$ rpki-client -vvf repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft File: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft (raw, json) Hash identifier: ssH6QHuZE+mQmerURnrDBX24liREeUg/yHXVT5Lib+U= Subject key identifier: 6C:40:FD:9C:35:4D:F7:6B:BB:46:37:EB:38:C8:3D:A2:C3:5C:2F:8A Authority key identifier: 2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 Certificate issuer: /CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Certificate serial: 0307331886C7F22924FF3B4672DE165AF52F1E13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft Manifest number: 023F Signing time: Thu 26 Mar 2026 04:41:58 +0000 Manifest this update: Thu 26 Mar 2026 04:36:58 +0000 Manifest next update: Sun 29 Mar 2026 07:01:58 +0000 Files and hashes: 1: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl (hash: la0qIRw3rpB3V6o3nHMLpqqC90TQpTLGNkc5haBxjMc=) 2: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: G/xb7tdZk9UZaq4hfvb/m2IU6lYeHr5mMwL3BOuVZMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:07:33:18:86:c7:f2:29:24:ff:3b:46:72:de:16:5a:f5:2f:1e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Validity Not Before: Mar 26 04:36:58 2026 GMT Not After : Mar 29 07:01:58 2026 GMT Subject: CN=6C40FD9C354DF76BBB4637EB38C83DA2C35C2F8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:82:89:5d:ff:36:d1:26:01:42:29:90:3c:ad: 8d:0e:38:43:bd:23:13:b4:2a:92:f5:c5:f8:32:9d: ca:fd:46:37:1d:e1:12:85:93:d5:2b:47:98:8b:b7: f4:57:7c:14:95:96:9e:f8:f7:e6:5a:f3:e9:fe:09: 07:57:cf:a2:3c:24:b7:d1:01:57:82:00:5c:11:9f: 4f:af:74:26:e4:27:4f:1a:12:b4:54:5d:11:4c:9b: 92:36:e1:50:e2:2f:2a:88:d7:28:3a:a9:5d:b9:5d: 20:c8:83:9d:01:ed:b0:5c:f8:d6:86:53:db:04:a5: f4:68:8e:b0:f9:c6:b7:bf:3e:00:0c:9b:fd:e7:dd: d2:9d:52:3c:3d:24:26:de:f8:26:2a:bf:d2:26:7d: ee:b9:f2:f0:d9:0d:c9:f9:23:1a:a9:28:7d:e8:09: 16:9a:b0:ed:fc:b6:ca:84:7d:64:bb:75:58:9f:bf: fc:52:94:57:a6:3d:ee:13:93:94:41:e1:65:f3:4d: 99:4f:9b:fb:31:22:69:df:17:fd:e3:0c:02:2c:94: 72:d7:b8:a8:ab:ce:11:d2:cb:37:70:53:ae:6d:f6: b8:31:55:38:27:6a:03:94:9c:cc:0a:1c:3f:e6:c1: 0d:3d:1f:ba:8a:aa:4e:da:05:a4:85:86:14:b6:7f: 92:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:40:FD:9C:35:4D:F7:6B:BB:46:37:EB:38:C8:3D:A2:C3:5C:2F:8A X509v3 Authority Key Identifier: keyid:2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:44:f7:68:6c:30:fb:4d:15:2e:d7:4f:60:4a:b3:d5:6a:67: 22:79:67:ae:5f:33:0c:9c:99:fa:6e:12:19:34:d7:5a:5e:e5: cf:7f:86:9e:20:ba:22:59:41:15:f1:d0:30:d0:9f:23:4a:65: 68:5f:51:b7:7d:0c:08:3f:2c:50:d1:72:58:1c:be:ba:82:ec: bc:7d:ca:e0:f2:a5:b6:b0:e7:4d:e7:0e:6f:a1:4a:06:13:a3: 2f:f3:77:9d:57:68:1f:14:20:ac:1e:86:df:f3:9e:92:36:00: 33:c0:8c:d2:10:02:8b:19:c5:2d:a6:d0:06:06:1c:5c:f6:7d: d1:70:26:05:2b:d4:bb:90:ac:36:d1:e2:d9:31:82:15:e7:88: 33:61:c4:38:c5:24:04:dd:24:da:b2:ca:fb:ed:91:46:7d:86: fe:69:92:3d:a9:16:dd:d2:02:05:08:7f:7a:39:bc:ce:65:76: 5c:0e:a4:48:b5:c5:f5:b9:b2:c7:4c:ed:e0:e0:13:81:c1:76: c7:b2:f4:e3:87:5f:8f:4b:3d:04:62:95:9c:f5:94:a8:3f:1e: 4f:84:25:be:8d:d8:06:59:ba:a4:42:8c:42:e0:38:c2:0b:10: 06:a5:51:6e:49:0f:7d:a5:3a:d6:83:8d:ba:e2:dc:c4:71:ab: f9:6b:d1:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAwczGIbH8ikk/ztGct4WWvUvHhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFD NEYxN0MyNjAeFw0yNjAzMjYwNDM2NThaFw0yNjAzMjkwNzAxNThaMDMxMTAvBgNV BAMTKDZDNDBGRDlDMzU0REY3NkJCQjQ2MzdFQjM4QzgzREEyQzM1QzJGOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxgold/zbRJgFCKZA8rY0OOEO9 IxO0KpL1xfgyncr9Rjcd4RKFk9UrR5iLt/RXfBSVlp749+Za8+n+CQdXz6I8JLfR AVeCAFwRn0+vdCbkJ08aErRUXRFMm5I24VDiLyqI1yg6qV25XSDIg50B7bBc+NaG U9sEpfRojrD5xre/PgAMm/3n3dKdUjw9JCbe+CYqv9Imfe658vDZDcn5IxqpKH3o CRaasO38tsqEfWS7dVifv/xSlFemPe4Tk5RB4WXzTZlPm/sxImnfF/3jDAIslHLX uKirzhHSyzdwU65t9rgxVTgnagOUnMwKHD/mwQ09H7qKqk7aBaSFhhS2f5LdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbED9nDVN92u7RjfrOMg9osNcL4owHwYDVR0j BBgwFoAULSPGKe2Vbxc2t9rszSqvMcTxfCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODY4Y2YyMi1kMDI5LTQ1ZTItOWUyMS1kOTg5MmQzYWY3YTYvMC8yRDIzQzYyOUVE OTU2RjE3MzZCN0RBRUNDRDJBQUYzMUM0RjE3QzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFDNEYx N0MyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFG MzFDNEYxN0MyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdE92hsMPtNFS7XT2BKs9VqZyJ5Z65fMwyc mfpuEhk011pe5c9/hp4guiJZQRXx0DDQnyNKZWhfUbd9DAg/LFDRclgcvrqC7Lx9 yuDypbaw503nDm+hSgYToy/zd51XaB8UIKweht/znpI2ADPAjNIQAosZxS2m0AYG HFz2fdFwJgUr1LuQrDbR4tkxghXniDNhxDjFJATdJNqyyvvtkUZ9hv5pkj2pFt3S AgUIf3o5vM5ldlwOpEi1xfW5ssdM7eDgE4HBdsey9OOHX49LPQRilZz1lKg/Hk+E Jb6N2AZZuqRCjELgOMILEAalUW5JD32lOtaDjbri3MRxq/lr0bY= -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:04 2026 by rpki-client