$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft File: 23F26F571E3865A06A13936555D8DAA27B433933.mft (raw, json) Hash identifier: ghdwrUCBfV1Q+ayHsMjtIp+7swiCeVARL/IT9j7x+GA= Subject key identifier: 87:67:11:A1:A3:4B:26:57:67:E6:A9:B2:40:78:6C:A8:69:F3:B8:01 Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933 Certificate serial: 2DB6908855497D0E43241C02A745F8ED28A8AD56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft Manifest number: 0238 Signing time: Sun 01 Mar 2026 14:52:00 +0000 Manifest this update: Sun 01 Mar 2026 14:47:00 +0000 Manifest next update: Wed 04 Mar 2026 18:28:00 +0000 Files and hashes: 1: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (hash: lkFPSA/0P6F0cE2k+qs5Hdu6hwn+gvFK2pZuPkqHwpw=) 2: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (hash: SP7Vczz+6iJdkBg+Pm02fK5fUh9ipxxjJbwoliQlUe0=) 3: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (hash: 1TF1q7w4Zi+aLzgAuBXcx7Cio1arNovo47+qmMckVGw=) 4: 23F26F571E3865A06A13936555D8DAA27B433933.crl (hash: dBue0+PQ5tez6KL8LT4fk2ZE3n9CN8o/ecNE+6hvR0I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b6:90:88:55:49:7d:0e:43:24:1c:02:a7:45:f8:ed:28:a8:ad:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933 Validity Not Before: Mar 1 14:47:00 2026 GMT Not After : Mar 4 18:28:00 2026 GMT Subject: CN=876711A1A34B265767E6A9B240786CA869F3B801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0c:0d:e1:0e:b4:bc:23:5b:0f:c3:0e:e7:db: c6:d4:2b:b3:5c:11:a0:e2:be:a5:4a:d3:c3:3e:26: d3:3b:b2:03:04:56:58:77:63:92:18:71:25:5e:89: 23:35:66:a7:99:81:9d:96:83:36:4c:40:e9:0b:45: bc:50:d4:cf:58:61:11:88:64:b7:b9:ef:e5:36:1b: 84:5e:7d:bc:83:0e:33:26:54:87:58:61:4a:fb:71: 8d:0d:55:16:4e:19:ad:5e:1d:e5:b4:70:4f:7f:fc: 0e:be:e9:0f:06:e1:0a:d6:89:db:0e:df:f4:1a:db: c8:94:b3:e9:63:45:28:8b:9c:a7:e9:24:8b:04:5e: c0:00:e0:13:99:e8:20:75:b7:92:c6:ff:13:0e:63: c7:c9:fc:ca:44:83:14:51:ca:ec:54:42:7e:12:dd: de:ef:6e:2a:c5:28:1b:e7:ff:35:72:34:bd:c7:31: d1:b9:e4:df:6d:8e:e0:73:48:d4:46:e6:cc:36:ea: 34:0a:37:1d:18:43:77:7c:df:26:b0:4c:30:d6:e3: ee:70:e7:bc:c1:e5:75:97:35:1d:d2:20:22:e1:79: 49:9b:ce:f8:47:6c:c6:04:1c:5e:b7:3e:1a:2a:d6: fa:ee:b3:c8:54:42:2c:27:d2:17:16:1b:83:f7:89: 05:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:67:11:A1:A3:4B:26:57:67:E6:A9:B2:40:78:6C:A8:69:F3:B8:01 X509v3 Authority Key Identifier: keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c4:76:34:f4:c9:0b:0a:49:f7:93:34:6f:d3:9c:17:6a:18: 8a:7c:a3:a4:2b:34:cf:b3:41:1b:a6:f4:dd:8a:0f:dd:a6:6e: af:05:42:b0:9e:82:c3:2a:86:83:96:3b:0b:f2:6c:25:84:86: 03:ef:d5:ff:b4:64:9b:14:a4:de:c5:9e:49:6e:29:8e:90:34: 05:d6:63:78:5f:c5:dc:bd:dd:37:c5:9a:6d:5d:d7:9f:11:13: 11:bf:c8:06:af:35:43:42:02:af:39:3d:97:26:60:82:e6:84: ff:cd:4f:9c:3e:1b:46:e4:c6:6b:9e:0e:b2:4a:47:3f:11:89: c2:4c:6e:0a:6e:53:b7:a8:b8:7f:8b:4b:8e:ac:66:9b:d4:34: 9b:91:be:e2:86:1a:5d:2c:23:40:d7:9b:7e:3c:14:08:a5:4b: e1:04:17:ea:2d:a6:9b:31:33:15:02:da:88:df:fc:bb:3f:f0: 8d:f7:6f:3b:5f:e8:4a:8d:39:7b:e0:95:84:ee:c5:42:ac:12: ed:40:57:ca:0e:15:b1:f3:c5:52:09:5a:8f:f3:81:95:f2:e1: 25:4c:9d:3e:33:c6:69:d4:c4:de:28:1f:8f:29:46:f7:4c:d7: f6:10:62:ce:2d:0b:43:5f:85:96:61:01:84:90:e7:db:13:19: 7f:4b:47:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULbaQiFVJfQ5DJBwCp0X47SiorVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3 QjQzMzkzMzAeFw0yNjAzMDExNDQ3MDBaFw0yNjAzMDQxODI4MDBaMDMxMTAvBgNV BAMTKDg3NjcxMUExQTM0QjI2NTc2N0U2QTlCMjQwNzg2Q0E4NjlGM0I4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiDA3hDrS8I1sPww7n28bUK7Nc EaDivqVK08M+JtM7sgMEVlh3Y5IYcSVeiSM1ZqeZgZ2WgzZMQOkLRbxQ1M9YYRGI ZLe57+U2G4RefbyDDjMmVIdYYUr7cY0NVRZOGa1eHeW0cE9//A6+6Q8G4QrWidsO 3/Qa28iUs+ljRSiLnKfpJIsEXsAA4BOZ6CB1t5LG/xMOY8fJ/MpEgxRRyuxUQn4S 3d7vbirFKBvn/zVyNL3HMdG55N9tjuBzSNRG5sw26jQKNx0YQ3d83yawTDDW4+5w 57zB5XWXNR3SICLheUmbzvhHbMYEHF63Phoq1vrus8hUQiwn0hcWG4P3iQVPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh2cRoaNLJldn5qmyQHhsqGnzuAEwHwYDVR0j BBgwFoAUI/JvVx44ZaBqE5NlVdjaontDOTMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVmY2JmMC02NmVjLTQ4ZDMtYjIyMS0wZjA5Njg2ZDU4MTgvMC8yM0YyNkY1NzFF Mzg2NUEwNkExMzkzNjU1NUQ4REFBMjdCNDMzOTMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3QjQz MzkzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlZmNiZjAtNjZlYy00OGQzLWIy MjEtMGYwOTY4NmQ1ODE4LzAvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERB QTI3QjQzMzkzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnEdjT0yQsKSfeTNG/TnBdqGIp8o6QrNM+z QRum9N2KD92mbq8FQrCegsMqhoOWOwvybCWEhgPv1f+0ZJsUpN7FnkluKY6QNAXW Y3hfxdy93TfFmm1d158RExG/yAavNUNCAq85PZcmYILmhP/NT5w+G0bkxmueDrJK Rz8RicJMbgpuU7eouH+LS46sZpvUNJuRvuKGGl0sI0DXm348FAilS+EEF+otppsx MxUC2ojf/Ls/8I33bztf6EqNOXvglYTuxUKsEu1AV8oOFbHzxVIJWo/zgZXy4SVM nT4zxmnUxN4oH48pRvdM1/YQYs4tC0NfhZZhAYSQ59sTGX9LRxk= -----END CERTIFICATE-----Generated at Mon Mar 2 15:38:37 2026 by rpki-client