$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft File: 23093B0E58201D339EAA3983654297729EB3D7FD.mft (raw, json) Hash identifier: MAJMhkVHdTIDs7nwrj6fDpDJhaLjzc96YasrFTBtRRM= Subject key identifier: 1D:43:01:D0:22:08:0B:0C:6C:72:35:16:18:63:10:C2:73:33:F6:48 Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD Certificate issuer: /CN=23093B0E58201D339EAA3983654297729EB3D7FD Certificate serial: 13B92067305E4C971B74ECFA47F6076AA398213D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft Manifest number: 02C0 Signing time: Tue 24 Mar 2026 09:32:39 +0000 Manifest this update: Tue 24 Mar 2026 09:27:39 +0000 Manifest next update: Fri 27 Mar 2026 09:47:39 +0000 Files and hashes: 1: 3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa (hash: 1T/005+fcGS3bHhfnGHMDWx9bEqPsgYOiwCk3qFgrG8=) 2: 3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (hash: I3IiUxQVB0K6AHHH6hadb9zyg87yVWrhTKPdESrGNC4=) 3: 23093B0E58201D339EAA3983654297729EB3D7FD.crl (hash: kwTOXy2DFta1R4tg7VefqEhGS4K0Kk3TqbLCoT6x/SU=) 4: 3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (hash: +q+2lGJsfE4ezep6xSn8bk3REU1n8oNlxOWiZdJkL5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b9:20:67:30:5e:4c:97:1b:74:ec:fa:47:f6:07:6a:a3:98:21:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD Validity Not Before: Mar 24 09:27:39 2026 GMT Not After : Mar 27 09:47:39 2026 GMT Subject: CN=1D4301D022080B0C6C723516186310C27333F648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3a:a4:c4:ba:44:35:c0:06:98:80:b9:e2:01: f5:46:b4:ee:fe:b2:a6:ed:43:12:a4:a9:ee:91:b4: 8d:08:05:7f:0d:e6:88:78:58:d0:33:a4:96:ad:25: 01:78:a8:36:7f:b0:67:81:bb:ba:21:b5:c9:56:06: 9e:12:37:28:0c:73:be:ee:df:ef:68:bf:70:af:17: f0:cc:df:b5:5e:e8:a4:43:79:8d:d7:73:73:03:1e: ea:54:b3:b7:d0:55:35:dd:36:a8:e9:e8:ff:1c:bc: cf:fa:f9:05:93:f2:c6:aa:61:7f:83:94:7d:7b:70: db:84:1d:4d:ea:0d:1e:19:46:69:33:e3:9d:7d:75: 50:63:64:d0:51:05:81:92:0c:95:23:c7:a5:ef:d7: d3:23:68:54:b2:ed:bd:74:00:15:24:39:47:ec:a8: 90:f0:5f:68:a3:b9:76:a8:ae:6c:85:7f:c4:3c:af: 2b:df:da:74:41:4c:a3:c4:40:dc:05:aa:0b:11:74: da:80:45:b8:51:67:83:f1:2d:5f:8a:3b:7a:78:ed: 72:62:5b:51:7d:ff:da:3a:bd:1a:66:1a:11:54:c7: 70:18:6d:92:66:08:3b:f3:e5:30:80:3d:8b:4c:58: d3:a8:97:b6:79:f1:6c:41:8c:f1:38:e0:a2:df:6a: 6a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:43:01:D0:22:08:0B:0C:6C:72:35:16:18:63:10:C2:73:33:F6:48 X509v3 Authority Key Identifier: keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:71:95:bf:4d:16:57:a1:a9:a5:53:71:6c:21:aa:4d:14:e7: dd:77:40:41:b2:74:82:98:4b:19:8c:63:08:a6:b2:82:62:1b: 72:21:26:7c:d8:a5:99:06:e3:f3:6d:4d:98:cd:13:49:06:9c: 16:82:cf:52:08:21:47:d1:e5:cc:09:4b:81:df:6a:7f:4a:48: 93:8c:71:27:db:3d:8e:bb:b4:04:dd:ee:95:f9:db:78:b8:70: 7b:bb:d2:b5:c3:c7:3a:dc:71:18:bc:8d:2b:86:ec:18:a5:56: e2:3b:0f:ad:fe:eb:a7:3d:85:c9:5e:57:d9:99:9e:9c:77:70: 68:f6:15:da:c4:b6:6b:a4:b3:da:b8:98:9b:a9:16:e5:b4:5e: b6:65:44:cc:8c:e9:ec:66:c3:e0:42:08:a5:f8:cb:eb:77:83: 70:1f:c4:b5:8a:c1:0d:2b:99:83:66:ee:b3:bb:4a:64:bb:77: da:fa:1b:97:76:de:01:43:ae:c0:98:49:d5:f8:10:d6:22:42: 2b:31:b6:05:96:89:ab:c9:e8:76:38:22:06:db:de:22:27:28: 86:c6:f4:98:4a:56:a5:22:bc:5d:35:64:3e:36:97:a7:f3:ab: ae:85:cd:ee:38:20:26:88:47:3e:3b:6a:7a:3c:a0:d8:26:a5: f0:4c:ab:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7kgZzBeTJcbdOz6R/YHaqOYIT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5 RUIzRDdGRDAeFw0yNjAzMjQwOTI3MzlaFw0yNjAzMjcwOTQ3MzlaMDMxMTAvBgNV BAMTKDFENDMwMUQwMjIwODBCMEM2QzcyMzUxNjE4NjMxMEMyNzMzM0Y2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpOqTEukQ1wAaYgLniAfVGtO7+ sqbtQxKkqe6RtI0IBX8N5oh4WNAzpJatJQF4qDZ/sGeBu7ohtclWBp4SNygMc77u 3+9ov3CvF/DM37Ve6KRDeY3Xc3MDHupUs7fQVTXdNqjp6P8cvM/6+QWT8saqYX+D lH17cNuEHU3qDR4ZRmkz4519dVBjZNBRBYGSDJUjx6Xv19MjaFSy7b10ABUkOUfs qJDwX2ijuXaormyFf8Q8ryvf2nRBTKPEQNwFqgsRdNqARbhRZ4PxLV+KO3p47XJi W1F9/9o6vRpmGhFUx3AYbZJmCDvz5TCAPYtMWNOol7Z58WxBjPE44KLfamqJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHUMB0CIICwxscjUWGGMQwnMz9kgwHwYDVR0j BBgwFoAUIwk7DlggHTOeqjmDZUKXcp6z1/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTk1YjdkNC0zYWFiLTRiODMtOTRiMi1jNDI2N2IyYWUwYTAvMC8yMzA5M0IwRTU4 MjAxRDMzOUVBQTM5ODM2NTQyOTc3MjlFQjNEN0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5RUIz RDdGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU5NWI3ZDQtM2FhYi00YjgzLTk0 YjItYzQyNjdiMmFlMGEwLzAvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3 NzI5RUIzRDdGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVxlb9NFlehqaVTcWwhqk0U5913QEGydIKY SxmMYwimsoJiG3IhJnzYpZkG4/NtTZjNE0kGnBaCz1IIIUfR5cwJS4Hfan9KSJOM cSfbPY67tATd7pX523i4cHu70rXDxzrccRi8jSuG7BilVuI7D63+66c9hcleV9mZ npx3cGj2FdrEtmuks9q4mJupFuW0XrZlRMyM6exmw+BCCKX4y+t3g3AfxLWKwQ0r mYNm7rO7SmS7d9r6G5d23gFDrsCYSdX4ENYiQisxtgWWiavJ6HY4Igbb3iInKIbG 9JhKVqUivF01ZD42l6fzq66Fze44ICaIRz47ano8oNgmpfBMq6g= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:37 2026 by rpki-client