$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft File: 23F26F571E3865A06A13936555D8DAA27B433933.mft (raw, json) Hash identifier: bX7crNkxGSfKX+4QlpA/ArwIYakNgcy5jABQi9cQeZY= Subject key identifier: E8:1F:1E:96:5A:CF:95:14:3F:E8:F5:A2:30:D5:FE:31:FE:51:92:74 Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933 Certificate serial: 3D191A5BBB41F90C59F3F3EFFDF9F9369717B1F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft Manifest number: 024D Signing time: Thu 16 Apr 2026 22:12:02 +0000 Manifest this update: Thu 16 Apr 2026 22:07:02 +0000 Manifest next update: Sun 19 Apr 2026 23:06:02 +0000 Files and hashes: 1: 23F26F571E3865A06A13936555D8DAA27B433933.crl (hash: Lz7fOOEvivXgFluZLI8wjSsYVhNkOyfunfffduc/UPQ=) 2: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (hash: 1TF1q7w4Zi+aLzgAuBXcx7Cio1arNovo47+qmMckVGw=) 3: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (hash: SP7Vczz+6iJdkBg+Pm02fK5fUh9ipxxjJbwoliQlUe0=) 4: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (hash: lkFPSA/0P6F0cE2k+qs5Hdu6hwn+gvFK2pZuPkqHwpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:19:1a:5b:bb:41:f9:0c:59:f3:f3:ef:fd:f9:f9:36:97:17:b1:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933 Validity Not Before: Apr 16 22:07:02 2026 GMT Not After : Apr 19 23:06:02 2026 GMT Subject: CN=E81F1E965ACF95143FE8F5A230D5FE31FE519274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4b:bb:b8:c2:04:fd:9f:54:e7:89:78:c2:ea: 82:87:f3:c2:12:01:21:3f:38:1a:0d:af:87:58:d8: 68:46:8c:04:5e:2a:c1:13:c4:1c:0d:bd:2c:19:af: dc:bb:b9:b9:bb:61:d6:58:0f:8f:d2:0f:82:1e:9a: 34:a0:f1:61:e8:60:ac:e9:41:76:54:73:56:ef:f3: d3:06:42:47:59:fc:81:f3:ce:5f:78:79:e7:53:9b: bc:b4:25:25:b1:df:ef:46:20:ad:af:4f:9e:05:c9: dc:c8:e6:03:e5:0b:9f:5c:97:b7:69:ae:6c:cf:e7: 44:bd:f8:c2:aa:dd:cd:61:71:da:f2:48:ed:50:b1: e6:47:d3:db:c8:96:7d:ef:c6:0b:14:04:e8:2e:46: c5:c9:cd:b7:ec:7d:3c:2c:06:a6:ab:f0:69:24:31: 59:5e:38:49:e1:58:c4:83:14:cb:2e:b8:18:df:56: 84:5f:c3:9c:a8:91:bc:92:a0:3a:04:b4:b1:00:d6: 44:40:c2:0f:3a:18:af:95:3e:c6:f7:60:0b:de:96: 5e:d5:e6:b4:b3:9a:7c:f5:a9:0e:a9:d2:ca:fb:09: 87:72:e9:67:c1:2d:19:b7:f6:98:80:08:24:9a:69: 6b:6c:79:0f:1e:ce:35:ec:5f:30:3a:f0:19:c9:9a: f8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1F:1E:96:5A:CF:95:14:3F:E8:F5:A2:30:D5:FE:31:FE:51:92:74 X509v3 Authority Key Identifier: keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:73:f2:86:0a:7a:53:37:0b:55:8d:fb:ba:bd:8f:d9:3a:e5: 07:ce:9e:ea:78:9d:66:b0:60:3a:aa:23:20:67:ca:7b:d4:be: 15:2e:1e:0c:66:99:f3:63:aa:3a:be:9e:35:db:bd:53:47:bd: ad:5a:71:de:3a:12:f2:df:6c:50:1b:bb:5e:88:13:1e:a2:bf: 91:66:36:c4:b3:e9:9d:f3:49:f3:92:e5:d9:a9:74:3a:7a:6c: ab:f7:bc:9e:39:48:28:0d:fb:b3:3c:55:5e:b1:63:99:27:f6: 78:2a:d3:39:ca:3d:d6:20:0e:ac:4a:7c:eb:4f:5b:de:42:2a: 60:70:ed:fa:40:c0:be:6a:bc:97:d8:97:2c:3a:9b:c4:07:6c: 6c:b7:e0:be:27:2c:91:03:f7:8d:50:a1:92:11:15:fd:c1:3c: 04:9d:d4:02:c3:6c:2b:74:94:a3:f4:51:a9:f9:af:bd:ca:88: 5f:aa:cd:a9:2c:ed:e1:3a:42:cb:c9:e2:12:70:eb:38:4a:86: 08:74:54:fd:7a:60:59:68:07:4b:16:03:df:24:69:d3:52:bc: d6:e1:f8:34:de:95:f4:be:d9:b3:75:44:4b:82:09:94:cc:49: 31:c6:4b:64:96:75:9d:94:d0:49:b4:01:ae:a3:65:70:24:a4: 87:f0:8f:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPRkaW7tB+QxZ8/Pv/fn5NpcXsfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3 QjQzMzkzMzAeFw0yNjA0MTYyMjA3MDJaFw0yNjA0MTkyMzA2MDJaMDMxMTAvBgNV BAMTKEU4MUYxRTk2NUFDRjk1MTQzRkU4RjVBMjMwRDVGRTMxRkU1MTkyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjS7u4wgT9n1TniXjC6oKH88IS ASE/OBoNr4dY2GhGjAReKsETxBwNvSwZr9y7ubm7YdZYD4/SD4IemjSg8WHoYKzp QXZUc1bv89MGQkdZ/IHzzl94eedTm7y0JSWx3+9GIK2vT54FydzI5gPlC59cl7dp rmzP50S9+MKq3c1hcdrySO1QseZH09vIln3vxgsUBOguRsXJzbfsfTwsBqar8Gkk MVleOEnhWMSDFMsuuBjfVoRfw5yokbySoDoEtLEA1kRAwg86GK+VPsb3YAvell7V 5rSzmnz1qQ6p0sr7CYdy6WfBLRm39piACCSaaWtseQ8ezjXsXzA68BnJmvh7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6B8ellrPlRQ/6PWiMNX+Mf5RknQwHwYDVR0j BBgwFoAUI/JvVx44ZaBqE5NlVdjaontDOTMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVmY2JmMC02NmVjLTQ4ZDMtYjIyMS0wZjA5Njg2ZDU4MTgvMC8yM0YyNkY1NzFF Mzg2NUEwNkExMzkzNjU1NUQ4REFBMjdCNDMzOTMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3QjQz MzkzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlZmNiZjAtNjZlYy00OGQzLWIy MjEtMGYwOTY4NmQ1ODE4LzAvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERB QTI3QjQzMzkzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9z8oYKelM3C1WN+7q9j9k65QfOnup4nWaw YDqqIyBnynvUvhUuHgxmmfNjqjq+njXbvVNHva1acd46EvLfbFAbu16IEx6iv5Fm NsSz6Z3zSfOS5dmpdDp6bKv3vJ45SCgN+7M8VV6xY5kn9ngq0znKPdYgDqxKfOtP W95CKmBw7fpAwL5qvJfYlyw6m8QHbGy34L4nLJED941QoZIRFf3BPASd1ALDbCt0 lKP0Uan5r73KiF+qzaks7eE6QsvJ4hJw6zhKhgh0VP16YFloB0sWA98kadNSvNbh +DTelfS+2bN1REuCCZTMSTHGS2SWdZ2U0Em0Aa6jZXAkpIfwj5E= -----END CERTIFICATE-----Generated at Fri Apr 17 20:41:55 2026 by rpki-client