$ rpki-client -vvf repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft File: 9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft (raw, json) Hash identifier: MBFZlafVvLOOOFKwgQGVAQ5ClVtzT8eEY+xW8nX9qBM= Subject key identifier: FC:83:24:65:34:ED:72:9E:2E:D7:FA:6A:AD:47:B3:8D:FB:9D:2D:CD Authority key identifier: 9E:22:CC:CB:20:89:8F:95:64:7D:9A:55:FA:11:2A:BE:8C:E5:8E:EC Certificate issuer: /CN=9E22CCCB20898F95647D9A55FA112ABE8CE58EEC Certificate serial: 5204262788B9D01319AD6C8A12DB4F4A3B4FD0EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft Manifest number: 04AF Signing time: Mon 20 Apr 2026 23:22:23 +0000 Manifest this update: Mon 20 Apr 2026 23:17:23 +0000 Manifest next update: Fri 24 Apr 2026 02:10:23 +0000 Files and hashes: 1: 9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl (hash: jHKm23PGgWMPL5lPsDGvntuxMxBdmbdzu1vOkitio3Y=) 2: 3130332e3136332e3133382e302f32332d3234203d3e203535363838.roa (hash: J74GMsLNIigAGgTpec6v5TMTTP38/QRxrBH/Eq2Xhk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:04:26:27:88:b9:d0:13:19:ad:6c:8a:12:db:4f:4a:3b:4f:d0:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E22CCCB20898F95647D9A55FA112ABE8CE58EEC Validity Not Before: Apr 20 23:17:23 2026 GMT Not After : Apr 24 02:10:23 2026 GMT Subject: CN=FC83246534ED729E2ED7FA6AAD47B38DFB9D2DCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:63:66:d4:52:b6:a6:ee:4a:3d:86:53:de:b6: b6:b8:89:01:88:f3:23:ca:f9:e3:1a:1a:2b:6e:53: 90:f3:d2:41:c2:24:43:09:2c:b5:99:e4:96:eb:16: 03:2c:96:71:6e:d8:b6:51:6f:a1:d6:79:98:8b:2b: 43:9c:1d:05:dd:a2:2f:f8:49:1c:be:41:28:f3:b3: 1b:7b:14:50:5a:73:22:94:de:4f:cf:2e:fa:d3:3f: f8:56:7b:ac:3a:4e:4e:f2:bd:06:06:12:ff:19:63: e2:d1:24:c2:e9:fd:b2:6d:7d:15:80:01:27:08:6e: 39:fc:9a:19:b1:a8:9d:3f:0d:5a:8a:cd:6d:ae:b7: c9:1a:d3:42:bb:3e:19:b3:a6:a9:a6:cf:5c:b4:95: ee:01:cb:c8:92:46:d6:0a:96:ff:77:66:7b:c1:f8: 32:03:9a:6f:29:b1:d2:34:09:be:dd:d5:1d:eb:3b: 31:0f:b0:2d:b6:5f:ac:ca:03:1a:12:3f:fb:93:b8: f5:b6:e9:6b:79:f0:2a:77:62:2b:be:5c:78:2b:2a: 68:70:c5:1c:f2:d8:a5:3c:f0:92:a0:40:0c:ef:d1: 97:e6:65:93:75:8d:cb:42:09:e8:51:c3:0c:f0:06: 4f:73:94:41:29:55:41:f7:f2:e9:a0:5f:89:22:36: 33:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:83:24:65:34:ED:72:9E:2E:D7:FA:6A:AD:47:B3:8D:FB:9D:2D:CD X509v3 Authority Key Identifier: keyid:9E:22:CC:CB:20:89:8F:95:64:7D:9A:55:FA:11:2A:BE:8C:E5:8E:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:28:2e:88:c5:a2:25:68:8d:cd:b6:b7:0d:45:6a:b9:50:8c: 54:97:b9:13:8c:18:d9:22:2e:1e:c4:a7:ec:c6:0f:ce:d4:48: f2:ec:a0:3f:66:85:f0:40:8a:f2:62:4d:fb:83:7e:2d:b1:6c: db:c5:8a:b2:98:45:b5:39:58:6a:4f:d9:a2:d4:ac:60:5c:95: 49:d1:9a:58:d8:bd:e2:4c:fd:36:f2:81:84:45:1f:45:f0:01: 94:0b:99:b9:88:69:b9:1c:f2:87:58:60:20:d6:6a:c4:bc:60: 91:de:ea:86:02:68:d0:59:96:1f:e7:5e:3f:d6:3f:e0:69:33: 77:08:58:a9:16:b7:e9:f8:3d:a2:41:43:d3:e7:c2:1d:ee:88: 57:42:97:a6:dc:58:b7:78:e0:5d:14:ad:dd:f8:33:fe:ff:82: 5c:4b:82:19:31:74:8a:40:40:ae:81:9d:a9:a6:f1:8b:28:52: 4a:25:c7:4f:f1:0c:4d:5a:e6:36:b8:bc:fa:9a:d7:02:12:b4: d8:6e:83:6e:de:da:be:dd:d8:be:d4:ad:88:7a:78:45:19:92: 00:c8:52:a4:aa:e4:e2:ed:59:fc:a7:b7:d0:bf:1c:3e:e1:ab: a3:51:45:ce:fd:1f:5d:eb:2a:78:aa:aa:c7:da:ca:ce:8c:33: ae:b3:4d:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUgQmJ4i50BMZrWyKEttPSjtP0OwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJBQkU4 Q0U1OEVFQzAeFw0yNjA0MjAyMzE3MjNaFw0yNjA0MjQwMjEwMjNaMDMxMTAvBgNV BAMTKEZDODMyNDY1MzRFRDcyOUUyRUQ3RkE2QUFENDdCMzhERkI5RDJEQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPY2bUUram7ko9hlPetra4iQGI 8yPK+eMaGituU5Dz0kHCJEMJLLWZ5JbrFgMslnFu2LZRb6HWeZiLK0OcHQXdoi/4 SRy+QSjzsxt7FFBacyKU3k/PLvrTP/hWe6w6Tk7yvQYGEv8ZY+LRJMLp/bJtfRWA AScIbjn8mhmxqJ0/DVqKzW2ut8ka00K7Phmzpqmmz1y0le4By8iSRtYKlv93ZnvB +DIDmm8psdI0Cb7d1R3rOzEPsC22X6zKAxoSP/uTuPW26Wt58Cp3Yiu+XHgrKmhw xRzy2KU88JKgQAzv0ZfmZZN1jctCCehRwwzwBk9zlEEpVUH38umgX4kiNjNvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/IMkZTTtcp4u1/pqrUezjfudLc0wHwYDVR0j BBgwFoAUniLMyyCJj5VkfZpV+hEqvozljuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZmUyMWM2OS03Yjc3LTQzYTAtOTJhNi1mNTU1YjZlZDFmZmMvMC85RTIyQ0NDQjIw ODk4Rjk1NjQ3RDlBNTVGQTExMkFCRThDRTU4RUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJBQkU4Q0U1 OEVFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWZlMjFjNjktN2I3Ny00M2EwLTky YTYtZjU1NWI2ZWQxZmZjLzAvOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJB QkU4Q0U1OEVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIoLojFoiVojc22tw1FarlQjFSXuROMGNki Lh7Ep+zGD87USPLsoD9mhfBAivJiTfuDfi2xbNvFirKYRbU5WGpP2aLUrGBclUnR mljYveJM/TbygYRFH0XwAZQLmbmIabkc8odYYCDWasS8YJHe6oYCaNBZlh/nXj/W P+BpM3cIWKkWt+n4PaJBQ9Pnwh3uiFdCl6bcWLd44F0Urd34M/7/glxLghkxdIpA QK6Bnamm8YsoUkolx0/xDE1a5ja4vPqa1wIStNhug27e2r7d2L7UrYh6eEUZkgDI UqSq5OLtWfynt9C/HD7hq6NRRc79H13rKniqqsfays6MM66zTVg= -----END CERTIFICATE-----Generated at Wed Apr 22 10:02:33 2026 by rpki-client