$ rpki-client -vvf repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft File: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft (raw, json) Hash identifier: 2CL6aiiurhhXjAiEr1jVpFqSFk83uUSnxdF2jNp7VPo= Subject key identifier: DC:39:51:9F:32:B5:7D:D7:26:63:06:2E:B6:AB:BE:2F:DF:57:BA:EE Authority key identifier: 23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C Certificate issuer: /CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Certificate serial: 31FF43BC9C84515A584700C00DED629F52EC99CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft Manifest number: F5 Signing time: Thu 16 Apr 2026 18:02:27 +0000 Manifest this update: Thu 16 Apr 2026 17:57:27 +0000 Manifest next update: Mon 20 Apr 2026 04:14:27 +0000 Files and hashes: 1: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl (hash: 3NXZtiSrkjjLXyuobya58uUs9MvF85PnBTJygF3j3HQ=) 2: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: TgOS2DIzKKN1li7GhbP8QE2EiuFzEQeHETrSLQ8zd80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ff:43:bc:9c:84:51:5a:58:47:00:c0:0d:ed:62:9f:52:ec:99:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Validity Not Before: Apr 16 17:57:27 2026 GMT Not After : Apr 20 04:14:27 2026 GMT Subject: CN=DC39519F32B57DD72663062EB6ABBE2FDF57BAEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:08:d3:60:ab:25:01:0a:ea:35:2a:b6:af:79: 51:c9:4c:f4:b8:19:4b:f0:0d:4d:b8:a9:a2:3d:08: 94:b3:f7:a9:55:e2:0d:32:23:88:c9:6d:47:0e:40: 32:da:47:37:17:c5:27:e6:0b:81:b7:4e:19:36:5a: e9:75:fe:27:5f:a2:9d:7c:4b:30:e8:4a:bd:69:fe: 59:ad:de:87:3d:30:4a:f8:70:11:cd:42:16:52:f4: d8:04:ce:eb:b8:b5:b6:25:c2:1b:a2:40:d9:fe:30: 7b:71:35:68:43:f0:b5:30:78:2a:e3:87:d8:70:4b: 1f:47:fd:b1:8e:be:4c:5b:66:36:0b:31:9a:0f:e8: 20:de:de:dc:0c:96:6a:58:3c:35:89:49:8f:e2:b7: 57:22:2d:78:22:b0:83:c9:a6:3c:6a:a9:36:8c:df: 06:eb:20:ca:c6:71:c8:f1:35:14:16:1f:e2:16:34: 36:dc:81:c4:99:91:4d:46:1b:ac:1e:5d:3e:d1:26: 81:e6:aa:c7:46:c4:3f:06:8c:9f:99:f7:40:9a:18: 96:61:9b:85:4e:59:d6:d9:f5:62:b4:d9:c3:ea:68: cc:26:81:31:2b:ee:57:ac:7f:b6:2f:4f:7c:6e:53: 4f:8c:94:2f:6e:24:5e:8c:c1:bb:c6:96:be:62:43: da:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:39:51:9F:32:B5:7D:D7:26:63:06:2E:B6:AB:BE:2F:DF:57:BA:EE X509v3 Authority Key Identifier: keyid:23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3b:18:93:9a:88:ab:ae:85:e9:f7:46:b2:f4:1e:cd:30:c1: 5d:81:e2:33:b9:3a:68:cd:f7:9b:0a:18:57:39:e7:39:aa:31: 71:8f:e2:45:2b:8a:e4:a4:d3:f8:56:14:36:04:fb:f7:4a:82: 28:ff:c6:2a:60:86:95:bf:d3:fd:aa:eb:67:6c:5f:40:5e:cf: 8d:b7:3d:be:6f:ac:d5:be:ba:c8:5d:c6:f2:ad:2a:42:83:22: f8:c1:b4:be:10:7c:cf:c3:9f:47:59:0f:5f:ed:65:de:72:ad: 96:9e:d4:23:12:50:11:0f:f8:c2:88:53:31:2a:5e:6e:c1:1b: 89:f2:d1:fd:55:ab:88:2b:28:eb:15:b0:f6:12:2d:49:20:98: dc:06:92:48:3d:af:59:cf:37:82:ad:63:4b:19:72:0e:18:75: e4:1c:41:4e:e7:4f:8d:92:91:ff:d9:e2:2d:79:9a:29:e6:07: 0e:24:a0:55:1f:5e:a7:5e:6a:27:7b:bb:d2:be:ce:59:fe:66: 19:3f:02:ac:0f:06:7a:29:ad:e1:6a:3e:96:c1:cf:20:dd:7b: ef:2e:b9:62:d8:80:43:3d:fb:f6:de:a0:33:6f:9c:8f:ba:8e: 12:0a:78:c2:25:f0:3f:dd:28:74:d8:92:a8:c3:92:04:bf:89: 06:6e:3d:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMf9DvJyEUVpYRwDADe1in1LsmcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3 N0U4RUU3QzAeFw0yNjA0MTYxNzU3MjdaFw0yNjA0MjAwNDE0MjdaMDMxMTAvBgNV BAMTKERDMzk1MTlGMzJCNTdERDcyNjYzMDYyRUI2QUJCRTJGREY1N0JBRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBCNNgqyUBCuo1KraveVHJTPS4 GUvwDU24qaI9CJSz96lV4g0yI4jJbUcOQDLaRzcXxSfmC4G3Thk2Wul1/idfop18 SzDoSr1p/lmt3oc9MEr4cBHNQhZS9NgEzuu4tbYlwhuiQNn+MHtxNWhD8LUweCrj h9hwSx9H/bGOvkxbZjYLMZoP6CDe3twMlmpYPDWJSY/it1ciLXgisIPJpjxqqTaM 3wbrIMrGccjxNRQWH+IWNDbcgcSZkU1GG6weXT7RJoHmqsdGxD8GjJ+Z90CaGJZh m4VOWdbZ9WK02cPqaMwmgTEr7lesf7YvT3xuU0+MlC9uJF6MwbvGlr5iQ9rDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3DlRnzK1fdcmYwYutqu+L99Xuu4wHwYDVR0j BBgwFoAUI76M6mGUBvnYYLH5fuj37Xfo7nwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmVkNmRjNC1kMzhiLTQ0YmEtOWYwYi00Mjg0NTViMjc2ZWUvMC8yM0JFOENFQTYx OTQwNkY5RDg2MEIxRjk3RUU4RjdFRDc3RThFRTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3N0U4 RUU3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3 RUQ3N0U4RUU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJw7GJOaiKuuhen3RrL0Hs0wwV2B4jO5OmjN 95sKGFc55zmqMXGP4kUriuSk0/hWFDYE+/dKgij/xipghpW/0/2q62dsX0Bez423 Pb5vrNW+ushdxvKtKkKDIvjBtL4QfM/Dn0dZD1/tZd5yrZae1CMSUBEP+MKIUzEq Xm7BG4ny0f1Vq4grKOsVsPYSLUkgmNwGkkg9r1nPN4KtY0sZcg4YdeQcQU7nT42S kf/Z4i15minmBw4koFUfXqdeaid7u9K+zln+Zhk/AqwPBnopreFqPpbBzyDde+8u uWLYgEM9+/beoDNvnI+6jhIKeMIl8D/dKHTYkqjDkgS/iQZuPQk= -----END CERTIFICATE-----Generated at Fri Apr 17 15:17:53 2026 by rpki-client