$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: xvmNfxdObsTdQlzdAZK/GfueoaKyu/73IbKunhzNTH8= Subject key identifier: F4:21:B9:8A:72:0E:E3:76:7F:FB:B1:F1:E1:DD:25:AD:E6:C8:43:D1 Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 40DC83957E376DDE72F4A971192E4BF7342C10F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: EE Signing time: Thu 26 Mar 2026 05:50:47 +0000 Manifest this update: Thu 26 Mar 2026 05:45:47 +0000 Manifest next update: Sun 29 Mar 2026 11:14:47 +0000 Files and hashes: 1: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: 5aPZi9EHvbfyOxIPMTjzibe1Bxih6lwkA1KW+hUQT4E=) 2: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: 29VhzbXIiSaAzolnEBhDPPWtd4qf5a8jIlvHyZVqQ8g=) 3: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: /K4mylpcHmr+sO+7dTgSimoSvEZOrC1jLffnv1dbPQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:dc:83:95:7e:37:6d:de:72:f4:a9:71:19:2e:4b:f7:34:2c:10:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Mar 26 05:45:47 2026 GMT Not After : Mar 29 11:14:47 2026 GMT Subject: CN=F421B98A720EE3767FFBB1F1E1DD25ADE6C843D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:25:61:93:47:a0:13:3d:05:69:a5:6c:bc: 52:e9:63:4b:78:4a:32:7d:11:0f:7b:53:59:30:00: 24:03:05:07:06:17:0c:8e:74:60:7d:3c:fa:71:82: e6:96:9d:e8:00:c5:fe:09:bf:0f:08:94:b2:43:35: 05:31:05:4f:2c:4d:1d:26:87:12:23:8e:aa:4c:69: dc:ee:8a:53:fd:75:d6:c1:34:2d:38:8b:c3:81:ea: 67:1d:a7:17:d5:02:a2:7c:9a:eb:86:06:dc:c7:ad: 47:13:38:b3:d7:ec:02:c2:87:72:fc:69:b5:72:8c: e5:12:e0:67:8c:57:23:26:05:b9:19:42:80:5f:c2: f3:b2:56:f7:5a:88:d7:c8:48:b6:e7:4a:ff:29:27: ca:5f:84:a9:4c:14:d2:0e:11:7f:d3:80:b4:e4:34: 62:7c:a3:39:58:40:af:42:ee:e4:08:7e:24:09:d6: f4:85:49:29:1f:d4:42:68:d0:6a:ab:60:67:f4:00: c6:ce:83:35:dd:13:a0:af:88:ee:f8:cd:04:e0:39: 8f:1c:cf:cb:a0:f8:8e:ee:19:68:7a:75:bb:eb:43: f7:c0:63:57:a6:47:c2:65:90:ce:2c:94:52:ef:53: 3d:7c:54:73:03:cc:1f:72:71:a2:8b:9a:18:a2:26: 67:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:21:B9:8A:72:0E:E3:76:7F:FB:B1:F1:E1:DD:25:AD:E6:C8:43:D1 X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:27:b2:2f:b7:b5:fa:c4:4f:de:77:9e:4f:a1:09:84:fb:cd: 38:5d:b3:72:a2:69:af:3a:3c:a1:af:3c:e8:05:b5:2e:f1:bc: 51:40:28:d8:b7:ed:7e:c7:3b:ec:8f:5d:65:13:c0:18:a3:b5: 2f:4b:03:f3:58:ba:4c:80:27:17:7e:f7:f0:30:4c:bc:7c:59: 85:8a:f3:3a:23:24:13:ea:c0:89:87:ca:d9:8a:82:09:71:4b: d1:14:7c:bd:be:06:79:d4:df:d2:ca:be:21:4f:bd:18:3c:96: 30:97:44:6c:53:ba:ac:9a:e0:cd:f9:c5:9a:97:2b:8e:a1:06: cb:cc:4b:fc:ae:13:5f:a3:65:9b:25:1a:13:de:9e:a1:a9:47: 85:5a:3b:ca:5a:27:a0:3e:d2:0e:e0:fc:29:d8:95:a4:fe:2d: 6b:6b:e1:eb:94:78:e3:d2:64:e4:5d:8f:92:44:7e:a1:00:d2: 4e:d2:e8:ff:78:a7:36:9b:52:e2:a0:4f:fd:bd:f9:c9:ed:1e: c9:e3:3f:d1:6b:a0:85:56:a2:ef:0d:0f:dd:31:22:d5:5e:49: 4f:35:60:11:48:46:a3:9e:dd:5f:bd:40:42:38:09:18:4f:83: 4c:bc:c6:66:79:35:e7:20:3a:70:d2:43:b2:7e:f0:2d:6c:56: 6c:0b:02:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQNyDlX43bd5y9KlxGS5L9zQsEPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNjAzMjYwNTQ1NDdaFw0yNjAzMjkxMTE0NDdaMDMxMTAvBgNV BAMTKEY0MjFCOThBNzIwRUUzNzY3RkZCQjFGMUUxREQyNUFERTZDODQzRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2HyVhk0egEz0FaaVsvFLpY0t4 SjJ9EQ97U1kwACQDBQcGFwyOdGB9PPpxguaWnegAxf4Jvw8IlLJDNQUxBU8sTR0m hxIjjqpMadzuilP9ddbBNC04i8OB6mcdpxfVAqJ8muuGBtzHrUcTOLPX7ALCh3L8 abVyjOUS4GeMVyMmBbkZQoBfwvOyVvdaiNfISLbnSv8pJ8pfhKlMFNIOEX/TgLTk NGJ8ozlYQK9C7uQIfiQJ1vSFSSkf1EJo0GqrYGf0AMbOgzXdE6CviO74zQTgOY8c z8ug+I7uGWh6dbvrQ/fAY1emR8JlkM4slFLvUz18VHMDzB9ycaKLmhiiJmcrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9CG5inIO43Z/+7Hx4d0lrebIQ9EwHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4nsi+3tfrET953nk+hCYT7zThds3Kiaa86 PKGvPOgFtS7xvFFAKNi37X7HO+yPXWUTwBijtS9LA/NYukyAJxd+9/AwTLx8WYWK 8zojJBPqwImHytmKgglxS9EUfL2+BnnU39LKviFPvRg8ljCXRGxTuqya4M35xZqX K46hBsvMS/yuE1+jZZslGhPenqGpR4VaO8paJ6A+0g7g/CnYlaT+LWtr4euUeOPS ZORdj5JEfqEA0k7S6P94pzabUuKgT/29+cntHsnjP9FroIVWou8ND90xItVeSU81 YBFIRqOe3V+9QEI4CRhPg0y8xmZ5NecgOnDSQ7J+8C1sVmwLAiE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:30:01 2026 by rpki-client