$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft File: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft (raw, json) Hash identifier: YNTiOkhZ8p/NsU7FD01IL4ZnmE57WoGK8hOPc4TM6WE= Subject key identifier: 26:83:D7:C4:8E:75:27:C7:71:40:9A:DD:62:58:68:F5:4C:61:D6:77 Authority key identifier: 23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 Certificate issuer: /CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Certificate serial: 25F9E54C270623924410169017C3D66925F8CC44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft Manifest number: 0117 Signing time: Sat 28 Feb 2026 23:51:00 +0000 Manifest this update: Sat 28 Feb 2026 23:46:00 +0000 Manifest next update: Wed 04 Mar 2026 01:42:00 +0000 Files and hashes: 1: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl (hash: qsiblzj6D/9uhcuq8YMlgJ6e/a9+2LQJFQ2UnASLunE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 01:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f9:e5:4c:27:06:23:92:44:10:16:90:17:c3:d6:69:25:f8:cc:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Validity Not Before: Feb 28 23:46:00 2026 GMT Not After : Mar 4 01:42:00 2026 GMT Subject: CN=2683D7C48E7527C771409ADD625868F54C61D677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:e4:e0:0d:40:27:0f:42:b4:ef:a7:3c:52: 34:cf:eb:63:67:16:11:94:4d:fb:17:bc:bb:cb:29: 33:a2:24:32:5f:55:37:71:37:81:7a:a1:17:a4:72: 96:6e:33:b1:a5:06:ff:b0:f1:a1:38:c7:bb:cf:08: d3:98:dc:30:cd:a9:29:f9:2c:01:a9:16:c5:aa:2b: 94:ac:71:21:23:0b:95:32:5c:3e:cd:71:4e:07:e5: 7f:08:bb:16:3d:6b:3c:89:da:81:05:7f:1e:30:3f: 88:8e:8d:38:50:ef:bb:ce:93:1d:e5:1e:04:da:06: 8f:3f:98:bf:60:e5:58:7a:df:f7:e2:4c:92:75:f5: b2:a6:d7:cc:15:27:8b:d5:a4:76:e7:ea:43:04:61: 70:53:44:d8:a0:e4:9b:88:49:e5:93:01:ba:9b:04: 4f:0c:22:e5:46:e3:21:ea:e0:c2:ec:ed:02:e6:ff: db:7a:b5:ac:b2:3a:83:ad:f1:8f:6d:24:17:ef:21: 0e:1e:cc:de:e3:90:ca:af:db:8e:51:51:72:16:ea: fb:44:06:5a:d3:8e:88:24:2c:01:db:25:20:31:a2: fd:a0:3e:17:86:34:fb:1f:1a:ef:01:bb:b7:c4:39: 56:54:ea:73:cc:62:dc:8b:40:0f:f2:c2:7a:31:ae: 29:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:83:D7:C4:8E:75:27:C7:71:40:9A:DD:62:58:68:F5:4C:61:D6:77 X509v3 Authority Key Identifier: keyid:23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:74:e0:ef:d9:17:a1:04:de:2c:71:10:d8:f7:61:6e:2a:d6: 76:78:35:57:3f:f1:cb:65:69:f8:5a:35:13:3c:04:0d:ec:b4: ed:75:2a:5f:b0:92:23:a3:ba:d8:8d:5c:04:45:ed:35:60:bf: c6:fc:88:94:41:fc:fb:a1:89:b0:f0:31:a5:e0:53:de:78:1e: 58:f0:b1:d2:58:bb:c3:76:90:ee:77:2f:cc:02:fd:17:ec:ef: 36:da:19:37:8f:81:ab:42:c3:ab:75:95:b7:e3:bb:ad:1a:21: ef:d4:b4:5b:68:a5:0c:6c:4f:ec:0e:b9:3d:2f:48:f9:2e:a3: a1:6b:24:d7:39:40:e6:fa:26:67:f7:b0:69:2a:37:8a:41:ee: 67:59:68:d1:86:0b:43:df:11:f3:16:76:06:73:ee:6a:40:7e: 83:d5:1f:00:84:b1:35:49:28:20:54:d6:77:ce:a2:bb:ff:6d: b5:35:91:39:a3:21:44:2f:32:6d:94:75:e4:49:be:8e:9c:4b: 02:13:a5:ef:88:9b:41:2b:5e:9d:8c:2e:7b:40:49:3d:3c:e6: 13:23:d1:7b:2e:b3:5b:76:35:9e:2a:1d:32:f0:11:ae:51:66: 04:54:c6:5d:05:62:a4:81:34:9c:f4:f7:18:06:45:74:42:9f: 24:67:e3:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJfnlTCcGI5JEEBaQF8PWaSX4zEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFC RkNDN0UzNjAeFw0yNjAyMjgyMzQ2MDBaFw0yNjAzMDQwMTQyMDBaMDMxMTAvBgNV BAMTKDI2ODNEN0M0OEU3NTI3Qzc3MTQwOUFERDYyNTg2OEY1NEM2MUQ2NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5k+TgDUAnD0K076c8UjTP62Nn FhGUTfsXvLvLKTOiJDJfVTdxN4F6oRekcpZuM7GlBv+w8aE4x7vPCNOY3DDNqSn5 LAGpFsWqK5SscSEjC5UyXD7NcU4H5X8IuxY9azyJ2oEFfx4wP4iOjThQ77vOkx3l HgTaBo8/mL9g5Vh63/fiTJJ19bKm18wVJ4vVpHbn6kMEYXBTRNig5JuISeWTAbqb BE8MIuVG4yHq4MLs7QLm/9t6tayyOoOt8Y9tJBfvIQ4ezN7jkMqv245RUXIW6vtE BlrTjogkLAHbJSAxov2gPheGNPsfGu8Bu7fEOVZU6nPMYtyLQA/ywnoxrikVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJoPXxI51J8dxQJrdYlho9Uxh1ncwHwYDVR0j BBgwFoAUI8Yi+HYYq4sEIuempG0ukb/MfjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMS8yM0M2MjJGODc2 MThBQjhCMDQyMkU3QTZBNDZEMkU5MUJGQ0M3RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFCRkND N0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJF OTFCRkNDN0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADN04O/ZF6EE3ixxENj3YW4q1nZ4NVc/8ctl afhaNRM8BA3stO11Kl+wkiOjutiNXARF7TVgv8b8iJRB/PuhibDwMaXgU954Hljw sdJYu8N2kO53L8wC/Rfs7zbaGTePgatCw6t1lbfju60aIe/UtFtopQxsT+wOuT0v SPkuo6FrJNc5QOb6Jmf3sGkqN4pB7mdZaNGGC0PfEfMWdgZz7mpAfoPVHwCEsTVJ KCBU1nfOorv/bbU1kTmjIUQvMm2UdeRJvo6cSwITpe+Im0ErXp2MLntAST085hMj 0Xsus1t2NZ4qHTLwEa5RZgRUxl0FYqSBNJz09xgGRXRCnyRn478= -----END CERTIFICATE-----Generated at Mon Mar 2 15:00:41 2026 by rpki-client