$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft File: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft (raw, json) Hash identifier: tMzs3Wdbz7OD7MMcm7USMrCVovOsNwFW/tCAAA4IMJ8= Subject key identifier: 14:D8:B3:60:4F:96:0A:B5:5A:A6:7A:80:53:4B:05:00:27:2B:12:0C Authority key identifier: 23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1 Certificate issuer: /CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1 Certificate serial: 3E1651175C6A138A749DC54E8757D5BA01CEFD65 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 10:20:10 +0000 Manifest this update: Sun 02 Aug 2026 10:15:10 +0000 Manifest next update: Mon 03 Aug 2026 14:13:10 +0000 Files and hashes: 1: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: xY/6i6LUbCTPc3rdGOALXXYogQcfaBFzo3dHge01GCI=) 2: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl (hash: iYUcx1dfffXEMLrmlwlczkfQDvEpsOvcsLjm8fUGuJs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:16:51:17:5c:6a:13:8a:74:9d:c5:4e:87:57:d5:ba:01:ce:fd:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1 Validity Not Before: Aug 2 10:15:10 2026 GMT Not After : Aug 3 14:13:10 2026 GMT Subject: CN=14D8B3604F960AB55AA67A80534B0500272B120C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6b:46:8d:56:98:66:d7:42:f2:6a:49:c7:11: 46:9d:d7:63:a3:d4:64:25:e2:4a:08:42:c2:8d:e9: 77:3a:de:72:fe:91:3a:d4:51:05:2e:50:0d:f0:0e: d0:54:73:c9:4d:af:4e:0d:f0:94:09:47:5f:93:b1: a3:3f:82:1a:12:47:25:7a:a3:9a:33:e7:ea:01:00: ee:bb:95:67:00:3f:57:2a:38:a3:af:27:7c:00:1e: 34:cb:dd:e1:12:0a:49:19:9f:4d:fd:ad:19:66:1c: 30:e2:fc:9b:52:c9:22:45:64:b6:69:c6:d2:cf:67: 2f:05:29:37:04:00:84:19:7c:c7:a4:70:13:c9:60: 6f:b5:4c:cd:10:65:19:d3:26:ea:db:ab:04:b7:e7: e7:be:eb:43:40:8b:5c:85:14:63:41:b0:81:7a:8e: 83:6c:69:b2:01:f4:d0:78:90:76:07:ff:5f:a6:f6: c0:bb:9f:80:2f:8c:80:cf:c3:68:2b:c6:db:be:39: 8c:2b:37:a2:e3:c0:9b:3e:1e:cf:c9:b4:8e:79:a8: c3:bc:80:a1:da:14:3e:34:f7:22:98:f5:9f:69:74: 67:c2:4f:ea:2a:34:38:a1:40:38:70:43:a8:62:a2: d0:ad:82:ce:fa:11:b7:01:88:7b:3d:49:02:d1:5f: 13:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D8:B3:60:4F:96:0A:B5:5A:A6:7A:80:53:4B:05:00:27:2B:12:0C X509v3 Authority Key Identifier: keyid:23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:84:6e:3f:5e:36:ec:1d:ab:3a:c3:b6:c5:fd:69:d9:32:48: 82:d0:b6:42:fc:f5:5c:c3:c0:00:69:58:bf:aa:43:85:0b:82: 43:76:9f:69:3c:92:14:4d:b2:2e:26:5e:f3:55:39:c9:1b:e2: bc:23:0a:a2:40:7e:e7:84:ea:40:77:db:7a:a0:eb:95:0e:6f: 3d:54:c8:4f:89:0b:62:17:95:6a:53:66:88:4d:52:b2:ee:35: 87:fc:e8:38:36:5e:24:28:aa:c2:48:d7:04:22:8c:64:30:ab: 98:17:47:aa:5f:dc:43:46:c4:86:95:69:eb:74:c0:41:da:12: c7:62:a7:76:8b:70:1a:1d:da:1b:99:83:57:c7:51:75:83:7f: 2f:bd:b2:8e:4a:79:c0:3b:60:93:15:bf:ed:00:df:3e:d3:8c: 65:4c:57:92:38:9a:94:e0:07:2b:8b:ea:1c:0b:fb:73:d5:e6: 64:d4:fe:63:35:cf:f4:20:af:c8:f9:b7:b5:10:bf:5c:7a:65: d7:2e:6a:80:51:c2:a4:57:9c:94:5e:1f:b2:7a:45:49:83:68: 77:63:f8:f9:f6:5d:f4:90:87:7e:92:0a:18:7d:7a:22:bb:1f: 9c:67:27:54:33:7b:ee:ce:0b:a5:a5:fb:9d:1a:a0:e1:67:17: a9:ac:f0:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPhZRF1xqE4p0ncVOh1fVugHO/WUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3NzhEMTk2Mzg1MUM0MDU0QUJBNjhCQjhGODBFNUU0 NUE3QTdGMTAeFw0yNjA4MDIxMDE1MTBaFw0yNjA4MDMxNDEzMTBaMDMxMTAvBgNV BAMTKDE0RDhCMzYwNEY5NjBBQjU1QUE2N0E4MDUzNEIwNTAwMjcyQjEyMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1a0aNVphm10LyaknHEUad12Oj 1GQl4koIQsKN6Xc63nL+kTrUUQUuUA3wDtBUc8lNr04N8JQJR1+TsaM/ghoSRyV6 o5oz5+oBAO67lWcAP1cqOKOvJ3wAHjTL3eESCkkZn039rRlmHDDi/JtSySJFZLZp xtLPZy8FKTcEAIQZfMekcBPJYG+1TM0QZRnTJurbqwS35+e+60NAi1yFFGNBsIF6 joNsabIB9NB4kHYH/1+m9sC7n4AvjIDPw2grxtu+OYwrN6LjwJs+Hs/JtI55qMO8 gKHaFD409yKY9Z9pdGfCT+oqNDihQDhwQ6hiotCtgs76EbcBiHs9SQLRXxPnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFNizYE+WCrVapnqAU0sFACcrEgwwHwYDVR0j BBgwFoAUI3eNGWOFHEBUq6aLuPgOXkWnp/EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzEvMjM3NzhEMTk2 Mzg1MUM0MDU0QUJBNjhCQjhGODBFNUU0NUE3QTdGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzc3OEQxOTYzODUxQzQwNTRBQkE2OEJCOEY4MEU1RTQ1QTdB N0YxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvMjM3NzhEMTk2Mzg1MUM0MDU0QUJBNjhCQjhGODBF NUU0NUE3QTdGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaEbj9eNuwdqzrDtsX9adkySILQtkL89VzD wABpWL+qQ4ULgkN2n2k8khRNsi4mXvNVOckb4rwjCqJAfueE6kB323qg65UObz1U yE+JC2IXlWpTZohNUrLuNYf86Dg2XiQoqsJI1wQijGQwq5gXR6pf3ENGxIaVaet0 wEHaEsdip3aLcBod2huZg1fHUXWDfy+9so5KecA7YJMVv+0A3z7TjGVMV5I4mpTg ByuL6hwL+3PV5mTU/mM1z/Qgr8j5t7UQv1x6ZdcuaoBRwqRXnJReH7J6RUmDaHdj +Pn2XfSQh36SChh9eiK7H5xnJ1Qze+7OC6Wl+50aoOFnF6ms8NU= -----END CERTIFICATE-----Generated at Mon Aug 3 01:45:59 2026 by rpki-client