$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft File: 722D23AD0F959CE5CBFF927C152517F07060D195.mft (raw, json) Hash identifier: gtCJcRbSJeeMVve0sSqRzSF8XBLJ+sUgNrS5vTFTLko= Subject key identifier: F5:56:41:3F:96:35:10:BF:0E:8A:A3:DB:EF:6A:6F:95:F7:30:F5:87 Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 Certificate issuer: /CN=722D23AD0F959CE5CBFF927C152517F07060D195 Certificate serial: 1EE90CA1D868F9F1E3CA27DFDA2566175069847C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft Manifest number: 021E Signing time: Thu 26 Mar 2026 03:22:26 +0000 Manifest this update: Thu 26 Mar 2026 03:17:26 +0000 Manifest next update: Sun 29 Mar 2026 13:17:26 +0000 Files and hashes: 1: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: IgvUit+JVnRvJOkjIYlvNPAALXRaIVBYKC5WzTyMkfQ=) 2: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: QaDcdq6N8G60VfVfn8Gce8C1GvuuPHrjO/8cVZCTT78=) 3: 722D23AD0F959CE5CBFF927C152517F07060D195.crl (hash: SZlAlt96OzHTOmlUt6ERKKw2ZPMfU4m+d1fDwcW7gB8=) 4: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: SmM4mYg5qX3DKk4SmFEHZwLHzjGeZ9J+aWfv6Lp7DCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 13:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e9:0c:a1:d8:68:f9:f1:e3:ca:27:df:da:25:66:17:50:69:84:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195 Validity Not Before: Mar 26 03:17:26 2026 GMT Not After : Mar 29 13:17:26 2026 GMT Subject: CN=F556413F963510BF0E8AA3DBEF6A6F95F730F587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:2f:41:76:24:d1:de:f0:6f:1f:94:45:84: 5f:38:98:79:d6:fb:d4:d5:cf:df:34:5c:09:96:0b: 93:5c:3d:5a:a9:10:ec:76:88:59:aa:4d:78:61:b2: 3e:13:ce:7c:58:fc:e2:fb:0d:23:68:29:ba:8a:e8: 13:01:66:db:11:71:89:ee:5e:50:06:39:38:1b:0d: 7b:5c:13:d1:a6:0b:d1:25:78:27:e0:2b:16:3e:95: ba:e8:d7:4d:46:f3:78:20:42:f5:db:5b:72:a7:c2: 53:f8:9c:26:86:8e:d3:f8:97:8c:5a:32:c8:62:bb: 4d:5f:30:07:15:2d:74:3b:19:1b:b0:32:81:7f:04: ce:ad:02:ec:dd:d5:da:2d:7b:56:38:fb:52:31:ce: b8:38:cf:31:64:3d:a7:a8:34:8b:95:59:94:85:7f: d6:d5:cc:26:72:3b:63:c6:fd:e8:cd:48:49:78:db: 82:bb:dc:4e:a8:3f:5e:6f:e3:a2:83:69:f1:d2:8a: c8:fe:b9:96:99:bf:5d:bb:15:3a:bc:d0:18:d3:22: 7e:90:aa:dd:ad:96:6f:40:03:7b:24:1e:28:b7:fe: 6f:51:d0:9b:f0:0c:85:08:6c:4b:57:ff:23:60:05: e0:d7:e4:db:4c:8a:b3:91:e1:cd:67:a9:4e:95:1e: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:56:41:3F:96:35:10:BF:0E:8A:A3:DB:EF:6A:6F:95:F7:30:F5:87 X509v3 Authority Key Identifier: keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:23:f8:63:9c:8e:da:05:f1:14:02:23:33:ef:b3:13:e9:4d: bc:92:74:a6:51:9d:55:f9:c8:cb:af:60:ca:32:22:61:47:ed: 56:f6:1a:1d:2b:84:d5:06:db:35:0e:a3:77:50:47:93:e2:0d: 5e:3e:36:91:08:aa:3f:b1:55:4d:c7:e0:e5:9c:1e:29:77:26: fe:3b:21:46:41:81:8e:31:9b:d2:7f:82:7f:17:ad:bc:b1:e7: e8:2d:77:00:78:05:19:e8:80:67:f5:0c:20:97:5f:0e:10:5c: 98:81:4c:d1:7f:56:ba:de:40:8b:94:69:b9:d1:54:1d:d2:d6: 50:d9:45:38:72:f1:83:6e:8a:91:08:33:10:48:12:b9:c5:75: ab:63:78:28:e5:cc:2a:4d:ea:78:8a:94:15:fb:ee:1f:c0:16: 5a:73:28:a5:9b:54:bc:20:5f:15:ea:d7:33:ca:6c:96:bf:ff: 41:84:ea:6d:98:34:d6:97:a0:89:2d:e4:44:51:10:30:09:87: ed:af:29:95:13:84:a9:60:33:1f:6b:97:bc:7e:a0:e1:23:18: 3c:a6:a8:41:0e:70:61:6f:59:34:03:50:dd:06:bf:18:7f:42: 46:78:7d:14:aa:85:9a:b6:18:00:c9:ea:75:d7:b7:a2:17:53: d1:84:aa:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHukModho+fHjyiff2iVmF1BphHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3 MDYwRDE5NTAeFw0yNjAzMjYwMzE3MjZaFw0yNjAzMjkxMzE3MjZaMDMxMTAvBgNV BAMTKEY1NTY0MTNGOTYzNTEwQkYwRThBQTNEQkVGNkE2Rjk1RjczMEY1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4y9BdiTR3vBvH5RFhF84mHnW +9TVz980XAmWC5NcPVqpEOx2iFmqTXhhsj4TznxY/OL7DSNoKbqK6BMBZtsRcYnu XlAGOTgbDXtcE9GmC9EleCfgKxY+lbro101G83ggQvXbW3KnwlP4nCaGjtP4l4xa Mshiu01fMAcVLXQ7GRuwMoF/BM6tAuzd1dote1Y4+1Ixzrg4zzFkPaeoNIuVWZSF f9bVzCZyO2PG/ejNSEl424K73E6oP15v46KDafHSisj+uZaZv127FTq80BjTIn6Q qt2tlm9AA3skHii3/m9R0JvwDIUIbEtX/yNgBeDX5NtMirOR4c1nqU6VHvi3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9VZBP5Y1EL8OiqPb72pvlfcw9YcwHwYDVR0j BBgwFoAUci0jrQ+VnOXL/5J8FSUX8HBg0ZUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2U4ZGE5Yy1iZGJkLTQ5MDgtYmE5Mi1kOTBmZWE5YzhmMDUvMC83MjJEMjNBRDBG OTU5Q0U1Q0JGRjkyN0MxNTI1MTdGMDcwNjBEMTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3MDYw RDE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNlOGRhOWMtYmRiZC00OTA4LWJh OTItZDkwZmVhOWM4ZjA1LzAvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3 RjA3MDYwRDE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4j+GOcjtoF8RQCIzPvsxPpTbySdKZRnVX5 yMuvYMoyImFH7Vb2Gh0rhNUG2zUOo3dQR5PiDV4+NpEIqj+xVU3H4OWcHil3Jv47 IUZBgY4xm9J/gn8Xrbyx5+gtdwB4BRnogGf1DCCXXw4QXJiBTNF/VrreQIuUabnR VB3S1lDZRThy8YNuipEIMxBIErnFdatjeCjlzCpN6niKlBX77h/AFlpzKKWbVLwg XxXq1zPKbJa//0GE6m2YNNaXoIkt5ERREDAJh+2vKZUThKlgMx9rl7x+oOEjGDym qEEOcGFvWTQDUN0Gvxh/QkZ4fRSqhZq2GADJ6nXXt6IXU9GEqsQ= -----END CERTIFICATE-----Generated at Thu Mar 26 09:06:13 2026 by rpki-client