$ rpki-client -vvf repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft File: 923816C042C964B6465A7BA06B2D44BDAF28D827.mft (raw, json) Hash identifier: EwE6ks+kdd91zx610ma9J6S8GN21gIf8dvVMGxikuHY= Subject key identifier: A6:71:A4:1D:47:BA:40:98:64:92:AC:99:4C:D7:4E:1B:28:41:C4:99 Authority key identifier: 92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 Certificate issuer: /CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Certificate serial: 722769387A1734587349A388CF3BDB52E8516EB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject info access: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft Manifest number: 0267 Signing time: Tue 24 Mar 2026 06:50:44 +0000 Manifest this update: Tue 24 Mar 2026 06:45:44 +0000 Manifest next update: Fri 27 Mar 2026 13:20:44 +0000 Files and hashes: 1: 3130332e3138392e35392e302f32342d3234203d3e20313439373538.roa (hash: /IMjB2zzS/R4jg1G0u5f9Z9fEjTEZBoII5eQSPdhRUM=) 2: 3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa (hash: DYdErYV9CziQI4JcelpgUN+i1lEMG53IFpsP0CaTa7Y=) 3: 923816C042C964B6465A7BA06B2D44BDAF28D827.crl (hash: uiRkfU8r3dzCVzQ/VDVQly/vTeDL0I9XOOe/0mpsffc=) 4: 3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa (hash: o++ze4Phjg1umrR/hXTKNbdGbb6WGQVR25QY7sQRXiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:27:69:38:7a:17:34:58:73:49:a3:88:cf:3b:db:52:e8:51:6e:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Validity Not Before: Mar 24 06:45:44 2026 GMT Not After : Mar 27 13:20:44 2026 GMT Subject: CN=A671A41D47BA40986492AC994CD74E1B2841C499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a3:b5:39:4c:06:ec:4f:2f:53:c7:8a:87:83: 10:10:c4:fa:29:f0:27:19:7b:96:41:33:3b:06:4a: ae:9c:ff:fa:86:77:b6:6d:4e:a6:49:09:52:47:5a: b1:7b:02:db:d9:21:d3:05:b9:f0:55:c3:39:5f:cb: a7:e9:30:3d:36:49:69:d6:14:a9:38:8a:9d:15:21: 9f:1c:d0:b8:74:93:ff:c6:31:0b:66:13:04:82:9d: ed:c7:e2:9b:54:04:04:14:01:c3:71:84:2e:37:c9: 88:81:34:44:cb:91:8e:c8:6c:93:bf:21:d3:89:cf: 21:3f:d1:48:e4:34:4c:21:01:9e:fa:0a:a8:53:36: 77:7d:b2:9b:fa:cc:89:35:cf:e9:1d:1f:e8:13:56: 06:c7:17:ce:fb:57:1d:77:52:4a:60:8f:f6:ab:22: 35:23:4d:76:b9:f9:62:0e:bc:2a:99:ff:45:e0:d1: 49:1e:14:a1:7a:d7:0a:c8:b4:58:a5:e9:de:b7:a7: 27:82:b8:d5:e0:0a:39:bb:7a:79:eb:cb:18:cc:4f: ec:1d:c1:68:44:a9:8a:47:4d:a5:1f:fb:78:46:1e: 06:b9:5c:53:d9:b5:1e:66:0b:b7:59:21:71:43:c8: f1:aa:66:83:82:20:be:88:3a:6b:82:1b:07:e0:9b: 60:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:71:A4:1D:47:BA:40:98:64:92:AC:99:4C:D7:4E:1B:28:41:C4:99 X509v3 Authority Key Identifier: keyid:92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:bb:e0:43:c5:b7:83:8e:1e:ae:fe:27:93:f9:a3:9e:8d:db: 09:00:ed:75:35:53:2b:86:56:34:6c:3e:53:20:50:cc:ff:14: d7:a8:ae:00:4d:a7:b7:f7:05:e5:5f:14:b0:14:96:bc:d3:89: 60:61:39:4b:10:65:55:75:21:eb:3b:df:67:d8:f3:ad:7e:d9: 0b:57:8a:18:27:f9:6b:ee:b4:7f:ba:e7:b5:7d:74:96:8f:47: fd:fe:8f:24:ee:70:73:fc:e3:3d:5d:54:9d:41:03:aa:a2:53: 94:8e:fc:fa:05:85:c0:8c:b2:35:9b:51:5e:0b:3b:a7:9d:64: c5:12:23:d2:d7:70:fd:51:1c:21:5b:10:a5:c2:c7:c1:95:c2: 58:c7:8e:f4:4c:56:6d:c2:50:ac:8d:94:b0:3a:1f:45:55:d6: 67:33:be:36:ca:cc:9f:fb:5e:12:f3:82:01:23:8b:ad:0e:ff: 26:db:0e:74:8e:95:c4:45:68:63:f8:50:31:97:99:b0:00:d8: f3:7a:76:2a:ab:66:3a:bd:b0:b1:2a:7f:5a:33:17:5d:e4:7f: bb:0f:e3:39:29:59:77:cf:85:12:87:c9:8d:68:bf:ba:b2:fa: 62:b4:eb:06:a7:c1:4c:51:02:0e:f0:4d:f3:20:2e:36:e0:a1: 14:bc:fb:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcidpOHoXNFhzSaOIzzvbUuhRbrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRB RjI4RDgyNzAeFw0yNjAzMjQwNjQ1NDRaFw0yNjAzMjcxMzIwNDRaMDMxMTAvBgNV BAMTKEE2NzFBNDFENDdCQTQwOTg2NDkyQUM5OTRDRDc0RTFCMjg0MUM0OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvo7U5TAbsTy9Tx4qHgxAQxPop 8CcZe5ZBMzsGSq6c//qGd7ZtTqZJCVJHWrF7AtvZIdMFufBVwzlfy6fpMD02SWnW FKk4ip0VIZ8c0Lh0k//GMQtmEwSCne3H4ptUBAQUAcNxhC43yYiBNETLkY7IbJO/ IdOJzyE/0UjkNEwhAZ76CqhTNnd9spv6zIk1z+kdH+gTVgbHF877Vx13Ukpgj/ar IjUjTXa5+WIOvCqZ/0Xg0UkeFKF61wrItFil6d63pyeCuNXgCjm7ennryxjMT+wd wWhEqYpHTaUf+3hGHga5XFPZtR5mC7dZIXFDyPGqZoOCIL6IOmuCGwfgm2CFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpnGkHUe6QJhkkqyZTNdOGyhBxJkwHwYDVR0j BBgwFoAUkjgWwELJZLZGWnugay1Eva8o2CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzdkZmI4OC1mYjUwLTQ4ZDEtYjkwZC1lNTI1MTAyZjRmNWUvMC85MjM4MTZDMDQy Qzk2NEI2NDY1QTdCQTA2QjJENDRCREFGMjhEODI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRBRjI4 RDgyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM3ZGZiODgtZmI1MC00OGQxLWI5 MGQtZTUyNTEwMmY0ZjVlLzAvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0 QkRBRjI4RDgyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIC74EPFt4OOHq7+J5P5o56N2wkA7XU1UyuG VjRsPlMgUMz/FNeorgBNp7f3BeVfFLAUlrzTiWBhOUsQZVV1Ies732fY861+2QtX ihgn+WvutH+657V9dJaPR/3+jyTucHP84z1dVJ1BA6qiU5SO/PoFhcCMsjWbUV4L O6edZMUSI9LXcP1RHCFbEKXCx8GVwljHjvRMVm3CUKyNlLA6H0VV1mczvjbKzJ/7 XhLzggEji60O/ybbDnSOlcRFaGP4UDGXmbAA2PN6diqrZjq9sLEqf1ozF13kf7sP 4zkpWXfPhRKHyY1ov7qy+mK06wanwUxRAg7wTfMgLjbgoRS8+4M= -----END CERTIFICATE-----Generated at Thu Mar 26 05:37:10 2026 by rpki-client