$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft File: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft (raw, json) Hash identifier: mLRjPk8BAdGL4yJNMB7wD4dgSfFVy4vlLJFqSVGS88U= Subject key identifier: A6:1B:8D:F7:11:5C:06:12:32:89:E3:1A:68:CF:23:6E:34:69:C9:D7 Authority key identifier: 23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1 Certificate issuer: /CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1 Certificate serial: 719652B2043EEF436E310B2055D7F1C5753D6D0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 00:34:15 +0000 Manifest this update: Thu 17 Sep 2026 00:29:15 +0000 Manifest next update: Fri 18 Sep 2026 04:02:15 +0000 Files and hashes: 1: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: xY/6i6LUbCTPc3rdGOALXXYogQcfaBFzo3dHge01GCI=) 2: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl (hash: HmoiUNcxTejJvrj6+pybpAk841Rdnyy7KMM6/5k5tYw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:96:52:b2:04:3e:ef:43:6e:31:0b:20:55:d7:f1:c5:75:3d:6d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1 Validity Not Before: Sep 17 00:29:15 2026 GMT Not After : Sep 18 04:02:15 2026 GMT Subject: CN=A61B8DF7115C06123289E31A68CF236E3469C9D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:3c:81:51:c9:85:2d:54:31:6f:80:1e:85: d4:61:53:6d:70:b4:24:eb:b7:11:fb:1b:be:e6:87: 23:94:72:58:ba:32:9a:77:6a:b3:37:d5:4e:0e:c7: d4:89:9c:cf:86:b4:29:bd:0c:e3:a4:61:c7:36:85: 46:01:35:41:8d:cb:9c:19:1b:93:a4:74:bc:54:fb: 18:46:a1:f3:ea:12:ef:84:06:bd:09:91:70:89:13: c8:29:c2:56:18:3c:4e:c7:01:a7:03:a9:1c:0f:c2: 39:8f:49:2b:54:6a:75:32:8e:3a:c8:6b:71:85:09: 84:04:f2:47:21:3e:08:15:1b:2e:76:20:41:9f:b1: 59:be:e2:4d:fd:31:dd:7a:7b:ac:41:6c:37:89:15: ef:f2:23:1d:10:42:4e:18:b7:4a:bc:b7:8d:c6:52: aa:87:9f:aa:bd:46:ee:47:20:16:32:bf:f8:ed:dc: ba:eb:a8:9a:40:f4:08:cb:fa:5c:71:df:19:91:af: 23:2f:b3:d1:d5:eb:cf:9d:15:48:c1:81:e5:b3:cd: 2e:cd:1f:6d:47:b8:91:fa:d3:d3:b0:62:ea:0e:3a: c8:25:3e:47:1c:8c:3b:6c:d6:65:4e:75:28:0e:e4: 55:01:ba:d6:0a:10:99:86:84:2f:e4:c0:9b:2c:a3: 1f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1B:8D:F7:11:5C:06:12:32:89:E3:1A:68:CF:23:6E:34:69:C9:D7 X509v3 Authority Key Identifier: keyid:23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e5:79:d2:71:d5:3d:a3:c8:af:a8:65:e6:64:57:cc:5b:ef: 0c:41:50:d7:5d:99:c8:b1:e2:6f:36:32:61:3d:20:76:7d:de: 52:ae:ac:dc:81:8b:e3:44:8f:b6:b3:34:22:14:5c:01:52:cf: df:bb:7f:fd:37:75:6c:98:eb:02:32:fb:b0:81:4a:7e:b3:cd: 0c:86:25:fb:d1:03:ec:ef:97:ea:ed:c1:c9:6d:f6:3e:e8:d9: 66:a3:90:8a:cc:9c:ac:25:13:b9:28:19:0c:54:08:0a:85:8e: f8:57:fa:b5:9a:74:24:1e:dd:5b:9a:21:56:85:2c:a3:67:05: 4a:07:6d:b8:25:e2:3f:b3:14:54:11:e5:1f:63:c5:c5:ac:b6: 17:2b:26:4d:52:84:0a:ee:34:d2:4d:46:ad:a2:e2:a9:75:b6: 86:ee:85:96:8c:f8:40:a8:7e:35:f6:9c:c8:f8:d9:4d:61:81: 03:bb:fa:07:ac:5b:64:60:a8:2b:bd:f0:c6:67:24:3c:1f:b5: e9:83:9a:e6:46:2b:94:f7:d4:a1:c9:41:d8:58:d1:4d:bc:3d: 37:2f:57:1d:aa:13:c7:1d:40:e3:81:3a:51:ac:42:17:00:04: 62:f4:0c:0a:40:26:aa:cf:37:39:6d:10:72:d2:01:a1:1c:0a: 06:5d:5b:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcZZSsgQ+70NuMQsgVdfxxXU9bQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3NzhEMTk2Mzg1MUM0MDU0QUJBNjhCQjhGODBFNUU0 NUE3QTdGMTAeFw0yNjA5MTcwMDI5MTVaFw0yNjA5MTgwNDAyMTVaMDMxMTAvBgNV BAMTKEE2MUI4REY3MTE1QzA2MTIzMjg5RTMxQTY4Q0YyMzZFMzQ2OUM5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8zyBUcmFLVQxb4AehdRhU21w tCTrtxH7G77mhyOUcli6Mpp3arM31U4Ox9SJnM+GtCm9DOOkYcc2hUYBNUGNy5wZ G5OkdLxU+xhGofPqEu+EBr0JkXCJE8gpwlYYPE7HAacDqRwPwjmPSStUanUyjjrI a3GFCYQE8kchPggVGy52IEGfsVm+4k39Md16e6xBbDeJFe/yIx0QQk4Yt0q8t43G UqqHn6q9Ru5HIBYyv/jt3LrrqJpA9AjL+lxx3xmRryMvs9HV68+dFUjBgeWzzS7N H21HuJH609OwYuoOOsglPkccjDts1mVOdSgO5FUButYKEJmGhC/kwJssox9fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUphuN9xFcBhIyieMaaM8jbjRpydcwHwYDVR0j BBgwFoAUI3eNGWOFHEBUq6aLuPgOXkWnp/EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzEvMjM3NzhEMTk2 Mzg1MUM0MDU0QUJBNjhCQjhGODBFNUU0NUE3QTdGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzc3OEQxOTYzODUxQzQwNTRBQkE2OEJCOEY4MEU1RTQ1QTdB N0YxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvMjM3NzhEMTk2Mzg1MUM0MDU0QUJBNjhCQjhGODBF NUU0NUE3QTdGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILledJx1T2jyK+oZeZkV8xb7wxBUNddmcix 4m82MmE9IHZ93lKurNyBi+NEj7azNCIUXAFSz9+7f/03dWyY6wIy+7CBSn6zzQyG JfvRA+zvl+rtwclt9j7o2WajkIrMnKwlE7koGQxUCAqFjvhX+rWadCQe3VuaIVaF LKNnBUoHbbgl4j+zFFQR5R9jxcWsthcrJk1ShAruNNJNRq2i4ql1tobuhZaM+ECo fjX2nMj42U1hgQO7+gesW2RgqCu98MZnJDwftemDmuZGK5T31KHJQdhY0U28PTcv Vx2qE8cdQOOBOlGsQhcABGL0DApAJqrPNzltEHLSAaEcCgZdW1A= -----END CERTIFICATE-----Generated at Thu Sep 17 10:19:17 2026 by rpki-client