$ rpki-client -vvf repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft File: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft (raw, json) Hash identifier: FdeK1OjADZEIVR35uqtWoiXAMc6o/TJukteUQew1TAg= Subject key identifier: 0F:4D:C7:4F:7F:26:E6:BA:12:5B:A9:CD:72:00:6E:61:BA:50:F6:AB Authority key identifier: 2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 Certificate issuer: /CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Certificate serial: 7E2F49C74DD6D9370458FEB4AC42B006C3F9B727 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft Manifest number: 023B Signing time: Tue 17 Mar 2026 00:11:04 +0000 Manifest this update: Tue 17 Mar 2026 00:06:04 +0000 Manifest next update: Fri 20 Mar 2026 10:57:04 +0000 Files and hashes: 1: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl (hash: k7pCE0glKXdrkpPdH4YGoFyN/bShekDjOwLUu+/P/hk=) 2: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: G/xb7tdZk9UZaq4hfvb/m2IU6lYeHr5mMwL3BOuVZMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 10:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:2f:49:c7:4d:d6:d9:37:04:58:fe:b4:ac:42:b0:06:c3:f9:b7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Validity Not Before: Mar 17 00:06:04 2026 GMT Not After : Mar 20 10:57:04 2026 GMT Subject: CN=0F4DC74F7F26E6BA125BA9CD72006E61BA50F6AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:7f:13:1b:33:34:26:1b:bb:2b:36:08:61: 7c:b9:f2:bc:c0:e8:fe:76:ba:d7:5a:e8:89:4b:c8: 8a:e5:ab:0d:b7:d2:54:f5:c7:91:8e:00:8c:8c:ba: 3e:df:55:ad:3a:c9:86:cf:f9:87:39:c8:16:b0:52: b4:29:68:e1:12:7a:56:f9:ae:96:d2:a5:dd:4b:1e: 40:51:d6:a4:39:0a:ef:b5:82:c8:36:c1:35:2c:7b: a4:02:10:29:d4:95:a5:f1:56:a9:47:82:b8:54:73: 8c:23:31:f6:f3:18:4e:69:87:65:0c:bc:d2:6a:9e: ee:fe:fe:2b:9c:8c:21:cb:66:b8:36:1e:d8:f4:83: 46:23:6b:cf:4f:f0:d6:f6:a6:62:d6:9d:0f:4d:27: 01:18:74:f4:f2:c3:78:fb:02:ff:26:95:80:fc:36: 45:8b:40:0f:8e:96:de:7a:c6:e6:71:9b:2d:14:b4: cb:84:88:43:2b:84:52:ec:0b:13:b4:2b:48:dc:8e: 5c:50:7e:07:5a:38:db:d9:0f:5f:22:d5:a8:50:dc: e4:c7:90:f5:38:15:d1:09:7e:8a:41:2f:b1:d3:e5: ae:b1:ff:19:50:fc:59:ed:6d:58:18:da:1a:cd:41: 75:5f:d0:c9:6f:17:76:ca:f6:dc:01:5a:1c:6d:9f: 55:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4D:C7:4F:7F:26:E6:BA:12:5B:A9:CD:72:00:6E:61:BA:50:F6:AB X509v3 Authority Key Identifier: keyid:2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b4:52:c0:d4:98:24:af:06:6b:25:59:b1:ba:89:57:1c:5a: 1b:ba:68:9d:94:41:81:c5:f7:a8:29:82:b6:7c:8d:f7:4c:53: ed:2e:65:9b:8a:b6:3e:2c:6f:55:c0:a3:e4:11:63:b1:7a:56: a4:6b:d4:28:d8:10:fa:a9:2f:fa:07:6e:20:d3:2d:bc:14:40: 9a:c0:7a:ec:3d:56:5f:b8:6e:77:fa:31:1e:92:63:94:71:3e: 6a:85:fe:d9:88:18:a4:7c:e1:6b:83:83:a6:fb:18:fa:41:b6: 4c:34:29:d5:66:20:98:f7:2e:76:b5:c6:80:aa:86:d8:f8:a2: 92:46:a9:c7:70:dd:f2:ae:60:15:4c:33:e5:d2:9e:28:f5:84: 32:50:2e:9c:e6:75:ae:2c:2f:2c:2d:8b:8c:70:71:aa:60:1e: db:65:63:dd:3e:5c:1b:c1:d8:c7:dd:16:41:5b:ea:33:78:45: f8:cd:58:a3:77:67:ca:84:4e:bf:22:6b:49:c0:82:bc:e9:50: 78:12:dc:79:fa:bd:6f:e0:0d:a1:f0:49:1f:da:72:b6:e9:2a: ee:a3:72:e5:0e:25:53:6d:09:e8:b6:2e:86:df:8a:9f:fd:d7: a7:84:3e:e8:d4:04:85:15:f7:6a:f2:7e:4c:4e:b4:a3:a9:bc: f7:82:df:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfi9Jx03W2TcEWP60rEKwBsP5tycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFD NEYxN0MyNjAeFw0yNjAzMTcwMDA2MDRaFw0yNjAzMjAxMDU3MDRaMDMxMTAvBgNV BAMTKDBGNERDNzRGN0YyNkU2QkExMjVCQTlDRDcyMDA2RTYxQkE1MEY2QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClW38TGzM0Jhu7KzYIYXy58rzA 6P52utda6IlLyIrlqw230lT1x5GOAIyMuj7fVa06yYbP+Yc5yBawUrQpaOESelb5 rpbSpd1LHkBR1qQ5Cu+1gsg2wTUse6QCECnUlaXxVqlHgrhUc4wjMfbzGE5ph2UM vNJqnu7+/iucjCHLZrg2Htj0g0Yja89P8Nb2pmLWnQ9NJwEYdPTyw3j7Av8mlYD8 NkWLQA+Olt56xuZxmy0UtMuEiEMrhFLsCxO0K0jcjlxQfgdaONvZD18i1ahQ3OTH kPU4FdEJfopBL7HT5a6x/xlQ/FntbVgY2hrNQXVf0MlvF3bK9twBWhxtn1VPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD03HT38m5roSW6nNcgBuYbpQ9qswHwYDVR0j BBgwFoAULSPGKe2Vbxc2t9rszSqvMcTxfCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODY4Y2YyMi1kMDI5LTQ1ZTItOWUyMS1kOTg5MmQzYWY3YTYvMC8yRDIzQzYyOUVE OTU2RjE3MzZCN0RBRUNDRDJBQUYzMUM0RjE3QzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFDNEYx N0MyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFG MzFDNEYxN0MyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJO0UsDUmCSvBmslWbG6iVccWhu6aJ2UQYHF 96gpgrZ8jfdMU+0uZZuKtj4sb1XAo+QRY7F6VqRr1CjYEPqpL/oHbiDTLbwUQJrA euw9Vl+4bnf6MR6SY5RxPmqF/tmIGKR84WuDg6b7GPpBtkw0KdVmIJj3Lna1xoCq htj4opJGqcdw3fKuYBVMM+XSnij1hDJQLpzmda4sLywti4xwcapgHttlY90+XBvB 2MfdFkFb6jN4RfjNWKN3Z8qETr8ia0nAgrzpUHgS3Hn6vW/gDaHwSR/acrbpKu6j cuUOJVNtCei2Lobfip/916eEPujUBIUV92ryfkxOtKOpvPeC33o= -----END CERTIFICATE-----Generated at Thu Mar 19 09:24:10 2026 by rpki-client