$ rpki-client -vvf repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft File: 22504F83E378CE066AD31D32EB24280CB0F6E560.mft (raw, json) Hash identifier: oG4OedQzOE4/4t4+Q26oVfP529mkxyivfkIZy0wCYfY= Subject key identifier: 13:6A:ED:BD:DC:A3:AF:09:2A:34:2D:F1:B3:07:AA:9F:EE:5F:5F:7C Authority key identifier: 22:50:4F:83:E3:78:CE:06:6A:D3:1D:32:EB:24:28:0C:B0:F6:E5:60 Certificate issuer: /CN=22504F83E378CE066AD31D32EB24280CB0F6E560 Certificate serial: 58A37CF5F54C727790FD4D5999AE1C53278A33D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft Manifest number: 021C Signing time: Thu 26 Mar 2026 11:11:25 +0000 Manifest this update: Thu 26 Mar 2026 11:06:25 +0000 Manifest next update: Sun 29 Mar 2026 16:31:25 +0000 Files and hashes: 1: 3130332e34362e3138362e302f32332d3233203d3e20313530343632.roa (hash: rlPDCVNSf12GT3UB6JNKAKIcKwQhkdo/IHpQgzId5qI=) 2: 22504F83E378CE066AD31D32EB24280CB0F6E560.crl (hash: J0756Zy9cfl48SReQna6BY6OrXiF4M3tumsvK1GCcJQ=) 3: 3130332e34362e3138362e302f32342d3234203d3e20313530343632.roa (hash: ppVHCACqlSkCk2zBbZsJHXx5IRxFz5QYyP09fnWth0M=) 4: 3130332e34362e3138372e302f32342d3234203d3e20313530343632.roa (hash: 3MFYnAUdA7YDVt9GLc9O7yMdgWVCYVJhgGeVAk7k6cA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.crl rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a3:7c:f5:f5:4c:72:77:90:fd:4d:59:99:ae:1c:53:27:8a:33:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22504F83E378CE066AD31D32EB24280CB0F6E560 Validity Not Before: Mar 26 11:06:25 2026 GMT Not After : Mar 29 16:31:25 2026 GMT Subject: CN=136AEDBDDCA3AF092A342DF1B307AA9FEE5F5F7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:60:db:45:f4:08:70:f0:a2:48:fe:db:0e:f1: 00:8a:58:c7:7d:a9:ee:a5:ff:ba:9f:4a:95:80:9d: 6b:f9:52:28:b1:74:73:23:53:5f:1f:f2:c2:a2:f3: bb:d3:05:3a:7e:2c:dd:1c:d8:96:cf:f8:3f:ca:a5: eb:90:b5:80:b1:91:a3:37:68:a3:b3:97:0a:73:60: 1e:80:4e:2e:5b:15:c5:90:8e:7d:d2:15:1d:13:39: 4c:a4:3c:d0:1e:b7:02:9d:b8:8a:27:64:94:b5:92: 90:4f:ca:79:de:00:55:51:c6:47:90:74:b4:af:54: 70:53:9f:7d:57:c0:58:ff:1c:b2:63:50:67:3d:35: c0:d6:d9:d1:67:5a:63:f9:9d:37:f9:12:5a:93:5f: 0f:cd:11:dd:9f:c0:57:d0:2c:4c:8a:ab:62:e6:e0: 7d:43:b0:3f:bc:f6:8e:bf:fe:9d:6e:5e:67:87:be: a0:c3:a5:d1:e2:bf:46:b7:70:ad:6f:ec:0f:06:39: ea:fd:ae:ad:0e:6b:4e:19:a7:c4:77:ab:4b:1b:2b: 70:c3:ab:aa:7b:5b:a2:0a:1d:4e:87:99:41:9d:4a: cc:27:2d:7f:b1:77:32:88:e3:7d:3b:c1:db:6a:c0: 6e:89:8d:94:7d:d9:85:c9:af:d3:41:f6:b5:fe:88: 68:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6A:ED:BD:DC:A3:AF:09:2A:34:2D:F1:B3:07:AA:9F:EE:5F:5F:7C X509v3 Authority Key Identifier: keyid:22:50:4F:83:E3:78:CE:06:6A:D3:1D:32:EB:24:28:0C:B0:F6:E5:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:cd:48:26:91:19:fb:49:f2:94:79:c5:c3:17:57:fb:e9:a4: 17:1b:73:26:c7:14:c2:40:31:d3:c8:59:31:ba:8c:69:ad:c9: 03:76:0b:60:4c:ae:80:02:3a:a8:09:d3:f0:c8:5a:cc:e6:27: 64:1c:ea:b0:22:23:58:1c:18:4b:52:63:f6:52:c2:d8:f0:7f: a3:9a:de:92:7c:1e:ff:77:97:c8:be:31:b9:76:83:f2:a7:16: d9:d2:f2:11:97:45:63:5b:ab:fe:45:70:9e:00:2a:e6:2a:a8: 3e:47:34:e6:16:9f:e9:98:a1:e3:b1:0b:1b:e6:58:47:40:ff: 00:f5:fd:d7:9c:28:37:4d:44:22:ad:99:9a:62:eb:1b:67:26: 48:1c:91:8c:c2:94:30:0b:21:21:70:c3:7d:37:82:75:ca:10: df:15:75:64:ab:53:ef:8c:42:fd:77:a0:b9:57:f4:5b:da:f2: 70:a3:0a:1c:12:23:0c:88:c0:1f:be:f3:b6:36:94:3a:46:3a: 14:25:88:6f:bc:7f:5b:2e:d9:ae:05:02:91:97:3d:16:2f:40: b4:a1:77:fa:92:e4:ff:59:6b:8f:76:fb:59:6b:55:d0:de:f7: 86:9b:d7:77:cd:db:7c:97:97:a2:3b:e8:eb:dc:d6:03:9c:b3: bd:7b:86:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKN89fVMcneQ/U1Zma4cUyeKM9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1MDRGODNFMzc4Q0UwNjZBRDMxRDMyRUIyNDI4MENC MEY2RTU2MDAeFw0yNjAzMjYxMTA2MjVaFw0yNjAzMjkxNjMxMjVaMDMxMTAvBgNV BAMTKDEzNkFFREJERENBM0FGMDkyQTM0MkRGMUIzMDdBQTlGRUU1RjVGN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLYNtF9Ahw8KJI/tsO8QCKWMd9 qe6l/7qfSpWAnWv5UiixdHMjU18f8sKi87vTBTp+LN0c2JbP+D/KpeuQtYCxkaM3 aKOzlwpzYB6ATi5bFcWQjn3SFR0TOUykPNAetwKduIonZJS1kpBPynneAFVRxkeQ dLSvVHBTn31XwFj/HLJjUGc9NcDW2dFnWmP5nTf5ElqTXw/NEd2fwFfQLEyKq2Lm 4H1DsD+89o6//p1uXmeHvqDDpdHiv0a3cK1v7A8GOer9rq0Oa04Zp8R3q0sbK3DD q6p7W6IKHU6HmUGdSswnLX+xdzKI4307wdtqwG6JjZR92YXJr9NB9rX+iGgBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE2rtvdyjrwkqNC3xsweqn+5fX3wwHwYDVR0j BBgwFoAUIlBPg+N4zgZq0x0y6yQoDLD25WAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTQzMjQxYi1jZmQxLTRjYmItOTIxOS1jN2EzNjIzN2MxNDgvMC8yMjUwNEY4M0Uz NzhDRTA2NkFEMzFEMzJFQjI0MjgwQ0IwRjZFNTYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1MDRGODNFMzc4Q0UwNjZBRDMxRDMyRUIyNDI4MENCMEY2 RTU2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU0MzI0MWItY2ZkMS00Y2JiLTky MTktYzdhMzYyMzdjMTQ4LzAvMjI1MDRGODNFMzc4Q0UwNjZBRDMxRDMyRUIyNDI4 MENCMEY2RTU2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnNSCaRGftJ8pR5xcMXV/vppBcbcybHFMJA MdPIWTG6jGmtyQN2C2BMroACOqgJ0/DIWszmJ2Qc6rAiI1gcGEtSY/ZSwtjwf6Oa 3pJ8Hv93l8i+Mbl2g/KnFtnS8hGXRWNbq/5FcJ4AKuYqqD5HNOYWn+mYoeOxCxvm WEdA/wD1/decKDdNRCKtmZpi6xtnJkgckYzClDALISFww303gnXKEN8VdWSrU++M Qv13oLlX9Fva8nCjChwSIwyIwB++87Y2lDpGOhQliG+8f1su2a4FApGXPRYvQLSh d/qS5P9Za492+1lrVdDe94ab13fN23yXl6I76Ovc1gOcs717hiU= -----END CERTIFICATE-----Generated at Thu Mar 26 14:41:10 2026 by rpki-client