$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft File: F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json) Hash identifier: g2xAINtxezNyNEtPBoIdbqSF1oJhWRuWrOTsrkJCee0= Subject key identifier: A7:ED:81:D0:78:A1:02:96:43:0E:69:60:FC:57:05:10:F8:A6:8F:E2 Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3 Certificate serial: 37BAB1D6EF33233453F669E9ABFE5981FA84006B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft Manifest number: 0191 Signing time: Tue 24 Mar 2026 23:31:53 +0000 Manifest this update: Tue 24 Mar 2026 23:26:53 +0000 Manifest next update: Sat 28 Mar 2026 05:12:53 +0000 Files and hashes: 1: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: bL4A3iMML3JwhDE2yFeN6uDiSzuObZzoT/f0gxHop3A=) 2: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: BETPcfS1VcTumvWSwQRlY9PEvVDNhn9IgT3oOeof4jw=) 3: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: U9CBjdqixuo1gJfA+DVd7K1mlSoReLG9uQ6PzoZW4gU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ba:b1:d6:ef:33:23:34:53:f6:69:e9:ab:fe:59:81:fa:84:00:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3 Validity Not Before: Mar 24 23:26:53 2026 GMT Not After : Mar 28 05:12:53 2026 GMT Subject: CN=A7ED81D078A10296430E6960FC570510F8A68FE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:64:04:60:db:bc:38:8c:f4:31:3f:e4:5a: cd:83:5a:ec:6c:5f:b8:a4:26:fd:3d:4d:b6:88:74: 54:ef:0e:d6:b6:cd:77:96:dd:dc:aa:d2:f4:9c:61: e8:43:bf:fa:cf:d6:ab:b9:b6:10:4f:d9:24:e9:58: b4:1b:5c:4f:59:aa:84:1a:5e:9c:eb:f9:48:e6:3b: 0e:b7:a7:ed:13:7c:eb:81:e8:01:a1:09:6c:1a:fe: 9c:de:be:94:b5:3f:86:15:0b:b7:18:0e:76:3f:ac: 7b:84:38:9d:2c:e3:63:d0:16:6a:f5:72:c2:c7:01: 56:9b:96:57:e8:18:ee:bf:d8:7b:f8:c1:c6:c8:b4: 2f:55:25:88:90:d0:9c:3f:6d:e4:e6:50:3f:28:6b: 44:d6:a7:c0:2e:f9:1a:84:3f:92:71:b9:80:b4:40: 91:35:46:27:4a:f9:c0:06:59:f0:f4:e9:67:9b:9f: 12:d1:7f:71:fe:27:9d:ea:8c:51:7d:ba:b1:f6:d4: b0:9a:a3:80:9b:a2:77:77:42:c7:8e:f0:bb:91:35: 12:f3:36:e3:14:63:10:0f:0a:49:05:64:5b:d8:e5: 8a:4f:56:d2:96:03:46:8d:e3:1d:cd:5f:eb:9a:97: d4:7d:6a:7d:a2:05:6a:76:bb:1b:9b:1b:1c:d7:da: 01:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:ED:81:D0:78:A1:02:96:43:0E:69:60:FC:57:05:10:F8:A6:8F:E2 X509v3 Authority Key Identifier: keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d9:a9:75:da:03:9f:ef:a9:20:3c:b0:65:5e:a2:d5:34:90: b3:bc:15:b9:fd:14:16:f0:ac:83:f7:88:e9:f2:dd:e3:3f:7d: 25:b4:23:3d:6d:33:18:7a:8e:36:15:d0:04:78:66:39:37:f5: 1e:40:8d:c5:78:3b:f7:6c:91:5a:d3:c2:c4:c6:f0:94:c0:d8: 7d:b9:38:12:69:8b:13:e4:88:11:38:be:59:4a:8e:c3:26:78: 96:af:af:2c:93:db:9f:d8:3d:b3:19:62:9b:bc:04:e7:f3:73: db:69:5c:38:50:9b:fc:1c:d4:bb:fc:cc:7b:0b:b1:0e:73:cb: 27:0c:35:de:3c:ac:8e:7e:e6:05:39:62:a3:63:02:6a:c7:e2: 55:7c:5c:d3:aa:30:db:57:d0:6c:ed:85:0f:79:89:a5:0d:96: 4b:2e:ad:a3:32:2b:07:00:a7:b3:85:e0:53:3b:a8:ec:1a:08: d0:a4:e8:60:a6:1f:4d:2a:2e:d2:d5:31:5d:7f:d4:4f:23:24: ff:d0:f7:2e:ef:8e:95:2b:29:6f:8d:a5:cd:f1:b3:7d:84:1f: 80:42:4f:66:e1:cc:6b:92:23:32:74:91:25:7e:a6:d5:cc:c4: f0:a4:93:45:3e:b4:a2:d7:c4:63:03:f5:48:8f:a5:92:6c:93: 59:bd:26:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7qx1u8zIzRT9mnpq/5ZgfqEAGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUw NUIyOTNBMzAeFw0yNjAzMjQyMzI2NTNaFw0yNjAzMjgwNTEyNTNaMDMxMTAvBgNV BAMTKEE3RUQ4MUQwNzhBMTAyOTY0MzBFNjk2MEZDNTcwNTEwRjhBNjhGRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzuWQEYNu8OIz0MT/kWs2DWuxs X7ikJv09TbaIdFTvDta2zXeW3dyq0vScYehDv/rP1qu5thBP2STpWLQbXE9ZqoQa Xpzr+UjmOw63p+0TfOuB6AGhCWwa/pzevpS1P4YVC7cYDnY/rHuEOJ0s42PQFmr1 csLHAVabllfoGO6/2Hv4wcbItC9VJYiQ0Jw/beTmUD8oa0TWp8Au+RqEP5JxuYC0 QJE1RidK+cAGWfD06WebnxLRf3H+J53qjFF9urH21LCao4Cbond3QseO8LuRNRLz NuMUYxAPCkkFZFvY5YpPVtKWA0aN4x3NX+ual9R9an2iBWp2uxubGxzX2gEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp+2B0HihApZDDmlg/FcFEPimj+IwHwYDVR0j BBgwFoAU8jrMoUdyC0I6lXbz5AhpFQWyk6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC9GMjNBQ0NBMTQ3 NzIwQjQyM0E5NTc2RjNFNDA4NjkxNTA1QjI5M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUwNUIy OTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5 MTUwNUIyOTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7ZqXXaA5/vqSA8sGVeotU0kLO8Fbn9FBbw rIP3iOny3eM/fSW0Iz1tMxh6jjYV0AR4Zjk39R5AjcV4O/dskVrTwsTG8JTA2H25 OBJpixPkiBE4vllKjsMmeJavryyT25/YPbMZYpu8BOfzc9tpXDhQm/wc1Lv8zHsL sQ5zyycMNd48rI5+5gU5YqNjAmrH4lV8XNOqMNtX0GzthQ95iaUNlksuraMyKwcA p7OF4FM7qOwaCNCk6GCmH00qLtLVMV1/1E8jJP/Q9y7vjpUrKW+Npc3xs32EH4BC T2bhzGuSIzJ0kSV+ptXMxPCkk0U+tKLXxGMD9UiPpZJsk1m9Jik= -----END CERTIFICATE-----Generated at Thu Mar 26 08:57:20 2026 by rpki-client