
$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft
File: 23F26F571E3865A06A13936555D8DAA27B433933.mft (raw, json)
Hash identifier: JNVJXyIVXlqIgEuHxOMbv6bbZsYpl9ViGL2KkJRj0Bo=
Subject key identifier: FD:47:E8:5B:B7:DD:5B:62:B5:9B:14:74:05:69:5E:32:9B:39:44:A0
Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33
Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933
Certificate serial: 09653C6C2D592EE4EB7B43AF231A2E7F3F4A0231
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft
Manifest number: 0243
Signing time: Wed 25 Mar 2026 23:22:05 +0000
Manifest this update: Wed 25 Mar 2026 23:17:05 +0000
Manifest next update: Sun 29 Mar 2026 09:59:05 +0000
Files and hashes: 1: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (hash: SP7Vczz+6iJdkBg+Pm02fK5fUh9ipxxjJbwoliQlUe0=)
2: 23F26F571E3865A06A13936555D8DAA27B433933.crl (hash: yeV1UEwFhEujL1KZNTw2101HuGCRPdMp7VPNZAcahq8=)
3: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (hash: 1TF1q7w4Zi+aLzgAuBXcx7Cio1arNovo47+qmMckVGw=)
4: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (hash: lkFPSA/0P6F0cE2k+qs5Hdu6hwn+gvFK2pZuPkqHwpw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl
rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 09:59:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:65:3c:6c:2d:59:2e:e4:eb:7b:43:af:23:1a:2e:7f:3f:4a:02:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933
Validity
Not Before: Mar 25 23:17:05 2026 GMT
Not After : Mar 29 09:59:05 2026 GMT
Subject: CN=FD47E85BB7DD5B62B59B147405695E329B3944A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:12:e1:f2:24:e6:cf:6c:05:f0:91:b6:54:
32:c7:bf:a8:47:b7:ac:f0:b4:1e:1d:52:86:f7:98:
88:d8:4d:a9:39:6c:82:2e:7f:30:08:54:89:82:9b:
91:c9:2a:b3:16:bd:f0:8b:2b:23:e7:7c:8e:07:14:
93:af:c0:e7:03:a8:fe:d8:c5:7d:ad:10:0f:70:2f:
81:de:2a:af:e6:b5:e4:cf:45:26:b1:16:1a:c3:60:
37:9e:eb:4a:3c:04:26:f1:d5:e1:4b:74:ea:22:be:
89:bf:f2:33:bb:8e:8f:64:f6:f0:88:34:07:15:10:
b9:7c:19:c6:91:1e:08:92:7e:ea:85:98:52:39:3f:
72:5b:c9:7c:0d:4f:49:70:79:d7:41:f0:38:79:43:
e6:88:34:32:88:ae:0a:67:9d:93:5e:fc:fc:df:09:
26:50:92:74:26:ea:9c:2f:01:db:db:b7:b9:00:fd:
eb:17:20:53:86:f7:b2:7c:9c:f5:f6:5f:95:a3:0f:
50:a4:88:b6:1e:c8:82:f4:a7:a7:97:40:2b:da:78:
c8:c1:70:9b:dd:96:6f:46:2e:75:d2:38:39:0b:52:
20:74:4e:2a:3c:ca:62:cd:a3:d5:7c:d5:5c:d3:0b:
e2:1a:8f:bb:4a:3d:ff:ab:91:8f:b7:f5:b8:90:df:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:47:E8:5B:B7:DD:5B:62:B5:9B:14:74:05:69:5E:32:9B:39:44:A0
X509v3 Authority Key Identifier:
keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e4:d1:7a:0d:7e:24:e6:83:19:52:9f:c5:bc:ce:1e:6e:cc:
7f:35:10:ae:3e:73:ab:f0:51:08:94:04:36:ec:a9:42:a2:eb:
fe:a7:81:00:2c:b8:05:e6:e0:a4:d4:cc:d9:a6:8f:9a:0b:ca:
44:a2:e4:8f:10:4b:9c:53:81:57:87:11:ab:ba:6d:c0:72:a3:
2a:39:dd:c7:77:53:06:56:97:df:e5:ff:cc:4c:15:f8:4f:85:
cd:e5:8e:31:f2:23:8f:cc:be:fc:d1:83:57:dd:b5:e5:ef:32:
4c:f0:f3:33:57:72:a0:5b:e0:63:92:e1:86:2a:39:de:fb:93:
71:66:09:7b:f8:69:4d:97:5f:8a:cd:e2:65:96:6c:47:2a:41:
2e:c7:04:fd:12:9a:36:8e:57:6b:f2:46:04:3e:de:60:e7:9c:
6c:99:cd:83:e5:a2:9d:43:12:a9:27:ca:4f:4e:87:91:62:c4:
0e:cf:b4:72:e0:84:b9:15:2f:9a:f6:d6:65:76:44:9c:0b:7b:
2e:db:9c:b0:11:4a:2e:9e:f4:8a:b2:42:87:5a:25:b5:2b:2b:
d0:80:71:77:86:fa:a2:ab:2b:39:56:c7:39:d3:da:8d:00:e8:
d4:fa:25:13:2d:80:54:99:19:2a:78:ef:61:10:09:c8:da:7b:
47:4b:d4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:01:21 2026 by rpki-client