$ rpki-client -vvf repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft File: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft (raw, json) Hash identifier: 967tL/cXA5q9Sl1ORRk5n71ov9P4IaRQa94L5DL6x2c= Subject key identifier: 45:6A:F1:AA:47:24:9C:73:7E:DC:AD:5F:5F:CC:70:8F:8F:BB:21:7C Authority key identifier: 23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C Certificate issuer: /CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Certificate serial: 5CE7D193706910557E0753E559D627CD17607C78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft Manifest number: F7 Signing time: Tue 21 Apr 2026 10:53:54 +0000 Manifest this update: Tue 21 Apr 2026 10:48:54 +0000 Manifest next update: Fri 24 Apr 2026 15:13:54 +0000 Files and hashes: 1: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl (hash: r7mgFnxwo1R3pqR+B3xs7Iazv2EFvhRTELM1lMrZrlc=) 2: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: TgOS2DIzKKN1li7GhbP8QE2EiuFzEQeHETrSLQ8zd80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e7:d1:93:70:69:10:55:7e:07:53:e5:59:d6:27:cd:17:60:7c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Validity Not Before: Apr 21 10:48:54 2026 GMT Not After : Apr 24 15:13:54 2026 GMT Subject: CN=456AF1AA47249C737EDCAD5F5FCC708F8FBB217C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:18:e2:8c:07:74:1e:08:3c:18:29:b9:18: f0:e5:ee:da:31:ea:4f:98:fa:39:7f:63:6a:39:93: 25:13:c5:c1:21:f1:7b:bd:4c:75:7d:4a:b9:c9:eb: db:09:ed:5c:c5:35:2d:86:f0:ba:df:7e:79:be:7e: 73:ce:8f:d0:6f:e2:b1:6f:86:0c:63:4a:24:a0:e3: 44:75:e1:ad:61:83:18:36:9c:ac:07:82:a4:e2:fc: 51:80:03:fc:ac:66:a4:50:4a:49:ce:86:a4:1e:8b: e2:fa:c1:f5:2e:29:c0:ef:fd:76:98:19:56:41:99: a7:d1:9f:6f:51:66:10:21:e9:3e:e1:44:1a:3a:02: ba:0f:c4:0b:d2:0d:12:42:57:c9:b0:e1:c7:01:45: eb:ab:5f:a9:23:f2:64:aa:15:be:20:00:9b:b8:97: 86:5e:d5:c1:0e:83:37:e5:72:77:56:04:7f:9e:27: f2:56:3c:9a:85:6b:dd:36:66:1a:87:ad:9d:ce:99: 9b:01:9a:a9:ee:a5:e4:55:ef:10:ad:ed:5a:2c:d7: ba:75:a0:87:78:bc:2d:46:c6:b8:fe:14:65:58:40: fc:f0:12:d5:ce:a0:c9:0f:32:b1:0b:92:4c:35:f4: 45:4c:57:d0:5b:12:0e:69:98:c2:f1:ae:c7:3f:6f: 3a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6A:F1:AA:47:24:9C:73:7E:DC:AD:5F:5F:CC:70:8F:8F:BB:21:7C X509v3 Authority Key Identifier: keyid:23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:32:6d:27:51:a3:f2:20:cb:36:12:97:18:14:16:98:66:42: 4e:73:16:ec:aa:67:87:c5:8b:cc:56:d3:d5:34:ac:e9:88:b1: 71:76:78:26:c8:73:8b:01:41:78:53:db:a9:9d:0b:35:47:ff: e1:5b:a4:0c:f3:86:23:e1:b9:f3:ca:bb:6a:2a:77:2b:93:17: 5b:e8:8e:61:3e:b8:b8:28:3a:ce:e3:1c:60:06:6a:2e:0b:d7: 87:41:df:0f:b4:27:00:87:94:a9:c6:9b:9b:15:5d:8f:79:c0: 2d:34:d7:6c:24:2e:6e:af:1f:27:ac:da:8e:68:dd:b8:9f:34: 6b:cc:cd:f3:0a:9e:aa:d6:55:80:15:ee:0c:71:63:6c:63:19: 78:bd:10:ac:51:34:39:f1:9e:a4:e2:b9:69:64:c8:e9:a8:4c: 14:b7:33:12:c2:40:cd:5e:2d:39:f1:3b:25:c4:5f:86:0e:1b: f6:12:51:87:76:4c:9b:a7:e7:4c:98:72:cf:a1:d5:86:8a:d5: 3e:0e:ae:e1:a7:ea:86:47:7e:f4:b6:3e:be:ec:2a:a5:5b:d3: b4:87:a7:b9:bc:b4:a6:1d:71:ed:af:52:ec:e3:95:26:11:1d: 05:56:17:6a:85:0f:45:96:9e:6a:90:ad:f0:10:14:78:d9:b4: 62:7a:e0:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOfRk3BpEFV+B1PlWdYnzRdgfHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3 N0U4RUU3QzAeFw0yNjA0MjExMDQ4NTRaFw0yNjA0MjQxNTEzNTRaMDMxMTAvBgNV BAMTKDQ1NkFGMUFBNDcyNDlDNzM3RURDQUQ1RjVGQ0M3MDhGOEZCQjIxN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuARjijAd0Hgg8GCm5GPDl7tox 6k+Y+jl/Y2o5kyUTxcEh8Xu9THV9SrnJ69sJ7VzFNS2G8Lrffnm+fnPOj9Bv4rFv hgxjSiSg40R14a1hgxg2nKwHgqTi/FGAA/ysZqRQSknOhqQei+L6wfUuKcDv/XaY GVZBmafRn29RZhAh6T7hRBo6AroPxAvSDRJCV8mw4ccBReurX6kj8mSqFb4gAJu4 l4Ze1cEOgzflcndWBH+eJ/JWPJqFa902ZhqHrZ3OmZsBmqnupeRV7xCt7Vos17p1 oId4vC1Gxrj+FGVYQPzwEtXOoMkPMrELkkw19EVMV9BbEg5pmMLxrsc/bzrTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURWrxqkcknHN+3K1fX8xwj4+7IXwwHwYDVR0j BBgwFoAUI76M6mGUBvnYYLH5fuj37Xfo7nwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmVkNmRjNC1kMzhiLTQ0YmEtOWYwYi00Mjg0NTViMjc2ZWUvMC8yM0JFOENFQTYx OTQwNkY5RDg2MEIxRjk3RUU4RjdFRDc3RThFRTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3N0U4 RUU3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3 RUQ3N0U4RUU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwybSdRo/IgyzYSlxgUFphmQk5zFuyqZ4fF i8xW09U0rOmIsXF2eCbIc4sBQXhT26mdCzVH/+FbpAzzhiPhufPKu2oqdyuTF1vo jmE+uLgoOs7jHGAGai4L14dB3w+0JwCHlKnGm5sVXY95wC0012wkLm6vHyes2o5o 3bifNGvMzfMKnqrWVYAV7gxxY2xjGXi9EKxRNDnxnqTiuWlkyOmoTBS3MxLCQM1e LTnxOyXEX4YOG/YSUYd2TJun50yYcs+h1YaK1T4OruGn6oZHfvS2Pr7sKqVb07SH p7m8tKYdce2vUuzjlSYRHQVWF2qFD0WWnmqQrfAQFHjZtGJ64Ls= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:24 2026 by rpki-client