$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft File: 22476F90C7B08131974F5B19834906C325ABEF12.mft (raw, json) Hash identifier: y8u0yGyrhQuCGnKDCZwxs4jVZFAIL9XlFwGAoMJx6KE= Subject key identifier: 48:4F:EC:8A:90:6E:B5:19:EE:C7:E8:AC:93:8C:52:46:09:1B:16:DA Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 Certificate issuer: /CN=22476F90C7B08131974F5B19834906C325ABEF12 Certificate serial: 48AF6AC12BF562252F94D5DDD866F4100A64A45E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft Manifest number: 0109 Signing time: Wed 25 Mar 2026 22:51:37 +0000 Manifest this update: Wed 25 Mar 2026 22:46:37 +0000 Manifest next update: Sun 29 Mar 2026 04:40:37 +0000 Files and hashes: 1: 3136302e32352e36392e302f32342d3234203d3e20313532383430.roa (hash: ZNeRwTvPRwYBLE5sdbgUPVVh8TQyG01EFXBOC/uWJbI=) 2: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 4w2+kmxxLlJwHRO1aqXjBz7ml3HwCrINsFeyiZehHq0=) 3: 22476F90C7B08131974F5B19834906C325ABEF12.crl (hash: 4mHmFwLFuQVToPIm03kvNcn5KWgAfx0Vud24YXL5KQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:af:6a:c1:2b:f5:62:25:2f:94:d5:dd:d8:66:f4:10:0a:64:a4:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12 Validity Not Before: Mar 25 22:46:37 2026 GMT Not After : Mar 29 04:40:37 2026 GMT Subject: CN=484FEC8A906EB519EEC7E8AC938C5246091B16DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:46:3f:72:36:bf:f3:a6:f1:e3:46:ec:ac: bc:ee:85:4a:63:24:9f:6b:b1:55:1e:f3:01:a5:ae: 47:35:15:e8:11:fd:8a:c1:7e:70:4e:63:b6:06:92: 45:a5:22:58:b4:0c:75:4a:35:ca:1f:e7:b9:b0:ef: c0:ab:9a:be:3b:8d:30:90:65:c6:f5:3c:b7:9b:0a: bb:ed:7b:d9:b3:30:a0:e7:71:7a:c4:24:81:83:e2: 31:6d:72:f9:6c:86:1f:1d:23:26:a0:7d:d1:21:3f: f5:09:a7:ce:4c:09:5b:74:1e:2d:b4:4c:52:02:d3: 12:43:f3:b9:ff:58:63:97:11:dd:d5:e8:57:49:e4: d3:ec:33:36:4a:39:8f:bb:96:bd:18:63:e0:a4:d9: f7:8c:a5:35:fc:a9:c9:11:d0:30:49:c2:1b:96:cf: 8c:6b:26:f9:4c:5e:8d:c6:f3:e8:a9:02:62:2c:05: 2e:a7:14:d3:60:63:5b:be:9e:c0:d9:2e:f2:3a:01: 6d:83:f3:aa:45:17:8c:e8:db:5c:1b:64:96:6b:9f: f7:1a:d2:3b:a6:7d:96:46:e3:0a:91:ba:d2:5f:2e: b2:e1:ed:ed:63:80:38:27:67:ad:39:fa:a5:13:23: 9d:7d:3f:d5:d6:75:eb:bd:35:1e:cb:df:5b:02:75: a2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4F:EC:8A:90:6E:B5:19:EE:C7:E8:AC:93:8C:52:46:09:1B:16:DA X509v3 Authority Key Identifier: keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a2:87:e1:cd:40:c3:be:9a:06:42:7b:1a:59:59:34:8f:a6: 47:c5:a3:b7:4a:d5:9e:d1:1f:78:d8:92:03:8e:9f:6f:85:41: 76:a7:6d:b0:6f:84:33:a1:6c:15:b0:6e:70:d5:f3:4b:25:4e: 09:a7:a9:09:53:97:33:e5:c7:c5:ad:76:6a:7d:2b:01:d6:12: 49:28:e6:0f:01:ab:56:5e:3e:99:fb:d8:c9:c6:38:bd:74:cc: 58:43:4e:e9:63:90:6b:d9:94:9d:96:5b:5e:b5:0c:b5:43:8b: fc:c1:e9:09:37:44:4b:4c:ab:3c:36:f7:ee:15:44:f9:43:8c: 35:00:ba:d0:b8:65:a5:ac:dd:1a:6a:24:e7:3b:8b:f7:06:51: a2:60:f4:3d:2e:43:aa:76:51:ac:10:58:e4:29:81:3f:8c:89: 99:74:c6:7a:9b:28:4e:3d:1c:a3:74:e8:b8:89:32:ab:20:82: e1:20:eb:bf:85:6f:ff:93:24:7c:75:df:2b:a9:58:e5:23:f5: 5c:db:b4:b1:e7:c7:c1:03:73:d8:09:da:6c:79:ba:08:fd:ea: 03:92:57:3b:9f:7d:99:1f:d3:48:8b:14:6f:d9:ad:20:4e:22: 51:6e:10:33:b4:ea:5b:e6:ea:e2:9c:c8:60:ef:64:56:4b:a0: 12:e8:62:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSK9qwSv1YiUvlNXd2Gb0EApkpF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMy NUFCRUYxMjAeFw0yNjAzMjUyMjQ2MzdaFw0yNjAzMjkwNDQwMzdaMDMxMTAvBgNV BAMTKDQ4NEZFQzhBOTA2RUI1MTlFRUM3RThBQzkzOEM1MjQ2MDkxQjE2REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+0Y/cja/86bx40bsrLzuhUpj JJ9rsVUe8wGlrkc1FegR/YrBfnBOY7YGkkWlIli0DHVKNcof57mw78Crmr47jTCQ Zcb1PLebCrvte9mzMKDncXrEJIGD4jFtcvlshh8dIyagfdEhP/UJp85MCVt0Hi20 TFIC0xJD87n/WGOXEd3V6FdJ5NPsMzZKOY+7lr0YY+Ck2feMpTX8qckR0DBJwhuW z4xrJvlMXo3G8+ipAmIsBS6nFNNgY1u+nsDZLvI6AW2D86pFF4zo21wbZJZrn/ca 0jumfZZG4wqRutJfLrLh7e1jgDgnZ605+qUTI519P9XWdeu9NR7L31sCdaJVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSE/sipButRnux+isk4xSRgkbFtowHwYDVR0j BBgwFoAUIkdvkMewgTGXT1sZg0kGwyWr7xIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmZiYWFmYy00ZGIyLTRmYzQtYTFhOC0yZDhlNGM4YjJjZTAvMC8yMjQ3NkY5MEM3 QjA4MTMxOTc0RjVCMTk4MzQ5MDZDMzI1QUJFRjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMyNUFC RUYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2 QzMyNUFCRUYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGih+HNQMO+mgZCexpZWTSPpkfFo7dK1Z7R H3jYkgOOn2+FQXanbbBvhDOhbBWwbnDV80slTgmnqQlTlzPlx8Wtdmp9KwHWEkko 5g8Bq1ZePpn72MnGOL10zFhDTuljkGvZlJ2WW161DLVDi/zB6Qk3REtMqzw29+4V RPlDjDUAutC4ZaWs3RpqJOc7i/cGUaJg9D0uQ6p2UawQWOQpgT+MiZl0xnqbKE49 HKN06LiJMqsgguEg67+Fb/+TJHx13yupWOUj9VzbtLHnx8EDc9gJ2mx5ugj96gOS VzuffZkf00iLFG/ZrSBOIlFuEDO06lvm6uKcyGDvZFZLoBLoYqw= -----END CERTIFICATE-----Generated at Thu Mar 26 20:24:22 2026 by rpki-client