$ rpki-client -vvf repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft File: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft (raw, json) Hash identifier: Lo90yV9s7gaNQ2TOyYWw9goZaauIzZ23gIdsMn2Gjb8= Subject key identifier: 22:9B:F8:C1:8B:66:73:27:7C:CE:1E:1A:3E:5F:91:20:A9:17:9B:9F Authority key identifier: 23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE Certificate issuer: /CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Certificate serial: 70BAD2E2877594CBB918627F97FE7BEB80981721 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft Manifest number: 024F Signing time: Sat 28 Feb 2026 07:32:29 +0000 Manifest this update: Sat 28 Feb 2026 07:27:29 +0000 Manifest next update: Tue 03 Mar 2026 10:41:29 +0000 Files and hashes: 1: 3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa (hash: IrZeFe8SEJi6FKjU0mpLrOwQUSU/84BjfZY+z57Jm7k=) 2: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl (hash: nIvyFQOj62oHagqY0EynHV2IWYhAYgfy4ah+5ZTvsCU=) 3: 323430363a333834303a3a2f33322d3438203d3e20313430343438.roa (hash: jGdjjz2tkcnePijzwx0ZLso64VGE3BptkrmYyqOOX94=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 10:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ba:d2:e2:87:75:94:cb:b9:18:62:7f:97:fe:7b:eb:80:98:17:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Validity Not Before: Feb 28 07:27:29 2026 GMT Not After : Mar 3 10:41:29 2026 GMT Subject: CN=229BF8C18B6673277CCE1E1A3E5F9120A9179B9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:13:a1:cc:98:4b:eb:df:95:52:c8:f0:24:9d: 68:c7:d0:60:2d:82:e7:91:aa:35:4f:2d:c8:89:48: 16:01:b2:86:79:d1:04:d6:e9:50:8d:21:33:fe:d4: 66:19:9d:c4:6b:3e:2f:f6:df:dd:d7:ee:d5:7f:ee: 77:74:80:55:c7:5b:ff:2b:a7:c2:80:c1:cc:cc:65: f5:9d:55:b1:d5:3d:f4:8b:33:42:ee:9e:39:76:12: a9:8b:f8:3d:9d:2f:d4:54:a1:65:06:11:8c:1a:72: 95:8b:c8:ec:81:7d:b2:fb:c7:3f:51:1e:d3:cc:8e: 8d:ab:08:7f:73:52:05:1c:e7:91:f2:a6:49:fa:a3: d4:1a:1c:e6:1e:7a:34:3f:b6:26:26:b2:c3:7b:86: 8d:09:c9:76:fe:d2:89:1b:24:aa:3f:44:5d:3c:89: 57:d8:31:c8:e3:43:49:29:c7:66:33:28:10:27:00: e2:d3:e3:7c:a6:bb:10:45:9c:30:ba:6e:32:dc:5c: 29:c2:af:9e:cd:bf:c8:35:17:cc:26:cb:25:ce:b6: 7f:6c:4a:2b:f5:92:45:84:90:04:44:51:9e:d8:41: d1:d7:f0:48:2c:c7:7e:8c:0a:5c:a0:2d:5e:6b:a7: ac:a3:f1:3b:7f:ae:f5:d6:b3:09:15:40:68:1d:72: 2b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9B:F8:C1:8B:66:73:27:7C:CE:1E:1A:3E:5F:91:20:A9:17:9B:9F X509v3 Authority Key Identifier: keyid:23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:04:47:c6:1a:d2:08:3b:bc:a9:9f:12:ed:4f:15:30:c0:2d: 71:83:15:ac:9b:56:3d:89:39:e2:a4:5a:73:ee:4e:9f:d6:c0: 8e:8c:3e:7e:ab:3b:5b:b2:9e:2b:e6:7e:64:e0:83:cf:02:46: ed:93:08:d9:7d:ad:72:90:9f:02:ac:da:d7:35:c2:62:bc:50: da:98:8f:e5:01:8d:28:fe:22:bf:f4:b2:62:ec:14:26:d1:a5: 2d:e3:a4:49:34:6b:5a:89:36:38:26:83:34:7b:56:a4:1d:1c: 70:e5:6c:11:be:a6:89:f2:be:9e:32:c1:c1:6a:96:86:72:85: bb:55:55:e3:c5:08:1e:60:35:8a:99:fd:04:38:18:7b:35:94: 5c:66:9e:1a:6b:66:3e:41:a9:a3:be:b8:e7:14:45:b7:dd:27: 72:c4:cc:59:a3:2d:79:7f:3e:ce:8d:52:44:fc:24:2d:b9:7a: c5:09:e4:28:c1:b1:4d:e5:16:48:16:b6:82:99:80:b6:85:93: 2e:79:17:d6:e1:45:88:66:2b:ee:cd:fa:c0:ee:04:63:fb:34: 04:a6:9f:cd:19:7a:9e:fd:29:9b:25:40:86:2b:42:11:d9:06: a3:c9:5c:85:ef:eb:9c:a9:91:97:f4:f7:93:05:b3:ac:15:cc: f7:8b:ed:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLrS4od1lMu5GGJ/l/5764CYFyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2 NkI0MjRCRTAeFw0yNjAyMjgwNzI3MjlaFw0yNjAzMDMxMDQxMjlaMDMxMTAvBgNV BAMTKDIyOUJGOEMxOEI2NjczMjc3Q0NFMUUxQTNFNUY5MTIwQTkxNzlCOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZE6HMmEvr35VSyPAknWjH0GAt gueRqjVPLciJSBYBsoZ50QTW6VCNITP+1GYZncRrPi/2393X7tV/7nd0gFXHW/8r p8KAwczMZfWdVbHVPfSLM0Lunjl2EqmL+D2dL9RUoWUGEYwacpWLyOyBfbL7xz9R HtPMjo2rCH9zUgUc55Hypkn6o9QaHOYeejQ/tiYmssN7ho0JyXb+0okbJKo/RF08 iVfYMcjjQ0kpx2YzKBAnAOLT43ymuxBFnDC6bjLcXCnCr57Nv8g1F8wmyyXOtn9s Siv1kkWEkAREUZ7YQdHX8Egsx36MClygLV5rp6yj8Tt/rvXWswkVQGgdcislAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIpv4wYtmcyd8zh4aPl+RIKkXm58wHwYDVR0j BBgwFoAUIwqBsoMxS6eb+gJP35/02ma0JL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2ExY2U0ZS01OWM4LTQxY2MtYjVlNi1iZDdiN2E3MDQzNTYvMC8yMzBBODFCMjgz MzE0QkE3OUJGQTAyNEZERjlGRjREQTY2QjQyNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2NkI0 MjRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdhMWNlNGUtNTljOC00MWNjLWI1 ZTYtYmQ3YjdhNzA0MzU2LzAvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0 REE2NkI0MjRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQER8Ya0gg7vKmfEu1PFTDALXGDFaybVj2J OeKkWnPuTp/WwI6MPn6rO1uynivmfmTgg88CRu2TCNl9rXKQnwKs2tc1wmK8UNqY j+UBjSj+Ir/0smLsFCbRpS3jpEk0a1qJNjgmgzR7VqQdHHDlbBG+ponyvp4ywcFq loZyhbtVVePFCB5gNYqZ/QQ4GHs1lFxmnhprZj5BqaO+uOcURbfdJ3LEzFmjLXl/ Ps6NUkT8JC25esUJ5CjBsU3lFkgWtoKZgLaFky55F9bhRYhmK+7N+sDuBGP7NASm n80Zep79KZslQIYrQhHZBqPJXIXv65ypkZf095MFs6wVzPeL7Xc= -----END CERTIFICATE-----Generated at Mon Mar 2 02:05:02 2026 by rpki-client