$ rpki-client -vvf repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft File: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft (raw, json) Hash identifier: SUNQhp3L1fW39grhLWtFL7PRzErFcEhE1/UTeCLEJ6I= Subject key identifier: 65:CB:FE:75:52:E8:AB:28:0C:1A:60:0A:10:3E:5E:B1:78:7D:10:42 Authority key identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC Certificate issuer: /CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Certificate serial: 56C3A0CDC24107CDDEEF12E3F0033AB5897C6320 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft Manifest number: 015C Signing time: Fri 17 Apr 2026 12:41:21 +0000 Manifest this update: Fri 17 Apr 2026 12:36:21 +0000 Manifest next update: Mon 20 Apr 2026 21:13:21 +0000 Files and hashes: 1: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl (hash: grZ75PqmRMt6q1Qi7YlD8Lqs1k+31ag72dxemdLgY3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c3:a0:cd:c2:41:07:cd:de:ef:12:e3:f0:03:3a:b5:89:7c:63:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Validity Not Before: Apr 17 12:36:21 2026 GMT Not After : Apr 20 21:13:21 2026 GMT Subject: CN=65CBFE7552E8AB280C1A600A103E5EB1787D1042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:78:87:ab:01:98:47:e1:80:46:64:07:30:8c: 9e:b4:41:7f:9c:f0:30:a1:d0:ca:e1:4a:4a:ef:24: a8:73:70:45:35:92:82:a4:6a:0f:c6:a4:18:34:ed: e8:49:6e:ad:37:ce:28:d0:db:ef:10:fa:2d:16:9a: 14:47:2c:80:49:31:ea:dc:f9:97:9a:ec:c1:ea:09: bf:5f:4d:62:d6:12:4f:b5:a6:fb:28:37:22:7e:94: f1:dc:e9:e3:9e:57:55:47:16:81:18:1e:9f:df:c6: 88:b8:04:53:26:af:b1:b1:fc:b3:42:07:c4:e2:bd: 23:a8:92:d0:4e:c8:1d:5b:12:8a:5a:35:7f:a2:4d: 48:75:6b:78:f0:67:8c:7e:72:c8:c9:26:60:8f:9d: f1:31:3d:03:fe:99:f0:37:00:21:a5:d3:5e:ee:6a: 63:b1:a3:2f:b7:1a:2d:5c:3b:68:ff:53:b7:c5:43: d3:dd:9a:dd:95:65:ab:f8:2a:24:97:9e:cc:64:70: 23:ae:1e:37:bd:bf:a1:27:d1:ea:e1:44:92:d3:05: 00:46:87:c0:be:4b:53:e3:cf:86:f4:dc:49:df:61: 68:ef:a6:ab:c3:f4:f9:2f:97:18:64:0a:18:53:39: be:a1:57:ca:7f:8d:35:5b:ff:bb:f1:75:db:a3:15: 1c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CB:FE:75:52:E8:AB:28:0C:1A:60:0A:10:3E:5E:B1:78:7D:10:42 X509v3 Authority Key Identifier: keyid:02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c2:83:9a:81:a4:c4:f9:97:32:09:43:44:d7:9b:98:c4:93: a3:b1:59:3b:5d:8a:29:2d:8c:4d:c4:b5:a3:4b:18:ae:c6:e6: a3:00:e0:0a:df:64:09:68:31:33:5b:8c:91:48:58:99:d7:cc: a4:aa:49:70:c0:85:c1:fc:e5:73:b6:ca:74:c7:21:a0:d3:1c: 94:4e:9b:8b:cd:63:1f:cf:7f:09:f3:99:96:21:16:81:75:38: 72:43:56:34:c8:a7:03:36:be:ac:63:e7:d1:5b:4b:0b:6d:f3: 23:89:9e:31:c0:c8:9c:f0:ab:9f:3e:11:42:16:a5:04:a0:3c: 6d:3d:38:4e:83:bf:29:fc:6f:ef:93:cc:d4:73:cf:84:1d:a9: 92:e1:d1:e2:ca:24:a7:0d:ff:2b:d8:e4:1f:08:87:92:d5:99: 9f:72:d4:1c:47:75:33:bd:df:cc:f0:ca:21:c5:14:46:76:e7: 9b:f1:83:2b:59:d9:1d:82:75:4a:23:9d:0f:a7:b7:40:c5:02: c5:88:3c:38:3f:f7:59:26:94:49:2a:92:ad:4e:16:45:3e:d5: c0:c2:30:7c:2b:8b:e2:33:37:e6:68:de:26:81:67:4f:87:27: 9b:ac:73:fe:dc:05:e2:17:a9:9e:e8:0f:e7:2f:93:12:18:b2: 21:57:8e:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVsOgzcJBB83e7xLj8AM6tYl8YyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRE NkQ3RjRBQzAeFw0yNjA0MTcxMjM2MjFaFw0yNjA0MjAyMTEzMjFaMDMxMTAvBgNV BAMTKDY1Q0JGRTc1NTJFOEFCMjgwQzFBNjAwQTEwM0U1RUIxNzg3RDEwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkeIerAZhH4YBGZAcwjJ60QX+c 8DCh0MrhSkrvJKhzcEU1koKkag/GpBg07ehJbq03zijQ2+8Q+i0WmhRHLIBJMerc +Zea7MHqCb9fTWLWEk+1pvsoNyJ+lPHc6eOeV1VHFoEYHp/fxoi4BFMmr7Gx/LNC B8TivSOoktBOyB1bEopaNX+iTUh1a3jwZ4x+csjJJmCPnfExPQP+mfA3ACGl017u amOxoy+3Gi1cO2j/U7fFQ9Pdmt2VZav4KiSXnsxkcCOuHje9v6En0erhRJLTBQBG h8C+S1Pjz4b03EnfYWjvpqvD9PkvlxhkChhTOb6hV8p/jTVb/7vxddujFRxJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZcv+dVLoqygMGmAKED5esXh9EEIwHwYDVR0j BBgwFoAUAiNpE7RqkAPAZF5syFjqVNbX9KwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjcyZjcxYS1iOWMyLTQwMzMtOTY3NS1kNzcwNzYwM2E4MmMvMC8wMjIzNjkxM0I0 NkE5MDAzQzA2NDVFNkNDODU4RUE1NEQ2RDdGNEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRENkQ3 RjRBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2 NzUtZDc3MDc2MDNhODJjLzAvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVB NTRENkQ3RjRBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErCg5qBpMT5lzIJQ0TXm5jEk6OxWTtdiikt jE3EtaNLGK7G5qMA4ArfZAloMTNbjJFIWJnXzKSqSXDAhcH85XO2ynTHIaDTHJRO m4vNYx/PfwnzmZYhFoF1OHJDVjTIpwM2vqxj59FbSwtt8yOJnjHAyJzwq58+EUIW pQSgPG09OE6Dvyn8b++TzNRzz4QdqZLh0eLKJKcN/yvY5B8Ih5LVmZ9y1BxHdTO9 38zwyiHFFEZ255vxgytZ2R2CdUojnQ+nt0DFAsWIPDg/91kmlEkqkq1OFkU+1cDC MHwri+IzN+Zo3iaBZ0+HJ5usc/7cBeIXqZ7oD+cvkxIYsiFXjoc= -----END CERTIFICATE-----Generated at Fri Apr 17 19:12:21 2026 by rpki-client