$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: jlr3IhCguGlEBRXDdJc/q8zGfZPctYnUaTlq1gPsC4k= Subject key identifier: 5A:BE:2D:C6:1E:20:18:39:01:32:49:2E:09:21:75:65:5D:CF:9F:65 Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 46D100F2E69C52B374F1D3B50E1E567C98AB7BF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: F9 Signing time: Mon 20 Apr 2026 17:20:44 +0000 Manifest this update: Mon 20 Apr 2026 17:15:44 +0000 Manifest next update: Thu 23 Apr 2026 23:21:44 +0000 Files and hashes: 1: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: 5aPZi9EHvbfyOxIPMTjzibe1Bxih6lwkA1KW+hUQT4E=) 2: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: kubMLspYnhswnUvUQsHJMrJu8FW/xLxRQqnr8ZmsIHE=) 3: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: /K4mylpcHmr+sO+7dTgSimoSvEZOrC1jLffnv1dbPQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d1:00:f2:e6:9c:52:b3:74:f1:d3:b5:0e:1e:56:7c:98:ab:7b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Apr 20 17:15:44 2026 GMT Not After : Apr 23 23:21:44 2026 GMT Subject: CN=5ABE2DC61E2018390132492E092175655DCF9F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:20:53:2e:3f:61:1a:f3:81:94:35:9a:2f:c9: 2c:2b:6e:13:86:fb:1d:59:6c:be:64:ad:e4:2b:d8: 04:96:c6:89:22:65:95:ca:40:bc:e3:dc:8b:91:fd: 7f:73:89:07:ca:91:87:aa:df:95:21:d8:9d:83:0c: f4:93:62:36:61:c6:27:11:8e:ae:6a:f1:71:20:a6: 1c:c1:68:29:3f:83:da:e0:4f:30:a2:e7:f2:67:03: 77:c8:9c:a8:0e:05:96:14:1f:a1:d1:91:9e:13:f1: 5f:9a:cf:14:54:b2:4b:87:13:4b:0c:47:d8:87:5d: 96:cd:ab:d2:44:db:c8:f6:65:04:a2:93:6b:d7:cd: 0f:2f:18:2b:79:53:04:e5:62:d2:af:cd:b5:39:1b: 8e:f9:1a:57:71:3f:c1:92:e0:c6:f8:41:98:7b:86: 7f:d1:64:29:81:f2:67:d0:9e:60:71:1f:e0:13:33: 0a:16:ef:cf:7b:62:06:92:67:39:76:a0:fd:e8:0c: 64:43:b2:01:6f:b7:21:1e:40:fb:92:b8:e1:7d:b7: 72:98:c8:fe:5c:d0:0b:f8:5e:a8:c8:9f:34:a0:13: f9:09:18:8a:f1:a2:5d:83:ee:73:71:86:47:5d:ca: a7:b4:04:24:4d:5d:9f:a8:77:47:9e:78:f6:20:53: b0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BE:2D:C6:1E:20:18:39:01:32:49:2E:09:21:75:65:5D:CF:9F:65 X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:5a:5c:15:f8:d3:3e:9c:ca:0e:05:2a:39:64:4a:fd:7f:2c: 44:4b:5c:09:05:fb:f1:b0:64:d4:4a:c6:d4:99:df:ed:5f:a8: 33:4f:15:62:85:6f:3e:9f:bf:f3:9c:e3:62:b5:65:a4:0a:91: 37:71:a6:64:64:c3:20:d2:63:71:bc:a4:e5:bd:b7:ad:d7:0c: ea:ab:cb:eb:d6:d9:25:d6:32:80:21:f4:79:a3:ac:78:f4:df: c4:fe:3f:8c:29:04:59:2d:5c:6a:dd:0c:52:ac:51:e2:fb:83: ed:32:35:74:30:84:cd:c5:e6:f7:b8:4d:96:bd:6b:16:f7:4c: 07:90:b1:62:5d:26:1c:5c:a4:c8:4f:37:5f:52:91:ba:8f:fc: d0:7a:f6:b1:8d:e5:8c:dc:15:73:5e:93:0b:80:a1:de:0a:e4: 4b:a4:86:f6:cb:47:cc:66:69:7a:3b:3a:ee:f4:7b:e3:a1:53: 69:78:a9:c9:5e:08:5a:0d:e4:a9:d8:a9:20:4c:00:96:88:70: c7:2c:4e:2a:2f:e3:67:bb:92:09:cb:8a:e5:7e:e2:f3:6c:68: 27:90:62:df:3e:ff:4b:c1:a9:27:83:78:95:bf:98:2e:c4:07: 64:d5:3f:d5:61:3f:46:90:97:76:f3:aa:b1:fe:f6:3e:97:5e: af:a2:35:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURtEA8uacUrN08dO1Dh5WfJire/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNjA0MjAxNzE1NDRaFw0yNjA0MjMyMzIxNDRaMDMxMTAvBgNV BAMTKDVBQkUyREM2MUUyMDE4MzkwMTMyNDkyRTA5MjE3NTY1NURDRjlGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYIFMuP2Ea84GUNZovySwrbhOG +x1ZbL5kreQr2ASWxokiZZXKQLzj3IuR/X9ziQfKkYeq35Uh2J2DDPSTYjZhxicR jq5q8XEgphzBaCk/g9rgTzCi5/JnA3fInKgOBZYUH6HRkZ4T8V+azxRUskuHE0sM R9iHXZbNq9JE28j2ZQSik2vXzQ8vGCt5UwTlYtKvzbU5G475GldxP8GS4Mb4QZh7 hn/RZCmB8mfQnmBxH+ATMwoW7897YgaSZzl2oP3oDGRDsgFvtyEeQPuSuOF9t3KY yP5c0Av4XqjInzSgE/kJGIrxol2D7nNxhkddyqe0BCRNXZ+od0eeePYgU7CNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWr4txh4gGDkBMkkuCSF1ZV3Pn2UwHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1aXBX40z6cyg4FKjlkSv1/LERLXAkF+/Gw ZNRKxtSZ3+1fqDNPFWKFbz6fv/Oc42K1ZaQKkTdxpmRkwyDSY3G8pOW9t63XDOqr y+vW2SXWMoAh9HmjrHj038T+P4wpBFktXGrdDFKsUeL7g+0yNXQwhM3F5ve4TZa9 axb3TAeQsWJdJhxcpMhPN19SkbqP/NB69rGN5YzcFXNekwuAod4K5EukhvbLR8xm aXo7Ou70e+OhU2l4qcleCFoN5KnYqSBMAJaIcMcsTiov42e7kgnLiuV+4vNsaCeQ Yt8+/0vBqSeDeJW/mC7EB2TVP9VhP0aQl3bzqrH+9j6XXq+iNT0= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:46 2026 by rpki-client