$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft File: 23F26F571E3865A06A13936555D8DAA27B433933.mft (raw, json) Hash identifier: JNVJXyIVXlqIgEuHxOMbv6bbZsYpl9ViGL2KkJRj0Bo= Subject key identifier: FD:47:E8:5B:B7:DD:5B:62:B5:9B:14:74:05:69:5E:32:9B:39:44:A0 Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933 Certificate serial: 09653C6C2D592EE4EB7B43AF231A2E7F3F4A0231 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft Manifest number: 0243 Signing time: Wed 25 Mar 2026 23:22:05 +0000 Manifest this update: Wed 25 Mar 2026 23:17:05 +0000 Manifest next update: Sun 29 Mar 2026 09:59:05 +0000 Files and hashes: 1: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (hash: SP7Vczz+6iJdkBg+Pm02fK5fUh9ipxxjJbwoliQlUe0=) 2: 23F26F571E3865A06A13936555D8DAA27B433933.crl (hash: yeV1UEwFhEujL1KZNTw2101HuGCRPdMp7VPNZAcahq8=) 3: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (hash: 1TF1q7w4Zi+aLzgAuBXcx7Cio1arNovo47+qmMckVGw=) 4: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (hash: lkFPSA/0P6F0cE2k+qs5Hdu6hwn+gvFK2pZuPkqHwpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:65:3c:6c:2d:59:2e:e4:eb:7b:43:af:23:1a:2e:7f:3f:4a:02:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933 Validity Not Before: Mar 25 23:17:05 2026 GMT Not After : Mar 29 09:59:05 2026 GMT Subject: CN=FD47E85BB7DD5B62B59B147405695E329B3944A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:12:e1:f2:24:e6:cf:6c:05:f0:91:b6:54: 32:c7:bf:a8:47:b7:ac:f0:b4:1e:1d:52:86:f7:98: 88:d8:4d:a9:39:6c:82:2e:7f:30:08:54:89:82:9b: 91:c9:2a:b3:16:bd:f0:8b:2b:23:e7:7c:8e:07:14: 93:af:c0:e7:03:a8:fe:d8:c5:7d:ad:10:0f:70:2f: 81:de:2a:af:e6:b5:e4:cf:45:26:b1:16:1a:c3:60: 37:9e:eb:4a:3c:04:26:f1:d5:e1:4b:74:ea:22:be: 89:bf:f2:33:bb:8e:8f:64:f6:f0:88:34:07:15:10: b9:7c:19:c6:91:1e:08:92:7e:ea:85:98:52:39:3f: 72:5b:c9:7c:0d:4f:49:70:79:d7:41:f0:38:79:43: e6:88:34:32:88:ae:0a:67:9d:93:5e:fc:fc:df:09: 26:50:92:74:26:ea:9c:2f:01:db:db:b7:b9:00:fd: eb:17:20:53:86:f7:b2:7c:9c:f5:f6:5f:95:a3:0f: 50:a4:88:b6:1e:c8:82:f4:a7:a7:97:40:2b:da:78: c8:c1:70:9b:dd:96:6f:46:2e:75:d2:38:39:0b:52: 20:74:4e:2a:3c:ca:62:cd:a3:d5:7c:d5:5c:d3:0b: e2:1a:8f:bb:4a:3d:ff:ab:91:8f:b7:f5:b8:90:df: 3a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:47:E8:5B:B7:DD:5B:62:B5:9B:14:74:05:69:5E:32:9B:39:44:A0 X509v3 Authority Key Identifier: keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:e4:d1:7a:0d:7e:24:e6:83:19:52:9f:c5:bc:ce:1e:6e:cc: 7f:35:10:ae:3e:73:ab:f0:51:08:94:04:36:ec:a9:42:a2:eb: fe:a7:81:00:2c:b8:05:e6:e0:a4:d4:cc:d9:a6:8f:9a:0b:ca: 44:a2:e4:8f:10:4b:9c:53:81:57:87:11:ab:ba:6d:c0:72:a3: 2a:39:dd:c7:77:53:06:56:97:df:e5:ff:cc:4c:15:f8:4f:85: cd:e5:8e:31:f2:23:8f:cc:be:fc:d1:83:57:dd:b5:e5:ef:32: 4c:f0:f3:33:57:72:a0:5b:e0:63:92:e1:86:2a:39:de:fb:93: 71:66:09:7b:f8:69:4d:97:5f:8a:cd:e2:65:96:6c:47:2a:41: 2e:c7:04:fd:12:9a:36:8e:57:6b:f2:46:04:3e:de:60:e7:9c: 6c:99:cd:83:e5:a2:9d:43:12:a9:27:ca:4f:4e:87:91:62:c4: 0e:cf:b4:72:e0:84:b9:15:2f:9a:f6:d6:65:76:44:9c:0b:7b: 2e:db:9c:b0:11:4a:2e:9e:f4:8a:b2:42:87:5a:25:b5:2b:2b: d0:80:71:77:86:fa:a2:ab:2b:39:56:c7:39:d3:da:8d:00:e8: d4:fa:25:13:2d:80:54:99:19:2a:78:ef:61:10:09:c8:da:7b: 47:4b:d4:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCWU8bC1ZLuTre0OvIxoufz9KAjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3 QjQzMzkzMzAeFw0yNjAzMjUyMzE3MDVaFw0yNjAzMjkwOTU5MDVaMDMxMTAvBgNV BAMTKEZENDdFODVCQjdERDVCNjJCNTlCMTQ3NDA1Njk1RTMyOUIzOTQ0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8BxLh8iTmz2wF8JG2VDLHv6hH t6zwtB4dUob3mIjYTak5bIIufzAIVImCm5HJKrMWvfCLKyPnfI4HFJOvwOcDqP7Y xX2tEA9wL4HeKq/mteTPRSaxFhrDYDee60o8BCbx1eFLdOoivom/8jO7jo9k9vCI NAcVELl8GcaRHgiSfuqFmFI5P3JbyXwNT0lweddB8Dh5Q+aINDKIrgpnnZNe/Pzf CSZQknQm6pwvAdvbt7kA/esXIFOG97J8nPX2X5WjD1CkiLYeyIL0p6eXQCvaeMjB cJvdlm9GLnXSODkLUiB0Tio8ymLNo9V81VzTC+Iaj7tKPf+rkY+39biQ3zqtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/UfoW7fdW2K1mxR0BWleMps5RKAwHwYDVR0j BBgwFoAUI/JvVx44ZaBqE5NlVdjaontDOTMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVmY2JmMC02NmVjLTQ4ZDMtYjIyMS0wZjA5Njg2ZDU4MTgvMC8yM0YyNkY1NzFF Mzg2NUEwNkExMzkzNjU1NUQ4REFBMjdCNDMzOTMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3QjQz MzkzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlZmNiZjAtNjZlYy00OGQzLWIy MjEtMGYwOTY4NmQ1ODE4LzAvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERB QTI3QjQzMzkzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbk0XoNfiTmgxlSn8W8zh5uzH81EK4+c6vw UQiUBDbsqUKi6/6ngQAsuAXm4KTUzNmmj5oLykSi5I8QS5xTgVeHEau6bcByoyo5 3cd3UwZWl9/l/8xMFfhPhc3ljjHyI4/MvvzRg1fdteXvMkzw8zNXcqBb4GOS4YYq Od77k3FmCXv4aU2XX4rN4mWWbEcqQS7HBP0SmjaOV2vyRgQ+3mDnnGyZzYPlop1D Eqknyk9Oh5FixA7PtHLghLkVL5r21mV2RJwLey7bnLARSi6e9IqyQodaJbUrK9CA cXeG+qKrKzlWxznT2o0A6NT6JRMtgFSZGSp472EQCcjae0dL1NA= -----END CERTIFICATE-----Generated at Fri Mar 27 03:09:55 2026 by rpki-client