$ rpki-client -vvf repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft File: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft (raw, json) Hash identifier: ulcmBhDlTbML+R8aXKC9LSEsdJYtYPfEwTZx43GgW3E= Subject key identifier: D6:BF:EB:C6:49:09:C4:B0:8A:8B:B7:1A:1C:06:34:29:77:6A:B7:17 Authority key identifier: 23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE Certificate issuer: /CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Certificate serial: 6A4731EDC6FE03E996DDEAF5A4D7E2FA4C13135F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft Manifest number: 025A Signing time: Tue 24 Mar 2026 19:02:31 +0000 Manifest this update: Tue 24 Mar 2026 18:57:31 +0000 Manifest next update: Sat 28 Mar 2026 05:53:31 +0000 Files and hashes: 1: 323430363a333834303a3a2f33322d3438203d3e20313430343438.roa (hash: jGdjjz2tkcnePijzwx0ZLso64VGE3BptkrmYyqOOX94=) 2: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl (hash: ogmt8Hfr6q936QWRPsaKL1KFFO3n7VlQKOz06hY1Pcs=) 3: 3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa (hash: IrZeFe8SEJi6FKjU0mpLrOwQUSU/84BjfZY+z57Jm7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:47:31:ed:c6:fe:03:e9:96:dd:ea:f5:a4:d7:e2:fa:4c:13:13:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Validity Not Before: Mar 24 18:57:31 2026 GMT Not After : Mar 28 05:53:31 2026 GMT Subject: CN=D6BFEBC64909C4B08A8BB71A1C063429776AB717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:98:98:c2:0c:2d:e9:01:df:ec:13:5a:b5:61: 8c:a3:9f:ad:42:55:d6:3f:fe:cc:98:5d:d4:cd:9a: 2b:b1:4a:7b:e0:c1:68:65:b4:94:4f:99:73:7d:b9: 9b:7e:63:a4:0b:88:a2:84:28:be:2f:dd:b4:ff:c8: c7:f9:93:f7:6f:49:fc:e0:1e:da:01:9b:b1:3e:13: 07:58:3f:aa:ac:38:4a:6d:37:6e:0b:7e:00:c8:95: 14:7d:06:1b:15:dd:f5:4c:56:80:c2:35:cd:cc:28: fa:11:80:08:0b:5a:c1:1f:33:02:f9:92:7c:fb:e1: 6a:2a:ef:d5:cc:87:3e:ca:7b:b1:b4:02:be:e8:d5: d7:27:cc:52:46:58:56:0d:3d:f7:e1:70:c9:bd:67: 53:11:5b:18:79:36:69:6e:df:82:2c:9a:05:d8:84: db:7c:34:e0:8a:5c:ba:5b:82:52:62:c1:ac:13:ec: d7:42:f2:1f:e8:d9:6e:0c:5b:39:76:b5:b0:a7:31: 92:d2:9f:0f:9e:72:de:c1:ef:69:84:5c:cc:fc:9f: 7a:78:60:d2:a5:3a:4b:7c:32:df:9b:74:ff:4f:a0: e5:67:02:2c:a0:db:2e:e5:1c:c4:42:f0:14:59:af: 31:31:a6:c9:46:75:5f:39:09:7f:b1:b7:e6:b0:5a: a4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BF:EB:C6:49:09:C4:B0:8A:8B:B7:1A:1C:06:34:29:77:6A:B7:17 X509v3 Authority Key Identifier: keyid:23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:4d:b0:cc:43:2b:01:72:fb:8a:54:a3:d3:25:24:fd:45:9c: 4e:e4:cc:d9:34:74:dc:e4:1d:e2:ef:b0:65:0e:3b:41:d6:79: d6:a2:f8:b2:16:f7:80:54:7f:3c:a0:74:75:36:7c:32:66:72: dd:49:7f:33:cb:ae:db:77:ec:9d:04:66:0c:a9:18:ca:a9:3c: 49:b7:7a:97:eb:27:4f:e2:d1:ca:b5:54:71:15:1f:f2:d9:f1: d0:9d:09:9c:d8:39:89:fa:9a:5b:b6:dd:01:c7:98:e2:80:75: 8f:5c:48:e5:a8:74:fd:a0:3c:4c:ed:d6:19:3f:92:e9:d6:36: 73:38:b9:f8:05:b7:5b:fa:b7:d1:0b:4b:d9:20:63:ee:26:8b: 65:9f:b6:b1:9f:d5:d3:67:07:c5:b2:48:92:08:05:83:e7:67: 61:d2:1b:1c:1c:5e:65:86:96:d9:a3:a5:89:27:5b:ac:65:a6: 7c:05:1f:75:8d:9a:27:05:9b:65:0d:c0:41:f6:ee:e3:ae:f8: a5:be:07:3d:80:b5:e3:5f:56:d1:8d:92:6b:2e:2c:77:5d:5f: fc:03:9c:13:ca:d4:13:c6:11:24:0a:f3:2d:d6:b8:dd:1f:36: 48:a9:aa:da:a4:76:f9:1e:be:77:e5:bb:d6:15:5f:75:1c:7e: 5f:45:b3:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUakcx7cb+A+mW3er1pNfi+kwTE18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2 NkI0MjRCRTAeFw0yNjAzMjQxODU3MzFaFw0yNjAzMjgwNTUzMzFaMDMxMTAvBgNV BAMTKEQ2QkZFQkM2NDkwOUM0QjA4QThCQjcxQTFDMDYzNDI5Nzc2QUI3MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmJjCDC3pAd/sE1q1YYyjn61C VdY//syYXdTNmiuxSnvgwWhltJRPmXN9uZt+Y6QLiKKEKL4v3bT/yMf5k/dvSfzg HtoBm7E+EwdYP6qsOEptN24LfgDIlRR9BhsV3fVMVoDCNc3MKPoRgAgLWsEfMwL5 knz74Woq79XMhz7Ke7G0Ar7o1dcnzFJGWFYNPffhcMm9Z1MRWxh5Nmlu34IsmgXY hNt8NOCKXLpbglJiwawT7NdC8h/o2W4MWzl2tbCnMZLSnw+ect7B72mEXMz8n3p4 YNKlOkt8Mt+bdP9PoOVnAiyg2y7lHMRC8BRZrzExpslGdV85CX+xt+awWqRzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1r/rxkkJxLCKi7caHAY0KXdqtxcwHwYDVR0j BBgwFoAUIwqBsoMxS6eb+gJP35/02ma0JL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2ExY2U0ZS01OWM4LTQxY2MtYjVlNi1iZDdiN2E3MDQzNTYvMC8yMzBBODFCMjgz MzE0QkE3OUJGQTAyNEZERjlGRjREQTY2QjQyNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2NkI0 MjRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdhMWNlNGUtNTljOC00MWNjLWI1 ZTYtYmQ3YjdhNzA0MzU2LzAvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0 REE2NkI0MjRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNNsMxDKwFy+4pUo9MlJP1FnE7kzNk0dNzk HeLvsGUOO0HWedai+LIW94BUfzygdHU2fDJmct1JfzPLrtt37J0EZgypGMqpPEm3 epfrJ0/i0cq1VHEVH/LZ8dCdCZzYOYn6mlu23QHHmOKAdY9cSOWodP2gPEzt1hk/ kunWNnM4ufgFt1v6t9ELS9kgY+4mi2WftrGf1dNnB8WySJIIBYPnZ2HSGxwcXmWG ltmjpYknW6xlpnwFH3WNmicFm2UNwEH27uOu+KW+Bz2AteNfVtGNkmsuLHddX/wD nBPK1BPGESQK8y3WuN0fNkipqtqkdvkevnflu9YVX3Ucfl9Fs58= -----END CERTIFICATE-----Generated at Thu Mar 26 12:54:16 2026 by rpki-client