$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json) Hash identifier: 4D15Gc6R1EB61ZrqijHnQZWUIz0ek1C/hGg+DkqzALY= Subject key identifier: EF:41:17:F7:2F:B8:D3:F3:E0:0F:AA:EC:0D:B5:7C:5A:01:8B:EC:CD Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 41D09B5F50F129F8938D7CA149A2BA15892CEBC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft Manifest number: 0572 Signing time: Sun 01 Mar 2026 15:22:30 +0000 Manifest this update: Sun 01 Mar 2026 15:17:30 +0000 Manifest next update: Wed 04 Mar 2026 21:38:30 +0000 Files and hashes: 1: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: J0UIa5q4gfzZBbXbuejxJrOelfucnyC3B7zCkeUQHWE=) 2: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: EtS1eZLUTwWRZJ7Ml0izUQhw9pv4Am/WahNfvxjKTrc=) 3: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: vAnV4g431JCqkwtUthm0ie5OhAW6+m/w0zGsqm8XSOo=) 4: 3130332e3131322e3133382e302f32342d3234203d3e20313531303433.roa (hash: zh95BFBdCbv/H0EiAO2kNQNsmpUEe+0QlQtPZIBdZcE=) 5: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: JdwC9cZZayLXOr62V5QKdUDNIE+2Jw/cXMDWMiK/ID0=) 6: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: tQTDeuCAhgIHqT4JvN+SYFcrP542mVZbW7Uy9er1rk4=) 7: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: Z1axM0kuScQ1wsgtnc4QX9GvMZLuIsV8v/ScHLgFtiU=) 8: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: Pt4kHivj/+/IoSa7PGPfSPyAlm/DgqrXfAGO9WlCDqE=) 9: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: sfX//sKOJiEuG3MX815fs00hBV5qvYrVSNOlry6c+5c=) 10: 3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (hash: 22kUuK/GVBrAxrLqaG0j6+V0+LsPCWDPGnPRWi0ZTZE=) 11: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: QFubIhbbL6UEYuVrgh+b+Oy9CvlVLee6F9ADT2A6kec=) 12: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: SFCF3eZAfaB4k234A4Mal+M9wtz6OMi0W08cO5CL2c4=) 13: 3130332e3131322e3133392e302f32342d3234203d3e20313337333330.roa (hash: JpAZjX8/swngpxlxVVVajwCNKWAQXON4Zao07dX/5sA=) 14: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: vTpYTNK2Iedt3x6MQB/Xrh13AhkarFJV4HWTUjcGM/Y=) 15: 3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa (hash: 1ez+krjsqhXyqvxYrqewG2OuJMmETdewfUDWdsil76A=) 16: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: 1oWczp9RZm7lezuDVU+ofnA0tfj2lVP+IvFgjT0dOg4=) 17: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: w4rnLSoK9Ogry5Be/7bEeNtK/st8upmlmof3uHLSQS4=) 18: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: ra0Qf+ys3TjTOOjzu7G6xBCVp6PgE8NBjiFHNgjZfy0=) 19: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: vtCuldzUtylI5t9/fCW+s++nz3SUBB8oSaeAOGcN8rI=) 20: 3130332e3131322e3133362e302f32332d3234203d3e20313337333330.roa (hash: 0nR+a0GrELpeQDM3LuDxE+qTaXatthUlw07SHUwh/Ys=) 21: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: cplcGCMTKNbyST3IWkDxcP/n/AeMzarnQF1LNyGc5EY=) 22: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: BBYTiuzRjYx15TfoXkETOVppXlE7UGzNaI5UpnCSg40=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d0:9b:5f:50:f1:29:f8:93:8d:7c:a1:49:a2:ba:15:89:2c:eb:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Mar 1 15:17:30 2026 GMT Not After : Mar 4 21:38:30 2026 GMT Subject: CN=EF4117F72FB8D3F3E00FAAEC0DB57C5A018BECCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:45:ef:7a:49:47:9f:f3:44:d1:db:60:19: 82:49:c4:e0:cb:4d:66:57:9d:76:89:5b:c0:d1:ee: 6d:53:93:cf:ce:93:29:a6:b8:83:84:a4:a9:33:4e: eb:eb:00:e2:07:cc:4c:4f:4e:51:e6:c2:f1:64:7a: ea:04:f9:9c:b1:ae:e0:84:50:8e:98:33:93:7f:fb: 97:8c:84:51:8f:22:b3:f8:47:9d:c8:02:3d:cc:44: f3:71:c8:82:6e:38:76:5c:c5:ea:40:46:a6:ff:04: 96:e9:e3:ce:fe:57:50:96:f5:2a:c2:07:14:bc:b2: 6c:27:12:cf:46:b6:07:5b:29:6b:c1:85:95:ea:4a: f8:07:16:1d:42:43:29:2d:d3:7e:6a:66:c8:a5:32: 52:d5:89:b3:db:72:13:72:64:97:d2:90:eb:ac:3d: ff:b4:e7:1f:94:b2:da:05:de:b5:4b:7d:16:90:e0: cb:8e:37:48:b0:b6:c2:8a:21:a3:3f:dd:73:d0:67: be:dd:80:07:d7:6a:c2:c3:2f:2f:db:d4:95:eb:54: 30:04:65:35:9d:c0:4a:46:1f:4a:80:b8:74:d4:85: 30:1c:23:fb:2c:57:52:36:f8:28:a2:0b:73:6f:b0: 22:4f:a7:5e:09:92:5d:b3:21:5f:ff:06:61:b2:bf: 90:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:41:17:F7:2F:B8:D3:F3:E0:0F:AA:EC:0D:B5:7C:5A:01:8B:EC:CD X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:9e:49:6a:ea:7d:a4:cf:51:af:62:a6:f2:bb:b3:75:f7:43: 32:f5:d0:ac:37:ca:c0:85:d1:31:32:4e:dc:4e:bc:dd:11:7f: bf:be:e5:ce:36:ee:9c:9c:77:52:90:f0:bd:1a:02:03:83:9b: 20:d6:65:83:31:ab:18:18:ac:e9:50:b3:ef:58:f3:97:45:92: cd:27:79:33:c0:61:71:97:01:ff:5c:2f:52:ac:ac:e2:48:c9: 9e:7a:3e:2f:42:60:1d:8a:64:81:85:6d:7f:4f:16:77:37:9e: 92:ec:cd:f8:42:70:c3:e7:d2:46:46:0d:82:aa:87:d5:e7:85: 48:b2:72:91:b1:a4:29:d8:f2:bb:ae:89:0a:d7:4d:a8:d9:1f: 36:49:76:bb:c8:d1:95:80:97:3f:b5:29:9e:20:ad:96:84:34: 7d:0e:a8:5f:65:55:c0:9a:7b:4a:dc:94:8d:f0:62:be:e7:13: 39:a2:d3:fb:a6:4c:06:5d:50:51:37:95:ce:0a:e3:90:90:d3: 31:be:38:c1:4d:68:90:42:28:49:e3:a2:7c:f2:64:ab:7a:f9: 0c:83:81:b0:74:98:91:3f:b5:21:f4:f2:40:c2:ae:9f:67:49: ef:17:ce:6d:5a:c0:cb:bd:db:d6:fb:70:9d:da:28:a5:3a:8a: dd:13:a5:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQdCbX1DxKfiTjXyhSaK6FYks68kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNjAzMDExNTE3MzBaFw0yNjAzMDQyMTM4MzBaMDMxMTAvBgNV BAMTKEVGNDExN0Y3MkZCOEQzRjNFMDBGQUFFQzBEQjU3QzVBMDE4QkVDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykEXveklHn/NE0dtgGYJJxODL TWZXnXaJW8DR7m1Tk8/OkymmuIOEpKkzTuvrAOIHzExPTlHmwvFkeuoE+ZyxruCE UI6YM5N/+5eMhFGPIrP4R53IAj3MRPNxyIJuOHZcxepARqb/BJbp487+V1CW9SrC BxS8smwnEs9GtgdbKWvBhZXqSvgHFh1CQykt035qZsilMlLVibPbchNyZJfSkOus Pf+05x+UstoF3rVLfRaQ4MuON0iwtsKKIaM/3XPQZ77dgAfXasLDLy/b1JXrVDAE ZTWdwEpGH0qAuHTUhTAcI/ssV1I2+CiiC3NvsCJPp14Jkl2zIV//BmGyv5BLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU70EX9y+40/PgD6rsDbV8WgGL7M0wHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMzNGZmMDgtZDIxZi00MjBiLTg3 ZGYtNTMxMDNiNmRjMjUzLzAvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUx MkZFNEMxRDAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAieSWrqfaTPUa9ipvK7s3X3QzL10Kw3ysCF 0TEyTtxOvN0Rf7++5c427pycd1KQ8L0aAgODmyDWZYMxqxgYrOlQs+9Y85dFks0n eTPAYXGXAf9cL1KsrOJIyZ56Pi9CYB2KZIGFbX9PFnc3npLszfhCcMPn0kZGDYKq h9XnhUiycpGxpCnY8ruuiQrXTajZHzZJdrvI0ZWAlz+1KZ4grZaENH0OqF9lVcCa e0rclI3wYr7nEzmi0/umTAZdUFE3lc4K45CQ0zG+OMFNaJBCKEnjonzyZKt6+QyD gbB0mJE/tSH08kDCrp9nSe8Xzm1awMu929b7cJ3aKKU6it0TpVY= -----END CERTIFICATE-----Generated at Mon Mar 2 12:50:56 2026 by rpki-client