$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft File: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft (raw, json) Hash identifier: GNFwYqZWAYjpitpXsLE6PcXfkxqwGC/mL+uASK6avgY= Subject key identifier: 70:00:C3:ED:D8:40:E4:75:88:43:BB:D1:B1:2E:56:50:1B:5E:38:4B Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 0E951941F4BB851FE5A35CF9215CA315E198FC06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft Manifest number: 0242 Signing time: Mon 23 Mar 2026 20:21:33 +0000 Manifest this update: Mon 23 Mar 2026 20:16:33 +0000 Manifest next update: Fri 27 Mar 2026 00:35:33 +0000 Files and hashes: 1: 3132342e3130392e32322e302f32342d3234203d3e20313431313037.roa (hash: B91fipTOFpAzkFwpO49IAHAPfA5wpoTEbowTI/TzKsk=) 2: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: M5eMsMOetidsRy/C8PwAw9YejdbuLdHg+PDsTMdviAE=) 3: 3132342e3130392e32332e302f32342d3234203d3e203538333738.roa (hash: E8p39FK+OhNYyY8SwwTjQ8JEs2K6blfiyf4IMTEJdyY=) 4: 3130332e32352e3130382e302f32342d3234203d3e20313332363334.roa (hash: fBDOlCYFIj49Ll99j2HPW9RAkablwrcxgHTldEFv/Jk=) 5: 3131392e34372e39352e302f32342d3234203d3e20313439343039.roa (hash: IOQi+x8HL04tSdZdkybbwTiZjcbDVMFrGx/+Tn9mObQ=) 6: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl (hash: 2XeQ24LF/qCtiR2iQNEUJP7vyC2T7azetywDx1X17ik=) 7: 32372e3132342e38332e302f32342d3234203d3e20313332363334.roa (hash: 2EEYdzWr91JIl7YnldqA+u9ZlAli1CH0l6dUJ+oRlZU=) 8: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: ZHYZolADCQ3Nh0kSpTOhEiQyqWLeuJaaRLk6yahYzfE=) 9: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: I3DXvvonrBchTQI06S4LkT6TVSxWcWBTNXL8OzRmw6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 00:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:95:19:41:f4:bb:85:1f:e5:a3:5c:f9:21:5c:a3:15:e1:98:fc:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: Mar 23 20:16:33 2026 GMT Not After : Mar 27 00:35:33 2026 GMT Subject: CN=7000C3EDD840E4758843BBD1B12E56501B5E384B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4d:f2:bf:b1:4d:ce:23:e9:4f:e6:99:e3:84: 72:39:d0:ce:4c:2a:6b:c9:aa:6f:f6:20:e4:2b:de: c6:45:44:4e:f5:8f:51:81:fa:e8:f3:48:f2:f1:c4: f1:8d:c0:3f:d9:e9:a2:67:73:9c:f0:26:a7:98:2a: d7:f0:b0:aa:bd:79:77:9e:68:3b:f7:18:55:ec:4a: 61:05:90:7e:bb:69:b0:eb:05:91:77:a6:95:d9:1f: 96:f0:e8:48:4b:fb:14:92:0c:54:d7:dd:fe:31:d5: 2a:93:67:27:e2:15:a0:72:0b:ea:61:82:bd:83:92: 1c:6d:67:e2:fb:80:8b:a9:59:50:b5:ff:b0:a3:ad: 00:52:11:78:1f:2d:e1:dd:71:b3:fe:2e:86:93:54: 75:90:b0:47:2a:07:54:98:99:5a:c1:4b:5d:d9:a2: bf:e6:5a:49:f8:a1:75:03:49:c6:a5:67:35:00:c8: 80:cc:0a:b6:57:36:4d:04:26:5f:f9:8c:82:9a:9c: 02:d3:e3:6d:df:69:70:b8:a4:37:36:cd:e5:57:e4: b9:dd:c8:b6:5a:55:1c:6d:e1:86:b2:43:4d:99:2d: dd:b9:8a:13:c9:bd:a3:35:01:ae:23:53:d9:36:c8: fa:1b:1d:37:94:2f:9a:0e:6b:c8:ad:cb:9c:2b:c8: f6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:00:C3:ED:D8:40:E4:75:88:43:BB:D1:B1:2E:56:50:1B:5E:38:4B X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:8d:7b:13:92:8a:26:0e:72:c5:bf:34:ff:cf:ed:bc:7a:93: 12:dd:73:5f:f2:40:5e:e1:e5:44:17:9e:d9:12:a2:f7:27:fb: a8:27:84:d7:75:43:ee:77:74:d4:0e:eb:11:3d:e9:ad:79:28: 28:32:ba:5c:71:c2:d1:ac:00:fc:60:90:1f:c7:e3:47:0b:b2: 87:61:b5:50:54:52:e7:9f:ab:a7:9e:eb:20:cc:d7:45:a7:66: 53:1a:3c:f7:69:70:35:e7:4c:47:5b:d1:ea:35:42:f1:0c:2a: 32:75:42:1e:58:5a:1a:e3:45:b6:71:20:5c:bd:fc:38:ba:06: b4:35:e8:f6:f0:d3:2a:9d:58:3f:07:f0:ce:c4:a5:f7:07:6e: 70:93:e6:6b:9e:ef:c5:95:73:e2:bd:bb:bb:25:f8:5b:4c:09: 52:3a:38:f7:a3:bb:cf:d9:e7:ef:d7:70:b4:49:66:20:0d:c0: d0:e5:8d:e8:2c:40:37:46:91:60:c4:37:98:38:34:c0:0c:f6: be:7b:cf:a6:0a:08:2b:cb:e9:bb:99:74:5b:6c:f1:b9:eb:4d: 5a:95:8a:56:80:b7:d0:db:fa:57:19:e0:bd:0b:7f:4e:6c:36: eb:a7:fa:17:91:2c:fb:03:70:34:94:04:2b:04:1b:9d:0a:3e: 41:3e:95:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDpUZQfS7hR/lo1z5IVyjFeGY/AYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNjAzMjMyMDE2MzNaFw0yNjAzMjcwMDM1MzNaMDMxMTAvBgNV BAMTKDcwMDBDM0VERDg0MEU0NzU4ODQzQkJEMUIxMkU1NjUwMUI1RTM4NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpTfK/sU3OI+lP5pnjhHI50M5M KmvJqm/2IOQr3sZFRE71j1GB+ujzSPLxxPGNwD/Z6aJnc5zwJqeYKtfwsKq9eXee aDv3GFXsSmEFkH67abDrBZF3ppXZH5bw6EhL+xSSDFTX3f4x1SqTZyfiFaByC+ph gr2DkhxtZ+L7gIupWVC1/7CjrQBSEXgfLeHdcbP+LoaTVHWQsEcqB1SYmVrBS13Z or/mWkn4oXUDScalZzUAyIDMCrZXNk0EJl/5jIKanALT423faXC4pDc2zeVX5Lnd yLZaVRxt4YayQ02ZLd25ihPJvaM1Aa4jU9k2yPobHTeUL5oOa8ity5wryPbVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcADD7dhA5HWIQ7vRsS5WUBteOEswHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VE NTBDRjlBNjQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWNexOSiiYOcsW/NP/P7bx6kxLdc1/yQF7h 5UQXntkSovcn+6gnhNd1Q+53dNQO6xE96a15KCgyulxxwtGsAPxgkB/H40cLsodh tVBUUuefq6ee6yDM10WnZlMaPPdpcDXnTEdb0eo1QvEMKjJ1Qh5YWhrjRbZxIFy9 /Di6BrQ16Pbw0yqdWD8H8M7EpfcHbnCT5mue78WVc+K9u7sl+FtMCVI6OPeju8/Z 5+/XcLRJZiANwNDljegsQDdGkWDEN5g4NMAM9r57z6YKCCvL6buZdFts8bnrTVqV ilaAt9Db+lcZ4L0Lf05sNuun+heRLPsDcDSUBCsEG50KPkE+lXs= -----END CERTIFICATE-----Generated at Tue Mar 24 22:58:59 2026 by rpki-client