$ rpki-client -vvf repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft File: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft (raw, json) Hash identifier: NcUscXKOYfkDuQF/ctXuW9POmDRu1yuQfdyBgYNSHYg= Subject key identifier: 68:37:EF:C7:1C:2D:D5:B4:E3:48:06:AE:35:A2:6B:56:D7:00:4D:F8 Authority key identifier: C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF Certificate issuer: /CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Certificate serial: 0DAC157EA24D2A7192AFE49D7D9EA280B3F493F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft Manifest number: 0104 Signing time: Sat 07 Mar 2026 15:31:17 +0000 Manifest this update: Sat 07 Mar 2026 15:26:17 +0000 Manifest next update: Wed 11 Mar 2026 03:30:17 +0000 Files and hashes: 1: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: hxLgZVEmgK6Q9Qorix7qtcxFffjQzl54opLxUmCvE+8=) 2: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl (hash: JWEZ8Nq0Y1nx6v4Cby3/Mih6gKNtYFTQUaJo6vW4BPo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ac:15:7e:a2:4d:2a:71:92:af:e4:9d:7d:9e:a2:80:b3:f4:93:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Validity Not Before: Mar 7 15:26:17 2026 GMT Not After : Mar 11 03:30:17 2026 GMT Subject: CN=6837EFC71C2DD5B4E34806AE35A26B56D7004DF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fa:ea:f8:6b:b3:f7:5f:0a:c2:0e:8e:34:ac: ec:fe:c8:40:23:34:ea:ac:ee:94:e7:79:dd:b0:04: bf:14:fe:d5:9e:5b:c2:8a:1c:5b:df:4d:f4:a1:d6: d6:ed:66:b8:21:1c:83:6d:69:d2:2f:6a:6c:a6:f5: aa:b8:92:b0:0a:45:6b:29:2b:72:0b:5d:8d:27:bb: 1b:ca:2f:c6:15:b3:e5:e3:d0:6b:56:e1:cc:8a:33: ff:b2:64:d9:3a:cc:11:f1:30:cf:e7:2b:d3:50:53: 78:d8:d3:62:8e:4f:ea:ea:ee:24:3d:85:b6:be:b3: 02:fd:c6:14:25:e9:87:65:33:08:8f:49:19:bc:46: cc:bd:4f:f5:61:9f:81:24:51:0b:0f:d6:f1:4c:28: 49:56:d2:bd:4c:0c:01:15:88:73:61:d4:74:87:a0: be:17:c8:ac:af:a8:46:f6:0b:5d:6f:a8:83:3d:92: ca:09:a9:ec:03:93:49:b6:3d:3f:19:13:45:d4:70: 28:c4:8d:a7:91:3f:33:7b:5d:34:dc:a1:61:d5:48: 2c:84:7d:0e:5a:89:29:f9:f7:3b:47:61:b1:b4:40: d0:53:32:78:d6:0b:24:d5:42:c1:71:52:c9:9e:ab: db:38:96:1e:02:00:b0:37:a5:16:1b:58:e1:eb:02: 3d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:37:EF:C7:1C:2D:D5:B4:E3:48:06:AE:35:A2:6B:56:D7:00:4D:F8 X509v3 Authority Key Identifier: keyid:C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f7:5e:67:ce:90:9f:8d:e1:bc:36:3e:22:6b:53:fd:8e:6f: a3:00:62:21:91:c3:b4:3b:b6:45:fb:eb:e1:fd:85:82:ec:5a: 52:b0:35:5d:99:a3:ed:5b:ed:a2:2a:0d:4c:0a:3b:0e:b3:61: 20:a4:80:f9:2b:d1:0c:d7:f9:d3:c9:dc:a8:5b:af:7c:4d:47: c0:90:b5:c7:12:d6:34:23:7d:e0:a6:00:d8:28:d9:61:28:15: 03:27:a6:1b:6b:9e:ff:e4:64:47:a8:a0:52:c5:73:fa:42:7b: 78:3b:5b:b3:51:14:f3:11:5e:f0:52:4b:d8:d3:f3:9e:46:ee: b2:bb:cb:4f:77:23:f6:7e:d4:54:c2:be:f2:f3:1e:a0:56:ca: fd:c0:81:2d:6f:32:7b:05:0b:68:fd:c4:7a:d1:97:fa:fe:c9: a2:e4:20:98:1d:1f:56:c6:88:ed:f8:3c:c9:dc:82:8f:0c:7e: dc:86:86:56:a0:ca:2f:27:cf:85:52:19:70:d6:e7:80:5e:b8: d0:98:d5:03:3a:42:05:d8:0a:10:9a:45:09:07:9e:81:ed:39: ba:35:b9:1b:1e:33:f4:32:85:55:f7:de:95:5a:ec:4f:9f:29: 27:48:27:75:92:e7:38:8c:64:25:d7:7f:87:ab:dd:64:ae:c6: d5:07:34:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDawVfqJNKnGSr+SdfZ6igLP0k/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIz RTNBNENCRjAeFw0yNjAzMDcxNTI2MTdaFw0yNjAzMTEwMzMwMTdaMDMxMTAvBgNV BAMTKDY4MzdFRkM3MUMyREQ1QjRFMzQ4MDZBRTM1QTI2QjU2RDcwMDRERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu+ur4a7P3XwrCDo40rOz+yEAj NOqs7pTned2wBL8U/tWeW8KKHFvfTfSh1tbtZrghHINtadIvamym9aq4krAKRWsp K3ILXY0nuxvKL8YVs+Xj0GtW4cyKM/+yZNk6zBHxMM/nK9NQU3jY02KOT+rq7iQ9 hba+swL9xhQl6YdlMwiPSRm8Rsy9T/Vhn4EkUQsP1vFMKElW0r1MDAEViHNh1HSH oL4XyKyvqEb2C11vqIM9ksoJqewDk0m2PT8ZE0XUcCjEjaeRPzN7XTTcoWHVSCyE fQ5aiSn59ztHYbG0QNBTMnjWCyTVQsFxUsmeq9s4lh4CALA3pRYbWOHrAj39AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaDfvxxwt1bTjSAauNaJrVtcATfgwHwYDVR0j BBgwFoAUwj+DLyfbiLi8WHZpMv2hmz46TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjc5ZWU5Yy1hZDJiLTRiZWQtODY0MS0yM2JmMmQzYjE2ZGIvMC9DMjNGODMyRjI3 REI4OEI4QkM1ODc2NjkzMkZEQTE5QjNFM0E0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIzRTNB NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI3OWVlOWMtYWQyYi00YmVkLTg2 NDEtMjNiZjJkM2IxNmRiLzAvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREEx OUIzRTNBNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACD3XmfOkJ+N4bw2PiJrU/2Ob6MAYiGRw7Q7 tkX76+H9hYLsWlKwNV2Zo+1b7aIqDUwKOw6zYSCkgPkr0QzX+dPJ3Khbr3xNR8CQ tccS1jQjfeCmANgo2WEoFQMnphtrnv/kZEeooFLFc/pCe3g7W7NRFPMRXvBSS9jT 855G7rK7y093I/Z+1FTCvvLzHqBWyv3AgS1vMnsFC2j9xHrRl/r+yaLkIJgdH1bG iO34PMncgo8MftyGhlagyi8nz4VSGXDW54BeuNCY1QM6QgXYChCaRQkHnoHtObo1 uRseM/QyhVX33pVa7E+fKSdIJ3WS5ziMZCXXf4er3WSuxtUHNDc= -----END CERTIFICATE-----Generated at Sat Mar 7 17:52:26 2026 by rpki-client