$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft File: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft (raw, json) Hash identifier: /x/xn0k9Gan8SxnVW1YbdKv1zyVLINNomANiei4hxLU= Subject key identifier: B2:8F:4B:4E:D2:D4:71:0D:D1:04:B7:5A:A0:A6:42:5A:7B:9A:84:21 Authority key identifier: 23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1 Certificate issuer: /CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1 Certificate serial: 6B104A3CBA53CCD8C0CB5E6EB1093D85E614C1F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 15:25:32 +0000 Manifest this update: Thu 18 Jun 2026 15:20:32 +0000 Manifest next update: Fri 19 Jun 2026 17:39:32 +0000 Files and hashes: 1: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl (hash: pZZeZedCo8wfZGUJqtSzzClw38AwKA5WkaidVpZeaSI=) 2: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: xY/6i6LUbCTPc3rdGOALXXYogQcfaBFzo3dHge01GCI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:10:4a:3c:ba:53:cc:d8:c0:cb:5e:6e:b1:09:3d:85:e6:14:c1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1 Validity Not Before: Jun 18 15:20:32 2026 GMT Not After : Jun 19 17:39:32 2026 GMT Subject: CN=B28F4B4ED2D4710DD104B75AA0A6425A7B9A8421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:95:6b:b0:f3:dd:1f:f8:a3:f2:47:25:81:55: d8:13:fe:91:f2:83:d7:45:8b:22:bd:85:0b:58:be: f0:10:24:e7:22:78:b1:89:95:9a:d5:91:b9:fe:25: 16:5c:ea:4a:c7:3a:44:0b:b5:c0:7b:9b:43:3c:b9: 48:b4:7a:d9:3f:2d:88:41:a7:8f:8e:f2:67:65:6c: 62:e3:57:46:cf:b5:03:b5:ea:7c:34:7a:06:19:71: b6:3f:c1:a0:a9:b5:a5:2e:f3:d2:dd:7c:17:35:2f: 19:3c:1e:92:e8:bb:ae:f9:9a:90:1f:d6:ca:d9:7b: 52:d4:38:b3:9d:7c:67:4a:1d:f8:53:c0:35:ad:b5: eb:2b:76:73:ab:86:9d:11:f4:f0:2b:7a:1a:6f:9a: cf:9d:31:a0:35:85:62:af:f5:1a:e9:a3:a0:93:2f: bb:e6:56:7d:ee:fe:a6:67:be:03:89:80:3f:bd:23: 5e:14:59:e2:3a:ee:c2:d0:fe:4a:ac:d0:76:1e:45: e3:d0:e0:f0:18:bd:78:7a:60:23:b8:53:86:50:18: e7:b9:30:4d:90:bf:cb:8b:9e:db:ae:07:1b:e3:b6: a0:82:9c:82:ea:a9:c4:15:d2:b2:ee:47:80:86:89: 75:21:8f:8b:e3:b4:c3:99:b5:2f:40:d8:27:c4:96: 70:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8F:4B:4E:D2:D4:71:0D:D1:04:B7:5A:A0:A6:42:5A:7B:9A:84:21 X509v3 Authority Key Identifier: keyid:23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:26:c5:65:da:ec:2e:b3:b4:4f:b5:a8:42:a7:49:9b:96:25: ce:74:8f:95:69:f5:24:92:41:8e:d7:71:17:c5:64:d7:63:53: 68:22:dd:c7:b2:f5:2a:b4:6f:87:9a:d5:51:96:1c:8d:ed:73: c7:32:c5:c0:71:fe:27:16:14:24:4a:6e:40:6c:e1:e2:eb:83: 3f:e0:2e:dd:10:75:57:08:00:6d:f3:4e:43:5f:55:34:48:89: ac:d8:b1:bf:23:2b:fa:bb:7a:07:4b:8d:e4:68:7f:38:14:d2: 79:13:9f:bf:91:14:40:9a:65:5d:bf:68:db:a7:95:ae:6c:e4: 3a:0c:93:09:88:9a:ed:49:64:24:8d:8c:d6:70:a9:19:66:e4: 6f:38:6b:c8:da:c7:74:5a:ad:a8:00:15:95:91:0a:bc:70:06: c3:79:f4:3b:a5:1e:9f:87:a8:00:a1:a7:05:0e:52:1f:3b:4c: e2:e0:3e:bd:98:88:73:be:3e:1b:5b:24:0e:27:35:e4:d6:d9: db:33:9f:09:c1:ed:f0:c2:0e:ff:2c:43:c7:2e:b4:4e:82:8d: 71:b2:43:03:c5:8d:a1:aa:66:44:78:78:d5:50:4f:ff:0b:78: 29:1c:6b:71:ab:53:ef:be:ca:2e:a1:e3:ef:87:09:9f:28:c9: 14:8e:05:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaxBKPLpTzNjAy15usQk9heYUwfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3NzhEMTk2Mzg1MUM0MDU0QUJBNjhCQjhGODBFNUU0 NUE3QTdGMTAeFw0yNjA2MTgxNTIwMzJaFw0yNjA2MTkxNzM5MzJaMDMxMTAvBgNV BAMTKEIyOEY0QjRFRDJENDcxMEREMTA0Qjc1QUEwQTY0MjVBN0I5QTg0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8lWuw890f+KPyRyWBVdgT/pHy g9dFiyK9hQtYvvAQJOcieLGJlZrVkbn+JRZc6krHOkQLtcB7m0M8uUi0etk/LYhB p4+O8mdlbGLjV0bPtQO16nw0egYZcbY/waCptaUu89LdfBc1Lxk8HpLou675mpAf 1srZe1LUOLOdfGdKHfhTwDWttesrdnOrhp0R9PArehpvms+dMaA1hWKv9Rrpo6CT L7vmVn3u/qZnvgOJgD+9I14UWeI67sLQ/kqs0HYeRePQ4PAYvXh6YCO4U4ZQGOe5 ME2Qv8uLntuuBxvjtqCCnILqqcQV0rLuR4CGiXUhj4vjtMOZtS9A2CfElnCbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUso9LTtLUcQ3RBLdaoKZCWnuahCEwHwYDVR0j BBgwFoAUI3eNGWOFHEBUq6aLuPgOXkWnp/EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzEvMjM3NzhEMTk2 Mzg1MUM0MDU0QUJBNjhCQjhGODBFNUU0NUE3QTdGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzc3OEQxOTYzODUxQzQwNTRBQkE2OEJCOEY4MEU1RTQ1QTdB N0YxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvMjM3NzhEMTk2Mzg1MUM0MDU0QUJBNjhCQjhGODBF NUU0NUE3QTdGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAmxWXa7C6ztE+1qEKnSZuWJc50j5Vp9SSS QY7XcRfFZNdjU2gi3cey9Sq0b4ea1VGWHI3tc8cyxcBx/icWFCRKbkBs4eLrgz/g Lt0QdVcIAG3zTkNfVTRIiazYsb8jK/q7egdLjeRofzgU0nkTn7+RFECaZV2/aNun la5s5DoMkwmImu1JZCSNjNZwqRlm5G84a8jax3RaragAFZWRCrxwBsN59DulHp+H qAChpwUOUh87TOLgPr2YiHO+PhtbJA4nNeTW2dsznwnB7fDCDv8sQ8cutE6CjXGy QwPFjaGqZkR4eNVQT/8LeCkca3GrU+++yi6h4++HCZ8oyRSOBaY= -----END CERTIFICATE-----Generated at Thu Jun 18 21:11:12 2026 by rpki-client