$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft File: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft (raw, json) Hash identifier: EqWG397bsSfN3DwF0y7ypxjklahynm7XHeLskNUsp3A= Subject key identifier: 1E:A8:DF:54:F6:D4:C7:1C:85:96:3C:04:78:EF:02:94:D4:A3:E2:66 Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 141C476BA48129EB56E318E0160D52D4BD215F41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft Manifest number: 0243 Signing time: Thu 26 Mar 2026 00:41:32 +0000 Manifest this update: Thu 26 Mar 2026 00:36:32 +0000 Manifest next update: Sun 29 Mar 2026 11:53:32 +0000 Files and hashes: 1: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: I3DXvvonrBchTQI06S4LkT6TVSxWcWBTNXL8OzRmw6c=) 2: 3132342e3130392e32322e302f32342d3234203d3e20313431313037.roa (hash: B91fipTOFpAzkFwpO49IAHAPfA5wpoTEbowTI/TzKsk=) 3: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: M5eMsMOetidsRy/C8PwAw9YejdbuLdHg+PDsTMdviAE=) 4: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: ZHYZolADCQ3Nh0kSpTOhEiQyqWLeuJaaRLk6yahYzfE=) 5: 3130332e32352e3130382e302f32342d3234203d3e20313332363334.roa (hash: fBDOlCYFIj49Ll99j2HPW9RAkablwrcxgHTldEFv/Jk=) 6: 3131392e34372e39352e302f32342d3234203d3e20313439343039.roa (hash: IOQi+x8HL04tSdZdkybbwTiZjcbDVMFrGx/+Tn9mObQ=) 7: 32372e3132342e38332e302f32342d3234203d3e20313332363334.roa (hash: 2EEYdzWr91JIl7YnldqA+u9ZlAli1CH0l6dUJ+oRlZU=) 8: 3132342e3130392e32332e302f32342d3234203d3e203538333738.roa (hash: E8p39FK+OhNYyY8SwwTjQ8JEs2K6blfiyf4IMTEJdyY=) 9: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl (hash: xtz6VaAveTOWzR5EuYHr/2vH0Pl+CHucSh5EwfF5ozY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:1c:47:6b:a4:81:29:eb:56:e3:18:e0:16:0d:52:d4:bd:21:5f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: Mar 26 00:36:32 2026 GMT Not After : Mar 29 11:53:32 2026 GMT Subject: CN=1EA8DF54F6D4C71C85963C0478EF0294D4A3E266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:e1:71:55:59:ca:ed:8d:bb:89:2a:8f:cf: d8:ad:fa:e2:ac:cf:23:47:e4:9d:83:08:2c:18:fa: 08:90:99:23:59:be:a9:82:35:cd:64:97:73:74:19: f9:09:86:fc:8c:ec:9f:40:aa:69:5d:cf:07:c0:ae: 5d:42:b2:a0:7d:a1:8e:0b:eb:50:86:0d:c8:6b:13: 89:e4:bd:4c:c4:2d:1f:d3:8a:3b:4b:d5:1e:3a:30: 9a:2a:a3:a4:6f:91:59:2a:a5:fd:99:ae:32:8d:f9: d5:08:fe:18:1c:90:7c:e8:4a:a6:4f:98:dc:97:8f: 3b:e7:40:25:22:f9:84:4e:28:99:e5:11:f6:19:c6: 5e:02:fc:7d:5c:93:42:b9:e2:18:39:55:75:bc:0c: ca:99:50:a1:8e:6e:d3:25:c2:d3:1e:db:27:6b:f6: 96:8f:76:ac:0b:71:01:71:54:17:02:d7:35:e7:84: d0:0e:20:4d:b2:45:5d:d3:f8:c0:c0:5e:08:b0:a5: 30:78:78:47:88:36:dd:e1:1f:ac:17:54:18:f5:91: 0e:30:87:14:39:41:1d:34:67:6b:27:ff:71:d1:90: ea:3a:98:95:52:1c:4c:dc:c0:b8:62:fa:9b:46:88: c8:b9:b7:34:52:71:c0:7d:2a:de:cb:22:f8:c1:2b: 4d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A8:DF:54:F6:D4:C7:1C:85:96:3C:04:78:EF:02:94:D4:A3:E2:66 X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:75:a8:3c:cf:52:1d:d4:2f:d2:d8:46:7c:be:c7:1a:ff:1d: 02:b7:07:f9:c8:99:64:37:d3:a2:82:3c:b9:a3:7f:d0:36:b4: f5:06:7f:0a:55:c4:d0:f3:03:fa:07:d0:00:8c:75:47:1c:b7: 4b:7d:ee:8e:c3:49:af:60:30:69:55:44:a5:54:06:99:81:09: 38:57:94:bc:ce:ef:eb:9f:14:c2:9f:d8:78:1d:c1:5e:e8:bb: 72:67:38:6f:05:fe:98:0b:63:93:aa:bf:f3:4b:9e:63:e1:3b: 2c:39:f0:f5:3a:b6:a6:a9:89:8f:6e:5e:56:27:1c:51:fd:ac: a7:11:57:71:59:b9:79:17:9c:4e:90:f2:da:67:7d:ec:dd:7b: 8b:9d:c3:a7:b8:5f:0d:4f:aa:8d:9d:2f:78:53:bf:72:e2:00: c9:96:29:f1:06:8f:98:c9:22:cd:b0:0c:42:ea:16:d5:d4:b2: 6f:95:6a:40:c6:7d:3c:38:3d:a5:04:b5:eb:1e:de:14:ae:b4: 76:93:ae:90:1d:7b:2a:87:12:72:eb:e7:f6:dd:6e:77:a0:66: 18:6a:3d:e6:98:e3:fa:99:c4:e5:b8:63:ee:35:b8:bf:15:3a: 1b:ec:96:66:57:9b:12:be:a9:b3:1f:41:7e:c5:cc:6c:0c:fb: e1:3c:b0:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFBxHa6SBKetW4xjgFg1S1L0hX0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNjAzMjYwMDM2MzJaFw0yNjAzMjkxMTUzMzJaMDMxMTAvBgNV BAMTKDFFQThERjU0RjZENEM3MUM4NTk2M0MwNDc4RUYwMjk0RDRBM0UyNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nuFxVVnK7Y27iSqPz9it+uKs zyNH5J2DCCwY+giQmSNZvqmCNc1kl3N0GfkJhvyM7J9AqmldzwfArl1CsqB9oY4L 61CGDchrE4nkvUzELR/TijtL1R46MJoqo6RvkVkqpf2ZrjKN+dUI/hgckHzoSqZP mNyXjzvnQCUi+YROKJnlEfYZxl4C/H1ck0K54hg5VXW8DMqZUKGObtMlwtMe2ydr 9paPdqwLcQFxVBcC1zXnhNAOIE2yRV3T+MDAXgiwpTB4eEeINt3hH6wXVBj1kQ4w hxQ5QR00Z2sn/3HRkOo6mJVSHEzcwLhi+ptGiMi5tzRSccB9Kt7LIvjBK03HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHqjfVPbUxxyFljwEeO8ClNSj4mYwHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VE NTBDRjlBNjQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADB1qDzPUh3UL9LYRny+xxr/HQK3B/nImWQ3 06KCPLmjf9A2tPUGfwpVxNDzA/oH0ACMdUcct0t97o7DSa9gMGlVRKVUBpmBCThX lLzO7+ufFMKf2HgdwV7ou3JnOG8F/pgLY5Oqv/NLnmPhOyw58PU6tqapiY9uXlYn HFH9rKcRV3FZuXkXnE6Q8tpnfezde4udw6e4Xw1Pqo2dL3hTv3LiAMmWKfEGj5jJ Is2wDELqFtXUsm+VakDGfTw4PaUEtese3hSutHaTrpAdeyqHEnLr5/bdbnegZhhq PeaY4/qZxOW4Y+41uL8VOhvslmZXmxK+qbMfQX7FzGwM++E8sD0= -----END CERTIFICATE-----Generated at Thu Mar 26 19:11:53 2026 by rpki-client