:FD:0D:5C:15:E8:5A X509v3 Authority Key Identifier: keyid:C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:03:e6:c4:d2:28:7f:f3:ea:b7:bb:f9:3c:7d:43:d0:25:41: 05:dc:ac:dc:df:0d:db:bb:df:1d:72:3d:2d:6b:db:97:2c:44: dc:fc:39:7b:65:b7:b1:b8:be:d1:db:fd:71:63:df:a6:18:b7: 8f:1d:9b:e1:0c:74:ba:6d:bd:9e:88:e6:cb:f0:e5:76:05:6d: 3f:bf:59:4b:0a:88:11:29:10:45:5b:3f:88:08:0c:10:ae:7b: 28:c0:d4:b3:cf:83:2c:1b:73:11:90:17:e5:dd:54:4a:c0:ee: 2a:0c:33:19:96:65:3d:f4:39:a4:9e:cb:31:0e:c6:72:01:8c: ac:c2:77:fe:98:d8:b4:ba:8c:e6:16:7f:75:b7:fb:dd:2e:da: df:5e:e7:75:6a:4a:1d:78:f4:1e:9f:7b:bc:ea:d6:ed:7e:13: bc:95:db:b6:b4:5d:e5:3c:15:9c:69:ca:6f:7b:95:de:35:06: 4f:46:12:16:d7:8b:88:c0:43:f0:74:0c:64:44:8d:3f:5b:ce: 34:b7:3d:69:c7:3c:15:76:3c:6d:f6:cf:aa:0a:ea:75:f2:78: e1:dd:1a:fa:2d:8b:19:f9:ce:a7:56:e5:c8:79:c0:93:9c:3e: 4a:e3:62:15:58:3b:73:83:fc:f4:fa:0b:9b:a0:c7:ce:cd:8b: 8b:f5:b2:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMm3cvBKpTXtqVKlW162A7SmdtokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzNzk2MDYwRUYzOUVEMEU2QkI5RjYwNkY5RjQyNUM0 NTVGREMyMDAeFw0yNjA5MTcwMjE2MjRaFw0yNjA5MTgwNDU4MjRaMDMxMTAvBgNV BAMTKDM3NDlEMDEzMzYwREJERDc1RTdBRDQ2NzVEODZGRDBENUMxNUU4NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXHoamafNassxxCYri8vydZBdm pPVvrP8Zkb3kvP9EqkrBpTsXZlY/4pp0keRp5ROErgRZ58hB2KN1LtC2ugF5Pq6N 1c3RHBZ944V0LXNmRWnnCQ5+XHijwENb/uVqMY7olMDHcjfIvPol/T2rjfAr4vn4 ahD9IEhdDwndu+rYOrjRnsIFdd3nAMYO1jOG9k+oXmwb0tVZvvWp2tFgbVRrzF54 f3FqeeZUlv121vwC9KbmxHZk9J0UZUGlyMSC+6bYgnQgx9VWQ79NjsjsaTA8BptD UWNC5CGZ7p7+p98MEQNgw/C9gm4nSXG9FooOpPNyYMj1T6LRso9uEFoL8yOXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN0nQEzYNvddeetRnXYb9DVwV6FowHwYDVR0j BBgwFoAUwjeWBg7zntDmu59gb59CXEVf3CAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk5OGQ2ZWUtNmZkNy00ZTJkLWFlNDEtNjkzOWZkYjE1M2VlLzAvQzIzNzk2MDYw RUYzOUVEMEU2QkI5RjYwNkY5RjQyNUM0NTVGREMyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjM3OTYwNjBFRjM5RUQwRTZCQjlGNjA2RjlGNDI1QzQ1NUZE QzIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvQzIzNzk2MDYwRUYzOUVEMEU2QkI5RjYwNkY5RjQy NUM0NTVGREMyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoD5sTSKH/z6re7+Tx9Q9AlQQXcrNzfDdu7 3x1yPS1r25csRNz8OXtlt7G4vtHb/XFj36YYt48dm+EMdLptvZ6I5svw5XYFbT+/ WUsKiBEpEEVbP4gIDBCueyjA1LPPgywbcxGQF+XdVErA7ioMMxmWZT30OaSeyzEO xnIBjKzCd/6Y2LS6jOYWf3W3+90u2t9e53VqSh149B6fe7zq1u1+E7yV27a0XeU8 FZxpym97ld41Bk9GEhbXi4jAQ/B0DGREjT9bzjS3PWnHPBV2PG32z6oK6nXyeOHd Gvotixn5zqdW5ch5wJOcPkrjYhVYO3OD/PT6C5ugx87Ni4v1stE= -----END CERTIFICATE-----Generated at Thu Sep 17 10:48:31 2026 by rpki-client