$ rpki-client -vvf repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft File: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft (raw, json) Hash identifier: WnDLgY5hW7JxcRgePeugHfmsHyd+UkNKTQsnkVxijNU= Subject key identifier: C6:79:BC:2E:1C:F0:4B:5B:44:2D:FF:C6:AB:DD:0C:70:8C:75:F3:B7 Authority key identifier: 23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 Certificate issuer: /CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Certificate serial: 4E3DD5EFF7BF0DCCFBD986260AADDC196090EEA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft Manifest number: 0171 Signing time: Tue 24 Mar 2026 00:12:16 +0000 Manifest this update: Tue 24 Mar 2026 00:07:16 +0000 Manifest next update: Fri 27 Mar 2026 07:03:16 +0000 Files and hashes: 1: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl (hash: 7oc3sBtwa3MjK/g6FhZI3Kq9zOzUJNvU9jr8qCEh48c=) 2: 3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa (hash: JvAuAWjeLfp0XViXv+7ZCgiJcBbHkm/DO53vlhMWqfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 07:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3d:d5:ef:f7:bf:0d:cc:fb:d9:86:26:0a:ad:dc:19:60:90:ee:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Validity Not Before: Mar 24 00:07:16 2026 GMT Not After : Mar 27 07:03:16 2026 GMT Subject: CN=C679BC2E1CF04B5B442DFFC6ABDD0C708C75F3B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:b2:98:4f:98:9c:92:d0:71:cf:dc:b5:44: 8c:09:09:59:3b:0e:6a:73:60:c4:03:26:13:29:3b: 22:e4:39:d2:dd:47:cc:8d:8e:7f:63:70:b0:c7:14: 03:a7:71:fa:b2:c3:e2:8e:53:87:b4:e3:f6:ef:c9: 51:db:b3:f0:1b:dd:c2:79:47:c5:5a:cc:48:8f:23: f2:9d:34:48:32:c3:74:c5:ff:1b:51:df:76:48:32: 86:5b:36:77:c0:27:4d:53:ca:5f:27:2b:97:54:4e: 5f:bd:a9:74:61:06:ba:14:83:66:9a:f6:cf:0e:9b: a2:a6:67:b2:86:b5:23:1a:9c:69:23:83:8a:0d:f6: 78:ea:a0:3a:e2:74:6c:1b:a8:05:e7:ad:2f:b7:e9: 51:34:b6:f6:3c:3c:2f:c1:4e:39:b6:2f:a9:49:ad: b3:37:bf:0f:a7:66:1c:39:82:f7:40:06:2e:55:24: 17:d9:c3:fb:75:ad:43:fd:dc:87:a7:0b:60:cc:6c: 15:75:70:47:9c:5b:91:5d:a7:5d:aa:7c:31:8c:dd: 2d:4d:1e:47:e2:31:1a:3b:59:37:73:1c:fd:54:66: ff:a1:51:18:ed:f5:f4:16:0d:17:0e:90:24:de:01: f4:fa:a6:95:78:78:8d:4f:b2:38:53:ec:4c:7b:13: 18:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:79:BC:2E:1C:F0:4B:5B:44:2D:FF:C6:AB:DD:0C:70:8C:75:F3:B7 X509v3 Authority Key Identifier: keyid:23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:17:c0:f1:30:35:b8:e9:97:6b:fb:55:e6:52:bd:14:29:9f: 28:59:e3:32:53:b2:cc:c0:f8:12:4e:19:64:84:57:da:7a:88: e8:d7:a4:84:a0:fe:5f:0e:3f:b9:64:ed:fe:f3:81:53:cb:97: 5c:43:bd:d0:99:1e:cb:6f:c5:4a:eb:70:3d:80:3c:de:37:ca: e4:f6:b3:35:ae:42:33:c1:ab:e9:4a:75:d9:4c:ad:c4:08:a7: 15:50:3e:25:a6:94:38:b6:8d:a3:ac:18:71:15:50:0f:a8:6f: 74:3e:f3:56:71:06:0e:64:61:51:17:f8:d1:a4:f2:1b:fe:f8: 20:ac:bd:ff:fe:ff:6b:dc:1a:31:6f:7e:7b:39:ca:12:f5:0d: 34:ce:38:d2:4e:70:60:25:6e:b7:06:4f:9e:90:c6:2a:b1:28: 58:03:35:df:29:96:7a:82:f1:0b:db:0a:00:67:07:ab:78:e9: 93:00:bd:b4:b0:42:ba:4a:bc:d6:b1:dc:83:11:0f:03:9d:f2: 2f:84:18:20:aa:92:6f:23:7f:38:84:f0:80:4f:06:00:fb:f1: 14:92:2b:a8:42:e6:dc:b7:e1:bb:38:13:08:15:2d:ac:a2:b1: ae:22:bb:ff:99:c6:60:de:b9:6c:a5:12:ee:4d:4e:1f:7e:5b: bd:0a:37:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTj3V7/e/Dcz72YYmCq3cGWCQ7qUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIz QjAwRUVCNjAeFw0yNjAzMjQwMDA3MTZaFw0yNjAzMjcwNzAzMTZaMDMxMTAvBgNV BAMTKEM2NzlCQzJFMUNGMDRCNUI0NDJERkZDNkFCREQwQzcwOEM3NUYzQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC38bKYT5icktBxz9y1RIwJCVk7 DmpzYMQDJhMpOyLkOdLdR8yNjn9jcLDHFAOncfqyw+KOU4e04/bvyVHbs/Ab3cJ5 R8VazEiPI/KdNEgyw3TF/xtR33ZIMoZbNnfAJ01Tyl8nK5dUTl+9qXRhBroUg2aa 9s8Om6KmZ7KGtSManGkjg4oN9njqoDridGwbqAXnrS+36VE0tvY8PC/BTjm2L6lJ rbM3vw+nZhw5gvdABi5VJBfZw/t1rUP93IenC2DMbBV1cEecW5Fdp12qfDGM3S1N HkfiMRo7WTdzHP1UZv+hURjt9fQWDRcOkCTeAfT6ppV4eI1PsjhT7Ex7Exg9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxnm8LhzwS1tELf/Gq90McIx187cwHwYDVR0j BBgwFoAUIxMtasKg7UGZb1TACopZsjsA7rYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmU0N2M2ZC1lNjI0LTQ3N2MtYWUxOC1kMzJmMjJjOTYyMDQvMC8yMzEzMkQ2QUMy QTBFRDQxOTk2RjU0QzAwQThBNTlCMjNCMDBFRUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIzQjAw RUVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZlNDdjNmQtZTYyNC00NzdjLWFl MTgtZDMyZjIyYzk2MjA0LzAvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5 QjIzQjAwRUVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUXwPEwNbjpl2v7VeZSvRQpnyhZ4zJTsszA +BJOGWSEV9p6iOjXpISg/l8OP7lk7f7zgVPLl1xDvdCZHstvxUrrcD2APN43yuT2 szWuQjPBq+lKddlMrcQIpxVQPiWmlDi2jaOsGHEVUA+ob3Q+81ZxBg5kYVEX+NGk 8hv++CCsvf/+/2vcGjFvfns5yhL1DTTOONJOcGAlbrcGT56QxiqxKFgDNd8plnqC 8QvbCgBnB6t46ZMAvbSwQrpKvNax3IMRDwOd8i+EGCCqkm8jfziE8IBPBgD78RSS K6hC5ty34bs4EwgVLayisa4iu/+ZxmDeuWylEu5NTh9+W70KN+g= -----END CERTIFICATE-----Generated at Thu Mar 26 09:13:07 2026 by rpki-client