$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: A8qVOVNtsmdF9gNy3MKmKuC0Bfq0PbfjDr56nZnkwa8= Subject key identifier: 79:33:D7:34:10:6E:F2:5D:4D:CE:07:DD:20:80:C9:69:40:B5:F8:B7 Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 32BA635D422E4D4755C096CB5ACA779F713F2C04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: E5 Signing time: Thu 05 Mar 2026 21:00:42 +0000 Manifest this update: Thu 05 Mar 2026 20:55:42 +0000 Manifest next update: Sun 08 Mar 2026 21:35:42 +0000 Files and hashes: 1: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: 1cgfjpvvju2noMEtY1s3aKQhHxVIBM0Pb9ZlmIouOv0=) 2: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: 5aPZi9EHvbfyOxIPMTjzibe1Bxih6lwkA1KW+hUQT4E=) 3: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: /K4mylpcHmr+sO+7dTgSimoSvEZOrC1jLffnv1dbPQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 21:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ba:63:5d:42:2e:4d:47:55:c0:96:cb:5a:ca:77:9f:71:3f:2c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Mar 5 20:55:42 2026 GMT Not After : Mar 8 21:35:42 2026 GMT Subject: CN=7933D734106EF25D4DCE07DD2080C96940B5F8B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cc:15:5d:bf:2d:e2:a1:8b:71:b8:a7:e2:12: 13:d6:69:1d:e0:56:58:14:24:a4:68:eb:98:71:9b: 5c:e9:4c:93:0e:5c:24:1d:6a:73:e8:ee:f0:72:9e: bb:68:27:a2:e8:f0:52:97:79:c2:5d:0d:6e:40:73: 26:12:23:16:da:4b:fd:1c:a3:9c:b5:af:9d:c3:bc: f0:d3:76:45:d2:59:5c:87:57:75:af:a1:d4:43:45: 70:85:8d:28:34:0b:4e:95:81:39:12:66:d5:a8:bd: 94:d9:e2:0f:45:51:d2:42:65:b7:dc:16:f4:3f:38: 5e:5f:33:4a:c0:6b:67:67:84:a5:e2:01:eb:2d:86: 32:ce:f8:8e:5a:63:f2:7f:f4:84:d8:d6:7a:76:ab: bb:e2:28:f1:6d:3f:d2:e8:59:f8:a3:1d:51:44:69: 6c:11:7a:85:12:bd:4d:e8:42:33:7b:c1:61:0b:4f: 5b:f7:b8:f9:00:f5:34:43:4e:05:c6:26:f9:be:ed: cd:af:84:cf:1d:b3:10:36:02:e7:48:eb:33:f4:6d: 33:f8:c4:c6:ab:b8:83:8f:71:f3:3a:67:71:d9:13: dd:90:8a:71:1d:f0:03:e5:b5:1e:33:a8:ff:d5:77: 9d:a6:36:c1:57:27:43:35:d0:e0:1f:2d:2b:40:23: 27:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:33:D7:34:10:6E:F2:5D:4D:CE:07:DD:20:80:C9:69:40:B5:F8:B7 X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:82:4b:10:db:90:92:9b:ee:5e:23:e1:8f:bc:34:d1:f6:a7: 24:88:77:3c:52:9b:0f:a5:5d:4a:66:f6:47:ca:e7:6a:ef:b0: 71:1b:5c:38:02:64:6d:2b:6c:3f:c4:2e:22:a1:e1:a6:4f:11: 5b:4f:5c:41:83:69:26:6a:4c:7a:9a:3c:a6:77:ce:ef:93:0b: 25:91:2f:a4:d0:7e:06:62:35:ac:6d:b6:29:b5:dd:5d:8f:c6: e4:8b:f8:15:d1:ae:81:7d:fb:f0:78:15:be:c9:73:25:4b:f8: f3:c7:20:cc:a7:a2:56:3b:85:0b:fe:d6:c9:04:95:93:01:87: e7:52:0c:86:88:13:5b:34:e7:b6:5e:05:c8:fd:3c:97:21:8b: 84:39:0c:97:05:49:90:1c:74:76:02:ac:18:5d:ad:36:32:0a: b2:0f:27:11:67:a5:a0:ce:74:cd:93:93:f3:6c:55:c3:af:1d: e4:e0:20:48:b2:04:ba:97:2c:c1:2f:0b:e7:1d:c9:55:f6:9f: bd:9b:0a:56:bf:1b:b5:2b:d7:f6:37:7d:25:3a:d2:a2:01:ac: ca:6c:ee:13:9b:5b:78:28:9b:aa:f8:ef:70:9a:18:ed:36:e0: 13:43:39:95:2d:57:a0:9d:dc:71:a3:6f:71:87:1a:be:95:87: 9a:cd:c9:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMrpjXUIuTUdVwJbLWsp3n3E/LAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNjAzMDUyMDU1NDJaFw0yNjAzMDgyMTM1NDJaMDMxMTAvBgNV BAMTKDc5MzNENzM0MTA2RUYyNUQ0RENFMDdERDIwODBDOTY5NDBCNUY4QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCazBVdvy3ioYtxuKfiEhPWaR3g VlgUJKRo65hxm1zpTJMOXCQdanPo7vBynrtoJ6Lo8FKXecJdDW5AcyYSIxbaS/0c o5y1r53DvPDTdkXSWVyHV3WvodRDRXCFjSg0C06VgTkSZtWovZTZ4g9FUdJCZbfc FvQ/OF5fM0rAa2dnhKXiAesthjLO+I5aY/J/9ITY1np2q7viKPFtP9LoWfijHVFE aWwReoUSvU3oQjN7wWELT1v3uPkA9TRDTgXGJvm+7c2vhM8dsxA2AudI6zP0bTP4 xMaruIOPcfM6Z3HZE92QinEd8APltR4zqP/Vd52mNsFXJ0M10OAfLStAIychAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeTPXNBBu8l1NzgfdIIDJaUC1+LcwHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESCSxDbkJKb7l4j4Y+8NNH2pySIdzxSmw+l XUpm9kfK52rvsHEbXDgCZG0rbD/ELiKh4aZPEVtPXEGDaSZqTHqaPKZ3zu+TCyWR L6TQfgZiNaxttim13V2PxuSL+BXRroF9+/B4Fb7JcyVL+PPHIMynolY7hQv+1skE lZMBh+dSDIaIE1s057ZeBcj9PJchi4Q5DJcFSZAcdHYCrBhdrTYyCrIPJxFnpaDO dM2Tk/NsVcOvHeTgIEiyBLqXLMEvC+cdyVX2n72bCla/G7Ur1/Y3fSU60qIBrMps 7hObW3gom6r473CaGO024BNDOZUtV6Cd3HGjb3GHGr6Vh5rNyZY= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:41 2026 by rpki-client