$ rpki-client -vvf rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft File: 823E59BE50593557F29378EC4CAC8BDE16BF5074.mft (raw, json) Hash identifier: TXPxwudQUJvATrokY3Br07aq9WOAYr1Cn401jQ5SkdI= Subject key identifier: 1A:F3:B5:E1:B4:45:27:A3:DD:C8:64:2C:E8:B3:B1:42:B6:76:7B:78 Authority key identifier: 82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74 Certificate issuer: /CN=823E59BE50593557F29378EC4CAC8BDE16BF5074 Certificate serial: 7112B5754429414A5C8E471A064CC4AD893BDEC5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft Manifest number: 93 Signing time: Wed 19 Aug 2026 18:56:56 +0000 Manifest this update: Wed 19 Aug 2026 18:51:56 +0000 Manifest next update: Thu 20 Aug 2026 20:29:56 +0000 Files and hashes: 1: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: xnCevyudli2t9um2DVMk2wF4GvogAhTTvOVWqK7SaCE=) 2: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: dzAufJOseFap4DRjmnUOc2LvueVNrB6swsyJUi6b4Xw=) 3: 823E59BE50593557F29378EC4CAC8BDE16BF5074.crl (hash: DtA6VwKymfHqg92I7ZELiDRWEs77XIAFPyu+HbjHzaI=) 4: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: 8cSHk4Qmt00Rlx//RoPVD8OhEt2winz9iHDLk522or4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 20:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:12:b5:75:44:29:41:4a:5c:8e:47:1a:06:4c:c4:ad:89:3b:de:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823E59BE50593557F29378EC4CAC8BDE16BF5074 Validity Not Before: Aug 19 18:51:56 2026 GMT Not After : Aug 20 20:29:56 2026 GMT Subject: CN=1AF3B5E1B44527A3DDC8642CE8B3B142B6767B78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:af:f3:20:26:54:fa:5b:e5:3a:cc:e9:a9: ec:fb:f2:49:71:82:9a:aa:ca:35:e3:d9:50:92:f0: fc:70:67:1b:e9:c6:cc:a6:0a:92:a1:3d:71:06:32: bf:42:26:75:bd:df:1e:92:11:12:85:74:84:65:f9: 8d:45:ce:eb:ef:ad:da:8e:14:bf:bb:fc:fe:0c:58: 70:da:85:9c:2f:09:99:a8:06:b6:5c:24:1b:11:d0: b8:e1:d9:05:d4:10:c6:ab:47:3f:ca:52:9c:03:00: a6:62:40:5a:a9:e3:98:1d:df:ec:c7:ae:c7:03:50: 74:21:70:ce:95:22:94:e7:e5:75:d7:cc:ab:a0:8f: 02:99:da:11:37:5f:d7:91:38:27:c3:26:d0:e1:37: 71:d2:df:75:14:82:ba:5e:0a:6a:7f:63:6a:30:7f: 4a:a5:6c:2b:f0:4c:03:bb:33:38:62:74:90:3b:6e: f5:4e:a9:2b:72:99:92:d3:32:89:b6:b2:32:c7:17: 63:28:d8:bf:2e:19:1b:78:5e:5b:16:f3:3e:50:fe: de:bf:9b:17:35:a5:78:93:49:87:75:f5:7e:0f:ae: c9:c2:b7:5c:b7:67:0a:06:67:05:20:ec:57:33:91: f5:37:a5:a6:d6:83:fe:1c:b5:bd:df:61:5b:19:40: a5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F3:B5:E1:B4:45:27:A3:DD:C8:64:2C:E8:B3:B1:42:B6:76:7B:78 X509v3 Authority Key Identifier: keyid:82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:9d:b9:05:d4:92:af:70:6b:c6:7d:09:b3:5c:f5:84:2e:9f: b1:ae:39:53:a4:85:3e:c9:b0:e5:9d:11:1b:24:0e:d2:f6:68: 9e:b2:51:3c:b0:89:ac:c0:fc:7a:ad:00:db:cd:f7:7e:3d:26: ca:6f:57:61:f2:0c:bf:27:e8:7f:01:0f:a0:d8:f4:a7:6b:36: 52:45:aa:2e:37:b7:48:c0:32:65:6f:b3:9c:05:81:0a:c4:59: e8:ff:28:ad:a9:2e:1f:34:7c:07:c1:a6:9e:8e:a1:aa:17:40: e0:fd:e8:eb:e2:a9:8d:59:8f:95:43:82:b1:bf:6f:69:5b:e6: 2a:40:89:e3:ec:4c:84:c8:c5:7d:c4:b8:fc:46:a7:9f:de:0a: 5a:2c:10:04:34:4a:68:45:fe:48:a2:81:3c:40:2f:b6:dd:48: 68:d5:16:3c:a2:d8:b3:1e:24:7e:19:f2:d1:41:1a:cb:e0:41: f8:d5:ba:ef:4a:0b:f2:30:0e:af:be:75:43:1e:46:5c:32:a8: e6:ce:81:84:5a:76:19:6e:af:52:04:9d:4b:1a:24:9e:37:ef: 89:27:6a:81:31:5e:9c:b9:0d:3e:08:ee:d6:07:ff:c4:91:c5: 6d:1a:aa:78:0f:c6:21:1b:e0:72:56:c8:9b:1b:f1:ea:08:3f: f3:b9:5e:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcRK1dUQpQUpcjkcaBkzErYk73sUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIzRTU5QkU1MDU5MzU1N0YyOTM3OEVDNENBQzhCREUx NkJGNTA3NDAeFw0yNjA4MTkxODUxNTZaFw0yNjA4MjAyMDI5NTZaMDMxMTAvBgNV BAMTKDFBRjNCNUUxQjQ0NTI3QTNEREM4NjQyQ0U4QjNCMTQyQjY3NjdCNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC21a/zICZU+lvlOszpqez78klx gpqqyjXj2VCS8PxwZxvpxsymCpKhPXEGMr9CJnW93x6SERKFdIRl+Y1FzuvvrdqO FL+7/P4MWHDahZwvCZmoBrZcJBsR0Ljh2QXUEMarRz/KUpwDAKZiQFqp45gd3+zH rscDUHQhcM6VIpTn5XXXzKugjwKZ2hE3X9eROCfDJtDhN3HS33UUgrpeCmp/Y2ow f0qlbCvwTAO7MzhidJA7bvVOqStymZLTMom2sjLHF2Mo2L8uGRt4XlsW8z5Q/t6/ mxc1pXiTSYd19X4PrsnCt1y3ZwoGZwUg7FczkfU3pabWg/4ctb3fYVsZQKW3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGvO14bRFJ6PdyGQs6LOxQrZ2e3gwHwYDVR0j BBgwFoAUgj5ZvlBZNVfyk3jsTKyL3ha/UHQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjU4MzgzZTItMjA2Yy00Yjc0LWJhNGEtY2Q4YTRkN2NkODYxLzAvODIzRTU5QkU1 MDU5MzU1N0YyOTM3OEVDNENBQzhCREUxNkJGNTA3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjNFNTlCRTUwNTkzNTU3RjI5Mzc4RUM0Q0FDOEJERTE2QkY1 MDc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvODIzRTU5QkU1MDU5MzU1N0YyOTM3OEVDNENBQzhC REUxNkJGNTA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSduQXUkq9wa8Z9CbNc9YQun7GuOVOkhT7J sOWdERskDtL2aJ6yUTywiazA/HqtANvN9349JspvV2HyDL8n6H8BD6DY9KdrNlJF qi43t0jAMmVvs5wFgQrEWej/KK2pLh80fAfBpp6OoaoXQOD96OviqY1Zj5VDgrG/ b2lb5ipAiePsTITIxX3EuPxGp5/eClosEAQ0SmhF/kiigTxAL7bdSGjVFjyi2LMe JH4Z8tFBGsvgQfjVuu9KC/IwDq++dUMeRlwyqObOgYRadhlur1IEnUsaJJ4374kn aoExXpy5DT4I7tYH/8SRxW0aqngPxiEb4HJWyJsb8eoIP/O5Xj0= -----END CERTIFICATE-----Generated at Thu Aug 20 07:05:59 2026 by rpki-client