$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft File: 023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft (raw, json) Hash identifier: KXaD8LL8Dd9dFahMbzGV6q5vWXzvt6vW+QddnPew70s= Subject key identifier: 6E:0D:0A:F3:0F:F1:2A:DB:E1:03:AC:B6:FF:F1:7F:51:2B:FD:94:19 Authority key identifier: 02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61 Certificate issuer: /CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661 Certificate serial: 471F0AAB907C8FC845E7C1C55A2A1EA8DDE5CBC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft Manifest number: 02C5 Signing time: Mon 20 Apr 2026 01:32:18 +0000 Manifest this update: Mon 20 Apr 2026 01:27:18 +0000 Manifest next update: Thu 23 Apr 2026 10:22:18 +0000 Files and hashes: 1: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (hash: kzF5yTng2nsAricqtS3yvK+w9DfNlAwfQFzAL4v5DWA=) 2: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (hash: t1OWN6gm90SvImzwws28CQ53gTfOaLXKxfqrgXh94Y4=) 3: 3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (hash: G0y3tssGsefR1ItOMtc1BYHuZ0hgATuC18s9snklT+E=) 4: 3130332e3134392e3132312e302f32342d3234203d3e20313339393532.roa (hash: g6JykGSCyvPJN6suwP4pksfv3CU4McJpDF6g+WQNj7o=) 5: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (hash: btn366wZk5X/LbhkknHgrSEj+dlkWgK4+w6HiC3XS9g=) 6: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (hash: mkYIFZYx4d0/cIAZy1+c0yjUX/D1gvzA3zbfyHKddvs=) 7: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (hash: Y0QuciRTpFDwvV/OBPdTjgLcEkiudatiiHEhsbTutWI=) 8: 3130332e3134392e3132302e302f32342d3234203d3e20313339393532.roa (hash: 2PpG67/Hif4l3pFwRCwEQ7HNcb5HgHsPLTC3ZJMlI9c=) 9: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (hash: FyCE3LyMNMrGnPbdrpK5+sH4y62xX8bxVpZUT6w7BJU=) 10: 023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl (hash: carLEQq8Hrx13eFyUZftiFY2J4l9REerid1uFkKzpcs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 10:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:1f:0a:ab:90:7c:8f:c8:45:e7:c1:c5:5a:2a:1e:a8:dd:e5:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661 Validity Not Before: Apr 20 01:27:18 2026 GMT Not After : Apr 23 10:22:18 2026 GMT Subject: CN=6E0D0AF30FF12ADBE103ACB6FFF17F512BFD9419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:2b:27:f4:62:49:8f:ad:86:3c:86:9b:a0: 2c:54:33:5b:a5:ff:59:a9:c5:3e:b2:70:7b:cd:f0: 75:04:ee:63:84:2b:6f:f0:6a:4a:f0:52:18:01:b7: 9d:6f:fa:22:81:97:f0:50:55:a4:38:1b:87:f2:73: dd:5f:0c:a1:20:75:9b:2a:cd:fa:dd:3d:47:5a:ff: 3f:d1:01:81:e4:d1:7e:43:58:7b:3d:ad:22:90:cb: 13:08:b4:5c:d3:dc:b7:1f:61:f0:e6:a8:ea:da:ee: c1:95:91:65:c1:8d:b6:98:eb:5a:07:e8:7f:a0:bd: cf:77:ec:bd:f9:e6:b0:01:5b:f5:91:90:3f:2c:e2: 84:8d:fd:61:d3:8a:72:ba:26:3f:82:75:35:0a:1c: eb:1c:37:97:9f:62:bd:8a:e8:08:e6:a0:23:c6:52: 5b:9a:e6:f0:fa:de:f9:1c:f4:f4:c8:f5:91:53:e2: 6f:3f:c1:39:0f:3d:86:7a:18:4c:b4:0f:06:ee:eb: 25:ca:7c:0e:ba:22:78:35:90:59:34:04:d4:be:dd: 90:61:a8:a4:5a:27:13:0d:52:26:e5:d5:0b:50:88: e4:83:f6:9a:70:34:6b:60:75:08:24:9f:cb:e0:41: 72:71:37:a6:7f:bb:09:a8:60:49:b7:a8:13:e5:ed: a2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0D:0A:F3:0F:F1:2A:DB:E1:03:AC:B6:FF:F1:7F:51:2B:FD:94:19 X509v3 Authority Key Identifier: keyid:02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:71:2c:d5:d7:27:e3:4c:59:fd:46:fb:98:cf:1d:34:40:21: 2d:f9:6d:13:04:b5:70:1c:5e:3a:d4:4c:03:11:fe:59:36:24: dc:7e:92:e9:68:97:82:ee:b9:f3:3b:cd:db:40:80:7d:c6:74: d7:05:63:54:60:d3:08:0d:f2:c4:d9:15:df:7b:7c:c6:6b:b2: 9f:9d:03:6d:d6:bd:d6:ce:55:b2:06:67:d3:d6:a1:0f:cd:a6: 92:34:a5:3b:3b:56:d0:70:f3:ac:72:2b:c4:72:00:ff:13:91: 6b:94:cc:7a:87:db:82:0b:90:cc:2e:91:69:62:ba:1e:5a:1d: 33:e7:58:e8:df:05:19:1a:26:1c:6d:e0:7d:45:7f:d1:ea:f7: 5c:e4:59:6f:c8:ca:a0:eb:7a:ff:f3:1f:e0:7d:8f:95:13:36: 2f:d4:63:52:27:a5:0b:c1:37:1f:c7:cb:3d:e5:b9:44:1d:06: b4:cf:46:87:46:51:ad:db:a1:2d:84:35:67:33:dd:86:6c:4b: 97:04:2f:43:fe:f6:76:42:68:38:8a:7e:ce:96:39:6f:87:7c: 01:83:e6:fd:ea:31:ce:86:a0:67:9a:4a:16:44:3c:78:45:eb: 3e:f5:0d:c0:fa:52:5c:09:d0:1a:3b:aa:59:13:f4:ec:1c:aa: 53:22:25:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURx8Kq5B8j8hF58HFWioeqN3ly8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYyMzZC NzQwMTY2MTAeFw0yNjA0MjAwMTI3MThaFw0yNjA0MjMxMDIyMThaMDMxMTAvBgNV BAMTKDZFMEQwQUYzMEZGMTJBREJFMTAzQUNCNkZGRjE3RjUxMkJGRDk0MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYCsn9GJJj62GPIaboCxUM1ul /1mpxT6ycHvN8HUE7mOEK2/wakrwUhgBt51v+iKBl/BQVaQ4G4fyc91fDKEgdZsq zfrdPUda/z/RAYHk0X5DWHs9rSKQyxMItFzT3LcfYfDmqOra7sGVkWXBjbaY61oH 6H+gvc937L355rABW/WRkD8s4oSN/WHTinK6Jj+CdTUKHOscN5efYr2K6AjmoCPG Ulua5vD63vkc9PTI9ZFT4m8/wTkPPYZ6GEy0Dwbu6yXKfA66Ing1kFk0BNS+3ZBh qKRaJxMNUibl1QtQiOSD9ppwNGtgdQgkn8vgQXJxN6Z/uwmoYEm3qBPl7aKBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbg0K8w/xKtvhA6y2//F/USv9lBkwHwYDVR0j BBgwFoAUAj2veTzSuvbHvHpFoT3yNrdAFmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQwZTY0MC0yMmU5LTQ0MWMtODYzNC1mOTUyNTMwN2RhNzYvMC8wMjNEQUY3OTND RDJCQUY2QzdCQzdBNDVBMTNERjIzNkI3NDAxNjYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYyMzZCNzQw MTY2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkMGU2NDAtMjJlOS00NDFjLTg2 MzQtZjk1MjUzMDdkYTc2LzAvMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYy MzZCNzQwMTY2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5xLNXXJ+NMWf1G+5jPHTRAIS35bRMEtXAc XjrUTAMR/lk2JNx+kulol4LuufM7zdtAgH3GdNcFY1Rg0wgN8sTZFd97fMZrsp+d A23WvdbOVbIGZ9PWoQ/NppI0pTs7VtBw86xyK8RyAP8TkWuUzHqH24ILkMwukWli uh5aHTPnWOjfBRkaJhxt4H1Ff9Hq91zkWW/IyqDrev/zH+B9j5UTNi/UY1InpQvB Nx/Hyz3luUQdBrTPRodGUa3boS2ENWcz3YZsS5cEL0P+9nZCaDiKfs6WOW+HfAGD 5v3qMc6GoGeaShZEPHhF6z71DcD6UlwJ0Bo7qlkT9OwcqlMiJaU= -----END CERTIFICATE-----Generated at Wed Apr 22 07:25:55 2026 by rpki-client