$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft File: 023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft (raw, json) Hash identifier: bsf2dR16wEn1GyMebFp08hee/89gJkiwLDmGlqBJvaQ= Subject key identifier: 8D:C5:F0:6A:D5:7B:D0:7B:B4:CD:B5:C0:CA:F2:BF:D5:A2:BC:3C:A4 Authority key identifier: 02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61 Certificate issuer: /CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661 Certificate serial: 5AEEAA198D14EF8B8303A74DFD11DA62D5DF0659 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft Manifest number: 02B1 Signing time: Fri 06 Mar 2026 04:52:15 +0000 Manifest this update: Fri 06 Mar 2026 04:47:15 +0000 Manifest next update: Mon 09 Mar 2026 05:10:15 +0000 Files and hashes: 1: 3130332e3134392e3132312e302f32342d3234203d3e20313339393532.roa (hash: g6JykGSCyvPJN6suwP4pksfv3CU4McJpDF6g+WQNj7o=) 2: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (hash: btn366wZk5X/LbhkknHgrSEj+dlkWgK4+w6HiC3XS9g=) 3: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (hash: kzF5yTng2nsAricqtS3yvK+w9DfNlAwfQFzAL4v5DWA=) 4: 3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (hash: G0y3tssGsefR1ItOMtc1BYHuZ0hgATuC18s9snklT+E=) 5: 023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl (hash: Ojg3TGK4GaJqBeDhOjkKXoLyLryc8dldHN8bYqd4qSE=) 6: 3130332e3134392e3132302e302f32342d3234203d3e20313339393532.roa (hash: 2PpG67/Hif4l3pFwRCwEQ7HNcb5HgHsPLTC3ZJMlI9c=) 7: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (hash: Y0QuciRTpFDwvV/OBPdTjgLcEkiudatiiHEhsbTutWI=) 8: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (hash: mkYIFZYx4d0/cIAZy1+c0yjUX/D1gvzA3zbfyHKddvs=) 9: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (hash: FyCE3LyMNMrGnPbdrpK5+sH4y62xX8bxVpZUT6w7BJU=) 10: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (hash: t1OWN6gm90SvImzwws28CQ53gTfOaLXKxfqrgXh94Y4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ee:aa:19:8d:14:ef:8b:83:03:a7:4d:fd:11:da:62:d5:df:06:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661 Validity Not Before: Mar 6 04:47:15 2026 GMT Not After : Mar 9 05:10:15 2026 GMT Subject: CN=8DC5F06AD57BD07BB4CDB5C0CAF2BFD5A2BC3CA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:75:63:59:36:ba:6b:7c:31:88:43:31:fc: 26:ef:92:d7:4d:2d:93:df:a9:5f:32:a7:d7:2c:0e: 4e:7c:49:15:27:ad:30:57:4d:90:9d:97:af:ca:94: 5e:66:82:6b:c7:57:c2:ed:a8:09:0c:af:07:ef:a0: 4a:14:47:1e:c5:e3:ba:76:64:f5:a6:fa:90:89:b9: ce:5f:61:ed:2c:4f:b1:35:a4:52:d1:ca:92:16:c7: 09:7b:2a:1d:40:67:9d:de:67:db:00:9f:51:1a:af: fc:7f:43:59:14:c4:5f:7c:b9:6b:4a:d9:45:43:be: 4a:42:33:4c:6e:c1:a2:8b:f0:0e:39:39:0b:a2:e3: 4a:00:be:5d:54:70:c9:48:fe:b1:6c:91:e5:d9:56: e5:f8:62:90:bd:1c:19:9c:a2:b3:e5:d2:bf:27:c5: 9a:79:6c:6c:19:f9:58:fe:21:9a:53:50:78:84:4c: 87:af:24:54:59:ad:18:93:03:32:ea:13:64:25:91: 7d:c5:4c:ca:21:0e:42:d2:7d:98:11:27:63:25:f5: 2b:7f:ed:ec:0a:d9:88:ea:68:4c:7e:37:ea:b1:c9: 78:07:38:9e:35:ac:14:8d:5b:00:0a:02:cf:22:af: b7:d7:8d:2f:b7:82:ed:f6:69:a0:62:91:0f:fd:49: c0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C5:F0:6A:D5:7B:D0:7B:B4:CD:B5:C0:CA:F2:BF:D5:A2:BC:3C:A4 X509v3 Authority Key Identifier: keyid:02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e4:66:7c:1f:78:7b:58:ac:a9:d6:c6:d8:e1:f4:98:33:52: 31:5a:85:a1:7b:40:03:73:b3:a4:b5:2f:e0:c6:51:fa:5d:53: 2e:c4:a5:69:e6:cf:73:6e:0b:0a:fa:8a:3e:27:fd:36:86:13: 41:b3:45:5a:62:c7:e8:e7:59:d2:0c:64:4d:0e:f9:fb:3f:72: 97:d0:af:f4:f7:ad:0f:80:d6:55:29:ef:cf:a4:40:8a:f9:ae: 81:63:90:4f:7d:8c:c7:38:f6:31:5f:84:ee:b5:00:1b:34:60: b9:25:e8:93:a7:02:c7:d9:3a:d5:72:3a:28:ca:04:f9:58:18: b7:f3:00:e7:1a:68:01:03:02:dd:89:26:ab:6a:c5:dd:df:f3: 9c:16:10:6d:ea:1f:7d:38:12:21:29:4a:89:68:8f:f0:a4:67: 96:66:6d:bb:52:42:42:c7:bc:e3:78:5d:b2:55:3f:46:97:1c: 86:9a:46:ba:2f:d7:fc:e5:d7:c5:f7:50:c5:ce:d8:a4:14:9c: 48:44:bd:b4:96:41:31:11:39:2e:fd:95:58:f1:01:fc:85:95: a8:5e:c5:df:7c:13:66:08:fb:25:df:b6:a4:ff:e5:b9:4c:36: ed:8f:b2:36:3f:f6:3e:c4:8c:dc:29:bb:40:2a:6d:d3:2c:54: d1:44:54:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWu6qGY0U74uDA6dN/RHaYtXfBlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYyMzZC NzQwMTY2MTAeFw0yNjAzMDYwNDQ3MTVaFw0yNjAzMDkwNTEwMTVaMDMxMTAvBgNV BAMTKDhEQzVGMDZBRDU3QkQwN0JCNENEQjVDMENBRjJCRkQ1QTJCQzNDQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyIHVjWTa6a3wxiEMx/CbvktdN LZPfqV8yp9csDk58SRUnrTBXTZCdl6/KlF5mgmvHV8LtqAkMrwfvoEoURx7F47p2 ZPWm+pCJuc5fYe0sT7E1pFLRypIWxwl7Kh1AZ53eZ9sAn1Ear/x/Q1kUxF98uWtK 2UVDvkpCM0xuwaKL8A45OQui40oAvl1UcMlI/rFskeXZVuX4YpC9HBmcorPl0r8n xZp5bGwZ+Vj+IZpTUHiETIevJFRZrRiTAzLqE2QlkX3FTMohDkLSfZgRJ2Ml9St/ 7ewK2YjqaEx+N+qxyXgHOJ41rBSNWwAKAs8ir7fXjS+3gu32aaBikQ/9ScCpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjcXwatV70Hu0zbXAyvK/1aK8PKQwHwYDVR0j BBgwFoAUAj2veTzSuvbHvHpFoT3yNrdAFmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQwZTY0MC0yMmU5LTQ0MWMtODYzNC1mOTUyNTMwN2RhNzYvMC8wMjNEQUY3OTND RDJCQUY2QzdCQzdBNDVBMTNERjIzNkI3NDAxNjYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYyMzZCNzQw MTY2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkMGU2NDAtMjJlOS00NDFjLTg2 MzQtZjk1MjUzMDdkYTc2LzAvMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYy MzZCNzQwMTY2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDkZnwfeHtYrKnWxtjh9JgzUjFahaF7QANz s6S1L+DGUfpdUy7EpWnmz3NuCwr6ij4n/TaGE0GzRVpix+jnWdIMZE0O+fs/cpfQ r/T3rQ+A1lUp78+kQIr5roFjkE99jMc49jFfhO61ABs0YLkl6JOnAsfZOtVyOijK BPlYGLfzAOcaaAEDAt2JJqtqxd3f85wWEG3qH304EiEpSoloj/CkZ5ZmbbtSQkLH vON4XbJVP0aXHIaaRrov1/zl18X3UMXO2KQUnEhEvbSWQTEROS79lVjxAfyFlahe xd98E2YI+yXftqT/5blMNu2PsjY/9j7EjNwpu0AqbdMsVNFEVCo= -----END CERTIFICATE-----Generated at Sat Mar 7 21:18:18 2026 by rpki-client