$ rpki-client -vvf repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft File: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft (raw, json) Hash identifier: 27gzYFl1d1cjB6RkYnjfv4HGf4gZh+9ovVggxEIFvDU= Subject key identifier: 5B:D7:10:BA:BA:F4:43:D1:92:FC:52:1C:10:04:AB:35:19:88:95:D0 Authority key identifier: 23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C Certificate issuer: /CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Certificate serial: 05227A31CEBFBDFC588CB1675F20F8957639858E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft Manifest number: EB Signing time: Wed 25 Mar 2026 16:32:21 +0000 Manifest this update: Wed 25 Mar 2026 16:27:21 +0000 Manifest next update: Sun 29 Mar 2026 02:37:21 +0000 Files and hashes: 1: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: TgOS2DIzKKN1li7GhbP8QE2EiuFzEQeHETrSLQ8zd80=) 2: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl (hash: aGuKqVispmNiQUD/QU03FM1HJZU7YgeLL2dVAgNAc9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:22:7a:31:ce:bf:bd:fc:58:8c:b1:67:5f:20:f8:95:76:39:85:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Validity Not Before: Mar 25 16:27:21 2026 GMT Not After : Mar 29 02:37:21 2026 GMT Subject: CN=5BD710BABAF443D192FC521C1004AB35198895D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:21:b7:6c:38:59:80:65:cb:21:ee:3b:1a:91: d7:b3:f9:f8:0e:61:32:5f:94:7c:f6:dc:6a:82:6c: 83:20:5d:ee:81:fe:2b:e7:52:58:09:02:b9:8e:55: 70:72:52:2e:8d:4c:11:3f:a9:9d:a1:a6:68:af:72: 30:99:b9:1d:35:96:29:d2:ad:75:5c:96:08:ef:bf: 4e:9c:fe:b2:07:8f:65:72:6a:ed:59:0b:73:a0:2c: 3a:12:39:d1:0b:ec:4b:08:c0:de:6c:c4:d4:46:50: b1:92:80:44:09:e9:34:c9:80:8f:f2:7b:6d:0f:be: f6:0b:68:09:61:fc:69:01:4d:d9:0c:91:83:4a:9f: d0:7a:fb:9e:75:31:9e:35:12:ef:82:f2:84:db:e2: e4:14:e5:7f:c0:b8:fa:da:bb:4e:06:c6:d7:8b:9a: 76:6c:d5:56:5d:4c:17:db:b4:09:05:b6:83:9a:59: b5:7a:88:44:68:57:4f:9d:d3:98:73:17:a4:3e:05: d7:54:56:2a:ae:83:9a:d3:d3:80:64:7e:f3:53:55: 05:24:2d:28:c4:50:97:92:27:72:3d:c9:5f:e5:3f: a7:87:ec:23:19:25:bd:55:c4:52:bf:11:64:43:5d: 30:4b:08:bc:9a:14:3f:ea:cb:a9:f6:fc:0d:39:40: 3b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D7:10:BA:BA:F4:43:D1:92:FC:52:1C:10:04:AB:35:19:88:95:D0 X509v3 Authority Key Identifier: keyid:23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:cc:ea:13:b0:a5:7a:5b:7b:58:08:24:a3:21:af:c1:26:00: 8d:d0:30:df:53:3f:85:10:3c:f7:3d:92:e3:eb:cf:01:0d:63: f7:bc:58:21:7b:1c:09:f7:a8:94:59:d9:47:58:22:2b:8f:a0: e9:80:69:17:6a:6a:29:c4:04:3e:eb:f0:fa:46:00:d8:63:ac: ed:b2:09:3f:c8:97:56:ea:01:69:ca:d5:4c:2d:85:d0:97:6c: a1:b9:ae:48:27:2a:1a:e8:e1:58:f0:9a:04:a2:35:83:d8:90: c9:f0:22:3e:21:c5:73:66:88:05:b7:68:fb:cf:5a:61:4d:ff: 22:ee:cd:35:2d:bd:9e:08:1f:b2:ca:c7:c2:9c:ba:4f:cf:67: 16:7b:eb:f3:c3:73:5f:1a:61:d9:cb:35:4f:e1:22:75:ab:90: f4:e3:20:96:b1:4a:73:40:95:f2:0e:4b:ed:d1:ee:97:fd:32: 28:db:e6:fe:b0:3b:13:33:71:44:4f:9a:e1:3c:8b:11:9f:56: 79:00:82:da:6d:b7:cf:d2:56:09:79:c2:ac:2d:f4:d4:5e:9a: 55:3e:71:7c:d5:bd:9d:e5:10:76:55:ba:0d:25:9a:7c:39:9d: 36:e2:a2:17:7f:18:ab:14:da:bd:c4:8e:c6:f5:f2:6c:57:f2: 7f:67:28:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBSJ6Mc6/vfxYjLFnXyD4lXY5hY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3 N0U4RUU3QzAeFw0yNjAzMjUxNjI3MjFaFw0yNjAzMjkwMjM3MjFaMDMxMTAvBgNV BAMTKDVCRDcxMEJBQkFGNDQzRDE5MkZDNTIxQzEwMDRBQjM1MTk4ODk1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6IbdsOFmAZcsh7jsakdez+fgO YTJflHz23GqCbIMgXe6B/ivnUlgJArmOVXByUi6NTBE/qZ2hpmivcjCZuR01linS rXVclgjvv06c/rIHj2Vyau1ZC3OgLDoSOdEL7EsIwN5sxNRGULGSgEQJ6TTJgI/y e20PvvYLaAlh/GkBTdkMkYNKn9B6+551MZ41Eu+C8oTb4uQU5X/AuPrau04GxteL mnZs1VZdTBfbtAkFtoOaWbV6iERoV0+d05hzF6Q+BddUViqug5rT04BkfvNTVQUk LSjEUJeSJ3I9yV/lP6eH7CMZJb1VxFK/EWRDXTBLCLyaFD/qy6n2/A05QDv1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW9cQurr0Q9GS/FIcEASrNRmIldAwHwYDVR0j BBgwFoAUI76M6mGUBvnYYLH5fuj37Xfo7nwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmVkNmRjNC1kMzhiLTQ0YmEtOWYwYi00Mjg0NTViMjc2ZWUvMC8yM0JFOENFQTYx OTQwNkY5RDg2MEIxRjk3RUU4RjdFRDc3RThFRTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3N0U4 RUU3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3 RUQ3N0U4RUU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADM6hOwpXpbe1gIJKMhr8EmAI3QMN9TP4UQ PPc9kuPrzwENY/e8WCF7HAn3qJRZ2UdYIiuPoOmAaRdqainEBD7r8PpGANhjrO2y CT/Il1bqAWnK1UwthdCXbKG5rkgnKhro4VjwmgSiNYPYkMnwIj4hxXNmiAW3aPvP WmFN/yLuzTUtvZ4IH7LKx8Kcuk/PZxZ76/PDc18aYdnLNU/hInWrkPTjIJaxSnNA lfIOS+3R7pf9Mijb5v6wOxMzcURPmuE8ixGfVnkAgtptt8/SVgl5wqwt9NRemlU+ cXzVvZ3lEHZVug0lmnw5nTbiohd/GKsU2r3Ejsb18mxX8n9nKMg= -----END CERTIFICATE-----Generated at Thu Mar 26 13:52:12 2026 by rpki-client