$ rpki-client -vvf repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft File: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft (raw, json) Hash identifier: 1U0u83PvrH8AO7QMU4VKI7YeBEGXbaWp3g8tFynPlUE= Subject key identifier: DD:2A:0B:57:5F:AA:4C:0E:39:35:06:FE:4D:1E:95:08:85:E5:12:91 Authority key identifier: 23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 Certificate issuer: /CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Certificate serial: 7E13C4975C4422D42EEF43D50AECD4A7D4120258 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft Manifest number: 0167 Signing time: Sun 01 Mar 2026 14:02:13 +0000 Manifest this update: Sun 01 Mar 2026 13:57:13 +0000 Manifest next update: Wed 04 Mar 2026 19:09:13 +0000 Files and hashes: 1: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl (hash: IAqj7RZf8cNBXurmB4bvO9xQT0WigiHNDn/BwpTNKE4=) 2: 3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa (hash: JvAuAWjeLfp0XViXv+7ZCgiJcBbHkm/DO53vlhMWqfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:13:c4:97:5c:44:22:d4:2e:ef:43:d5:0a:ec:d4:a7:d4:12:02:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Validity Not Before: Mar 1 13:57:13 2026 GMT Not After : Mar 4 19:09:13 2026 GMT Subject: CN=DD2A0B575FAA4C0E393506FE4D1E950885E51291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:36:07:da:c1:74:c8:5d:36:a8:78:71:ec:e9: 49:a9:42:b1:bb:32:27:de:79:be:ed:e3:a1:f3:3f: 1f:f2:ae:a5:9e:2d:e5:ae:d5:56:11:8c:4a:e8:fb: bd:76:e0:50:a5:2e:14:46:da:95:16:32:25:1a:2e: 1f:46:30:fb:17:13:d5:49:2a:27:31:e2:5a:37:9d: 89:26:37:76:86:fe:02:79:5d:87:2c:fa:2f:cc:24: ba:f9:c2:28:f6:29:49:30:d4:95:67:74:2c:8e:34: 5a:18:48:01:71:af:35:ae:95:5c:39:fe:47:96:34: 5a:92:2f:3e:4e:e8:65:0b:eb:03:1b:b8:01:e5:21: 7b:78:29:38:f3:9b:cf:4d:9c:d5:12:fa:9c:fd:80: 4b:e5:d7:17:d0:b0:ae:96:c4:f3:b0:b9:32:e5:e9: e5:ed:e5:05:44:0a:05:71:44:fc:3a:ec:38:00:a9: fa:42:67:12:8e:3b:ca:90:d6:47:1c:d4:49:d8:35: f4:60:1e:3f:81:c4:0e:c9:4a:33:45:73:17:39:8d: 81:2f:6d:c5:c9:82:6c:62:61:5c:6c:08:3b:e6:df: cd:e4:b2:17:46:af:55:7f:2f:8a:54:b7:08:f6:a9: b3:0c:f8:e6:36:75:47:29:c8:fd:a4:ac:c7:bf:d5: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2A:0B:57:5F:AA:4C:0E:39:35:06:FE:4D:1E:95:08:85:E5:12:91 X509v3 Authority Key Identifier: keyid:23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:aa:b8:ad:13:42:aa:7b:e8:80:d9:42:40:ae:d9:e7:8d:40: 6b:5a:40:67:10:50:60:ac:6b:c9:63:28:b4:dd:bf:0d:28:fe: b4:93:d1:85:ba:c4:81:85:07:4d:5d:b3:c2:11:60:c1:c2:15: e1:b8:97:92:04:74:ba:3e:60:8c:ea:f0:09:45:2b:8b:ca:20: c7:70:2e:3b:d6:ed:14:f6:8b:34:05:6a:e8:1a:a9:2a:51:bb: cf:e4:0b:84:63:bd:86:7c:93:ee:db:5e:dd:45:f0:f3:fc:0f: d5:cc:7c:f7:1a:1c:ae:80:38:2a:4d:c1:f3:7c:b1:89:86:d6: 8a:fc:a1:d4:e5:2b:30:3f:ce:37:37:33:a2:da:66:e4:ae:9e: 8c:f1:29:10:9e:5e:10:46:07:05:30:7a:40:4f:e9:e1:7d:94: 66:e4:11:ee:90:7b:b2:95:c7:ee:f6:c3:81:4e:18:e9:88:f9: e7:55:4a:f6:1d:55:e6:ec:d5:ef:84:6e:85:07:31:86:c4:88: b7:cc:ff:58:23:68:fb:5a:10:58:ee:71:ec:a7:6e:93:9d:e6: 7d:38:43:24:9e:b5:01:38:8c:25:cb:58:29:a3:ac:0a:c5:2e: fd:dd:d0:1e:ce:6d:33:bd:8d:65:c0:99:03:bf:36:51:ea:b7: 00:5b:9d:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfhPEl1xEItQu70PVCuzUp9QSAlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIz QjAwRUVCNjAeFw0yNjAzMDExMzU3MTNaFw0yNjAzMDQxOTA5MTNaMDMxMTAvBgNV BAMTKEREMkEwQjU3NUZBQTRDMEUzOTM1MDZGRTREMUU5NTA4ODVFNTEyOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENgfawXTIXTaoeHHs6UmpQrG7 Mifeeb7t46HzPx/yrqWeLeWu1VYRjEro+7124FClLhRG2pUWMiUaLh9GMPsXE9VJ Kicx4lo3nYkmN3aG/gJ5XYcs+i/MJLr5wij2KUkw1JVndCyONFoYSAFxrzWulVw5 /keWNFqSLz5O6GUL6wMbuAHlIXt4KTjzm89NnNUS+pz9gEvl1xfQsK6WxPOwuTLl 6eXt5QVECgVxRPw67DgAqfpCZxKOO8qQ1kcc1EnYNfRgHj+BxA7JSjNFcxc5jYEv bcXJgmxiYVxsCDvm383kshdGr1V/L4pUtwj2qbMM+OY2dUcpyP2krMe/1czpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3SoLV1+qTA45NQb+TR6VCIXlEpEwHwYDVR0j BBgwFoAUIxMtasKg7UGZb1TACopZsjsA7rYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmU0N2M2ZC1lNjI0LTQ3N2MtYWUxOC1kMzJmMjJjOTYyMDQvMC8yMzEzMkQ2QUMy QTBFRDQxOTk2RjU0QzAwQThBNTlCMjNCMDBFRUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIzQjAw RUVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZlNDdjNmQtZTYyNC00NzdjLWFl MTgtZDMyZjIyYzk2MjA0LzAvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5 QjIzQjAwRUVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOquK0TQqp76IDZQkCu2eeNQGtaQGcQUGCs a8ljKLTdvw0o/rST0YW6xIGFB01ds8IRYMHCFeG4l5IEdLo+YIzq8AlFK4vKIMdw LjvW7RT2izQFaugaqSpRu8/kC4RjvYZ8k+7bXt1F8PP8D9XMfPcaHK6AOCpNwfN8 sYmG1or8odTlKzA/zjc3M6LaZuSunozxKRCeXhBGBwUwekBP6eF9lGbkEe6Qe7KV x+72w4FOGOmI+edVSvYdVebs1e+EboUHMYbEiLfM/1gjaPtaEFjuceynbpOd5n04 QySetQE4jCXLWCmjrArFLv3d0B7ObTO9jWXAmQO/NlHqtwBbnSs= -----END CERTIFICATE-----Generated at Mon Mar 2 07:49:41 2026 by rpki-client