$ rpki-client -vvf repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft File: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft (raw, json) Hash identifier: 2f19kLFPADWTmg9uEiRqb9lDqVPCV2e4K9t1iX4Fa54= Subject key identifier: 28:A3:80:07:CF:BF:00:03:AD:C4:19:1D:93:49:E4:20:9F:35:6B:B3 Authority key identifier: C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF Certificate issuer: /CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Certificate serial: 1304F77D54F398239213B4C0B5AD3B663C500014 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft Manifest number: 010C Signing time: Wed 25 Mar 2026 06:31:21 +0000 Manifest this update: Wed 25 Mar 2026 06:26:21 +0000 Manifest next update: Sat 28 Mar 2026 10:49:21 +0000 Files and hashes: 1: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl (hash: UllhLQ6IjjRnFfnayr8oyZCzytR+bKYp/O5vE0xWyM0=) 2: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: hxLgZVEmgK6Q9Qorix7qtcxFffjQzl54opLxUmCvE+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:04:f7:7d:54:f3:98:23:92:13:b4:c0:b5:ad:3b:66:3c:50:00:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Validity Not Before: Mar 25 06:26:21 2026 GMT Not After : Mar 28 10:49:21 2026 GMT Subject: CN=28A38007CFBF0003ADC4191D9349E4209F356BB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f1:40:f3:c3:83:2a:df:7d:47:2a:2d:c3:7a: 17:91:d6:12:e5:fa:7d:a0:a6:fc:e0:5e:55:d8:ef: 21:8c:c1:c9:3a:e7:cc:9e:f8:fd:a2:f1:43:41:13: bd:88:8c:1b:9d:a0:17:33:06:1e:87:ad:52:35:c2: a7:39:f9:fb:3f:24:8b:68:b5:29:03:f4:eb:fa:db: a2:75:a1:fc:f6:9c:0a:5f:2a:2e:4e:a0:93:39:fa: 70:c4:3a:67:69:07:b1:ee:7d:1c:40:fe:8e:75:1d: 9e:d3:04:01:b8:24:f5:bc:f5:92:e0:0b:69:a1:9a: 15:80:f3:ca:b0:44:6c:88:c0:79:85:5f:99:e7:55: 73:55:93:da:b2:65:44:1f:4e:f7:50:31:5b:2c:1b: 78:17:84:3e:c9:11:ab:17:c9:f0:48:61:1b:fc:47: 6d:44:c1:d1:58:8d:98:b6:56:38:8f:18:fc:aa:9d: fa:de:9f:9f:5c:91:fa:09:a8:3c:73:66:9a:d6:a2: 6a:f3:ba:a5:e9:a6:b7:70:7b:6a:94:ea:f4:c5:d9: 8f:da:5f:58:91:a2:3c:a8:7e:76:bf:30:32:0a:79: 47:65:3c:20:39:b6:0f:0c:3b:96:66:d2:42:bb:8e: 4b:06:5f:29:2f:d5:00:7f:09:78:8e:12:8c:cd:97: 77:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A3:80:07:CF:BF:00:03:AD:C4:19:1D:93:49:E4:20:9F:35:6B:B3 X509v3 Authority Key Identifier: keyid:C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:0c:65:57:3e:31:d0:7e:12:2a:36:f8:44:df:4a:96:16:50: aa:26:41:d1:67:55:52:ca:d2:01:a5:b3:19:26:64:bd:00:a5: 5a:84:94:3e:97:b7:a7:ec:df:be:65:32:ec:a3:b8:41:c4:b6: 87:79:4e:cc:f3:47:a7:9e:92:b5:2a:66:49:85:3c:9a:56:09: bd:78:58:53:2f:48:89:40:91:ac:49:d0:1a:40:7a:a5:3b:f4: 15:21:a9:cd:30:56:b2:16:6c:52:4f:f3:bc:59:ba:db:f6:0e: 9e:66:94:91:f4:7e:cb:3f:0d:9d:cd:db:d7:f9:09:9e:e0:5d: c1:fe:c1:89:4f:e1:4d:3d:1d:d0:71:49:03:b0:7d:3d:e9:80: e0:66:79:c3:33:6e:1c:47:c3:83:03:4b:19:20:17:63:21:4d: 5c:76:5d:de:84:4c:ff:cd:7f:0f:6f:1d:1e:f9:c8:a6:4f:9d: ab:52:9f:b9:54:75:33:9c:51:1c:1e:28:c3:b4:ea:d6:a0:3c: b0:1e:fd:b2:a3:44:62:35:79:df:aa:1b:ab:aa:30:fa:4b:40: c0:58:1f:de:6c:5c:d0:52:66:1d:d6:bf:cf:0d:a1:72:24:97: 29:ef:80:6d:37:fb:5d:bb:94:1f:6c:d3:49:cf:af:d2:3c:25: 48:e3:ab:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwT3fVTzmCOSE7TAta07ZjxQABQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIz RTNBNENCRjAeFw0yNjAzMjUwNjI2MjFaFw0yNjAzMjgxMDQ5MjFaMDMxMTAvBgNV BAMTKDI4QTM4MDA3Q0ZCRjAwMDNBREM0MTkxRDkzNDlFNDIwOUYzNTZCQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8UDzw4Mq331HKi3DeheR1hLl +n2gpvzgXlXY7yGMwck658ye+P2i8UNBE72IjBudoBczBh6HrVI1wqc5+fs/JIto tSkD9Ov626J1ofz2nApfKi5OoJM5+nDEOmdpB7HufRxA/o51HZ7TBAG4JPW89ZLg C2mhmhWA88qwRGyIwHmFX5nnVXNVk9qyZUQfTvdQMVssG3gXhD7JEasXyfBIYRv8 R21EwdFYjZi2VjiPGPyqnfren59ckfoJqDxzZprWomrzuqXpprdwe2qU6vTF2Y/a X1iRojyofna/MDIKeUdlPCA5tg8MO5Zm0kK7jksGXykv1QB/CXiOEozNl3e1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKKOAB8+/AAOtxBkdk0nkIJ81a7MwHwYDVR0j BBgwFoAUwj+DLyfbiLi8WHZpMv2hmz46TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjc5ZWU5Yy1hZDJiLTRiZWQtODY0MS0yM2JmMmQzYjE2ZGIvMC9DMjNGODMyRjI3 REI4OEI4QkM1ODc2NjkzMkZEQTE5QjNFM0E0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIzRTNB NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI3OWVlOWMtYWQyYi00YmVkLTg2 NDEtMjNiZjJkM2IxNmRiLzAvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREEx OUIzRTNBNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMMZVc+MdB+Eio2+ETfSpYWUKomQdFnVVLK 0gGlsxkmZL0ApVqElD6Xt6fs375lMuyjuEHEtod5TszzR6eekrUqZkmFPJpWCb14 WFMvSIlAkaxJ0BpAeqU79BUhqc0wVrIWbFJP87xZutv2Dp5mlJH0fss/DZ3N29f5 CZ7gXcH+wYlP4U09HdBxSQOwfT3pgOBmecMzbhxHw4MDSxkgF2MhTVx2Xd6ETP/N fw9vHR75yKZPnatSn7lUdTOcURweKMO06tagPLAe/bKjRGI1ed+qG6uqMPpLQMBY H95sXNBSZh3Wv88NoXIklynvgG03+127lB9s00nPr9I8JUjjq7I= -----END CERTIFICATE-----Generated at Thu Mar 26 13:52:30 2026 by rpki-client