$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: 21F4jxAl4vXh4XuQCgvVyTuWXlAQGiNqZshwdSxbXL0= Subject key identifier: F1:B7:74:D3:30:9E:A5:DE:99:2C:3B:FE:03:7B:14:78:4D:9D:8B:2E Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 596FFDC0E0D968CA98C7E83F86356602BDDFD3FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 0561 Signing time: Wed 25 Mar 2026 21:02:02 +0000 Manifest this update: Wed 25 Mar 2026 20:57:02 +0000 Manifest next update: Sun 29 Mar 2026 08:55:02 +0000 Files and hashes: 1: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: yLfV2U2bfqMqhS6fYcih2JWb94bCMzFHh/4WSGI8SKw=) 2: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: bVRLDmnlkDr+Er81GecVOu1gTofkGixwnSL4beQ/iNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6f:fd:c0:e0:d9:68:ca:98:c7:e8:3f:86:35:66:02:bd:df:d3:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Mar 25 20:57:02 2026 GMT Not After : Mar 29 08:55:02 2026 GMT Subject: CN=F1B774D3309EA5DE992C3BFE037B14784D9D8B2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:57:eb:d3:d2:4b:fd:0b:7d:01:a4:84:da:e1: 43:56:6c:a8:bd:70:f6:63:e6:7c:6b:de:3a:7b:95: 67:03:c3:19:ca:8d:ba:1b:fa:77:38:a1:7c:eb:da: 67:11:12:d9:6c:e4:31:5b:79:a5:13:36:96:42:1f: 6e:29:b5:93:96:99:8c:b6:03:82:a1:18:39:69:4b: 29:93:67:a6:e3:1c:72:7c:d2:30:9d:77:1c:18:bf: d1:f6:6a:2f:8c:5f:30:30:5c:54:bd:93:a4:a2:57: 34:10:0b:db:46:bd:f9:83:c2:85:a7:f2:56:c8:f1: f3:83:1b:35:f3:d6:ea:e6:40:40:46:ba:10:52:81: be:a8:aa:8a:7b:b6:f8:67:35:f0:45:af:20:c1:61: ee:ac:fb:ba:77:ed:17:d5:15:29:00:40:fe:a9:06: ec:58:19:92:a8:b9:30:76:9e:77:d1:73:d5:95:37: 9b:62:06:0c:6c:0a:92:25:06:7f:5a:cf:4c:52:23: ff:42:e6:95:af:c8:a6:5e:f6:50:91:39:c9:75:d2: 12:a7:7e:48:a5:65:d8:50:c2:aa:79:6b:5e:09:30: fa:2f:88:e6:0c:3f:b7:ee:00:e1:b8:68:b6:24:66: 16:5a:b8:db:04:eb:4a:49:0c:49:f0:b0:9a:52:1e: a7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B7:74:D3:30:9E:A5:DE:99:2C:3B:FE:03:7B:14:78:4D:9D:8B:2E X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:d5:08:6e:7e:c9:0e:4c:fc:d2:20:c4:8f:d2:16:f1:e9:ba: f0:39:0b:90:99:3d:9d:88:9d:bb:13:70:52:c1:c8:f2:78:72: 79:66:80:5e:c4:b4:61:d7:3d:90:2c:09:8a:e0:7c:b4:22:58: 6b:2b:01:ba:07:a3:69:22:40:fb:4b:8c:61:c2:9b:8e:a8:be: da:18:92:7d:fb:1b:bd:6a:1b:fc:6d:c6:61:63:f3:35:23:20: be:9a:b9:ac:1f:f8:6e:d7:c2:79:6a:7a:63:84:e6:f3:ae:14: 9a:78:c8:ba:23:31:9a:2c:69:4d:c0:b0:96:26:49:77:4d:2d: 54:68:e8:6f:14:89:5f:9a:c6:8c:54:ec:3e:1f:73:f7:7b:e8: 2b:78:d5:df:42:a4:24:10:2f:66:2f:bb:6d:3f:fa:66:35:32: d6:3f:36:e1:87:d3:1a:34:9f:7f:3c:52:60:bc:a0:c0:53:89: dd:8d:34:8e:2b:b0:b4:d9:17:59:ef:9a:4c:1e:7e:19:74:34: 12:fd:54:32:eb:e3:5b:fb:fc:39:b1:20:96:cb:23:30:c4:27: 05:d0:ec:03:34:fc:93:fa:8d:49:f2:e3:68:d0:bc:4a:c8:df: b1:29:b6:08:63:de:8a:bb:bc:8d:7a:11:c1:d3:ea:1d:39:d3: 15:3d:30:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWW/9wODZaMqYx+g/hjVmAr3f0/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNjAzMjUyMDU3MDJaFw0yNjAzMjkwODU1MDJaMDMxMTAvBgNV BAMTKEYxQjc3NEQzMzA5RUE1REU5OTJDM0JGRTAzN0IxNDc4NEQ5RDhCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxV+vT0kv9C30BpITa4UNWbKi9 cPZj5nxr3jp7lWcDwxnKjbob+nc4oXzr2mcREtls5DFbeaUTNpZCH24ptZOWmYy2 A4KhGDlpSymTZ6bjHHJ80jCddxwYv9H2ai+MXzAwXFS9k6SiVzQQC9tGvfmDwoWn 8lbI8fODGzXz1urmQEBGuhBSgb6oqop7tvhnNfBFryDBYe6s+7p37RfVFSkAQP6p BuxYGZKouTB2nnfRc9WVN5tiBgxsCpIlBn9az0xSI/9C5pWvyKZe9lCROcl10hKn fkilZdhQwqp5a14JMPoviOYMP7fuAOG4aLYkZhZauNsE60pJDEnwsJpSHqeRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8bd00zCepd6ZLDv+A3sUeE2diy4wHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3VCG5+yQ5M/NIgxI/SFvHpuvA5C5CZPZ2I nbsTcFLByPJ4cnlmgF7EtGHXPZAsCYrgfLQiWGsrAboHo2kiQPtLjGHCm46ovtoY kn37G71qG/xtxmFj8zUjIL6auawf+G7XwnlqemOE5vOuFJp4yLojMZosaU3AsJYm SXdNLVRo6G8UiV+axoxU7D4fc/d76Ct41d9CpCQQL2Yvu20/+mY1MtY/NuGH0xo0 n388UmC8oMBTid2NNI4rsLTZF1nvmkwefhl0NBL9VDLr41v7/DmxIJbLIzDEJwXQ 7AM0/JP6jUny42jQvErI37Eptghj3oq7vI16EcHT6h050xU9MBM= -----END CERTIFICATE-----Generated at Thu Mar 26 14:09:58 2026 by rpki-client