$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json) Hash identifier: vYd0AF6B3zMOKSy4/6DAKPfOEG+TYerm1xzvt8bcsWk= Subject key identifier: 0A:0C:9A:4A:7E:94:69:60:6D:D1:CE:6C:32:5A:E8:3C:4E:F7:C9:11 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 4EF700FEDC96ECF4520D0A0695B0B084B78336C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft Manifest number: 0588 Signing time: Wed 01 Apr 2026 12:12:30 +0000 Manifest this update: Wed 01 Apr 2026 12:07:30 +0000 Manifest next update: Sat 04 Apr 2026 20:22:30 +0000 Files and hashes: 1: 323430323a616134303a31393a3a2f34382d3438203d3e20313337333330.roa (hash: hdgIawWouah0ekpAe8UrvrGoDu4aXWNxqYNJE/bdGyY=) 2: 3130332e3131322e3133392e302f32342d3234203d3e20313337333330.roa (hash: JpAZjX8/swngpxlxVVVajwCNKWAQXON4Zao07dX/5sA=) 3: 3130332e3131322e3133382e302f32342d3234203d3e20313531303433.roa (hash: zh95BFBdCbv/H0EiAO2kNQNsmpUEe+0QlQtPZIBdZcE=) 4: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: zJ/IOktVnWhWz4jSOLDXtaH370UXngeNbW03Fgb+vvw=) 5: 3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (hash: 22kUuK/GVBrAxrLqaG0j6+V0+LsPCWDPGnPRWi0ZTZE=) 6: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: wQY9oUK0n/ZiM1qUELQ9nUUAjEFwQkM8wAkVoOkHjLI=) 7: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: HA87lAPnR7iUK+dc1jECmtT+iEh5xxhksBYnQ16Faq0=) 8: 323430323a616134303a31363a3a2f34382d3438203d3e20313337333330.roa (hash: RUrWhmreQUQp1NjZrcuDlG3qiB+RCRdIC30Io87l1mw=) 9: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: NNrOvOAX878W/wl76ltah13BW4qzOmHYAfyfUyg3Do4=) 10: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: s80i2JnZJo0U9U25elvxTxh6QkHnCZRBkPx/ALx9H8Q=) 11: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: DyblRdAcneayqUYUzLQrusdo79df7lrk/CG5/9G503c=) 12: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: ix6QVYHLLnfJn7tGXN1RpfnIGSyzbAedxPhWyf6Iui0=) 13: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: QVcEps8yiGL2UfFqAU6S0SwOvOL4GMwkoHsrt8b7xrI=) 14: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: v4Taz03e2i7+jkqTPf0U0ovYjVCMponleywvMjVM0R8=) 15: 323430323a616134303a32303a3a2f34382d3438203d3e20313337333330.roa (hash: eTm7SRPStPMMue15D604/zbIpBPlfqR8Q8XY+kXO8k8=) 16: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: tqwTmZCdbUqqGty360kqvx6lMcITL/hxp9AoFa5Mfyk=) 17: 323430323a616134303a31383a3a2f34382d3438203d3e20313337333330.roa (hash: Nbj2OeR+uWV2WwV2WDCkzfCUJ0UTXPC/nTipHdsGOoc=) 18: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: o4PO23lnRqPf03Wo6JrcILog0Qd/SLT9yVAea2BC/2M=) 19: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: aznR+rxjjEIsUxFM5mh1iq4hQzHytRItzxTk14wm3KQ=) 20: 3130332e3131322e3133362e302f32332d3234203d3e20313337333330.roa (hash: 0nR+a0GrELpeQDM3LuDxE+qTaXatthUlw07SHUwh/Ys=) 21: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: r1HTlIacGCX7WIy+ItKmdF1K+oqgLcL3a+HFYfLMrrg=) 22: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: P2lcJfyLPGUNQ4cnX8Y2QLZI/erXHDt7Fmf4XMrSfGM=) 23: 3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa (hash: 1ez+krjsqhXyqvxYrqewG2OuJMmETdewfUDWdsil76A=) 24: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: vtCuldzUtylI5t9/fCW+s++nz3SUBB8oSaeAOGcN8rI=) 25: 323430323a616134303a31373a3a2f34382d3438203d3e20313337333330.roa (hash: R28MIfUaJCnc4/MfDxXrHUmk9cJ89tiWvymn3ICC4cM=) 26: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: rNDsRlOx+ZmLfoeW6nnGDsNn4s742wqQJvoJUhwEUPQ=) 27: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: hgu6JQFjlPCsZ1LOkWJ43XgrvcgegqNe/WOZPeA+nLk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 20:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f7:00:fe:dc:96:ec:f4:52:0d:0a:06:95:b0:b0:84:b7:83:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Apr 1 12:07:30 2026 GMT Not After : Apr 4 20:22:30 2026 GMT Subject: CN=0A0C9A4A7E9469606DD1CE6C325AE83C4EF7C911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f7:6f:4e:49:78:e4:76:f7:d2:c1:ca:d8:86: 88:ce:86:ab:4e:0b:6f:e6:fe:41:c5:40:24:ef:5f: b7:4c:26:6c:a3:4a:cc:4a:1d:06:19:17:fb:6c:70: 33:8e:ee:5e:59:f2:50:01:49:f8:4a:44:cc:e8:8b: 9a:bf:d9:8b:69:da:83:9e:e3:65:84:e4:c3:1a:c8: bd:47:ab:e2:f1:ea:cb:20:0f:62:f6:fa:e2:e0:24: b9:42:b2:4a:63:49:98:56:f4:c3:ef:55:49:4b:d2: 11:8a:2c:b7:ec:db:a9:28:61:a9:2c:0e:03:1c:6f: 59:ff:a3:7c:b3:4b:4a:7e:7d:98:93:d8:63:ba:bf: 32:7e:67:03:09:e9:cf:c9:e4:4b:5e:0b:3a:53:55: f7:48:59:e8:3c:3f:2c:24:ee:39:ef:66:04:b4:07: 9b:03:04:84:1c:0c:a0:a9:9c:39:31:51:96:22:7f: 61:a8:d0:5f:8f:67:54:d3:a7:32:00:14:4a:de:1f: 81:b1:6f:26:db:f7:c5:5e:3d:20:43:5d:0b:61:47: 4d:17:5d:b9:c1:72:59:dc:4d:df:43:fc:ea:a9:1a: 62:d2:35:c5:72:52:5c:51:ae:15:3b:db:f0:32:28: c1:56:d2:2c:87:fc:ac:63:45:83:49:81:1e:9b:c2: f1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0C:9A:4A:7E:94:69:60:6D:D1:CE:6C:32:5A:E8:3C:4E:F7:C9:11 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:91:9b:d2:cf:2b:c3:32:4d:fb:33:89:20:86:c6:08:06:ea: 5a:88:bb:d0:97:d6:fe:9c:84:c6:c2:48:7e:39:30:3a:92:0d: 7e:99:4b:3a:2c:8c:09:91:1a:25:8b:86:cf:e7:84:b2:fd:bc: 15:d9:6c:1e:43:84:ad:77:57:84:76:6a:59:db:1e:e5:6d:f6: ee:a8:15:cd:14:63:e0:55:36:a0:15:5a:4b:6a:5e:f7:20:58: 51:b6:c8:61:cd:fe:c7:b7:2c:fa:ca:f1:99:b5:7d:c7:b9:02: 7a:87:74:fe:36:36:46:5e:3d:dc:1a:24:1a:0d:32:a6:c7:05: 13:21:fb:a0:21:22:22:aa:1a:2d:14:59:65:da:fc:0e:44:92: 44:15:48:2f:02:f7:d8:c0:07:31:79:13:9a:47:16:cd:c1:74: 55:43:8f:0c:c9:02:bc:fd:dd:ef:54:7d:47:66:03:37:19:49: d0:84:8f:6a:45:f2:cd:c0:d1:70:37:6e:2d:91:37:d1:76:45: 65:9e:0b:40:47:04:80:dc:4d:58:36:59:bb:a2:88:78:ea:7d: e3:e4:8f:e0:79:a5:0d:d5:42:fc:75:cb:d9:3c:84:1b:d2:57: 2e:bf:3e:07:a2:18:cf:b5:66:4e:b9:c0:81:87:79:89:f1:a4: 49:1e:21:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTvcA/tyW7PRSDQoGlbCwhLeDNsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNjA0MDExMjA3MzBaFw0yNjA0MDQyMDIyMzBaMDMxMTAvBgNV BAMTKDBBMEM5QTRBN0U5NDY5NjA2REQxQ0U2QzMyNUFFODNDNEVGN0M5MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa929OSXjkdvfSwcrYhojOhqtO C2/m/kHFQCTvX7dMJmyjSsxKHQYZF/tscDOO7l5Z8lABSfhKRMzoi5q/2Ytp2oOe 42WE5MMayL1Hq+Lx6ssgD2L2+uLgJLlCskpjSZhW9MPvVUlL0hGKLLfs26koYaks DgMcb1n/o3yzS0p+fZiT2GO6vzJ+ZwMJ6c/J5EteCzpTVfdIWeg8Pywk7jnvZgS0 B5sDBIQcDKCpnDkxUZYif2Go0F+PZ1TTpzIAFEreH4Gxbybb98VePSBDXQthR00X XbnBclncTd9D/OqpGmLSNcVyUlxRrhU72/AyKMFW0iyH/KxjRYNJgR6bwvEJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCgyaSn6UaWBt0c5sMlroPE73yREwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMzNGZmMDgtZDIxZi00MjBiLTg3 ZGYtNTMxMDNiNmRjMjUzLzAvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUx MkZFNEMxRDAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeRm9LPK8MyTfsziSCGxggG6lqIu9CX1v6c hMbCSH45MDqSDX6ZSzosjAmRGiWLhs/nhLL9vBXZbB5DhK13V4R2alnbHuVt9u6o Fc0UY+BVNqAVWktqXvcgWFG2yGHN/se3LPrK8Zm1fce5AnqHdP42NkZePdwaJBoN MqbHBRMh+6AhIiKqGi0UWWXa/A5EkkQVSC8C99jABzF5E5pHFs3BdFVDjwzJArz9 3e9UfUdmAzcZSdCEj2pF8s3A0XA3bi2RN9F2RWWeC0BHBIDcTVg2WbuiiHjqfePk j+B5pQ3VQvx1y9k8hBvSVy6/PgeiGM+1Zk65wIGHeYnxpEkeIfg= -----END CERTIFICATE-----Generated at Thu Apr 2 09:33:19 2026 by rpki-client