$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft File: 023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft (raw, json) Hash identifier: /lj9MNs3jWjGnPsl502fAEJR2GtTE0HmGqWjg6FJnW4= Subject key identifier: 04:56:85:EF:5D:2A:2C:15:83:6C:64:71:22:79:7A:1A:6A:37:BA:D7 Authority key identifier: 02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61 Certificate issuer: /CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661 Certificate serial: 6ED8B4F12C98D4612DA9A3AE918E0ED944626938 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft Manifest number: 02C4 Signing time: Fri 17 Apr 2026 15:02:25 +0000 Manifest this update: Fri 17 Apr 2026 14:57:25 +0000 Manifest next update: Tue 21 Apr 2026 01:25:25 +0000 Files and hashes: 1: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (hash: FyCE3LyMNMrGnPbdrpK5+sH4y62xX8bxVpZUT6w7BJU=) 2: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (hash: Y0QuciRTpFDwvV/OBPdTjgLcEkiudatiiHEhsbTutWI=) 3: 3130332e3134392e3132312e302f32342d3234203d3e20313339393532.roa (hash: g6JykGSCyvPJN6suwP4pksfv3CU4McJpDF6g+WQNj7o=) 4: 3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (hash: G0y3tssGsefR1ItOMtc1BYHuZ0hgATuC18s9snklT+E=) 5: 023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl (hash: yyqrvdP+sGmaAsS+oUfQnbGZxCdKl6K1J3pFQd2EJ9I=) 6: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (hash: t1OWN6gm90SvImzwws28CQ53gTfOaLXKxfqrgXh94Y4=) 7: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (hash: btn366wZk5X/LbhkknHgrSEj+dlkWgK4+w6HiC3XS9g=) 8: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (hash: kzF5yTng2nsAricqtS3yvK+w9DfNlAwfQFzAL4v5DWA=) 9: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (hash: mkYIFZYx4d0/cIAZy1+c0yjUX/D1gvzA3zbfyHKddvs=) 10: 3130332e3134392e3132302e302f32342d3234203d3e20313339393532.roa (hash: 2PpG67/Hif4l3pFwRCwEQ7HNcb5HgHsPLTC3ZJMlI9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 01:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d8:b4:f1:2c:98:d4:61:2d:a9:a3:ae:91:8e:0e:d9:44:62:69:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661 Validity Not Before: Apr 17 14:57:25 2026 GMT Not After : Apr 21 01:25:25 2026 GMT Subject: CN=045685EF5D2A2C15836C647122797A1A6A37BAD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8d:5f:8b:88:2f:6c:0f:7f:25:4b:a6:7c:82: 16:97:80:f5:7a:a6:1b:ba:61:a8:bd:5d:cf:94:ab: 62:8b:df:28:a8:22:ac:e5:e3:0d:73:ab:9a:df:46: 8f:14:64:75:89:06:56:bd:aa:29:47:77:7e:d7:a4: 1d:6e:5c:c1:67:9d:aa:0c:d5:a8:d4:8a:d6:f1:95: 9d:9b:be:06:53:d4:bf:71:35:fa:4f:d6:b4:58:6b: c0:4b:97:df:44:05:00:5e:3f:c5:47:a7:f3:a6:31: 25:5a:a0:dd:ae:a5:f8:bb:30:7e:99:c6:5c:e9:c4: 7a:68:67:03:e2:01:8b:22:59:8f:34:65:d2:e8:69: 8f:8b:ee:da:a9:5c:41:01:18:13:02:96:54:87:f9: 11:a7:7a:19:ea:35:a2:33:45:c3:5f:f2:9e:78:18: 6d:45:fa:21:5c:78:5b:7f:94:0c:ca:db:ff:31:fd: f3:4f:44:ed:34:77:56:44:a9:6e:97:1f:5e:0b:f7: 9c:6a:5b:a7:b2:53:cf:32:0a:1f:5b:b3:91:fe:18: 5b:bc:09:dd:c5:bc:54:48:82:9c:25:86:dd:29:b9: 05:3b:c2:49:bf:e4:65:27:86:4c:44:a7:a1:f2:63: 95:97:2c:1b:65:a6:99:4c:66:0a:47:f1:e4:da:9e: ee:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:56:85:EF:5D:2A:2C:15:83:6C:64:71:22:79:7A:1A:6A:37:BA:D7 X509v3 Authority Key Identifier: keyid:02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6d:3c:b1:c9:c9:bc:b4:66:dd:3a:02:c0:09:a5:78:e0:87: 40:99:8e:e9:68:ef:45:0f:64:51:c3:0d:17:85:1a:4b:13:c4: dc:8b:55:11:4e:88:b6:77:ed:64:21:b7:4c:c5:32:48:72:5c: 67:42:b4:34:8e:f0:6f:42:29:fa:23:67:26:52:2b:a2:a9:6b: e8:29:f5:da:61:67:53:a8:65:07:52:0f:44:ea:5f:24:9b:99: 7d:ae:11:c2:04:e1:39:9f:55:b3:37:e6:c5:c8:5f:0b:ea:f8: 04:61:8e:cd:b0:98:06:8d:87:17:a7:06:5d:9c:19:a0:ba:92: 02:44:29:84:0b:88:dc:aa:e4:b9:cb:88:e3:d5:65:3d:73:e7: 15:65:66:8c:a5:6e:ae:08:cb:8d:e2:3f:b5:22:be:2d:18:21: 30:f6:24:5e:ba:c5:1c:d9:b3:92:b1:48:af:53:b9:25:06:9d: ee:8a:d1:ef:f6:02:e8:dc:d1:cd:21:c0:7f:38:28:be:be:be: be:d3:16:d7:b8:93:ca:eb:2c:03:aa:1b:28:1b:f6:e5:9e:42: 6a:d9:93:fb:5d:98:65:65:3d:32:dc:b7:f6:70:52:66:54:44: 14:fd:48:77:a0:9e:c7:d4:7f:39:3e:14:f4:74:8a:2a:d1:63: ff:57:fb:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbti08SyY1GEtqaOukY4O2URiaTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYyMzZC NzQwMTY2MTAeFw0yNjA0MTcxNDU3MjVaFw0yNjA0MjEwMTI1MjVaMDMxMTAvBgNV BAMTKDA0NTY4NUVGNUQyQTJDMTU4MzZDNjQ3MTIyNzk3QTFBNkEzN0JBRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCljV+LiC9sD38lS6Z8ghaXgPV6 phu6Yai9Xc+Uq2KL3yioIqzl4w1zq5rfRo8UZHWJBla9qilHd37XpB1uXMFnnaoM 1ajUitbxlZ2bvgZT1L9xNfpP1rRYa8BLl99EBQBeP8VHp/OmMSVaoN2upfi7MH6Z xlzpxHpoZwPiAYsiWY80ZdLoaY+L7tqpXEEBGBMCllSH+RGnehnqNaIzRcNf8p54 GG1F+iFceFt/lAzK2/8x/fNPRO00d1ZEqW6XH14L95xqW6eyU88yCh9bs5H+GFu8 Cd3FvFRIgpwlht0puQU7wkm/5GUnhkxEp6HyY5WXLBtlpplMZgpH8eTanu6NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBFaF710qLBWDbGRxInl6Gmo3utcwHwYDVR0j BBgwFoAUAj2veTzSuvbHvHpFoT3yNrdAFmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQwZTY0MC0yMmU5LTQ0MWMtODYzNC1mOTUyNTMwN2RhNzYvMC8wMjNEQUY3OTND RDJCQUY2QzdCQzdBNDVBMTNERjIzNkI3NDAxNjYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYyMzZCNzQw MTY2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkMGU2NDAtMjJlOS00NDFjLTg2 MzQtZjk1MjUzMDdkYTc2LzAvMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYy MzZCNzQwMTY2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIptPLHJyby0Zt06AsAJpXjgh0CZjulo70UP ZFHDDReFGksTxNyLVRFOiLZ37WQht0zFMkhyXGdCtDSO8G9CKfojZyZSK6Kpa+gp 9dphZ1OoZQdSD0TqXySbmX2uEcIE4TmfVbM35sXIXwvq+ARhjs2wmAaNhxenBl2c GaC6kgJEKYQLiNyq5LnLiOPVZT1z5xVlZoylbq4Iy43iP7Uivi0YITD2JF66xRzZ s5KxSK9TuSUGne6K0e/2Aujc0c0hwH84KL6+vr7TFte4k8rrLAOqGygb9uWeQmrZ k/tdmGVlPTLct/ZwUmZURBT9SHegnsfUfzk+FPR0iirRY/9X+yA= -----END CERTIFICATE-----Generated at Sat Apr 18 01:36:08 2026 by rpki-client