$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft File: 23093B0E58201D339EAA3983654297729EB3D7FD.mft (raw, json) Hash identifier: vC28G5S1LpuNt89bd4iaOFeVmcwWMUEJAyd1CSZVi18= Subject key identifier: 5C:A1:AA:C2:35:4F:18:8A:1B:24:60:D2:C7:2C:81:47:C0:1F:D7:45 Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD Certificate issuer: /CN=23093B0E58201D339EAA3983654297729EB3D7FD Certificate serial: 58B72F4751C970AD2478FDC72815A4D2546A875D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft Manifest number: 02CB Signing time: Sat 18 Apr 2026 01:02:51 +0000 Manifest this update: Sat 18 Apr 2026 00:57:51 +0000 Manifest next update: Tue 21 Apr 2026 11:58:51 +0000 Files and hashes: 1: 23093B0E58201D339EAA3983654297729EB3D7FD.crl (hash: +Vdi9a40EVikIoLLL7WJQi8+5SdcLtkxIUWxJUNukJg=) 2: 3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa (hash: 1T/005+fcGS3bHhfnGHMDWx9bEqPsgYOiwCk3qFgrG8=) 3: 3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (hash: +q+2lGJsfE4ezep6xSn8bk3REU1n8oNlxOWiZdJkL5s=) 4: 3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (hash: I3IiUxQVB0K6AHHH6hadb9zyg87yVWrhTKPdESrGNC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 11:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b7:2f:47:51:c9:70:ad:24:78:fd:c7:28:15:a4:d2:54:6a:87:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD Validity Not Before: Apr 18 00:57:51 2026 GMT Not After : Apr 21 11:58:51 2026 GMT Subject: CN=5CA1AAC2354F188A1B2460D2C72C8147C01FD745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:48:3a:89:e5:20:55:80:c7:50:f4:6c:1f:54: cf:b9:69:35:3e:58:28:32:04:c0:01:68:61:99:ea: 43:12:4b:8d:68:b0:0c:1b:75:0f:25:33:88:69:4c: c1:b6:d0:d6:c7:8f:95:d2:2d:b5:66:89:d0:0c:c1: 0a:2f:68:4c:36:5b:51:5c:dd:94:0e:3b:e6:57:8c: 55:5e:ce:6f:36:5c:08:d2:4c:12:a8:cb:50:84:e3: 99:8d:66:cb:b5:58:a5:de:f8:4f:0e:d9:e5:a7:72: 9f:fc:91:7d:ac:ad:1a:75:fe:bd:46:cb:ce:cb:0a: 14:13:a3:21:f7:46:6f:71:cd:83:2d:29:06:d0:4b: b8:7f:f6:c9:5b:97:de:43:95:29:1f:16:59:07:27: 1c:2c:f9:4a:2f:8a:e7:ff:a0:23:e9:0d:85:d6:93: 04:e0:4f:0a:f1:ea:26:e9:2e:b8:92:7b:80:f8:d2: ae:55:5f:c0:8d:09:a7:94:d8:b7:b3:29:19:8a:ee: e7:a7:d6:ec:f2:8e:b0:2c:c0:cc:50:a4:d6:51:ec: 2a:a4:39:23:f2:d0:ab:84:61:41:65:20:3f:06:c7: 9a:6a:09:9e:f5:fa:fd:73:72:eb:38:13:c9:a4:c6: c2:5e:6e:9a:32:14:37:20:e2:01:8a:98:a0:73:cc: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A1:AA:C2:35:4F:18:8A:1B:24:60:D2:C7:2C:81:47:C0:1F:D7:45 X509v3 Authority Key Identifier: keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:39:0f:d7:b5:66:9d:e0:ab:e9:42:92:bd:b3:b8:f4:a9:3a: a9:86:e0:df:d7:4b:c2:34:b6:07:92:87:ee:40:5a:a7:ac:47: 1f:15:d1:e4:11:51:7d:62:ae:03:17:01:9e:08:22:70:e1:58: 50:fa:e8:c6:0a:58:f4:bf:a8:52:47:fa:1d:fc:77:05:19:1a: 97:7f:2c:c2:6b:1b:ab:2f:e6:19:68:1a:00:55:d9:e7:18:8a: 41:76:6e:7e:2e:7f:c8:c3:c6:7b:04:e6:30:bc:13:b7:00:9e: aa:c2:5c:82:4d:82:d3:18:aa:06:6a:c3:77:95:67:76:fe:19: 09:86:99:c2:cb:cf:fe:3b:49:99:e5:7e:d7:5f:05:ef:5a:3f: c8:81:e2:55:10:2d:b6:09:2e:cb:bf:6b:81:a0:87:48:1a:e6: 48:12:70:0e:db:ee:e8:8f:5d:5b:fe:4d:24:fe:25:f5:15:33: 32:1c:8c:99:4b:54:03:d0:a3:78:37:84:60:c7:60:05:a6:b8: b7:73:fd:0e:e2:db:11:60:d7:32:03:f3:e9:54:25:c2:a3:30: 23:d6:37:11:90:1a:de:6d:21:a3:1d:89:63:27:9a:ea:7f:ff: 22:6a:6a:26:1f:35:df:5f:ce:68:ff:28:b9:4a:54:ab:20:0e: 1d:fd:b7:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWLcvR1HJcK0keP3HKBWk0lRqh10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5 RUIzRDdGRDAeFw0yNjA0MTgwMDU3NTFaFw0yNjA0MjExMTU4NTFaMDMxMTAvBgNV BAMTKDVDQTFBQUMyMzU0RjE4OEExQjI0NjBEMkM3MkM4MTQ3QzAxRkQ3NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfSDqJ5SBVgMdQ9GwfVM+5aTU+ WCgyBMABaGGZ6kMSS41osAwbdQ8lM4hpTMG20NbHj5XSLbVmidAMwQovaEw2W1Fc 3ZQOO+ZXjFVezm82XAjSTBKoy1CE45mNZsu1WKXe+E8O2eWncp/8kX2srRp1/r1G y87LChQToyH3Rm9xzYMtKQbQS7h/9slbl95DlSkfFlkHJxws+Uoviuf/oCPpDYXW kwTgTwrx6ibpLriSe4D40q5VX8CNCaeU2LezKRmK7uen1uzyjrAswMxQpNZR7Cqk OSPy0KuEYUFlID8Gx5pqCZ71+v1zcus4E8mkxsJebpoyFDcg4gGKmKBzzGNTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXKGqwjVPGIobJGDSxyyBR8Af10UwHwYDVR0j BBgwFoAUIwk7DlggHTOeqjmDZUKXcp6z1/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTk1YjdkNC0zYWFiLTRiODMtOTRiMi1jNDI2N2IyYWUwYTAvMC8yMzA5M0IwRTU4 MjAxRDMzOUVBQTM5ODM2NTQyOTc3MjlFQjNEN0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5RUIz RDdGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU5NWI3ZDQtM2FhYi00YjgzLTk0 YjItYzQyNjdiMmFlMGEwLzAvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3 NzI5RUIzRDdGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEY5D9e1Zp3gq+lCkr2zuPSpOqmG4N/XS8I0 tgeSh+5AWqesRx8V0eQRUX1irgMXAZ4IInDhWFD66MYKWPS/qFJH+h38dwUZGpd/ LMJrG6sv5hloGgBV2ecYikF2bn4uf8jDxnsE5jC8E7cAnqrCXIJNgtMYqgZqw3eV Z3b+GQmGmcLLz/47SZnlftdfBe9aP8iB4lUQLbYJLsu/a4Ggh0ga5kgScA7b7uiP XVv+TST+JfUVMzIcjJlLVAPQo3g3hGDHYAWmuLdz/Q7i2xFg1zID8+lUJcKjMCPW NxGQGt5tIaMdiWMnmup//yJqaiYfNd9fzmj/KLlKVKsgDh39t/Q= -----END CERTIFICATE-----Generated at Sun Apr 19 11:42:31 2026 by rpki-client