$ rpki-client -vvf repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.mft File: 2F225A0699074B5634923E69A9A4CE84DF3CAB03.mft (raw, json) Hash identifier: HuQJ/Wm2FSZ4nu0l8PPoGLDaTBYsyQbm7S4pGN6EbO0= Subject key identifier: A0:47:20:F0:6D:2C:B2:40:78:8A:32:DF:82:EC:75:B7:F4:BD:D4:36 Authority key identifier: 2F:22:5A:06:99:07:4B:56:34:92:3E:69:A9:A4:CE:84:DF:3C:AB:03 Certificate issuer: /CN=2F225A0699074B5634923E69A9A4CE84DF3CAB03 Certificate serial: 686F9656AC0C599A602C89CC09C765E994989FA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F225A0699074B5634923E69A9A4CE84DF3CAB03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.mft Manifest number: 03 Signing time: Thu 19 Mar 2026 02:11:11 +0000 Manifest this update: Thu 19 Mar 2026 02:06:11 +0000 Manifest next update: Sun 22 Mar 2026 04:36:11 +0000 Files and hashes: 1: 2F225A0699074B5634923E69A9A4CE84DF3CAB03.crl (hash: XyVBGKZn6KqKaro6vEI70BfCYjf9CvuzKls0GcP05Io=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.crl rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F225A0699074B5634923E69A9A4CE84DF3CAB03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 04:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:6f:96:56:ac:0c:59:9a:60:2c:89:cc:09:c7:65:e9:94:98:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F225A0699074B5634923E69A9A4CE84DF3CAB03 Validity Not Before: Mar 19 02:06:11 2026 GMT Not After : Mar 22 04:36:11 2026 GMT Subject: CN=A04720F06D2CB240788A32DF82EC75B7F4BDD436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ab:be:29:83:b2:8f:2f:6a:1d:a2:67:99:dc: e2:1e:8f:c8:b7:48:22:25:dd:d8:da:ca:fb:20:4b: f9:d6:b5:3d:5a:1e:cc:fb:b6:fd:e9:72:44:96:ad: f0:c8:70:9c:07:42:b8:4a:22:58:b5:bd:42:96:72: 81:b2:f1:01:c3:3c:8b:fb:7d:c8:e1:cb:82:a0:1f: 19:5c:75:09:5e:30:05:4b:26:63:bd:57:5e:0a:f3: 78:e6:68:7e:3a:74:a1:bf:ad:f2:d8:7c:6f:e1:1b: ca:2e:9d:25:48:47:1f:c0:93:7b:2c:6e:5a:d3:a3: 63:c6:11:0f:18:be:ac:f9:f4:8a:a5:75:f1:83:51: 4d:24:7d:d6:b4:9a:72:9a:6f:6d:7e:a0:d5:45:64: dd:09:6a:4f:de:21:f3:10:e7:72:15:5a:20:49:b3: 89:dd:c4:07:25:da:bb:fc:23:a8:05:4e:e7:8a:c3: 0d:f9:d7:69:41:5c:c8:ac:ac:bf:7a:a4:fc:23:a3: f1:a2:5f:4f:dc:7d:21:62:fb:bd:ea:54:25:01:cc: 18:d3:f9:ec:90:21:3d:e4:d8:79:58:da:30:b6:62: 97:a2:fa:a8:5c:84:6c:09:65:bd:14:b4:80:e6:63: 7b:94:af:26:d2:3e:88:2b:ae:e1:af:23:25:d3:e7: b0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:47:20:F0:6D:2C:B2:40:78:8A:32:DF:82:EC:75:B7:F4:BD:D4:36 X509v3 Authority Key Identifier: keyid:2F:22:5A:06:99:07:4B:56:34:92:3E:69:A9:A4:CE:84:DF:3C:AB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F225A0699074B5634923E69A9A4CE84DF3CAB03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:1f:32:82:ac:83:a4:58:e0:1f:7d:d1:0a:32:2f:38:bb:10: 36:44:b1:b7:81:a4:ce:bc:ae:e0:79:0f:1f:17:31:7d:e7:e9: be:ff:24:bf:eb:15:ad:84:a9:43:04:75:9b:90:f7:8e:09:6d: 13:53:69:3c:e5:49:94:d6:0d:36:26:37:50:e1:9a:a2:f8:02: 61:98:87:f1:9c:25:d3:2c:82:5e:98:d1:df:ed:f6:a8:db:75: 84:14:a3:ac:2b:08:9e:02:12:1d:6a:25:98:55:82:9d:d2:f1: 1f:38:b4:21:ca:35:d9:07:04:44:7b:b1:dc:26:e8:24:b1:1c: 5b:a0:92:8e:85:ea:c0:ff:d5:22:61:0a:84:cd:f9:93:3e:a9: a5:16:df:37:ea:aa:17:29:8d:e0:de:88:3c:19:52:1f:82:6b: 23:ed:48:75:cb:94:5a:3b:9d:01:71:d8:77:39:3d:84:e8:10: 79:d5:c9:6f:c4:6b:13:ec:ad:63:dc:43:c6:01:0b:48:a8:62: 60:53:57:b3:c6:ed:c8:61:f2:17:79:8f:8a:16:26:32:d5:9d: e6:ed:80:37:ae:08:d0:a7:ae:41:c6:cf:f1:75:fb:a4:77:4a: 98:2c:70:b7:bc:ab:1a:57:73:d1:8d:92:61:6a:b7:a0:e2:05: e9:04:b0:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaG+WVqwMWZpgLInMCcdl6ZSYn6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyMjVBMDY5OTA3NEI1NjM0OTIzRTY5QTlBNENFODRE RjNDQUIwMzAeFw0yNjAzMTkwMjA2MTFaFw0yNjAzMjIwNDM2MTFaMDMxMTAvBgNV BAMTKEEwNDcyMEYwNkQyQ0IyNDA3ODhBMzJERjgyRUM3NUI3RjRCREQ0MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRq74pg7KPL2odomeZ3OIej8i3 SCIl3djayvsgS/nWtT1aHsz7tv3pckSWrfDIcJwHQrhKIli1vUKWcoGy8QHDPIv7 fcjhy4KgHxlcdQleMAVLJmO9V14K83jmaH46dKG/rfLYfG/hG8ounSVIRx/Ak3ss blrTo2PGEQ8Yvqz59IqldfGDUU0kfda0mnKab21+oNVFZN0Jak/eIfMQ53IVWiBJ s4ndxAcl2rv8I6gFTueKww3512lBXMisrL96pPwjo/GiX0/cfSFi+73qVCUBzBjT +eyQIT3k2HlY2jC2Ypei+qhchGwJZb0UtIDmY3uUrybSPogrruGvIyXT57B/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoEcg8G0sskB4ijLfgux1t/S91DYwHwYDVR0j BBgwFoAULyJaBpkHS1Y0kj5pqaTOhN88qwMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzdmMTk1YS0zNjllLTQ0YmEtODBjZS03MjE3M2Q1MWEzNzIvMC8yRjIyNUEwNjk5 MDc0QjU2MzQ5MjNFNjlBOUE0Q0U4NERGM0NBQjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyMjVBMDY5OTA3NEI1NjM0OTIzRTY5QTlBNENFODRERjND QUIwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM3ZjE5NWEtMzY5ZS00NGJhLTgw Y2UtNzIxNzNkNTFhMzcyLzAvMkYyMjVBMDY5OTA3NEI1NjM0OTIzRTY5QTlBNENF ODRERjNDQUIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYfMoKsg6RY4B990QoyLzi7EDZEsbeBpM68 ruB5Dx8XMX3n6b7/JL/rFa2EqUMEdZuQ944JbRNTaTzlSZTWDTYmN1DhmqL4AmGY h/GcJdMsgl6Y0d/t9qjbdYQUo6wrCJ4CEh1qJZhVgp3S8R84tCHKNdkHBER7sdwm 6CSxHFugko6F6sD/1SJhCoTN+ZM+qaUW3zfqqhcpjeDeiDwZUh+CayPtSHXLlFo7 nQFx2Hc5PYToEHnVyW/EaxPsrWPcQ8YBC0ioYmBTV7PG7chh8hd5j4oWJjLVnebt gDeuCNCnrkHGz/F1+6R3SpgscLe8qxpXc9GNkmFqt6DiBekEsEo= -----END CERTIFICATE-----Generated at Thu Mar 19 09:38:11 2026 by rpki-client