$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json) Hash identifier: XfYOPqus4vCSgoMHdNXu88HtyNopc7i1+FUXouivrNU= Subject key identifier: BD:88:CE:7D:96:D9:EA:12:C2:D7:97:79:B6:B0:83:FC:02:EC:BB:DC Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 55AB873C0A99CD90ECF08D7E2A93D3DF6F8A0B55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft Manifest number: 037C Signing time: Wed 18 Mar 2026 13:31:32 +0000 Manifest this update: Wed 18 Mar 2026 13:26:32 +0000 Manifest next update: Sat 21 Mar 2026 18:31:32 +0000 Files and hashes: 1: AS147168.roa (hash: sXrlmN+ZCRiNZeyqUN67fyS1tNOgP0RFDODnmFAtcLI=) 2: AS10217.roa (hash: AKpcdslpGED1vOq8rbDyvewGD3kNp+be//qHRk5p0rQ=) 3: AS45700.roa (hash: /1LWrRhqReIukWiX2P9+azoAV5YJhAiOPALAX0RMuXs=) 4: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: PYBffGncUFPZH069xTpZgUkHDzU3OhZwBhynGMW3vHQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 18:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ab:87:3c:0a:99:cd:90:ec:f0:8d:7e:2a:93:d3:df:6f:8a:0b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Mar 18 13:26:32 2026 GMT Not After : Mar 21 18:31:32 2026 GMT Subject: CN=BD88CE7D96D9EA12C2D79779B6B083FC02ECBBDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8a:27:e5:71:66:52:0f:01:a5:d3:51:d9:5d: c3:37:cc:8c:45:7e:68:d5:58:4c:79:5a:87:6d:94: 0e:a6:fe:e1:e7:ed:bd:24:1b:49:ae:44:7b:ff:ad: 90:37:05:61:5f:02:65:45:fc:a4:5b:95:22:1c:ca: d4:1a:46:37:0f:6a:ec:76:26:b2:d5:f4:23:05:99: cb:c1:ae:b3:14:24:ec:2e:17:8f:de:a1:69:df:50: f3:d2:b9:0d:69:3c:a6:e2:db:69:af:16:04:12:b3: da:7e:d8:05:62:06:cb:5d:cb:28:80:e3:b4:34:6e: 92:44:fd:76:34:40:c6:34:a5:78:96:88:92:ef:79: ff:a1:29:5e:42:5d:07:b3:58:44:ca:69:1b:27:a7: 2a:84:a9:39:9a:ea:06:78:04:76:9c:77:83:d9:53: 00:49:7a:1d:d8:68:c9:62:7a:a0:4b:87:fd:7e:8f: e9:1d:2e:97:28:20:9d:e0:42:9d:75:08:10:1b:b5: d4:a2:d1:6b:ea:c6:7f:23:6d:f3:67:16:83:c8:d3: b2:a3:56:24:42:29:23:92:86:78:b9:ca:1d:9b:3b: 3c:4b:af:6a:4b:ef:90:ce:3f:7e:28:1f:40:5e:f1: 98:d3:0e:13:b7:17:a3:59:9c:a0:35:0b:a4:22:1d: dd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:88:CE:7D:96:D9:EA:12:C2:D7:97:79:B6:B0:83:FC:02:EC:BB:DC X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:df:29:50:58:92:80:8b:95:a8:6b:76:86:09:30:59:a3:05: 87:c0:44:41:7e:48:6e:8d:dc:88:27:00:6c:52:42:9a:70:d2: 0f:07:51:a9:76:07:18:e9:e3:7f:d5:93:ef:01:f7:c1:bc:62: fd:3b:94:af:d3:32:63:1b:a4:d4:54:70:aa:38:d8:52:55:69: 3d:e9:4a:08:9b:e7:da:94:35:85:63:8a:b1:7d:85:17:8c:cb: b9:0a:bc:9c:8c:3c:95:75:ac:5d:49:17:fb:79:d3:7f:b8:1a: 93:a0:e0:8d:69:64:6d:db:7f:96:55:29:cc:78:17:26:cc:cb: 86:b8:f4:b9:b4:71:f7:64:29:5a:05:c6:e8:0b:ba:7e:8a:8d: 46:1a:5f:83:50:3e:da:3c:99:43:ca:a6:b8:65:3d:96:78:37: 8b:d0:3d:27:bd:84:06:c6:87:f5:8b:d2:77:06:38:a9:0c:02: 40:92:df:59:f1:2b:47:ef:df:72:6a:77:8f:f6:80:32:b0:ee: 7b:6a:bd:f6:70:3d:d6:f9:3c:d9:8b:7c:d0:51:3b:b4:bb:8b: 1c:3d:4f:10:a9:89:e2:49:e2:fe:0a:22:64:7a:46:dc:75:f5: f5:e4:53:11:ee:1e:d4:c8:5d:08:59:8f:9a:d1:46:ac:b0:d5: f1:a1:85:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVauHPAqZzZDs8I1+KpPT32+KC1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNjAzMTgxMzI2MzJaFw0yNjAzMjExODMxMzJaMDMxMTAvBgNV BAMTKEJEODhDRTdEOTZEOUVBMTJDMkQ3OTc3OUI2QjA4M0ZDMDJFQ0JCREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCniiflcWZSDwGl01HZXcM3zIxF fmjVWEx5WodtlA6m/uHn7b0kG0muRHv/rZA3BWFfAmVF/KRblSIcytQaRjcPaux2 JrLV9CMFmcvBrrMUJOwuF4/eoWnfUPPSuQ1pPKbi22mvFgQSs9p+2AViBstdyyiA 47Q0bpJE/XY0QMY0pXiWiJLvef+hKV5CXQezWETKaRsnpyqEqTma6gZ4BHacd4PZ UwBJeh3YaMlieqBLh/1+j+kdLpcoIJ3gQp11CBAbtdSi0Wvqxn8jbfNnFoPI07Kj ViRCKSOShni5yh2bOzxLr2pL75DOP34oH0Be8ZjTDhO3F6NZnKA1C6QiHd11AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvYjOfZbZ6hLC15d5trCD/ALsu9wwHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4 MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnfKVBYkoCLlahrdoYJMFmjBYfAREF+SG6N 3IgnAGxSQppw0g8HUal2Bxjp43/Vk+8B98G8Yv07lK/TMmMbpNRUcKo42FJVaT3p Sgib59qUNYVjirF9hReMy7kKvJyMPJV1rF1JF/t503+4GpOg4I1pZG3bf5ZVKcx4 FybMy4a49Lm0cfdkKVoFxugLun6KjUYaX4NQPto8mUPKprhlPZZ4N4vQPSe9hAbG h/WL0ncGOKkMAkCS31nxK0fv33Jqd4/2gDKw7ntqvfZwPdb5PNmLfNBRO7S7ixw9 TxCpieJJ4v4KImR6Rtx19fXkUxHuHtTIXQhZj5rRRqyw1fGhhUw= -----END CERTIFICATE-----Generated at Thu Mar 19 09:40:05 2026 by rpki-client