$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft File: F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json) Hash identifier: 32K1NZK/JGIfAsmiNfF7drR5Qf3y3dEM2TbXOFaFYWg= Subject key identifier: F9:84:6B:A8:49:CB:D2:95:E2:D3:4E:D7:60:5D:C3:FF:64:2E:89:ED Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3 Certificate serial: 3B315E014A999D460904230527D3B6A91CE507A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft Manifest number: 019B Signing time: Wed 15 Apr 2026 18:31:49 +0000 Manifest this update: Wed 15 Apr 2026 18:26:49 +0000 Manifest next update: Sat 18 Apr 2026 23:15:49 +0000 Files and hashes: 1: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: /30hnEhp3Dzns/62pdXdulwu2UQouRYfzxiv7NWc60Y=) 2: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: bL4A3iMML3JwhDE2yFeN6uDiSzuObZzoT/f0gxHop3A=) 3: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: BETPcfS1VcTumvWSwQRlY9PEvVDNhn9IgT3oOeof4jw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 23:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:31:5e:01:4a:99:9d:46:09:04:23:05:27:d3:b6:a9:1c:e5:07:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3 Validity Not Before: Apr 15 18:26:49 2026 GMT Not After : Apr 18 23:15:49 2026 GMT Subject: CN=F9846BA849CBD295E2D34ED7605DC3FF642E89ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8b:14:eb:49:17:33:ea:60:61:44:b4:59:b9: 48:c1:f2:8b:91:ae:ff:27:15:e8:5b:a1:c8:cd:ee: 40:0d:ad:f1:cf:99:c3:52:38:cf:7b:78:c1:4e:2a: f8:81:fd:d1:12:41:04:43:d1:a7:2d:38:e4:0f:99: 6e:81:92:9d:8a:68:8a:3c:a3:8c:66:18:94:39:56: 36:e7:40:05:08:93:ff:6c:35:20:89:2a:75:dd:bf: 75:d5:04:55:84:ae:5f:c9:61:d4:65:72:4b:09:75: e6:50:96:ab:24:c1:c1:fe:d7:01:0e:cb:f5:c1:8f: 31:b5:34:6e:ad:5b:d4:89:01:2e:d8:9c:2d:e2:76: e0:0d:ed:f6:9b:36:ed:8c:ab:8a:1c:c0:f3:5d:86: 2a:41:15:61:a5:ec:6e:ac:25:74:36:ae:26:3c:89: 8c:5a:97:72:dc:f2:b0:a4:50:44:b2:d9:0d:52:00: ba:51:68:69:ad:27:b6:87:c9:89:97:c1:1f:18:70: aa:0b:aa:52:39:55:98:c6:f6:17:a9:60:03:94:3d: 4a:fb:92:0e:17:54:fb:cb:c9:b8:19:5f:87:c0:6b: 33:a8:d7:a6:f8:19:15:5b:98:45:81:fa:bb:6b:14: 4a:24:74:fa:2d:43:f4:00:b9:3e:91:25:4b:c1:49: d2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:84:6B:A8:49:CB:D2:95:E2:D3:4E:D7:60:5D:C3:FF:64:2E:89:ED X509v3 Authority Key Identifier: keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:5d:1e:da:57:80:13:c1:ab:29:70:8e:aa:79:e6:d4:6e:ce: 95:05:d2:26:37:64:ea:6e:ea:ce:ed:db:d2:0f:14:fe:6a:a8: 95:f0:d5:8b:ea:cc:b7:b6:86:55:c4:fd:d0:60:20:81:e2:af: 1e:08:28:58:41:8d:77:e5:82:4c:39:38:1b:86:1b:5d:6d:5a: 14:c6:40:7c:c2:64:28:5b:40:45:8b:94:03:0a:82:93:5e:d2: 0d:57:b3:10:0c:e1:8d:da:b3:be:64:e6:e7:cc:d4:2f:81:25: e6:57:b4:20:2a:42:52:02:d3:a6:e8:42:3a:a9:a5:c4:99:b4: 9e:03:22:a0:bb:4a:f9:6b:e1:19:94:2a:5a:04:0b:20:8c:03: fd:e2:85:d3:a4:c3:65:19:4e:e2:29:e3:30:45:e6:a4:3a:5f: 0c:2c:36:19:8f:9d:9e:8f:8d:79:d0:7f:c6:cd:4e:d1:be:fb: cb:c4:cc:04:39:ec:74:60:cc:a5:69:1f:3e:b5:55:d4:da:71: ea:5f:81:4c:1b:56:92:37:8a:bc:9a:4a:48:c1:99:07:3c:53: 1d:57:57:47:b3:e7:ca:69:6c:76:ed:b9:f6:c9:24:8d:22:f7: 70:6a:9c:ec:f4:6b:94:6f:7f:cf:48:d0:18:d4:ee:3d:12:60: db:5c:c1:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzFeAUqZnUYJBCMFJ9O2qRzlB6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUw NUIyOTNBMzAeFw0yNjA0MTUxODI2NDlaFw0yNjA0MTgyMzE1NDlaMDMxMTAvBgNV BAMTKEY5ODQ2QkE4NDlDQkQyOTVFMkQzNEVENzYwNURDM0ZGNjQyRTg5RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvixTrSRcz6mBhRLRZuUjB8ouR rv8nFehbocjN7kANrfHPmcNSOM97eMFOKviB/dESQQRD0actOOQPmW6Bkp2KaIo8 o4xmGJQ5VjbnQAUIk/9sNSCJKnXdv3XVBFWErl/JYdRlcksJdeZQlqskwcH+1wEO y/XBjzG1NG6tW9SJAS7YnC3iduAN7fabNu2Mq4ocwPNdhipBFWGl7G6sJXQ2riY8 iYxal3Lc8rCkUESy2Q1SALpRaGmtJ7aHyYmXwR8YcKoLqlI5VZjG9hepYAOUPUr7 kg4XVPvLybgZX4fAazOo16b4GRVbmEWB+rtrFEokdPotQ/QAuT6RJUvBSdLFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+YRrqEnL0pXi007XYF3D/2Quie0wHwYDVR0j BBgwFoAU8jrMoUdyC0I6lXbz5AhpFQWyk6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC9GMjNBQ0NBMTQ3 NzIwQjQyM0E5NTc2RjNFNDA4NjkxNTA1QjI5M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUwNUIy OTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5 MTUwNUIyOTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIddHtpXgBPBqylwjqp55tRuzpUF0iY3ZOpu 6s7t29IPFP5qqJXw1YvqzLe2hlXE/dBgIIHirx4IKFhBjXflgkw5OBuGG11tWhTG QHzCZChbQEWLlAMKgpNe0g1XsxAM4Y3as75k5ufM1C+BJeZXtCAqQlIC06boQjqp pcSZtJ4DIqC7Svlr4RmUKloECyCMA/3ihdOkw2UZTuIp4zBF5qQ6XwwsNhmPnZ6P jXnQf8bNTtG++8vEzAQ57HRgzKVpHz61VdTacepfgUwbVpI3iryaSkjBmQc8Ux1X V0ez58ppbHbtufbJJI0i93BqnOz0a5Rvf89I0BjU7j0SYNtcwfE= -----END CERTIFICATE-----Generated at Fri Apr 17 15:48:57 2026 by rpki-client