$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: UqvCL7MwE7zNgIeYRf7E2b23uOct5zJsmy0zhsFas7w= Subject key identifier: 0D:07:C7:30:B7:7A:09:88:43:3B:6C:AB:E4:96:15:D4:73:F5:0A:72 Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 17DF822FDE04DF5F53CA957C646F72C22CC20CA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 056A Signing time: Wed 15 Apr 2026 20:42:01 +0000 Manifest this update: Wed 15 Apr 2026 20:37:01 +0000 Manifest next update: Sat 18 Apr 2026 20:54:01 +0000 Files and hashes: 1: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: 9qY8uPFehgplC/8jh5aK/cKc5OfEwa92ZL58Zwawcak=) 2: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: bVRLDmnlkDr+Er81GecVOu1gTofkGixwnSL4beQ/iNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 20:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:df:82:2f:de:04:df:5f:53:ca:95:7c:64:6f:72:c2:2c:c2:0c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Apr 15 20:37:01 2026 GMT Not After : Apr 18 20:54:01 2026 GMT Subject: CN=0D07C730B77A0988433B6CABE49615D473F50A72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:91:df:ee:01:86:20:0e:9b:73:cc:83:a4:92: 91:fc:7a:d1:ae:1d:6b:80:46:7e:4a:1d:79:55:bd: 61:1f:02:6a:85:36:8f:f0:42:eb:b6:34:2f:3e:5b: 64:bf:e4:f1:21:66:8a:c3:d2:f5:b8:97:9a:6a:21: ff:12:50:2b:d1:d4:d1:eb:ec:dd:e8:35:97:c3:de: 6b:22:b7:c7:33:71:f4:1a:8a:92:39:76:4e:aa:98: b9:fd:2c:95:e9:d1:dc:c0:65:47:99:e0:de:fe:64: a8:61:08:8a:bb:06:70:b7:21:6d:2d:7c:d3:27:db: 4c:10:92:08:50:6b:1c:36:9c:b1:1f:8c:5e:fc:5c: 99:b4:6d:7e:af:ed:11:09:ff:0c:42:b6:8f:5f:3b: b0:71:96:bc:94:f1:4a:cc:c5:bf:f2:af:5f:7f:fd: df:64:c0:d1:b2:76:c0:7a:9a:4f:ce:2f:f0:90:b9: e3:fc:5b:5a:da:b1:57:60:e5:da:5d:18:81:ba:a1: 9e:06:43:06:c8:44:7a:0e:00:85:80:a7:8d:dd:e6: f1:de:36:31:6b:62:96:e4:e8:52:7d:c8:56:90:f3: 53:a9:57:27:03:c3:d1:1f:bd:52:c4:1e:06:a0:4d: 30:2d:a1:ee:a7:8b:a8:52:23:18:37:3f:6b:5d:25: 4c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:07:C7:30:B7:7A:09:88:43:3B:6C:AB:E4:96:15:D4:73:F5:0A:72 X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:5a:06:f7:95:b1:f7:3d:98:5f:0a:1f:7c:bf:20:b7:14:d9: 1f:d2:56:7c:35:d1:92:a0:34:88:5f:95:52:a7:31:a8:1c:03: ce:9c:a9:42:40:99:6b:50:03:6d:25:36:60:a2:b2:df:98:ca: d6:51:a2:3c:83:f6:29:1e:96:5e:b4:08:a6:45:8d:f5:63:6d: b8:9a:85:44:f5:af:22:03:13:e0:6b:d0:84:00:b4:bb:06:86: b9:34:52:b0:67:58:01:b3:3b:0f:8b:5d:16:3d:4a:08:c3:db: 2f:a9:6e:62:22:83:e7:3b:90:9e:72:9b:22:52:0c:5b:40:c2: ad:b8:b0:2a:cc:a3:cf:98:8a:6e:aa:79:b9:d0:60:7b:ff:d1: 47:3b:1f:92:8b:23:5b:ae:d6:b2:2e:7a:b6:7e:99:f0:ae:c2: 33:17:be:d2:0f:1b:99:64:70:df:1d:dc:a8:df:8f:4a:ff:75: a9:7d:f3:49:f9:1b:9b:f5:2e:10:ca:d9:6c:7f:44:57:13:93: ce:f1:36:ba:04:b5:a7:29:a8:cc:09:a0:68:43:2e:bc:7f:ee: 52:a8:e6:bb:5c:64:63:fe:66:73:0a:1c:e3:ad:5e:a8:7d:aa: 11:9c:b1:d7:65:55:f1:ce:6d:1f:1f:15:e3:c4:7a:b2:d6:d9: 4e:82:7f:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF9+CL94E319TypV8ZG9ywizCDKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNjA0MTUyMDM3MDFaFw0yNjA0MTgyMDU0MDFaMDMxMTAvBgNV BAMTKDBEMDdDNzMwQjc3QTA5ODg0MzNCNkNBQkU0OTYxNUQ0NzNGNTBBNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkd/uAYYgDptzzIOkkpH8etGu HWuARn5KHXlVvWEfAmqFNo/wQuu2NC8+W2S/5PEhZorD0vW4l5pqIf8SUCvR1NHr 7N3oNZfD3msit8czcfQaipI5dk6qmLn9LJXp0dzAZUeZ4N7+ZKhhCIq7BnC3IW0t fNMn20wQkghQaxw2nLEfjF78XJm0bX6v7REJ/wxCto9fO7BxlryU8UrMxb/yr19/ /d9kwNGydsB6mk/OL/CQueP8W1rasVdg5dpdGIG6oZ4GQwbIRHoOAIWAp43d5vHe NjFrYpbk6FJ9yFaQ81OpVycDw9EfvVLEHgagTTAtoe6ni6hSIxg3P2tdJUyRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDQfHMLd6CYhDO2yr5JYV1HP1CnIwHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVaBveVsfc9mF8KH3y/ILcU2R/SVnw10ZKg NIhflVKnMagcA86cqUJAmWtQA20lNmCist+YytZRojyD9ikell60CKZFjfVjbbia hUT1ryIDE+Br0IQAtLsGhrk0UrBnWAGzOw+LXRY9SgjD2y+pbmIig+c7kJ5ymyJS DFtAwq24sCrMo8+Yim6qebnQYHv/0Uc7H5KLI1uu1rIuerZ+mfCuwjMXvtIPG5lk cN8d3Kjfj0r/dal980n5G5v1LhDK2Wx/RFcTk87xNroEtacpqMwJoGhDLrx/7lKo 5rtcZGP+ZnMKHOOtXqh9qhGcsddlVfHObR8fFePEerLW2U6Cfwc= -----END CERTIFICATE-----Generated at Fri Apr 17 13:50:23 2026 by rpki-client