$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft File: 22476F90C7B08131974F5B19834906C325ABEF12.mft (raw, json) Hash identifier: QuXhvhSecvYIS/eyW0mr3sut1/9Kq0l/z1DE9i+VFEk= Subject key identifier: E8:F4:EA:A3:D8:83:C2:DE:A1:3E:28:41:12:F2:3A:75:B2:65:30:84 Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 Certificate issuer: /CN=22476F90C7B08131974F5B19834906C325ABEF12 Certificate serial: 4B4409AD12591FEE75CA72CD00BC1EF15D8CA96A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft Manifest number: 0115 Signing time: Tue 21 Apr 2026 11:01:38 +0000 Manifest this update: Tue 21 Apr 2026 10:56:38 +0000 Manifest next update: Fri 24 Apr 2026 14:35:38 +0000 Files and hashes: 1: 3136302e32352e36392e302f32342d3234203d3e20313532383430.roa (hash: ZNeRwTvPRwYBLE5sdbgUPVVh8TQyG01EFXBOC/uWJbI=) 2: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 4w2+kmxxLlJwHRO1aqXjBz7ml3HwCrINsFeyiZehHq0=) 3: 22476F90C7B08131974F5B19834906C325ABEF12.crl (hash: KYkOKLsUxdnKIGwNoRe0OOmKPRxQFeokL8SeZyB2BvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:44:09:ad:12:59:1f:ee:75:ca:72:cd:00:bc:1e:f1:5d:8c:a9:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12 Validity Not Before: Apr 21 10:56:38 2026 GMT Not After : Apr 24 14:35:38 2026 GMT Subject: CN=E8F4EAA3D883C2DEA13E284112F23A75B2653084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:88:3d:19:7b:9a:fa:5e:2d:b8:d7:2b:7c:e0: 5c:91:7b:79:de:e4:5f:f5:b1:0e:ee:96:23:ca:90: e4:35:04:95:65:42:b5:56:00:39:5d:27:b8:ad:c9: 7c:9f:a2:08:5d:31:10:e0:e4:13:df:50:f6:22:e1: d2:e0:6f:4f:ae:32:63:5f:28:b5:ad:8b:f6:80:8b: a5:d9:35:aa:5a:b5:89:24:16:fb:86:a2:e6:49:3e: 8e:70:6a:3b:19:81:e9:73:3b:12:e4:cc:53:d3:3d: 6f:94:9f:d6:a2:ae:81:99:1f:36:1f:35:60:91:0f: 7b:3f:49:a3:62:59:51:da:6a:68:c5:5e:48:82:51: 9f:92:f3:d3:31:a2:9a:35:3b:e2:d6:b7:4d:4b:9b: ee:fd:42:63:90:02:34:11:84:c5:1a:ed:5c:2b:59: 23:f9:27:cd:90:e4:f4:e9:0d:35:a6:2d:97:1c:16: 2c:0d:7f:c7:1a:49:4f:b7:64:7a:26:e8:d1:5c:00: a4:c9:55:97:7c:8f:7d:02:e7:34:c9:78:00:f2:cd: 9a:1a:03:ce:cd:20:1e:62:82:93:8d:2f:3c:09:c3: ba:8e:a1:bb:d4:08:95:f3:9f:68:df:80:d7:e4:62: c9:21:98:34:97:99:51:74:fd:65:21:e8:bb:76:1d: 7b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F4:EA:A3:D8:83:C2:DE:A1:3E:28:41:12:F2:3A:75:B2:65:30:84 X509v3 Authority Key Identifier: keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:28:8a:3e:c1:4e:52:0b:3d:b2:9c:57:68:52:86:89:84:13: 9b:ce:e7:01:41:79:4d:76:20:d0:9d:29:99:32:a1:3e:cb:80: 53:d5:87:fa:d4:5e:d8:a4:c4:2e:45:8a:fd:86:dd:e4:58:f3: 6f:d5:43:6a:75:1d:9b:af:64:5d:de:33:35:26:db:3f:9d:b6: 4e:cb:a0:af:8c:59:e6:d8:84:54:58:99:db:2b:87:69:7e:16: 02:04:97:82:06:c6:81:f7:6c:a9:4a:ed:ca:a8:1a:06:f8:f1: fc:aa:39:f2:d0:ec:c7:f1:6f:e1:c1:39:d4:00:d9:2e:6a:ed: 7c:3b:16:5c:3b:19:58:6c:d6:21:3d:5f:8c:9c:35:32:70:ae: 4a:e4:e8:00:24:c9:03:b4:95:bd:89:06:f6:96:5c:9b:20:88: 85:05:96:a7:58:97:53:12:5a:16:b1:ea:12:dc:b2:ee:12:c8: cd:55:a7:1d:b4:74:39:a0:e8:22:e8:64:88:c0:e3:72:44:4c: 7b:3d:f9:74:ad:21:5a:9b:40:e6:21:eb:2e:82:41:99:10:a4: 6c:07:37:6f:fb:ac:79:8e:1b:b4:2f:95:b6:65:dc:75:93:ce: 0a:0a:46:a4:66:1a:eb:83:d5:fd:c1:41:51:79:28:bc:70:6c: c3:6f:96:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS0QJrRJZH+51ynLNALwe8V2MqWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMy NUFCRUYxMjAeFw0yNjA0MjExMDU2MzhaFw0yNjA0MjQxNDM1MzhaMDMxMTAvBgNV BAMTKEU4RjRFQUEzRDg4M0MyREVBMTNFMjg0MTEyRjIzQTc1QjI2NTMwODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpiD0Ze5r6Xi241yt84FyRe3ne 5F/1sQ7uliPKkOQ1BJVlQrVWADldJ7ityXyfoghdMRDg5BPfUPYi4dLgb0+uMmNf KLWti/aAi6XZNapatYkkFvuGouZJPo5wajsZgelzOxLkzFPTPW+Un9airoGZHzYf NWCRD3s/SaNiWVHaamjFXkiCUZ+S89Mxopo1O+LWt01Lm+79QmOQAjQRhMUa7Vwr WSP5J82Q5PTpDTWmLZccFiwNf8caSU+3ZHom6NFcAKTJVZd8j30C5zTJeADyzZoa A87NIB5igpONLzwJw7qOobvUCJXzn2jfgNfkYskhmDSXmVF0/WUh6Lt2HXshAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6PTqo9iDwt6hPihBEvI6dbJlMIQwHwYDVR0j BBgwFoAUIkdvkMewgTGXT1sZg0kGwyWr7xIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmZiYWFmYy00ZGIyLTRmYzQtYTFhOC0yZDhlNGM4YjJjZTAvMC8yMjQ3NkY5MEM3 QjA4MTMxOTc0RjVCMTk4MzQ5MDZDMzI1QUJFRjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMyNUFC RUYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2 QzMyNUFCRUYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0oij7BTlILPbKcV2hShomEE5vO5wFBeU12 INCdKZkyoT7LgFPVh/rUXtikxC5Fiv2G3eRY82/VQ2p1HZuvZF3eMzUm2z+dtk7L oK+MWebYhFRYmdsrh2l+FgIEl4IGxoH3bKlK7cqoGgb48fyqOfLQ7Mfxb+HBOdQA 2S5q7Xw7Flw7GVhs1iE9X4ycNTJwrkrk6AAkyQO0lb2JBvaWXJsgiIUFlqdYl1MS Whax6hLcsu4SyM1Vpx20dDmg6CLoZIjA43JETHs9+XStIVqbQOYh6y6CQZkQpGwH N2/7rHmOG7QvlbZl3HWTzgoKRqRmGuuD1f3BQVF5KLxwbMNvln4= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:14 2026 by rpki-client