$ rpki-client -vvf repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft File: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft (raw, json) Hash identifier: oixasl0RF0qEnb1dGgdZcD348gup854dOWG7dWcOlIY= Subject key identifier: 9C:E9:D1:D7:40:98:B5:99:04:86:EA:ED:58:06:3B:C7:AB:66:74:61 Authority key identifier: 23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 Certificate issuer: /CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Certificate serial: 11349F9102400E4E56C775FA774E17A8763AE9DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft Manifest number: 025C Signing time: Tue 24 Mar 2026 10:41:28 +0000 Manifest this update: Tue 24 Mar 2026 10:36:28 +0000 Manifest next update: Fri 27 Mar 2026 19:53:28 +0000 Files and hashes: 1: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl (hash: LtHT3JcdWgdNDMgQUQZjcanbY0hsyPRYFtvCkAVW42E=) 2: 3130332e3138352e3235322e302f32342d3234203d3e20313439393132.roa (hash: C1EotO9BJTaqVbunTPAaWJ0CvR6X2Eyc5cI9862YoWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:34:9f:91:02:40:0e:4e:56:c7:75:fa:77:4e:17:a8:76:3a:e9:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Validity Not Before: Mar 24 10:36:28 2026 GMT Not After : Mar 27 19:53:28 2026 GMT Subject: CN=9CE9D1D74098B5990486EAED58063BC7AB667461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:50:ad:96:c4:fa:c8:02:a4:6d:05:3c:e2: ff:ff:1e:d7:27:80:b6:3c:72:1d:89:92:7e:b6:46: b3:6a:92:79:f8:8c:d0:5d:da:00:ee:cf:ad:56:1b: 07:0a:98:8d:fd:1f:5d:2a:62:bd:79:57:53:e6:7f: 38:92:1d:a0:ca:0b:c1:94:35:0a:e3:69:e4:d4:d4: 1e:56:f1:ee:8f:e7:7d:78:55:76:a9:50:c5:7c:d0: 75:f4:3b:88:7e:ce:c6:09:e3:dc:4c:64:ae:9b:bc: 44:30:bd:2b:72:e4:0c:f7:68:e8:9b:cd:7f:68:31: 86:83:88:66:f0:6e:e8:99:f3:a7:16:35:62:55:84: 7a:62:91:c8:2f:2c:21:50:5a:fd:ec:c5:6c:1e:a0: 89:d4:94:ba:43:b0:0e:0f:12:e6:cd:eb:5d:b5:fe: cf:6d:70:a3:56:93:90:6c:6a:c1:18:54:41:fd:65: 50:14:ae:60:e2:33:e4:0a:9f:18:52:48:16:f1:a2: 07:0e:b7:05:65:57:00:9d:c6:e5:3f:b4:ca:bd:fd: 3e:b4:b5:cb:aa:fb:10:5b:9f:d3:1e:06:f3:5a:f0: 50:e6:92:99:49:d6:70:2a:97:1f:cd:aa:0d:07:1e: ff:bd:ae:04:bd:1c:23:16:7f:f3:45:bd:40:d0:a2: 8e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E9:D1:D7:40:98:B5:99:04:86:EA:ED:58:06:3B:C7:AB:66:74:61 X509v3 Authority Key Identifier: keyid:23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d0:dd:11:e8:47:03:eb:fe:f8:34:28:84:ab:73:ed:c0:41: bb:e1:26:79:cc:6d:0e:55:d7:cf:45:73:47:8e:bd:30:bc:92: 60:be:b6:af:9d:2b:01:78:a5:22:3f:6f:5c:02:29:99:b3:8e: 2f:b4:ee:ef:fb:c3:5f:45:89:7d:ad:5c:4f:67:24:82:a7:31: e3:bc:c2:46:0b:15:5d:35:d0:5d:e0:f2:cc:ca:a7:ef:c9:db: f9:54:b0:42:ff:ed:f7:41:ec:d5:32:99:27:a1:ea:04:5b:f9: 6b:78:7b:64:9b:f4:43:b0:53:a3:69:43:f9:34:75:89:5d:b6: 8b:ec:bb:5a:df:1c:f0:88:bf:8a:85:34:ec:b2:85:82:4e:39: d8:cc:c1:8e:ce:0b:fe:f6:6b:3f:04:7a:59:89:ac:e9:bc:77: d8:2a:18:cc:48:fa:fe:f7:b7:3a:ba:9c:c3:5f:aa:f7:5c:dc: ca:e4:d3:ef:3d:56:15:1d:9a:c5:52:49:5d:b4:a6:c7:0c:45: ce:98:2c:3b:de:63:8d:65:7f:a1:15:20:be:5c:31:3e:56:87: 41:d1:fa:49:56:eb:c7:5b:13:21:74:d2:03:a3:8f:a3:05:28: 42:87:21:b8:00:66:d8:f1:d0:a0:1f:75:61:34:5b:fd:3e:92: 2e:4c:ec:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUETSfkQJADk5Wx3X6d04XqHY66dswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEw QUM2QTAzNjAeFw0yNjAzMjQxMDM2MjhaFw0yNjAzMjcxOTUzMjhaMDMxMTAvBgNV BAMTKDlDRTlEMUQ3NDA5OEI1OTkwNDg2RUFFRDU4MDYzQkM3QUI2Njc0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDImVCtlsT6yAKkbQU84v//Htcn gLY8ch2Jkn62RrNqknn4jNBd2gDuz61WGwcKmI39H10qYr15V1PmfziSHaDKC8GU NQrjaeTU1B5W8e6P5314VXapUMV80HX0O4h+zsYJ49xMZK6bvEQwvSty5Az3aOib zX9oMYaDiGbwbuiZ86cWNWJVhHpikcgvLCFQWv3sxWweoInUlLpDsA4PEubN6121 /s9tcKNWk5BsasEYVEH9ZVAUrmDiM+QKnxhSSBbxogcOtwVlVwCdxuU/tMq9/T60 tcuq+xBbn9MeBvNa8FDmkplJ1nAqlx/Nqg0HHv+9rgS9HCMWf/NFvUDQoo4PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnOnR10CYtZkEhurtWAY7x6tmdGEwHwYDVR0j BBgwFoAUIzfmOgFCmE+v8K2dRi62gQrGoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTIzZDA2MC1iN2E1LTQ0NTUtOTk0MC00ZmI3YzcwNDQzMGYvMC8yMzM3RTYzQTAx NDI5ODRGQUZGMEFEOUQ0NjJFQjY4MTBBQzZBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEwQUM2 QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUyM2QwNjAtYjdhNS00NDU1LTk5 NDAtNGZiN2M3MDQ0MzBmLzAvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2 ODEwQUM2QTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPQ3RHoRwPr/vg0KISrc+3AQbvhJnnMbQ5V 189Fc0eOvTC8kmC+tq+dKwF4pSI/b1wCKZmzji+07u/7w19FiX2tXE9nJIKnMeO8 wkYLFV010F3g8szKp+/J2/lUsEL/7fdB7NUymSeh6gRb+Wt4e2Sb9EOwU6NpQ/k0 dYldtovsu1rfHPCIv4qFNOyyhYJOOdjMwY7OC/72az8EelmJrOm8d9gqGMxI+v73 tzq6nMNfqvdc3Mrk0+89VhUdmsVSSV20pscMRc6YLDveY41lf6EVIL5cMT5Wh0HR +klW68dbEyF00gOjj6MFKEKHIbgAZtjx0KAfdWE0W/0+ki5M7H8= -----END CERTIFICATE-----Generated at Thu Mar 26 14:32:26 2026 by rpki-client