$ rpki-client -vvf repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft File: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft (raw, json) Hash identifier: tKk8k1EZXT5mIzY16XQHZsyN13WyVspfvssP5fnoWyQ= Subject key identifier: BE:D9:1C:32:F0:5E:12:40:41:1E:68:2D:86:56:CC:25:23:4B:13:CF Authority key identifier: C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF Certificate issuer: /CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Certificate serial: 181C88B69493C53D5BE20FD09EE29A4E2F3DAF01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft Manifest number: 0118 Signing time: Tue 21 Apr 2026 07:11:26 +0000 Manifest this update: Tue 21 Apr 2026 07:06:26 +0000 Manifest next update: Fri 24 Apr 2026 16:46:26 +0000 Files and hashes: 1: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: hxLgZVEmgK6Q9Qorix7qtcxFffjQzl54opLxUmCvE+8=) 2: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl (hash: bp5ReKsPj1K/2kGfou2OIN7P8oPd62UKkZ3mq6vXHxA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:1c:88:b6:94:93:c5:3d:5b:e2:0f:d0:9e:e2:9a:4e:2f:3d:af:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Validity Not Before: Apr 21 07:06:26 2026 GMT Not After : Apr 24 16:46:26 2026 GMT Subject: CN=BED91C32F05E1240411E682D8656CC25234B13CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1c:bc:3d:af:6f:7f:8a:f2:e0:d6:7c:77:01: 55:db:4a:00:1e:e1:a7:ab:9b:4c:a8:c9:70:a6:45: f8:07:34:22:13:66:82:6a:3e:4d:45:d9:31:5b:a4: 0a:dd:5b:04:dd:3d:bb:e6:f6:f1:f5:c8:77:a9:6c: fe:ad:d2:c7:d9:4c:da:d7:e6:9b:f4:99:84:19:75: f3:a3:16:71:67:cd:e1:37:81:6f:22:8a:d6:92:0d: a2:37:59:cb:6d:ec:ae:55:fe:2a:bd:8b:d0:ee:ba: 4d:9d:24:23:e4:1c:38:05:4e:c4:b7:d7:9d:1a:28: e7:84:e6:ca:2a:f5:5e:1a:59:6d:47:a0:9e:bf:ec: 10:ad:cd:f1:8a:6a:c2:da:d3:ef:a1:70:2e:97:16: f1:ea:61:1a:bf:da:d2:e3:6f:e9:57:2d:52:e1:89: 4f:4e:4b:00:70:76:60:49:f9:e7:48:c4:dc:f8:40: e3:bf:f4:d2:95:e9:93:86:aa:5c:64:f3:dd:ca:89: 47:29:f4:d3:d4:b3:33:88:b8:e6:2c:1a:00:f3:09: c7:e9:08:15:ef:b3:7f:36:79:7f:c3:a1:95:cd:35: 37:01:71:67:fc:36:b9:7c:57:5e:df:c1:be:19:bc: de:c4:16:f4:86:fb:b9:37:f3:f5:1e:0d:dd:07:7c: 25:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D9:1C:32:F0:5E:12:40:41:1E:68:2D:86:56:CC:25:23:4B:13:CF X509v3 Authority Key Identifier: keyid:C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:6f:d8:3e:44:a6:88:9b:db:9b:1d:c6:d3:34:5f:da:29:8e: fe:9d:d6:20:b8:07:84:3a:dd:87:27:96:70:b7:3f:58:30:d9: b7:46:a7:12:08:f2:e7:62:ed:ee:6e:63:45:a1:78:cc:c7:d0: 32:d0:8a:b4:90:d7:32:31:d1:ba:d9:53:06:56:54:24:ea:d0: 22:ba:70:44:a9:e4:a4:49:e2:e9:bc:22:7a:56:10:82:1a:66: 63:c9:da:01:47:73:cb:58:59:04:eb:c3:1f:3d:08:77:36:5a: 08:b4:9a:d7:1f:b5:15:34:36:51:ec:ca:32:5f:f6:ae:2c:3d: 9c:fe:d1:48:86:6a:6b:32:d9:d2:fa:50:84:2e:0b:2f:78:82: 25:82:22:a2:74:41:3a:0d:01:3f:95:ed:4b:78:a7:b1:1d:8f: d3:aa:43:1a:67:b2:b2:a2:21:5a:84:37:fe:e5:af:71:31:4c: cb:63:0a:cd:5a:82:95:f3:8b:ff:eb:fd:92:3f:94:f0:42:ec: 68:ce:5e:0a:96:c2:63:0b:4c:77:a9:c0:e9:00:fe:7b:b7:7c: 06:77:09:bf:87:dd:78:96:6a:6c:6a:3e:13:5f:b1:ba:69:4d: be:96:08:10:66:b6:f7:75:74:d0:4f:36:aa:6c:6e:8b:c8:4b: f1:a4:8e:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGByItpSTxT1b4g/QnuKaTi89rwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIz RTNBNENCRjAeFw0yNjA0MjEwNzA2MjZaFw0yNjA0MjQxNjQ2MjZaMDMxMTAvBgNV BAMTKEJFRDkxQzMyRjA1RTEyNDA0MTFFNjgyRDg2NTZDQzI1MjM0QjEzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoHLw9r29/ivLg1nx3AVXbSgAe 4aerm0yoyXCmRfgHNCITZoJqPk1F2TFbpArdWwTdPbvm9vH1yHepbP6t0sfZTNrX 5pv0mYQZdfOjFnFnzeE3gW8iitaSDaI3Wctt7K5V/iq9i9Duuk2dJCPkHDgFTsS3 150aKOeE5soq9V4aWW1HoJ6/7BCtzfGKasLa0++hcC6XFvHqYRq/2tLjb+lXLVLh iU9OSwBwdmBJ+edIxNz4QOO/9NKV6ZOGqlxk893KiUcp9NPUszOIuOYsGgDzCcfp CBXvs382eX/DoZXNNTcBcWf8Nrl8V17fwb4ZvN7EFvSG+7k38/UeDd0HfCVVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvtkcMvBeEkBBHmgthlbMJSNLE88wHwYDVR0j BBgwFoAUwj+DLyfbiLi8WHZpMv2hmz46TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjc5ZWU5Yy1hZDJiLTRiZWQtODY0MS0yM2JmMmQzYjE2ZGIvMC9DMjNGODMyRjI3 REI4OEI4QkM1ODc2NjkzMkZEQTE5QjNFM0E0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIzRTNB NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI3OWVlOWMtYWQyYi00YmVkLTg2 NDEtMjNiZjJkM2IxNmRiLzAvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREEx OUIzRTNBNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVv2D5Epoib25sdxtM0X9opjv6d1iC4B4Q6 3YcnlnC3P1gw2bdGpxII8udi7e5uY0WheMzH0DLQirSQ1zIx0brZUwZWVCTq0CK6 cESp5KRJ4um8InpWEIIaZmPJ2gFHc8tYWQTrwx89CHc2Wgi0mtcftRU0NlHsyjJf 9q4sPZz+0UiGamsy2dL6UIQuCy94giWCIqJ0QToNAT+V7Ut4p7Edj9OqQxpnsrKi IVqEN/7lr3ExTMtjCs1agpXzi//r/ZI/lPBC7GjOXgqWwmMLTHepwOkA/nu3fAZ3 Cb+H3XiWamxqPhNfsbppTb6WCBBmtvd1dNBPNqpsbovIS/Gkjns= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:46 2026 by rpki-client