$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft File: 823E59BE50593557F29378EC4CAC8BDE16BF5074.mft (raw, json) Hash identifier: FcllDzOD4eqT9tXm4SWJgTRV20GFgO8B4wDRf8LSPjU= Subject key identifier: 5D:38:53:E2:31:51:B1:28:42:EE:6B:FF:56:C8:EB:B8:9B:BE:54:95 Authority key identifier: 82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74 Certificate issuer: /CN=823E59BE50593557F29378EC4CAC8BDE16BF5074 Certificate serial: 32883E99646D1D1B4D0831082DE816295BC19357 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft Manifest number: DD Signing time: Wed 14 Oct 2026 10:02:47 +0000 Manifest this update: Wed 14 Oct 2026 09:57:47 +0000 Manifest next update: Thu 15 Oct 2026 13:57:47 +0000 Files and hashes: 1: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: xnCevyudli2t9um2DVMk2wF4GvogAhTTvOVWqK7SaCE=) 2: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: 8cSHk4Qmt00Rlx//RoPVD8OhEt2winz9iHDLk522or4=) 3: 823E59BE50593557F29378EC4CAC8BDE16BF5074.crl (hash: S1v6n5R8vHLDEZl4d7U/pL7TWqY5ra/TVxaMcCrDjLQ=) 4: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: dzAufJOseFap4DRjmnUOc2LvueVNrB6swsyJUi6b4Xw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 13:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:88:3e:99:64:6d:1d:1b:4d:08:31:08:2d:e8:16:29:5b:c1:93:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823E59BE50593557F29378EC4CAC8BDE16BF5074 Validity Not Before: Oct 14 09:57:47 2026 GMT Not After : Oct 15 13:57:47 2026 GMT Subject: CN=5D3853E23151B12842EE6BFF56C8EBB89BBE5495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:8e:28:a6:05:9a:b9:9d:49:f1:ef:47:29: 03:68:43:e1:aa:97:e5:fd:25:c6:26:7c:ad:36:bd: c9:1d:a3:aa:eb:0c:08:5c:13:86:0a:9e:d8:5a:47: 98:8b:36:2a:b7:1e:cb:eb:07:ca:89:ff:74:17:af: 66:09:02:f8:6a:23:3c:c7:52:ee:2f:0a:42:5c:33: 06:b6:6a:bc:fc:db:3d:04:5c:1c:e2:a4:ec:dd:f3: ee:ce:0a:4a:7d:03:1f:ac:a1:52:f6:13:03:d9:b5: 16:c2:f0:03:a4:a5:92:01:78:b2:99:f2:f4:45:79: d2:d5:36:44:33:ae:4f:72:00:a2:dc:f1:56:22:5c: 4c:d8:97:e6:af:b3:d3:94:ed:87:9f:10:3d:87:b3: a8:12:a4:7a:fd:97:1b:6d:9b:d8:d2:00:2d:22:d8: c2:ef:46:84:e4:a9:69:53:df:65:91:5a:1a:50:d7: 4c:ce:56:58:1c:ad:4f:d9:bd:09:c3:a1:6b:b4:22: c1:33:c4:26:ce:32:c8:8b:51:39:b2:e0:6c:50:ce: 52:78:01:6d:41:d9:52:1a:07:8b:d6:7c:47:6a:b2: 98:02:c0:73:4d:db:95:b0:da:b2:0b:37:4f:34:49: f8:3f:8b:0b:aa:75:7d:aa:8c:39:16:34:c0:6d:33: bf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:38:53:E2:31:51:B1:28:42:EE:6B:FF:56:C8:EB:B8:9B:BE:54:95 X509v3 Authority Key Identifier: keyid:82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:ac:a9:51:e8:54:c4:f7:c4:14:aa:67:30:5b:cd:b7:2a:77: c1:5f:31:8c:6b:4e:98:86:d4:60:0f:80:8f:cd:43:65:2b:c1: 42:01:fb:66:97:27:82:7d:b5:1c:ac:90:e7:a9:7f:72:f7:e5: 3b:a0:01:4b:c3:25:29:d7:93:8e:aa:1d:a5:b2:80:3d:77:69: 46:38:44:d9:5c:22:86:86:73:2b:d1:65:11:a4:33:9c:4e:06: ea:b3:dc:1e:32:05:80:b5:2c:7e:56:3d:53:f0:b1:90:a2:a0: d1:6c:c8:41:87:85:e4:ab:29:54:c0:b7:1d:71:68:e4:bd:94: 5c:4a:77:df:14:60:31:63:56:dc:d5:7a:4a:44:0d:d2:3e:f7: 10:21:14:b8:f3:7c:c4:ce:cd:18:65:d1:90:b8:87:11:14:06: 12:47:54:db:4b:2e:9d:d8:c6:6e:c3:3b:45:4b:87:55:ca:70: fb:ff:9a:ab:6f:52:f3:3e:ec:7c:a3:48:0f:98:43:5a:73:2f: 45:d4:00:17:04:90:52:15:5a:c3:65:18:68:84:2d:88:5c:f8: 93:ad:2c:9b:2e:97:15:9b:14:4a:83:0a:36:80:b5:44:9e:66: 84:25:8b:2f:27:40:74:cb:87:b8:ba:17:33:a9:19:34:bf:70: cb:94:27:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMog+mWRtHRtNCDEILegWKVvBk1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIzRTU5QkU1MDU5MzU1N0YyOTM3OEVDNENBQzhCREUx NkJGNTA3NDAeFw0yNjEwMTQwOTU3NDdaFw0yNjEwMTUxMzU3NDdaMDMxMTAvBgNV BAMTKDVEMzg1M0UyMzE1MUIxMjg0MkVFNkJGRjU2QzhFQkI4OUJCRTU0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0g44opgWauZ1J8e9HKQNoQ+Gq l+X9JcYmfK02vckdo6rrDAhcE4YKnthaR5iLNiq3HsvrB8qJ/3QXr2YJAvhqIzzH Uu4vCkJcMwa2arz82z0EXBzipOzd8+7OCkp9Ax+soVL2EwPZtRbC8AOkpZIBeLKZ 8vRFedLVNkQzrk9yAKLc8VYiXEzYl+avs9OU7YefED2Hs6gSpHr9lxttm9jSAC0i 2MLvRoTkqWlT32WRWhpQ10zOVlgcrU/ZvQnDoWu0IsEzxCbOMsiLUTmy4GxQzlJ4 AW1B2VIaB4vWfEdqspgCwHNN25Ww2rILN080Sfg/iwuqdX2qjDkWNMBtM79NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXThT4jFRsShC7mv/VsjruJu+VJUwHwYDVR0j BBgwFoAUgj5ZvlBZNVfyk3jsTKyL3ha/UHQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjU4MzgzZTItMjA2Yy00Yjc0LWJhNGEtY2Q4YTRkN2NkODYxLzAvODIzRTU5QkU1 MDU5MzU1N0YyOTM3OEVDNENBQzhCREUxNkJGNTA3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjNFNTlCRTUwNTkzNTU3RjI5Mzc4RUM0Q0FDOEJERTE2QkY1 MDc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvODIzRTU5QkU1MDU5MzU1N0YyOTM3OEVDNENBQzhC REUxNkJGNTA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCsqVHoVMT3xBSqZzBbzbcqd8FfMYxrTpiG 1GAPgI/NQ2UrwUIB+2aXJ4J9tRyskOepf3L35TugAUvDJSnXk46qHaWygD13aUY4 RNlcIoaGcyvRZRGkM5xOBuqz3B4yBYC1LH5WPVPwsZCioNFsyEGHheSrKVTAtx1x aOS9lFxKd98UYDFjVtzVekpEDdI+9xAhFLjzfMTOzRhl0ZC4hxEUBhJHVNtLLp3Y xm7DO0VLh1XKcPv/mqtvUvM+7HyjSA+YQ1pzL0XUABcEkFIVWsNlGGiELYhc+JOt LJsulxWbFEqDCjaAtUSeZoQliy8nQHTLh7i6FzOpGTS/cMuUJ+c= -----END CERTIFICATE-----Generated at Wed Oct 14 23:00:18 2026 by rpki-client