$ rpki-client -vvf repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft File: 9D23189F67CA669A4612567DD77CC645E3AFDF71.mft (raw, json) Hash identifier: 0d8njMcF3xKpnC9XodFN5JTACYujL0b5m6Cgfxg3XtI= Subject key identifier: 32:F9:44:63:17:04:23:2A:19:68:13:FD:E5:C0:C7:90:70:EE:98:14 Authority key identifier: 9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71 Certificate issuer: /CN=9D23189F67CA669A4612567DD77CC645E3AFDF71 Certificate serial: 05059FD427A452726B54CBE689E0D4591726FA43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft Manifest number: 0145 Signing time: Thu 26 Mar 2026 12:52:37 +0000 Manifest this update: Thu 26 Mar 2026 12:47:37 +0000 Manifest next update: Sun 29 Mar 2026 21:46:37 +0000 Files and hashes: 1: 9D23189F67CA669A4612567DD77CC645E3AFDF71.crl (hash: ZRwuYkvJj8NjKs52Ha1TGSxlKgcw41cafnAsqgc0eQU=) 2: 3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (hash: tYgibkzzAtGjQKdmBmuyqmxYY+aFNcFxJWH78M/BK54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:05:9f:d4:27:a4:52:72:6b:54:cb:e6:89:e0:d4:59:17:26:fa:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D23189F67CA669A4612567DD77CC645E3AFDF71 Validity Not Before: Mar 26 12:47:37 2026 GMT Not After : Mar 29 21:46:37 2026 GMT Subject: CN=32F944631704232A196813FDE5C0C79070EE9814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b1:19:e2:3c:4a:66:3c:b7:15:03:8c:22:d2: 4e:dc:ab:0d:a1:d5:30:fc:af:26:57:43:87:61:20: a0:ca:a4:30:0a:3b:8b:4c:34:c2:79:a0:82:3a:6d: dd:7d:10:47:8d:10:89:d2:5f:80:da:a8:7b:62:ac: 69:82:eb:70:49:ff:ff:c8:71:a9:a5:74:ca:47:94: 28:9e:5e:a0:1a:c0:59:ec:cd:03:12:56:4e:64:77: a0:0d:9e:c8:e2:af:4f:61:3e:c2:82:89:9b:94:aa: 11:05:03:b7:e9:de:0e:45:89:28:9c:5a:51:90:4f: db:39:fb:1c:ca:94:c9:6a:0c:d7:4f:c4:78:fc:40: 03:da:57:c6:28:97:e5:bf:d2:92:2c:3b:d3:8b:ee: 96:f5:2f:21:14:b5:15:2e:e1:e1:96:06:ec:c6:1e: 36:c8:90:ed:75:bd:e6:51:24:ad:bb:31:13:24:53: af:c8:e8:e2:fd:aa:70:7b:3f:ed:63:5d:ac:df:77: 5c:ba:46:ad:25:b5:84:99:a4:d0:72:1d:4b:08:71: 73:ee:2f:00:80:8f:df:c2:1e:13:51:d3:3f:8c:cd: a2:63:ef:40:1a:f2:34:a7:46:5c:26:1a:2a:0e:48: a3:24:68:03:be:2d:dd:35:64:d0:02:c1:d3:dc:5d: 5d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F9:44:63:17:04:23:2A:19:68:13:FD:E5:C0:C7:90:70:EE:98:14 X509v3 Authority Key Identifier: keyid:9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:5b:c5:ed:3c:f4:74:f5:72:02:c5:34:ad:fa:9f:bd:f8:ba: 9a:1f:b2:d3:ac:e4:22:79:1f:35:8a:da:af:c8:4a:ac:bd:39: a0:84:de:8b:02:29:0d:3b:bf:da:66:28:1e:cd:f5:7b:7e:8c: bc:44:56:69:4e:6b:1a:8b:43:e8:13:15:40:14:cb:f5:88:e5: 16:dc:48:fc:11:ce:0d:bd:4f:98:82:b3:28:15:77:45:0f:d1: b2:15:20:33:4c:32:cd:50:a9:9f:cf:5c:76:33:51:5f:d7:f6: d2:90:fa:c2:2e:83:47:64:71:c8:99:b5:52:a3:f8:76:76:27: 23:41:93:93:67:97:f8:9d:f2:8a:c4:de:76:6f:00:86:4a:0c: 29:99:1e:a3:82:95:b0:78:2e:aa:a4:1a:d3:a0:38:78:92:aa: de:a7:89:ae:d9:2f:10:d2:44:c0:f8:44:e0:6f:7e:b3:bc:4c: 20:15:ed:55:34:c7:13:a6:c6:e8:70:3d:68:23:3a:3f:c1:eb: a5:e1:c9:14:d9:49:94:f0:97:fd:97:db:fa:a4:27:6f:cf:a7: 99:7d:56:be:4b:76:ef:a0:0d:92:5f:27:2e:40:4d:f4:df:77: 81:19:d1:20:c8:0f:30:16:54:8f:0d:30:ef:45:64:f9:bb:b1: 85:5d:ad:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBQWf1CekUnJrVMvmieDUWRcm+kMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2NDVF M0FGREY3MTAeFw0yNjAzMjYxMjQ3MzdaFw0yNjAzMjkyMTQ2MzdaMDMxMTAvBgNV BAMTKDMyRjk0NDYzMTcwNDIzMkExOTY4MTNGREU1QzBDNzkwNzBFRTk4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfsRniPEpmPLcVA4wi0k7cqw2h 1TD8ryZXQ4dhIKDKpDAKO4tMNMJ5oII6bd19EEeNEInSX4DaqHtirGmC63BJ///I camldMpHlCieXqAawFnszQMSVk5kd6ANnsjir09hPsKCiZuUqhEFA7fp3g5FiSic WlGQT9s5+xzKlMlqDNdPxHj8QAPaV8Yol+W/0pIsO9OL7pb1LyEUtRUu4eGWBuzG HjbIkO11veZRJK27MRMkU6/I6OL9qnB7P+1jXazfd1y6Rq0ltYSZpNByHUsIcXPu LwCAj9/CHhNR0z+MzaJj70Aa8jSnRlwmGioOSKMkaAO+Ld01ZNACwdPcXV19AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMvlEYxcEIyoZaBP95cDHkHDumBQwHwYDVR0j BBgwFoAUnSMYn2fKZppGElZ913zGReOv33EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzVhY2IwNy05ZDVmLTQ5N2YtOTkzMi0zM2E0MzRkM2FhMzIvMC85RDIzMTg5RjY3 Q0E2NjlBNDYxMjU2N0RENzdDQzY0NUUzQUZERjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2NDVFM0FG REY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1YWNiMDctOWQ1Zi00OTdmLTk5 MzItMzNhNDM0ZDNhYTMyLzAvOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2 NDVFM0FGREY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVbxe089HT1cgLFNK36n734upofstOs5CJ5 HzWK2q/ISqy9OaCE3osCKQ07v9pmKB7N9Xt+jLxEVmlOaxqLQ+gTFUAUy/WI5Rbc SPwRzg29T5iCsygVd0UP0bIVIDNMMs1QqZ/PXHYzUV/X9tKQ+sIug0dkcciZtVKj +HZ2JyNBk5Nnl/id8orE3nZvAIZKDCmZHqOClbB4LqqkGtOgOHiSqt6nia7ZLxDS RMD4ROBvfrO8TCAV7VU0xxOmxuhwPWgjOj/B66XhyRTZSZTwl/2X2/qkJ2/Pp5l9 Vr5Ldu+gDZJfJy5ATfTfd4EZ0SDIDzAWVI8NMO9FZPm7sYVdrQ8= -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:37 2026 by rpki-client