$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft File: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft (raw, json) Hash identifier: om2Gv1eRwrab0M4ihZNqdN5mFHHmlPc9zICKQ/Y/7Zk= Subject key identifier: D2:98:02:81:B7:59:60:B3:ED:8E:DE:4C:81:29:F5:E3:BB:3A:75:97 Authority key identifier: 23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 Certificate issuer: /CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Certificate serial: 621FB40ED5B7B37746482A63CD535E45A3C13B83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft Manifest number: 012C Signing time: Fri 17 Apr 2026 09:31:01 +0000 Manifest this update: Fri 17 Apr 2026 09:26:01 +0000 Manifest next update: Mon 20 Apr 2026 10:00:01 +0000 Files and hashes: 1: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl (hash: +HeCbZz1dUc1amq608lpY6GE7e0xXWqh14XoHpTi7ow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:1f:b4:0e:d5:b7:b3:77:46:48:2a:63:cd:53:5e:45:a3:c1:3b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Validity Not Before: Apr 17 09:26:01 2026 GMT Not After : Apr 20 10:00:01 2026 GMT Subject: CN=D2980281B75960B3ED8EDE4C8129F5E3BB3A7597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4c:1e:d1:46:7d:cf:8a:60:e6:15:33:7e:12: 72:59:52:7e:58:77:62:7a:d3:b1:8d:5e:c8:5d:ef: 30:5f:fb:77:d0:72:dd:53:6e:5c:95:63:74:92:93: 9b:a0:01:f1:28:90:56:e9:03:d8:de:ad:22:04:ed: b8:1b:24:9a:64:78:f7:02:72:e5:cb:fb:3a:00:38: 40:26:5c:d5:5f:f4:19:ec:6c:77:c4:6d:b9:7e:bb: 4e:b2:c0:ed:b8:8d:66:31:22:c2:70:f5:f7:cf:e0: 99:2f:e4:36:3d:50:21:5f:89:53:ab:dd:46:68:e0: 4a:c6:2b:da:fc:41:dc:67:f1:83:97:c8:61:f2:72: c7:7d:48:27:a4:e5:b9:0d:34:67:b5:9e:8e:31:23: 17:a8:c3:6c:0a:d8:f7:7f:2e:34:b7:65:82:0f:bb: 63:d6:fa:a6:bd:49:57:12:69:5c:1f:bd:3b:72:b8: d5:4c:6e:04:6c:66:4c:03:ad:24:b5:c7:07:f0:24: 55:43:5a:ba:ba:ea:0a:2d:a9:69:b2:dd:53:75:a5: ba:2e:15:8b:a4:60:85:19:ef:56:b1:ce:51:a2:bd: 0a:d0:0f:66:97:f6:d8:cf:c6:7d:81:d1:4f:c3:b2: b8:33:1e:ca:e1:a0:c8:28:f1:59:db:6d:70:09:29: a9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:98:02:81:B7:59:60:B3:ED:8E:DE:4C:81:29:F5:E3:BB:3A:75:97 X509v3 Authority Key Identifier: keyid:23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:08:37:e8:84:d5:1e:50:78:4c:de:e0:c2:6b:f3:38:39:12: 12:b8:7f:0b:12:82:50:d5:38:5b:74:48:3a:f9:03:2e:62:fe: 99:79:87:e6:f3:f1:2d:d7:b9:5c:f0:5e:54:aa:fa:b1:c6:53: 33:34:19:0c:ab:d7:a6:c7:58:b5:c8:0a:1f:23:4b:5a:6e:a5: 16:76:4d:c8:40:2b:72:83:a3:02:69:84:95:8a:d0:e2:6f:eb: 76:5d:83:7b:a7:42:e7:6f:8b:9a:a3:45:dd:67:f1:97:f8:70: 84:d4:d8:df:90:53:44:39:de:a6:5e:cd:61:18:d2:76:70:ba: 28:76:60:25:ae:22:3e:65:c9:60:c9:e5:86:62:7e:26:6f:e5: d0:82:77:a1:36:0a:f0:31:54:84:9f:7a:0e:25:2d:34:3b:f9: 58:b2:d8:75:e9:23:91:2e:c9:35:c6:7f:2b:52:0a:93:33:68: e9:09:4f:a9:bc:4c:69:8e:98:a6:86:5c:35:f6:7d:11:08:dd: f7:49:94:df:5d:30:f3:ea:ca:f5:f5:b8:60:fc:c9:8b:af:89: 03:11:13:d1:aa:0e:15:ff:35:b5:92:93:93:26:4b:e8:1d:79: 19:80:29:8a:42:e2:88:6b:55:8c:98:e0:a7:7f:95:7d:f0:e4: fc:c3:5b:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYh+0DtW3s3dGSCpjzVNeRaPBO4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFC RkNDN0UzNjAeFw0yNjA0MTcwOTI2MDFaFw0yNjA0MjAxMDAwMDFaMDMxMTAvBgNV BAMTKEQyOTgwMjgxQjc1OTYwQjNFRDhFREU0QzgxMjlGNUUzQkIzQTc1OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuTB7RRn3PimDmFTN+EnJZUn5Y d2J607GNXshd7zBf+3fQct1TblyVY3SSk5ugAfEokFbpA9jerSIE7bgbJJpkePcC cuXL+zoAOEAmXNVf9BnsbHfEbbl+u06ywO24jWYxIsJw9ffP4Jkv5DY9UCFfiVOr 3UZo4ErGK9r8Qdxn8YOXyGHycsd9SCek5bkNNGe1no4xIxeow2wK2Pd/LjS3ZYIP u2PW+qa9SVcSaVwfvTtyuNVMbgRsZkwDrSS1xwfwJFVDWrq66gotqWmy3VN1pbou FYukYIUZ71axzlGivQrQD2aX9tjPxn2B0U/DsrgzHsrhoMgo8VnbbXAJKamZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0pgCgbdZYLPtjt5MgSn147s6dZcwHwYDVR0j BBgwFoAUI8Yi+HYYq4sEIuempG0ukb/MfjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMS8yM0M2MjJGODc2 MThBQjhCMDQyMkU3QTZBNDZEMkU5MUJGQ0M3RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFCRkND N0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJF OTFCRkNDN0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEIN+iE1R5QeEze4MJr8zg5EhK4fwsSglDV OFt0SDr5Ay5i/pl5h+bz8S3XuVzwXlSq+rHGUzM0GQyr16bHWLXICh8jS1pupRZ2 TchAK3KDowJphJWK0OJv63Zdg3unQudvi5qjRd1n8Zf4cITU2N+QU0Q53qZezWEY 0nZwuih2YCWuIj5lyWDJ5YZifiZv5dCCd6E2CvAxVISfeg4lLTQ7+Viy2HXpI5Eu yTXGfytSCpMzaOkJT6m8TGmOmKaGXDX2fREI3fdJlN9dMPPqyvX1uGD8yYuviQMR E9GqDhX/NbWSk5MmS+gdeRmAKYpC4ohrVYyY4Kd/lX3w5PzDW0w= -----END CERTIFICATE-----Generated at Fri Apr 17 14:39:52 2026 by rpki-client