$ rpki-client -vvf repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft File: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft (raw, json) Hash identifier: opdq8DskltkZ+U0aoXJEdDuGdS6VIO+ZfM+lyYKCRv8= Subject key identifier: 8E:3F:55:74:C3:88:4B:D7:AE:75:24:0A:0F:2A:FD:BB:E9:5D:33:FF Authority key identifier: 22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F Certificate issuer: /CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Certificate serial: 1F1501F7E4B40D7B2162A51F3BB5506D3980E35E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft Manifest number: 01FE Signing time: Thu 26 Mar 2026 02:50:53 +0000 Manifest this update: Thu 26 Mar 2026 02:45:53 +0000 Manifest next update: Sun 29 Mar 2026 12:00:53 +0000 Files and hashes: 1: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: /z/ZhPaw5F3TCZQvmgqcleuF3rFMMJYxb+Mr//w9yXY=) 2: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl (hash: Q3/whpalMBL3DaVDtUx41s/y0dZroTY5iB30MrIuuZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:15:01:f7:e4:b4:0d:7b:21:62:a5:1f:3b:b5:50:6d:39:80:e3:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Validity Not Before: Mar 26 02:45:53 2026 GMT Not After : Mar 29 12:00:53 2026 GMT Subject: CN=8E3F5574C3884BD7AE75240A0F2AFDBBE95D33FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:dd:b4:d7:1d:50:95:3d:c9:b3:90:f6:1b:59: 9c:0d:da:f8:d6:fb:55:a1:3e:03:b8:fd:5c:7c:af: 97:a8:8d:0a:a9:1e:19:9f:0d:9e:71:e8:7a:64:33: 4d:61:cf:5c:c7:d4:b9:c1:1c:8d:13:46:ca:1f:86: 60:b4:3c:ef:29:6b:61:54:c3:23:04:09:f4:2e:fd: 51:3f:f4:86:da:b8:a7:63:b6:0f:12:ac:c6:bf:fd: 8a:17:fa:b8:c5:de:0b:f9:41:ec:53:38:58:90:ce: 8e:6d:35:03:5f:de:86:e4:e7:61:15:09:9b:e4:2d: 64:ce:8a:7c:9a:47:25:5c:7a:91:ce:6f:75:92:7a: 92:c4:9e:50:22:f3:8b:32:09:bf:1e:62:8e:8c:03: 56:f2:b3:c1:6a:c1:bd:fb:cb:ef:a3:2d:50:e7:dc: a0:89:10:e6:8e:8a:c2:2e:bc:2e:99:4e:24:ff:66: 0f:b9:af:a2:aa:27:a3:bc:23:80:0e:3f:24:7d:6c: 04:88:d5:9b:e5:20:3a:f1:f0:a1:c8:d0:04:ee:74: 4c:ec:e4:95:73:57:46:cb:54:2a:29:04:6c:34:67: 14:c1:6f:3f:19:37:09:3e:fa:a8:d9:8a:23:e9:6a: 37:b9:fc:d9:e4:1b:66:2d:b4:01:c0:80:7e:c1:ef: 5b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3F:55:74:C3:88:4B:D7:AE:75:24:0A:0F:2A:FD:BB:E9:5D:33:FF X509v3 Authority Key Identifier: keyid:22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c8:ac:f2:4d:f3:bf:c3:20:70:05:c3:f9:c2:78:2d:b0:2c: 28:24:20:23:d5:0a:6f:64:6e:29:ea:fa:84:bb:09:bd:93:1a: 4b:2f:31:6b:34:77:58:2f:2d:cf:03:a5:08:d7:da:a3:a4:67: d8:12:80:4e:f9:3a:2f:d0:f2:da:16:f8:d3:49:38:1a:0d:b3: 08:57:2a:88:00:77:f8:a3:4f:09:cc:75:73:a7:e7:8c:b6:1e: bd:9f:94:27:d8:cf:53:7c:ce:7f:eb:ee:aa:07:17:85:52:8d: fc:d0:53:40:39:9b:c5:a1:77:18:85:f8:1f:91:9d:a7:2e:37: 24:98:d2:0c:98:11:d6:65:a1:a0:6f:c5:86:6a:b8:72:08:fc: 1e:26:97:6c:cb:73:92:73:45:67:8b:7f:11:82:ed:43:27:3e: 28:4f:83:c3:c6:a9:57:24:93:b7:96:84:f6:e1:3e:7a:3e:94: de:8a:45:f1:b2:28:a5:31:b9:2b:5e:fc:22:6c:25:73:0d:4a: 22:74:c7:e2:0b:21:61:71:4a:6b:08:6f:6d:c2:25:6a:a6:ef: c2:41:9a:f1:3e:f2:49:42:b4:46:87:ec:0d:fb:08:5b:2f:cd: 00:c5:9c:0a:e3:20:41:88:aa:57:ab:ba:a6:07:81:03:17:95: 91:a5:1a:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHxUB9+S0DXshYqUfO7VQbTmA414wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1QUY4 QzFDMjI4RjAeFw0yNjAzMjYwMjQ1NTNaFw0yNjAzMjkxMjAwNTNaMDMxMTAvBgNV BAMTKDhFM0Y1NTc0QzM4ODRCRDdBRTc1MjQwQTBGMkFGREJCRTk1RDMzRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK3bTXHVCVPcmzkPYbWZwN2vjW +1WhPgO4/Vx8r5eojQqpHhmfDZ5x6HpkM01hz1zH1LnBHI0TRsofhmC0PO8pa2FU wyMECfQu/VE/9IbauKdjtg8SrMa//YoX+rjF3gv5QexTOFiQzo5tNQNf3obk52EV CZvkLWTOinyaRyVcepHOb3WSepLEnlAi84syCb8eYo6MA1bys8Fqwb37y++jLVDn 3KCJEOaOisIuvC6ZTiT/Zg+5r6KqJ6O8I4AOPyR9bASI1ZvlIDrx8KHI0ATudEzs 5JVzV0bLVCopBGw0ZxTBbz8ZNwk++qjZiiPpaje5/NnkG2YttAHAgH7B71uNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjj9VdMOIS9eudSQKDyr9u+ldM/8wHwYDVR0j BBgwFoAUIoJaC+6SZoOsQaBIau9Vr4wcIo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTAwMjA4Yi0zMmFjLTRhMjYtOWQ5Mi02MDlhZDc2MTgzYzEvMC8yMjgyNUEwQkVF OTI2NjgzQUM0MUEwNDg2QUVGNTVBRjhDMUMyMjhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1QUY4QzFD MjI4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzkwMDIwOGItMzJhYy00YTI2LTlk OTItNjA5YWQ3NjE4M2MxLzAvMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1 QUY4QzFDMjI4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/IrPJN87/DIHAFw/nCeC2wLCgkICPVCm9k binq+oS7Cb2TGksvMWs0d1gvLc8DpQjX2qOkZ9gSgE75Oi/Q8toW+NNJOBoNswhX KogAd/ijTwnMdXOn54y2Hr2flCfYz1N8zn/r7qoHF4VSjfzQU0A5m8WhdxiF+B+R nacuNySY0gyYEdZloaBvxYZquHII/B4ml2zLc5JzRWeLfxGC7UMnPihPg8PGqVck k7eWhPbhPno+lN6KRfGyKKUxuSte/CJsJXMNSiJ0x+ILIWFxSmsIb23CJWqm78JB mvE+8klCtEaH7A37CFsvzQDFnArjIEGIqleruqYHgQMXlZGlGm8= -----END CERTIFICATE-----Generated at Thu Mar 26 20:36:32 2026 by rpki-client