$ rpki-client -vvf repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft File: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft (raw, json) Hash identifier: L4Y4V4Tn4S+dCAJd4DcdvUV5N/r3SI1sQvcBqpAYwsM= Subject key identifier: 34:F9:31:4F:3D:0E:64:FE:A0:ED:75:C6:C5:97:8B:37:4A:11:F1:E1 Authority key identifier: 1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A Certificate issuer: /CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Certificate serial: 5E905066C76E42796734FEA03C89D556C1CECF43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft Manifest number: 03DC Signing time: Wed 25 Mar 2026 15:21:18 +0000 Manifest this update: Wed 25 Mar 2026 15:16:18 +0000 Manifest next update: Sat 28 Mar 2026 20:22:18 +0000 Files and hashes: 1: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl (hash: w4fEiIv2o3O2vShwY/4za/KpwRcUyRAJTmD7qbOGMUM=) 2: 3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa (hash: LTBEQvAXAeuY0KH0kB6kKvzSEQh0r1sAqnbQ1uPtbW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:90:50:66:c7:6e:42:79:67:34:fe:a0:3c:89:d5:56:c1:ce:cf:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Validity Not Before: Mar 25 15:16:18 2026 GMT Not After : Mar 28 20:22:18 2026 GMT Subject: CN=34F9314F3D0E64FEA0ED75C6C5978B374A11F1E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:f6:6b:36:88:43:6a:7c:1f:bc:3e:8c:81: b3:8a:b4:5f:57:6f:b5:1a:98:f6:c0:9a:cf:9b:78: 37:5b:36:95:87:13:b2:18:7e:2c:28:07:70:89:e9: 10:12:67:99:ee:d7:16:c4:15:c3:c0:aa:33:79:b0: 57:21:a5:e5:15:a6:b5:1c:52:53:c9:67:52:73:0f: a6:70:14:d9:49:a8:f3:4b:77:38:5e:35:a9:08:f5: a3:2f:69:2f:91:fc:05:59:83:b9:88:13:fb:6a:ae: d1:01:a2:29:ed:ed:b6:ef:fc:77:c3:7e:dc:cc:17: 10:0d:f1:ae:32:c7:77:4f:22:0d:80:a7:e3:ce:e7: d9:e8:a7:12:37:23:12:9a:88:47:b4:42:bb:e3:8a: a5:25:d1:76:75:42:97:a8:09:fc:67:19:95:1e:7a: 5a:38:58:a8:ba:bb:b0:a1:da:c0:5b:46:46:1e:a7: 56:f4:cb:72:88:d8:36:f6:2f:28:ee:59:a6:84:6b: 87:89:54:16:bf:b6:a8:9f:ee:83:b6:ba:0c:09:02: cb:2c:99:e1:af:7e:7b:49:8a:ab:dc:2c:0f:45:f7: 49:3b:48:4b:65:10:79:07:2b:43:13:06:a0:b2:6c: 7b:76:62:d3:5b:cc:db:8c:10:a0:d0:42:76:64:4b: c1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F9:31:4F:3D:0E:64:FE:A0:ED:75:C6:C5:97:8B:37:4A:11:F1:E1 X509v3 Authority Key Identifier: keyid:1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:25:04:ea:82:2b:78:8c:81:94:96:a6:cd:c5:5c:64:40:71: 03:0d:a0:43:48:c2:8d:60:04:10:1b:3e:fd:f5:a5:e8:de:c1: e2:8e:aa:15:24:4c:8f:0f:2f:8d:1e:bc:0c:5b:82:e1:20:33: 79:ee:4d:66:7f:69:52:8f:e9:df:ed:c1:03:9a:86:1a:07:16: d8:13:5b:f4:cc:95:f0:35:82:b8:1d:7a:60:b8:29:77:49:38: c1:e3:d7:f1:58:0c:49:a3:ab:10:9e:0e:02:5b:d3:00:e7:7e: bd:f3:4a:8b:37:ab:7f:9e:6f:e9:b0:06:e1:50:c7:dd:e7:0b: e2:d7:2e:55:58:c5:27:e1:e4:de:32:6c:cc:08:1b:a8:88:6c: bf:65:68:78:19:14:ba:2d:19:98:c4:22:15:30:8f:2d:48:b8: 59:c7:64:bc:8a:c4:0c:b6:d5:63:4f:e2:f4:3a:72:0f:6a:81: 3a:0c:a3:66:d1:63:b6:2f:7f:f5:96:42:09:e7:7a:31:0a:1f: a1:47:56:6d:bf:6e:6d:ff:d0:5a:c8:a8:6a:00:0c:04:aa:4a: 4b:1f:86:3a:a9:ff:0d:11:4d:ab:c7:43:6d:8b:82:b6:ac:a4: 17:51:7b:99:6e:fc:d4:21:ae:2a:c8:7b:e5:97:3f:3d:f6:0e: a7:f0:9d:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpBQZsduQnlnNP6gPInVVsHOz0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVE NUU0NjQyQTAeFw0yNjAzMjUxNTE2MThaFw0yNjAzMjgyMDIyMThaMDMxMTAvBgNV BAMTKDM0RjkzMTRGM0QwRTY0RkVBMEVENzVDNkM1OTc4QjM3NEExMUYxRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCjfZrNohDanwfvD6MgbOKtF9X b7UamPbAms+beDdbNpWHE7IYfiwoB3CJ6RASZ5nu1xbEFcPAqjN5sFchpeUVprUc UlPJZ1JzD6ZwFNlJqPNLdzheNakI9aMvaS+R/AVZg7mIE/tqrtEBoint7bbv/HfD ftzMFxAN8a4yx3dPIg2Ap+PO59nopxI3IxKaiEe0QrvjiqUl0XZ1QpeoCfxnGZUe elo4WKi6u7Ch2sBbRkYep1b0y3KI2Db2LyjuWaaEa4eJVBa/tqif7oO2ugwJAsss meGvfntJiqvcLA9F90k7SEtlEHkHK0MTBqCybHt2YtNbzNuMEKDQQnZkS8EFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNPkxTz0OZP6g7XXGxZeLN0oR8eEwHwYDVR0j BBgwFoAUHCLNPXeRp5GH2p0DTrS7XtXkZCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDQxYjQ4ZC03M2M0LTRjZGQtYmNhYy1hNTk2OTliY2JiYzEvMC8xQzIyQ0QzRDc3 OTFBNzkxODdEQTlEMDM0RUI0QkI1RUQ1RTQ2NDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVENUU0 NjQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJC NUVENUU0NjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUlBOqCK3iMgZSWps3FXGRAcQMNoENIwo1g BBAbPv31pejeweKOqhUkTI8PL40evAxbguEgM3nuTWZ/aVKP6d/twQOahhoHFtgT W/TMlfA1grgdemC4KXdJOMHj1/FYDEmjqxCeDgJb0wDnfr3zSos3q3+eb+mwBuFQ x93nC+LXLlVYxSfh5N4ybMwIG6iIbL9laHgZFLotGZjEIhUwjy1IuFnHZLyKxAy2 1WNP4vQ6cg9qgToMo2bRY7Yvf/WWQgnnejEKH6FHVm2/bm3/0FrIqGoADASqSksf hjqp/w0RTavHQ22LgraspBdRe5lu/NQhrirIe+WXPz32Dqfwncc= -----END CERTIFICATE-----Generated at Thu Mar 26 15:15:47 2026 by rpki-client