$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json) Hash identifier: 5am5D4rQsM5MibGsNPND3w1qKTLo2cFBtgtjp50KF+M= Subject key identifier: 66:70:E7:52:7E:FD:B4:B4:6F:56:E4:20:F2:12:54:E4:42:CE:4C:96 Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 491F65F02BE157CBFC28EC6C7728FE492584CF1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft Manifest number: 037F Signing time: Wed 25 Mar 2026 10:31:31 +0000 Manifest this update: Wed 25 Mar 2026 10:26:31 +0000 Manifest next update: Sat 28 Mar 2026 17:04:31 +0000 Files and hashes: 1: AS10217.roa (hash: AKpcdslpGED1vOq8rbDyvewGD3kNp+be//qHRk5p0rQ=) 2: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: 37y/VgA+S1imwqKwMhWfYBwxgNwPhGR4M5rB9U1NBAM=) 3: AS45700.roa (hash: /1LWrRhqReIukWiX2P9+azoAV5YJhAiOPALAX0RMuXs=) 4: AS147168.roa (hash: sXrlmN+ZCRiNZeyqUN67fyS1tNOgP0RFDODnmFAtcLI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1f:65:f0:2b:e1:57:cb:fc:28:ec:6c:77:28:fe:49:25:84:cf:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Mar 25 10:26:31 2026 GMT Not After : Mar 28 17:04:31 2026 GMT Subject: CN=6670E7527EFDB4B46F56E420F21254E442CE4C96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:68:7e:31:6c:6a:ff:c1:aa:9a:78:90:8c:3c: fa:1f:c6:69:d2:1b:6b:fb:b8:b2:5f:9b:22:7a:06: f5:c1:2c:12:52:54:78:2b:b2:57:82:d0:09:32:d2: 00:59:c2:11:a0:eb:a0:f3:d3:2d:32:aa:0f:d0:92: 5a:78:6d:fe:72:44:da:22:a7:aa:40:32:2b:0b:96: 14:eb:ee:6c:8f:31:00:0d:d1:89:3a:e2:2c:f3:f4: 1d:6f:9c:0d:68:90:d0:8f:36:e1:0c:58:8d:bf:92: d4:76:97:1e:a4:55:91:ab:e8:07:f7:d1:8a:db:9b: 1d:0f:97:51:13:92:ab:78:5f:22:6f:e2:e2:a2:b8: 31:ba:32:38:5b:eb:82:5f:89:95:93:e4:33:86:a8: 57:66:ab:38:b3:e6:65:4a:1f:04:6c:98:80:c6:0a: 0f:3f:53:f3:3c:e7:5d:52:f5:58:07:a7:c4:c5:09: f9:2c:59:dd:ac:82:cb:a8:dd:2f:8d:b9:c2:4a:e5: 95:71:d6:ab:92:0b:27:49:68:db:e7:a9:f3:e7:3d: a4:68:0a:ad:a6:0e:79:60:b2:a1:0d:ea:18:8f:7f: f1:b9:5c:f2:a8:9c:ab:5d:48:e6:57:67:09:07:2f: 98:f2:4b:9e:fe:5c:e1:a5:63:6d:cf:ef:16:04:93: f7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:70:E7:52:7E:FD:B4:B4:6F:56:E4:20:F2:12:54:E4:42:CE:4C:96 X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ac:3d:fe:5c:46:3d:e7:1c:74:6e:bf:9a:e6:c3:ce:69:ea: 6e:da:d5:d4:8d:25:72:62:8f:cc:38:2a:4e:c7:e1:58:ce:37: ce:ae:21:e9:bb:c0:60:67:cc:f8:08:6a:1d:e5:34:15:70:8c: 7d:36:65:c1:8a:47:41:1a:c7:62:f0:a0:d1:09:f1:99:c5:8d: 0c:b0:d4:e3:48:26:ae:96:35:27:75:6a:52:d8:14:0f:fc:19: 47:80:da:b2:d6:0c:3b:aa:41:a9:15:75:74:70:79:70:f2:0d: 27:90:45:52:4b:04:f1:6b:4e:c8:56:81:90:ea:79:6d:8a:3e: 4b:28:d3:52:87:86:59:c9:41:f5:82:1c:f3:34:8e:f6:2e:bb: d2:a7:2d:ce:ff:d7:60:00:7c:98:2f:19:4f:e4:8c:8f:54:52: 83:7b:13:4d:1b:ac:ff:33:57:db:1a:b8:3c:b6:27:f7:a8:02: 1b:52:2b:e9:e9:e0:27:bf:c1:ab:fd:4c:63:c3:01:d1:68:77: cb:c2:e0:24:cc:54:cd:f6:cb:41:b6:7f:b4:47:fd:45:23:a8: 85:74:61:70:f2:0c:71:0b:a8:8f:4d:cf:7f:14:a5:9b:d5:4e: 36:19:9a:43:54:4a:6c:b8:85:1e:a5:dc:83:6c:fc:70:39:6e: cf:40:a4:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSR9l8CvhV8v8KOxsdyj+SSWEzx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNjAzMjUxMDI2MzFaFw0yNjAzMjgxNzA0MzFaMDMxMTAvBgNV BAMTKDY2NzBFNzUyN0VGREI0QjQ2RjU2RTQyMEYyMTI1NEU0NDJDRTRDOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYaH4xbGr/waqaeJCMPPofxmnS G2v7uLJfmyJ6BvXBLBJSVHgrsleC0Aky0gBZwhGg66Dz0y0yqg/Qklp4bf5yRNoi p6pAMisLlhTr7myPMQAN0Yk64izz9B1vnA1okNCPNuEMWI2/ktR2lx6kVZGr6Af3 0Yrbmx0Pl1ETkqt4XyJv4uKiuDG6Mjhb64JfiZWT5DOGqFdmqziz5mVKHwRsmIDG Cg8/U/M8511S9VgHp8TFCfksWd2sgsuo3S+NucJK5ZVx1quSCydJaNvnqfPnPaRo Cq2mDnlgsqEN6hiPf/G5XPKonKtdSOZXZwkHL5jyS57+XOGlY23P7xYEk/fDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZnDnUn79tLRvVuQg8hJU5ELOTJYwHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4 MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6sPf5cRj3nHHRuv5rmw85p6m7a1dSNJXJi j8w4Kk7H4VjON86uIem7wGBnzPgIah3lNBVwjH02ZcGKR0Eax2LwoNEJ8ZnFjQyw 1ONIJq6WNSd1alLYFA/8GUeA2rLWDDuqQakVdXRweXDyDSeQRVJLBPFrTshWgZDq eW2KPkso01KHhlnJQfWCHPM0jvYuu9KnLc7/12AAfJgvGU/kjI9UUoN7E00brP8z V9sauDy2J/eoAhtSK+np4Ce/wav9TGPDAdFod8vC4CTMVM32y0G2f7RH/UUjqIV0 YXDyDHELqI9Nz38UpZvVTjYZmkNUSmy4hR6l3INs/HA5bs9ApOM= -----END CERTIFICATE-----Generated at Thu Mar 26 07:21:55 2026 by rpki-client