$ rpki-client -vvf repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft File: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft (raw, json) Hash identifier: +rj0SwZhLBWgxFL8fJbhREd42swDDcWdHGC02Z/fWGY= Subject key identifier: F5:AB:01:22:1E:36:58:88:13:42:37:47:CC:F1:34:35:E9:C4:15:21 Authority key identifier: 1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A Certificate issuer: /CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Certificate serial: 465F7FDA3077EFC6C969AF3A1D327BBEF2029072 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft Manifest number: 03E6 Signing time: Fri 17 Apr 2026 03:11:16 +0000 Manifest this update: Fri 17 Apr 2026 03:06:16 +0000 Manifest next update: Mon 20 Apr 2026 10:29:16 +0000 Files and hashes: 1: 3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa (hash: LTBEQvAXAeuY0KH0kB6kKvzSEQh0r1sAqnbQ1uPtbW4=) 2: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl (hash: GxemlHNs625YpGD/Ziz5P12P0sbjdwdkuIKuvDq6Qyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:5f:7f:da:30:77:ef:c6:c9:69:af:3a:1d:32:7b:be:f2:02:90:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Validity Not Before: Apr 17 03:06:16 2026 GMT Not After : Apr 20 10:29:16 2026 GMT Subject: CN=F5AB01221E36588813423747CCF13435E9C41521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:db:34:98:c5:33:8e:6c:3e:92:38:1e:12:b1: 54:8f:db:f7:7c:99:36:7a:40:95:99:60:28:c4:97: e8:b3:26:8d:77:44:31:d2:7f:b1:e7:e5:88:0c:35: 00:7a:13:f9:72:51:46:df:f5:dd:a0:33:cf:1e:b7: c5:a3:37:3c:76:28:41:fe:b9:b6:09:81:4f:47:97: 8c:61:f9:f2:ba:b0:de:3d:bf:cb:1e:5d:b9:ef:37: fa:cf:62:80:a1:80:07:eb:10:e5:a8:bf:b6:df:4f: 91:72:f0:fd:85:25:d5:41:5a:72:1e:ff:5c:79:03: 9f:6e:bd:24:8b:13:f4:89:8f:dc:ae:a2:90:ca:84: 0a:75:b8:6f:47:eb:f2:df:26:e1:43:c3:8f:2e:92: e2:84:99:c6:a0:75:a5:a6:09:2f:b0:7c:58:e6:a4: 59:dd:20:11:b5:5e:1f:47:be:d4:a1:3a:60:76:a7: 37:8a:25:02:5b:5e:e0:b5:69:fb:12:20:30:79:cf: b8:92:d0:e8:96:28:37:2b:18:f3:bf:7a:ca:ae:86: 1e:6e:27:98:7f:01:5d:35:64:91:00:77:4a:3d:86: cd:7c:b0:11:00:df:fe:44:d9:a6:32:4b:40:95:04: 3e:e2:76:f4:7f:3a:0c:b2:b1:11:a6:e8:5f:9b:31: 95:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AB:01:22:1E:36:58:88:13:42:37:47:CC:F1:34:35:E9:C4:15:21 X509v3 Authority Key Identifier: keyid:1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:ec:ba:2e:e8:7b:ea:ce:f7:06:65:af:bb:80:22:35:85:9d: ec:f2:f8:2e:7e:f5:ec:45:f1:39:a5:21:e0:f5:9a:11:8f:f0: bc:06:f2:1c:8c:cc:17:5e:0b:51:ed:5a:72:30:82:7a:00:0f: 98:78:2f:75:51:20:09:41:ae:00:09:4c:2c:43:8e:4d:99:50: ec:13:5e:5e:d4:5c:87:a4:57:b5:d2:d0:8f:2b:33:ff:d8:37: 17:b7:5f:24:17:4f:14:eb:5f:20:71:bf:fe:e7:5c:59:bd:d3: 93:bf:ec:4c:4a:71:6f:60:f5:45:bb:20:2f:b7:38:49:d0:e0: f2:63:93:ed:05:68:c6:3e:49:3c:89:45:74:4d:0d:e2:65:09: 22:13:fa:28:5b:02:72:ef:9c:e4:35:31:32:a0:88:9e:0a:c1: 1f:82:fb:d3:ba:0a:6a:3b:72:d2:58:b9:b1:c8:f4:da:29:5c: 15:c2:ff:ce:f1:ef:d0:33:bf:40:28:82:cc:73:0c:ce:ab:66: 92:90:1f:85:dd:33:b4:dc:cd:37:d0:0c:b8:6d:fe:a5:bc:1b: 5f:5e:91:d1:a0:79:6f:22:0c:1e:1b:5a:1a:07:0c:51:6d:fa: b8:fa:3a:61:3e:7e:85:14:43:76:8b:5e:f8:2c:75:cd:10:50: 6a:db:6d:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURl9/2jB378bJaa86HTJ7vvICkHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVE NUU0NjQyQTAeFw0yNjA0MTcwMzA2MTZaFw0yNjA0MjAxMDI5MTZaMDMxMTAvBgNV BAMTKEY1QUIwMTIyMUUzNjU4ODgxMzQyMzc0N0NDRjEzNDM1RTlDNDE1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2zSYxTOObD6SOB4SsVSP2/d8 mTZ6QJWZYCjEl+izJo13RDHSf7Hn5YgMNQB6E/lyUUbf9d2gM88et8WjNzx2KEH+ ubYJgU9Hl4xh+fK6sN49v8seXbnvN/rPYoChgAfrEOWov7bfT5Fy8P2FJdVBWnIe /1x5A59uvSSLE/SJj9yuopDKhAp1uG9H6/LfJuFDw48ukuKEmcagdaWmCS+wfFjm pFndIBG1Xh9HvtShOmB2pzeKJQJbXuC1afsSIDB5z7iS0OiWKDcrGPO/esquhh5u J5h/AV01ZJEAd0o9hs18sBEA3/5E2aYyS0CVBD7idvR/OgyysRGm6F+bMZVPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9asBIh42WIgTQjdHzPE0NenEFSEwHwYDVR0j BBgwFoAUHCLNPXeRp5GH2p0DTrS7XtXkZCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDQxYjQ4ZC03M2M0LTRjZGQtYmNhYy1hNTk2OTliY2JiYzEvMC8xQzIyQ0QzRDc3 OTFBNzkxODdEQTlEMDM0RUI0QkI1RUQ1RTQ2NDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVENUU0 NjQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJC NUVENUU0NjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHsui7oe+rO9wZlr7uAIjWFnezy+C5+9exF 8TmlIeD1mhGP8LwG8hyMzBdeC1HtWnIwgnoAD5h4L3VRIAlBrgAJTCxDjk2ZUOwT Xl7UXIekV7XS0I8rM//YNxe3XyQXTxTrXyBxv/7nXFm905O/7ExKcW9g9UW7IC+3 OEnQ4PJjk+0FaMY+STyJRXRNDeJlCSIT+ihbAnLvnOQ1MTKgiJ4KwR+C+9O6Cmo7 ctJYubHI9NopXBXC/87x79Azv0AogsxzDM6rZpKQH4XdM7TczTfQDLht/qW8G19e kdGgeW8iDB4bWhoHDFFt+rj6OmE+foUUQ3aLXvgsdc0QUGrbbT0= -----END CERTIFICATE-----Generated at Fri Apr 17 17:33:35 2026 by rpki-client