$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft File: 23F26F571E3865A06A13936555D8DAA27B433933.mft (raw, json) Hash identifier: e/Dkyklk8Eh2u08qhNMdaSZU7YTMDEiRHuws46Uivfw= Subject key identifier: 4C:B1:22:28:76:37:F5:4F:88:1E:5A:13:45:9E:F6:58:56:BA:81:53 Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933 Certificate serial: 3E8467BE7DAE842304FE9FEDA3D8150AE94FE0CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft Manifest number: 0240 Signing time: Wed 18 Mar 2026 23:12:01 +0000 Manifest this update: Wed 18 Mar 2026 23:07:01 +0000 Manifest next update: Sun 22 Mar 2026 05:31:01 +0000 Files and hashes: 1: 23F26F571E3865A06A13936555D8DAA27B433933.crl (hash: fzlM9gF6HEbkTsVWTjrR16muTIaEz/DBCWELLtTJUu0=) 2: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (hash: 1TF1q7w4Zi+aLzgAuBXcx7Cio1arNovo47+qmMckVGw=) 3: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (hash: SP7Vczz+6iJdkBg+Pm02fK5fUh9ipxxjJbwoliQlUe0=) 4: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (hash: lkFPSA/0P6F0cE2k+qs5Hdu6hwn+gvFK2pZuPkqHwpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 05:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:84:67:be:7d:ae:84:23:04:fe:9f:ed:a3:d8:15:0a:e9:4f:e0:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933 Validity Not Before: Mar 18 23:07:01 2026 GMT Not After : Mar 22 05:31:01 2026 GMT Subject: CN=4CB122287637F54F881E5A13459EF65856BA8153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:00:a6:81:58:97:af:20:9e:27:e4:9c:ab: 81:38:13:01:03:15:b8:3b:7e:11:e6:15:c5:1b:65: 6c:42:74:30:a4:55:3f:5e:b1:ba:ac:84:0f:70:3d: af:a4:ae:51:a9:8b:8b:69:73:dd:11:12:b7:26:79: 78:f0:42:ff:13:d1:e4:1f:e8:1e:2c:d1:04:c0:4c: 34:c8:9d:f1:3f:1c:73:10:57:c1:8b:e0:d1:cd:cd: 92:76:24:ff:1f:1d:cb:1c:fd:14:a5:55:cc:eb:b9: f9:61:27:db:4c:b6:40:d0:9b:19:83:7c:03:a0:eb: f4:5f:df:e2:f1:db:a8:15:74:e4:e8:95:89:7d:b8: f0:b4:c1:af:ad:d4:88:6b:63:b5:63:5b:00:d1:c2: f1:37:0b:1d:96:ab:61:19:fa:f3:e2:e2:d1:b2:0c: 39:73:d5:2b:df:33:12:1a:d3:37:5b:f2:41:ad:9f: af:c1:87:78:9f:cc:23:90:0d:33:e0:4c:5a:1c:a3: 59:e2:ee:22:15:d2:de:af:47:fe:26:66:f0:de:18: 95:a3:cd:98:82:a5:b7:d8:6b:0f:9a:8e:41:1d:7e: b4:54:7c:cc:6f:42:55:69:46:fe:50:2b:18:b5:90: 9f:11:fc:db:4c:fb:99:d4:f6:ed:85:d9:84:0e:cb: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B1:22:28:76:37:F5:4F:88:1E:5A:13:45:9E:F6:58:56:BA:81:53 X509v3 Authority Key Identifier: keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:57:da:23:c8:db:1e:ec:4c:3c:0d:dc:ef:1c:c8:c6:69:12: 68:0b:0e:8a:0a:34:03:c5:d1:39:bf:c7:b3:e7:d0:e2:13:64: c3:7c:87:ea:5a:b4:f5:68:73:15:82:ae:fb:61:89:74:d5:03: da:5b:88:5a:97:dc:7f:55:73:58:9c:4b:ff:0b:76:41:88:49: 4d:fd:86:cd:de:6f:50:ad:42:a9:9f:d4:13:f3:9b:d1:5d:92: 10:d7:c0:21:8a:b3:96:dd:10:e2:00:1d:dd:f0:27:e9:f6:69: cc:25:a5:3d:e1:82:19:99:0b:86:48:8f:32:6f:8f:11:a3:fb: 3f:d3:31:95:f2:78:5a:ed:bd:d3:4f:c2:5d:3b:87:1e:c7:55: f2:47:8c:d2:a0:55:6c:5e:25:b7:1d:ee:69:0e:bc:d1:53:35: 62:f2:3e:11:da:62:28:66:e2:d3:29:a5:05:c4:07:46:7d:55: 0d:b6:3d:4f:3c:9c:03:df:5f:13:66:e9:93:91:42:1c:48:49: c8:4a:ef:5d:8a:c7:61:36:48:49:28:5e:21:fc:17:b1:3e:ef: 0e:72:09:8d:d5:0d:5c:1b:4c:ce:a0:82:37:26:33:54:ac:b5: 19:a8:1a:4a:21:cb:22:b8:51:86:69:89:94:80:1a:c3:9d:5c: d9:46:67:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPoRnvn2uhCME/p/to9gVCulP4MowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3 QjQzMzkzMzAeFw0yNjAzMTgyMzA3MDFaFw0yNjAzMjIwNTMxMDFaMDMxMTAvBgNV BAMTKDRDQjEyMjI4NzYzN0Y1NEY4ODFFNUExMzQ1OUVGNjU4NTZCQTgxNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+QCmgViXryCeJ+Scq4E4EwED Fbg7fhHmFcUbZWxCdDCkVT9esbqshA9wPa+krlGpi4tpc90RErcmeXjwQv8T0eQf 6B4s0QTATDTInfE/HHMQV8GL4NHNzZJ2JP8fHcsc/RSlVczruflhJ9tMtkDQmxmD fAOg6/Rf3+Lx26gVdOTolYl9uPC0wa+t1IhrY7VjWwDRwvE3Cx2Wq2EZ+vPi4tGy DDlz1SvfMxIa0zdb8kGtn6/Bh3ifzCOQDTPgTFoco1ni7iIV0t6vR/4mZvDeGJWj zZiCpbfYaw+ajkEdfrRUfMxvQlVpRv5QKxi1kJ8R/NtM+5nU9u2F2YQOywGBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTLEiKHY39U+IHloTRZ72WFa6gVMwHwYDVR0j BBgwFoAUI/JvVx44ZaBqE5NlVdjaontDOTMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVmY2JmMC02NmVjLTQ4ZDMtYjIyMS0wZjA5Njg2ZDU4MTgvMC8yM0YyNkY1NzFF Mzg2NUEwNkExMzkzNjU1NUQ4REFBMjdCNDMzOTMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3QjQz MzkzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlZmNiZjAtNjZlYy00OGQzLWIy MjEtMGYwOTY4NmQ1ODE4LzAvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERB QTI3QjQzMzkzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtX2iPI2x7sTDwN3O8cyMZpEmgLDooKNAPF 0Tm/x7Pn0OITZMN8h+patPVocxWCrvthiXTVA9pbiFqX3H9Vc1icS/8LdkGISU39 hs3eb1CtQqmf1BPzm9FdkhDXwCGKs5bdEOIAHd3wJ+n2acwlpT3hghmZC4ZIjzJv jxGj+z/TMZXyeFrtvdNPwl07hx7HVfJHjNKgVWxeJbcd7mkOvNFTNWLyPhHaYihm 4tMppQXEB0Z9VQ22PU88nAPfXxNm6ZORQhxISchK712Kx2E2SEkoXiH8F7E+7w5y CY3VDVwbTM6ggjcmM1SstRmoGkohyyK4UYZpiZSAGsOdXNlGZ2w= -----END CERTIFICATE-----Generated at Thu Mar 19 09:42:33 2026 by rpki-client