$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: rRc1zXG2KtSoL6lvxqb4SqgvIyWB2ItX5bV+3RxaOdE= Subject key identifier: B5:9D:90:40:20:2B:E4:15:88:43:06:6D:F1:3A:52:42:17:07:E3:6F Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 1EE64450B6E9F2C69205F5E3536810371747D4A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: F7 Signing time: Thu 16 Apr 2026 05:10:44 +0000 Manifest this update: Thu 16 Apr 2026 05:05:44 +0000 Manifest next update: Sun 19 Apr 2026 07:30:44 +0000 Files and hashes: 1: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: 5aPZi9EHvbfyOxIPMTjzibe1Bxih6lwkA1KW+hUQT4E=) 2: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: /K4mylpcHmr+sO+7dTgSimoSvEZOrC1jLffnv1dbPQ8=) 3: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: zPbV8VJQxcgxt5QqIp5yFTmu5IU/77vmt1rf8lXLvRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 07:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e6:44:50:b6:e9:f2:c6:92:05:f5:e3:53:68:10:37:17:47:d4:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Apr 16 05:05:44 2026 GMT Not After : Apr 19 07:30:44 2026 GMT Subject: CN=B59D9040202BE4158843066DF13A52421707E36F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:35:97:87:77:25:5a:c6:64:13:e5:7e:12:f4: 3e:c9:17:4e:68:06:37:2d:14:a6:ee:b7:75:5f:38: 70:52:c7:3f:48:3c:6a:b7:50:1a:eb:9f:aa:72:a6: 71:0b:cc:32:5a:c3:89:82:4b:9e:10:a1:d5:f2:82: d8:e3:39:f4:8a:86:3f:37:e9:97:cc:06:af:16:d5: 6f:f6:74:6d:9d:23:a6:dc:15:2f:cc:c0:da:b4:d0: d4:fb:81:55:83:51:ac:c0:87:c4:b0:b0:7c:6f:99: 68:4e:2b:60:69:e0:20:6f:cf:9d:5f:c1:d1:69:18: 98:e4:a4:05:be:5b:4c:ed:d5:2f:7e:c4:e4:8b:c2: 75:e3:2e:02:2f:f8:14:f6:25:b7:e9:c2:2b:f8:08: 54:b1:2a:4d:50:75:11:ce:2a:11:23:51:5f:cf:59: 22:88:8d:ce:ed:eb:1e:0a:bb:23:59:75:f6:91:95: 4c:d9:4d:b8:d0:fc:7e:ac:5d:49:54:28:bb:6b:a7: d4:bd:0e:d5:f9:dc:ea:94:c1:aa:37:81:8f:7d:b7: d3:11:31:01:fb:fd:49:b9:0e:65:9c:aa:42:d6:10: f9:f6:41:dd:5a:5a:29:91:fa:37:ca:55:19:fb:ff: 8f:6e:51:e5:d3:fd:46:8c:99:23:15:f2:64:0f:38: 07:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9D:90:40:20:2B:E4:15:88:43:06:6D:F1:3A:52:42:17:07:E3:6F X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:4d:a5:c2:0b:ab:b7:63:f4:2a:66:d3:b2:f4:03:3f:9a:3f: de:8a:e3:0a:99:79:35:3e:fb:8b:2b:fa:50:1a:63:cf:75:60: 1b:be:4d:2a:f7:bf:d8:a2:ed:c6:11:3e:7f:d4:7a:08:0f:98: cd:2e:0a:00:e4:4a:2d:c4:19:26:51:63:45:8c:5b:df:e8:37: 81:f2:64:ca:c4:31:ff:eb:81:1d:b8:1c:73:ad:2c:e9:39:2a: 48:9c:da:33:3d:4f:75:50:b2:e6:43:24:1b:df:be:48:d9:86: 3b:65:c1:f6:4d:fc:96:46:67:60:5e:ef:b0:de:a6:ec:62:1d: 0c:df:4f:2e:18:90:8a:3b:fa:a9:d4:5e:09:15:a1:10:99:37: 74:a4:9d:1c:e6:ef:98:c7:cf:3d:41:c7:8d:a7:f9:0a:46:d8: 3d:5f:86:53:ef:81:d8:69:1c:8a:b2:65:95:b7:ce:3d:b1:a6: 8d:24:a8:0e:11:3e:cc:a2:42:2c:42:0b:d6:f6:4f:a0:41:97: 72:4e:1b:06:46:93:01:1f:87:ef:c5:38:1b:13:e7:ec:b3:4c: 88:cc:a7:14:44:c7:e0:60:bd:40:b3:fa:b3:df:f5:28:14:50: e1:5f:a0:c2:37:3a:3e:15:45:1a:88:59:20:e3:d6:7b:ba:25: ef:30:03:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHuZEULbp8saSBfXjU2gQNxdH1KUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNjA0MTYwNTA1NDRaFw0yNjA0MTkwNzMwNDRaMDMxMTAvBgNV BAMTKEI1OUQ5MDQwMjAyQkU0MTU4ODQzMDY2REYxM0E1MjQyMTcwN0UzNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGNZeHdyVaxmQT5X4S9D7JF05o BjctFKbut3VfOHBSxz9IPGq3UBrrn6pypnELzDJaw4mCS54QodXygtjjOfSKhj83 6ZfMBq8W1W/2dG2dI6bcFS/MwNq00NT7gVWDUazAh8SwsHxvmWhOK2Bp4CBvz51f wdFpGJjkpAW+W0zt1S9+xOSLwnXjLgIv+BT2Jbfpwiv4CFSxKk1QdRHOKhEjUV/P WSKIjc7t6x4KuyNZdfaRlUzZTbjQ/H6sXUlUKLtrp9S9DtX53OqUwao3gY99t9MR MQH7/Um5DmWcqkLWEPn2Qd1aWimR+jfKVRn7/49uUeXT/UaMmSMV8mQPOAftAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtZ2QQCAr5BWIQwZt8TpSQhcH428wHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElNpcILq7dj9Cpm07L0Az+aP96K4wqZeTU+ +4sr+lAaY891YBu+TSr3v9ii7cYRPn/UeggPmM0uCgDkSi3EGSZRY0WMW9/oN4Hy ZMrEMf/rgR24HHOtLOk5Kkic2jM9T3VQsuZDJBvfvkjZhjtlwfZN/JZGZ2Be77De puxiHQzfTy4YkIo7+qnUXgkVoRCZN3SknRzm75jHzz1Bx42n+QpG2D1fhlPvgdhp HIqyZZW3zj2xpo0kqA4RPsyiQixCC9b2T6BBl3JOGwZGkwEfh+/FOBsT5+yzTIjM pxREx+BgvUCz+rPf9SgUUOFfoMI3Oj4VRRqIWSDj1nu6Je8wA/Y= -----END CERTIFICATE-----Generated at Fri Apr 17 18:10:09 2026 by rpki-client