$ rpki-client -vvf repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft File: 523EE8D6F461B8FD4106F482C46C1029B1013145.mft (raw, json) Hash identifier: Ffal8MnKGt49/LZ9HKShIWaxlEdJL1DqFxfTLM03IwA= Subject key identifier: 91:BD:EC:63:22:6A:B7:61:FF:13:C4:AB:90:C2:67:E6:9E:97:0A:87 Authority key identifier: 52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 Certificate issuer: /CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Certificate serial: 29B63AFCF773F62520891410B48A57A0089D3259 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft Manifest number: 011E Signing time: Sat 18 Apr 2026 01:20:50 +0000 Manifest this update: Sat 18 Apr 2026 01:15:50 +0000 Manifest next update: Tue 21 Apr 2026 03:29:50 +0000 Files and hashes: 1: 3130332e3132392e3233312e302f32342d3234203d3e20313332363339.roa (hash: jWc0sz86L+eDtr+nDMgQgH+2S7uRf5Y8Wu7u8v4zz0Q=) 2: 3130332e31392e38312e302f32342d3234203d3e20313332363339.roa (hash: jKwlGthiQpzXwnHyIqfnx5NGkz2sE+y3uVu40s6f6sc=) 3: 523EE8D6F461B8FD4106F482C46C1029B1013145.crl (hash: xaQ1+yuc1jUiBmEF+jx6jmk4NaOdipK1T1yuYqD7Rq0=) 4: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (hash: H0hxzRE1P/k0NGsIoy/0kaAKznrWHPdRQxgiRW4T5Qo=) 5: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (hash: YEDjMiqzXqQQzIDtWpx+jx5Bn+2TYkAiFHsRj0775yM=) 6: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (hash: z0HZjcHieRuZ5HHeSmTqSUrJvHMtgbLp6o8sJVRupVI=) 7: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (hash: zP2/XdcDOhp440RXruEyN+zWviJE7i53kBfkBKlQJ0I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 03:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b6:3a:fc:f7:73:f6:25:20:89:14:10:b4:8a:57:a0:08:9d:32:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Validity Not Before: Apr 18 01:15:50 2026 GMT Not After : Apr 21 03:29:50 2026 GMT Subject: CN=91BDEC63226AB761FF13C4AB90C267E69E970A87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:08:88:f5:7b:ae:20:96:44:fc:10:87:7e:f6: 18:b9:79:7d:11:ba:71:df:39:34:35:17:33:1c:58: 7b:60:45:41:b0:d1:47:36:b3:31:55:be:74:ee:19: 91:c1:d2:49:f5:51:ac:96:52:6c:d9:89:91:3c:0a: f1:5b:94:61:14:38:f4:92:69:be:8f:44:2e:92:6d: 79:01:9e:ed:cf:a4:a8:de:70:f7:73:13:c1:b9:17: 47:2d:27:08:35:37:bf:8d:82:e6:e1:db:26:0e:95: 18:80:aa:d5:64:04:64:a0:6e:ff:8f:ba:31:e5:ef: bc:89:16:c9:b9:60:c7:29:44:16:6f:3f:be:6a:47: 87:03:57:3f:a6:cc:7f:28:88:5e:6a:dd:96:5b:08: dc:5e:f5:a6:9c:ab:08:5d:34:e8:66:bc:93:86:b4: 62:32:e3:55:67:76:82:e1:32:e9:67:66:d1:62:af: 75:72:ae:8e:78:1b:f6:db:94:45:b7:8c:e1:20:73: 79:2a:f9:2d:c5:d6:4e:a8:d1:6a:6c:50:46:c2:f9: 64:55:05:ff:94:7e:c6:6c:8d:2c:f3:86:e1:77:a2: b9:a8:bf:4e:14:09:94:d4:64:6b:22:8a:28:ea:04: 1f:c7:db:7d:4b:02:c6:9c:33:b2:92:5d:32:61:50: dc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BD:EC:63:22:6A:B7:61:FF:13:C4:AB:90:C2:67:E6:9E:97:0A:87 X509v3 Authority Key Identifier: keyid:52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:2b:07:0d:6d:a7:3d:64:ee:bc:0e:36:da:93:ba:de:f1:c4: be:eb:f2:7a:5e:0a:61:24:d7:bd:81:45:0b:c3:28:fd:c8:4c: 47:4a:09:35:68:b9:a1:b7:81:84:b1:2e:b8:af:78:4d:4b:92: 9a:94:83:bb:d2:97:d9:da:ea:c5:ae:18:02:c7:19:6a:9b:9f: 3b:17:e0:15:f1:88:05:0e:9d:80:46:9c:66:bc:0c:ab:44:51: 5d:fc:15:19:99:90:f5:2e:50:13:73:57:32:4c:98:2b:c0:c2: 75:2e:a0:e3:2f:ac:48:4e:54:ae:8a:ec:c1:6e:42:3a:29:18: 69:93:c6:df:85:fe:c9:83:96:2e:89:21:92:dd:e4:b8:3b:44: f1:82:ee:ca:38:39:d5:4c:9d:95:44:50:3e:0a:71:f3:95:95: e1:36:d7:e1:8d:6f:4a:25:14:da:8e:8d:15:fa:b9:7f:ed:ee: 05:50:c8:15:3b:d3:c0:49:5b:a0:1f:bb:ce:d7:89:82:87:74: 98:31:17:59:2e:b8:2b:b5:05:11:db:36:77:70:87:14:a3:af: 39:78:65:c5:76:82:be:84:c4:db:5c:18:c4:11:92:ab:c1:5e: af:44:37:5a:8d:27:4c:f8:19:f1:9f:9c:6b:59:86:81:bc:b2: 29:1d:58:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKbY6/Pdz9iUgiRQQtIpXoAidMlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlC MTAxMzE0NTAeFw0yNjA0MTgwMTE1NTBaFw0yNjA0MjEwMzI5NTBaMDMxMTAvBgNV BAMTKDkxQkRFQzYzMjI2QUI3NjFGRjEzQzRBQjkwQzI2N0U2OUU5NzBBODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkCIj1e64glkT8EId+9hi5eX0R unHfOTQ1FzMcWHtgRUGw0Uc2szFVvnTuGZHB0kn1UayWUmzZiZE8CvFblGEUOPSS ab6PRC6SbXkBnu3PpKjecPdzE8G5F0ctJwg1N7+Ngubh2yYOlRiAqtVkBGSgbv+P ujHl77yJFsm5YMcpRBZvP75qR4cDVz+mzH8oiF5q3ZZbCNxe9aacqwhdNOhmvJOG tGIy41VndoLhMulnZtFir3Vyro54G/bblEW3jOEgc3kq+S3F1k6o0WpsUEbC+WRV Bf+UfsZsjSzzhuF3ormov04UCZTUZGsiiijqBB/H231LAsacM7KSXTJhUNx5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkb3sYyJqt2H/E8SrkMJn5p6XCocwHwYDVR0j BBgwFoAUUj7o1vRhuP1BBvSCxGwQKbEBMUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWE0Mjc0Mi04OWQyLTQ5YmItOGEzZS0yOTRjMzY4OTcxZjUvMC81MjNFRThENkY0 NjFCOEZENDEwNkY0ODJDNDZDMTAyOUIxMDEzMTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlCMTAx MzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhNDI3NDItODlkMi00OWJiLThh M2UtMjk0YzM2ODk3MWY1LzAvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEw MjlCMTAxMzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACorBw1tpz1k7rwONtqTut7xxL7r8npeCmEk 172BRQvDKP3ITEdKCTVouaG3gYSxLriveE1LkpqUg7vSl9na6sWuGALHGWqbnzsX 4BXxiAUOnYBGnGa8DKtEUV38FRmZkPUuUBNzVzJMmCvAwnUuoOMvrEhOVK6K7MFu QjopGGmTxt+F/smDli6JIZLd5Lg7RPGC7so4OdVMnZVEUD4KcfOVleE21+GNb0ol FNqOjRX6uX/t7gVQyBU708BJW6Afu87XiYKHdJgxF1kuuCu1BRHbNndwhxSjrzl4 ZcV2gr6ExNtcGMQRkqvBXq9EN1qNJ0z4GfGfnGtZhoG8sikdWJw= -----END CERTIFICATE-----Generated at Sun Apr 19 10:07:19 2026 by rpki-client