$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: O7dwVFuFBi6Cmhwzfv4nIvtdDUE/W875BLsvKUKG+vs= Subject key identifier: A8:02:82:29:C7:80:3D:88:80:DE:11:FE:05:7F:1B:EB:F0:A3:4E:90 Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 22E5C5479275001A1B7F61CE1969A7AEB97AE67A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: E3 Signing time: Sun 01 Mar 2026 06:31:15 +0000 Manifest this update: Sun 01 Mar 2026 06:26:15 +0000 Manifest next update: Wed 04 Mar 2026 16:55:15 +0000 Files and hashes: 1: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: /K4mylpcHmr+sO+7dTgSimoSvEZOrC1jLffnv1dbPQ8=) 2: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: Ijvfr/ld92x8G/OjjKy8zTPLGLou+DtSXfY1puP8cys=) 3: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: 5aPZi9EHvbfyOxIPMTjzibe1Bxih6lwkA1KW+hUQT4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e5:c5:47:92:75:00:1a:1b:7f:61:ce:19:69:a7:ae:b9:7a:e6:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Mar 1 06:26:15 2026 GMT Not After : Mar 4 16:55:15 2026 GMT Subject: CN=A8028229C7803D8880DE11FE057F1BEBF0A34E90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e3:0a:77:c7:98:02:3b:d5:44:ed:a7:9d:fc: 5d:7d:a5:36:1d:24:ea:89:ef:5d:83:e1:bd:ed:60: d6:4c:6a:df:f8:ac:19:90:8b:33:51:35:6d:43:16: 07:34:69:5b:c0:58:13:e6:90:5e:af:a7:ce:c0:3f: 5c:d6:03:4d:49:89:b0:ea:0b:48:bc:6b:f7:93:64: 40:6f:92:82:7a:4a:9a:c3:3c:35:60:33:84:9d:db: 06:82:b9:d4:a7:69:f0:6e:11:82:78:af:b4:59:25: 0a:0a:6f:e2:fd:f2:eb:4f:cd:dc:b6:d3:83:17:e9: d6:bf:50:0c:41:85:de:88:cb:fd:ab:2b:e3:b4:01: be:40:36:54:fb:b1:4d:d2:e9:c3:45:ed:a6:24:89: b9:16:9c:2f:a4:20:b7:2f:32:b2:28:54:46:d3:98: c6:47:96:21:c8:3a:b5:f6:d0:19:69:72:62:77:e3: 07:7c:f1:24:90:8e:f8:67:6c:dd:7a:11:35:d2:47: 8e:ef:71:90:bf:6f:02:62:0f:23:a4:28:46:55:e6: f4:ad:cb:89:b8:4b:a7:fc:2d:42:16:db:9b:d0:d4: 6c:bc:9f:50:cb:07:50:b5:ca:65:9d:1b:c6:1f:11: f7:37:5a:50:6b:75:97:56:ca:76:68:a2:a2:71:48: 47:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:02:82:29:C7:80:3D:88:80:DE:11:FE:05:7F:1B:EB:F0:A3:4E:90 X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c6:1e:c5:6f:8e:25:43:20:cf:ef:21:4c:3f:fe:18:33:23: ae:9e:c0:b6:e8:fb:01:54:89:0f:a9:0b:93:6b:cc:98:27:29: f2:c1:f5:07:9c:bb:c6:ac:47:cf:e5:f8:8a:e8:21:b1:ad:31: aa:2a:42:46:b4:9c:3e:20:fa:0f:c3:58:9a:7c:3d:c2:7f:6e: e3:07:91:ef:7f:f0:ac:b8:65:01:c4:1a:72:9c:70:c6:88:a0: d1:13:eb:4c:d9:2d:d2:b7:e5:79:5c:a7:52:43:95:16:b2:fe: 79:7a:f8:7c:ac:c4:7c:5c:19:89:bf:fd:24:61:df:51:9b:09: ad:c6:24:14:2b:53:16:ae:eb:41:5b:e4:40:c4:bf:12:b3:28: 05:dd:c0:3a:4f:2a:a6:a8:97:28:db:44:a2:b8:b4:58:43:4e: 76:c8:6f:5e:48:30:73:e6:96:7d:8f:3b:e1:d1:ab:79:a0:63: db:0b:48:af:31:6f:6a:72:1d:a2:c9:a9:f8:76:d3:fe:2e:a1: 90:f5:84:32:1c:42:dd:e2:5d:3c:35:f4:56:ac:fa:e7:59:65: 67:f9:b7:a9:ff:46:b5:59:de:64:c3:f9:2f:40:af:5f:5a:65: c7:41:5b:2b:b9:3a:e5:ac:f2:31:bc:87:c3:15:63:6f:5d:65: f2:d8:20:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIuXFR5J1ABobf2HOGWmnrrl65nowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNjAzMDEwNjI2MTVaFw0yNjAzMDQxNjU1MTVaMDMxMTAvBgNV BAMTKEE4MDI4MjI5Qzc4MDNEODg4MERFMTFGRTA1N0YxQkVCRjBBMzRFOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx4wp3x5gCO9VE7aed/F19pTYd JOqJ712D4b3tYNZMat/4rBmQizNRNW1DFgc0aVvAWBPmkF6vp87AP1zWA01JibDq C0i8a/eTZEBvkoJ6SprDPDVgM4Sd2waCudSnafBuEYJ4r7RZJQoKb+L98utPzdy2 04MX6da/UAxBhd6Iy/2rK+O0Ab5ANlT7sU3S6cNF7aYkibkWnC+kILcvMrIoVEbT mMZHliHIOrX20BlpcmJ34wd88SSQjvhnbN16ETXSR47vcZC/bwJiDyOkKEZV5vSt y4m4S6f8LUIW25vQ1Gy8n1DLB1C1ymWdG8YfEfc3WlBrdZdWynZooqJxSEdBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqAKCKceAPYiA3hH+BX8b6/CjTpAwHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/GHsVvjiVDIM/vIUw//hgzI66ewLbo+wFU iQ+pC5NrzJgnKfLB9Qecu8asR8/l+IroIbGtMaoqQka0nD4g+g/DWJp8PcJ/buMH ke9/8Ky4ZQHEGnKccMaIoNET60zZLdK35Xlcp1JDlRay/nl6+HysxHxcGYm//SRh 31GbCa3GJBQrUxau60Fb5EDEvxKzKAXdwDpPKqaolyjbRKK4tFhDTnbIb15IMHPm ln2PO+HRq3mgY9sLSK8xb2pyHaLJqfh20/4uoZD1hDIcQt3iXTw19Fas+udZZWf5 t6n/RrVZ3mTD+S9Ar19aZcdBWyu5OuWs8jG8h8MVY29dZfLYIIo= -----END CERTIFICATE-----Generated at Mon Mar 2 11:45:45 2026 by rpki-client