$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft File: 232967D03C1169374A898D1C8991F1ABE7744870.mft (raw, json) Hash identifier: EXFlTRaH2xEfw8RhS/IUQmrEwbsWs21dci67LMfBNz0= Subject key identifier: 9C:FA:AA:3F:94:E9:89:58:09:5C:D2:65:13:D8:5F:4C:7A:A2:CF:15 Authority key identifier: 23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70 Certificate issuer: /CN=232967D03C1169374A898D1C8991F1ABE7744870 Certificate serial: 61FF4618E5575951405ADA6BEE56F019164A9C22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft Manifest number: 02F1 Signing time: Thu 26 Mar 2026 00:41:46 +0000 Manifest this update: Thu 26 Mar 2026 00:36:46 +0000 Manifest next update: Sun 29 Mar 2026 10:14:46 +0000 Files and hashes: 1: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: OrYEci2LXcYUd7zO3w5vMjUiO57zzyli3tlZ6qJrtVM=) 2: 232967D03C1169374A898D1C8991F1ABE7744870.crl (hash: 7JhYmdIbom1iUu8udY4fJmD+qqamIqZc3rNDBimiIQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ff:46:18:e5:57:59:51:40:5a:da:6b:ee:56:f0:19:16:4a:9c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=232967D03C1169374A898D1C8991F1ABE7744870 Validity Not Before: Mar 26 00:36:46 2026 GMT Not After : Mar 29 10:14:46 2026 GMT Subject: CN=9CFAAA3F94E98958095CD26513D85F4C7AA2CF15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:07:d5:2b:52:34:1b:fe:a9:a2:c8:82:6c:52: 45:53:8f:f2:60:8e:be:09:d6:67:b0:d1:b9:09:23: fe:50:89:3c:5d:b8:f5:25:d8:30:a0:85:8f:4d:13: 16:c5:7b:81:06:9a:b1:e5:e3:d0:ac:6f:0e:c3:2a: f7:db:c1:27:cc:2b:bc:4a:15:35:c3:73:32:fa:d7: ee:7a:39:28:30:ad:f6:b4:21:dd:55:b7:44:76:37: 92:be:a0:78:84:d9:aa:0d:a6:a4:b3:b1:b4:0e:7c: 6c:8a:90:b2:f0:74:6f:9c:d0:53:3c:72:3c:a7:ff: b5:d4:87:d8:1f:70:5b:fc:8b:98:25:13:0a:c5:df: 88:a5:87:37:66:23:6c:16:4b:bf:bf:dd:91:f6:44: a4:34:0b:97:da:62:63:d4:4c:ba:80:5a:cb:07:df: 06:e3:8e:40:d7:d8:dd:60:f6:30:be:bf:ee:8f:89: 0b:0c:25:53:31:e5:76:d1:b7:ec:25:3f:d2:d1:61: 02:1b:2c:1b:60:91:c4:78:96:ad:6d:4a:c3:47:8c: 7d:46:cb:6f:27:6f:17:c7:d2:d3:ba:3f:c6:5b:54: a5:4c:ae:2f:9d:41:a1:13:97:2e:75:2e:67:48:93: 4d:98:3f:57:7c:dc:6d:18:66:d1:f2:4b:88:c1:08: ab:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FA:AA:3F:94:E9:89:58:09:5C:D2:65:13:D8:5F:4C:7A:A2:CF:15 X509v3 Authority Key Identifier: keyid:23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:69:07:ee:d1:e9:91:dc:2a:79:53:0d:b6:0a:91:a7:9f:10: 76:73:f2:3f:c8:15:8f:59:22:b1:ce:6e:b0:a5:70:19:2f:be: 50:5b:9f:70:64:54:c1:88:f7:bc:53:50:26:ab:5b:6d:9a:fc: c4:81:e0:83:04:9b:a5:a6:d8:4d:80:3d:33:54:b4:47:d8:3e: c7:db:63:9f:ab:8a:4f:6d:59:39:d6:95:3b:76:41:c0:ab:f8: 06:24:6a:be:11:bd:93:25:67:5f:03:b6:f1:fd:2c:c4:00:1a: de:21:31:69:0b:bd:ee:b0:06:32:1a:0b:e0:82:da:96:35:25: bc:83:ef:af:40:86:bc:47:3d:a2:bf:d8:6b:c0:77:a9:41:8c: 51:b8:1d:b0:93:54:1a:de:18:27:d7:0f:45:67:b7:ec:e6:76: 7d:fe:9b:c8:12:c0:80:5f:ef:34:a5:34:71:01:26:6d:86:7b: d7:91:f7:86:2f:62:3e:67:aa:32:55:80:6f:95:a9:b2:b4:5c: d5:d1:93:e5:01:72:66:4e:ce:55:00:9f:b3:4c:d2:88:0f:43: 72:f2:6e:fb:58:ca:97:9e:93:aa:18:7c:06:bc:18:f2:b7:55: 6f:96:1d:c4:eb:c8:ca:85:4a:80:c8:83:93:f8:c3:c0:e3:4f: e2:4d:70:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYf9GGOVXWVFAWtpr7lbwGRZKnCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYxQUJF Nzc0NDg3MDAeFw0yNjAzMjYwMDM2NDZaFw0yNjAzMjkxMDE0NDZaMDMxMTAvBgNV BAMTKDlDRkFBQTNGOTRFOTg5NTgwOTVDRDI2NTEzRDg1RjRDN0FBMkNGMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0B9UrUjQb/qmiyIJsUkVTj/Jg jr4J1mew0bkJI/5QiTxduPUl2DCghY9NExbFe4EGmrHl49Csbw7DKvfbwSfMK7xK FTXDczL61+56OSgwrfa0Id1Vt0R2N5K+oHiE2aoNpqSzsbQOfGyKkLLwdG+c0FM8 cjyn/7XUh9gfcFv8i5glEwrF34ilhzdmI2wWS7+/3ZH2RKQ0C5faYmPUTLqAWssH 3wbjjkDX2N1g9jC+v+6PiQsMJVMx5XbRt+wlP9LRYQIbLBtgkcR4lq1tSsNHjH1G y28nbxfH0tO6P8ZbVKVMri+dQaETly51LmdIk02YP1d83G0YZtHyS4jBCKttAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnPqqP5TpiVgJXNJlE9hfTHqizxUwHwYDVR0j BBgwFoAUIyln0DwRaTdKiY0ciZHxq+d0SHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUzZTk4MS1iZjM5LTQyZTAtYTJmNi1jZjg3Yzc1N2Y4MjcvMC8yMzI5NjdEMDND MTE2OTM3NEE4OThEMUM4OTkxRjFBQkU3NzQ0ODcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYxQUJFNzc0 NDg3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlM2U5ODEtYmYzOS00MmUwLWEy ZjYtY2Y4N2M3NTdmODI3LzAvMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYx QUJFNzc0NDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRpB+7R6ZHcKnlTDbYKkaefEHZz8j/IFY9Z IrHObrClcBkvvlBbn3BkVMGI97xTUCarW22a/MSB4IMEm6Wm2E2APTNUtEfYPsfb Y5+rik9tWTnWlTt2QcCr+AYkar4RvZMlZ18DtvH9LMQAGt4hMWkLve6wBjIaC+CC 2pY1JbyD769AhrxHPaK/2GvAd6lBjFG4HbCTVBreGCfXD0Vnt+zmdn3+m8gSwIBf 7zSlNHEBJm2Ge9eR94YvYj5nqjJVgG+VqbK0XNXRk+UBcmZOzlUAn7NM0ogPQ3Ly bvtYypeek6oYfAa8GPK3VW+WHcTryMqFSoDIg5P4w8DjT+JNcGI= -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:41 2026 by rpki-client