$ rpki-client -vvf repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft File: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft (raw, json) Hash identifier: 8e2g2h5jQWwox3yKvnD0Jf0JU4Zw08doaXxYHDF3M4o= Subject key identifier: 23:72:DF:CC:60:4F:44:2D:A0:1A:6E:AC:92:92:76:63:CE:B5:33:89 Authority key identifier: 1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A Certificate issuer: /CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Certificate serial: 71F69DF13A26C346A85201E4C13EEAAD18530864 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft Manifest number: 03D1 Signing time: Sat 28 Feb 2026 10:51:13 +0000 Manifest this update: Sat 28 Feb 2026 10:46:13 +0000 Manifest next update: Tue 03 Mar 2026 12:47:13 +0000 Files and hashes: 1: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl (hash: MU4b8C56TtveqWLrOb9sHgVD/PFM85CB7r0x+wm5psU=) 2: 3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa (hash: LTBEQvAXAeuY0KH0kB6kKvzSEQh0r1sAqnbQ1uPtbW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:f6:9d:f1:3a:26:c3:46:a8:52:01:e4:c1:3e:ea:ad:18:53:08:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Validity Not Before: Feb 28 10:46:13 2026 GMT Not After : Mar 3 12:47:13 2026 GMT Subject: CN=2372DFCC604F442DA01A6EAC92927663CEB53389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:da:e4:62:85:7e:52:31:ac:c7:48:b2:6a:93: 46:cf:dd:38:b6:e8:74:5d:ac:8e:f6:df:4b:4d:fd: c6:57:57:2b:1a:dd:6a:23:8a:41:c5:99:fe:0f:99: f5:0f:ef:99:e9:0c:7b:f9:3e:79:82:5f:4a:a5:92: 2c:8a:a4:ca:68:76:90:e6:c1:ad:6e:f6:f3:4f:62: 9b:56:e2:92:ff:c9:e3:ad:f1:ef:ec:74:1b:f3:d9: 2d:e7:22:58:e6:4c:e7:01:5f:1d:6b:01:cb:91:bc: b6:6d:38:d9:68:a5:45:0d:6d:11:23:54:4d:f7:aa: f5:79:db:d5:7a:5e:12:dd:c9:6d:cc:77:55:6e:69: 97:43:d4:47:d3:53:d2:71:c0:b9:e9:7f:70:c5:3f: f1:c4:78:76:1b:cd:87:04:90:b9:29:7d:10:23:14: 4a:3a:56:46:c8:de:75:e6:e1:9e:79:96:12:9d:6c: ae:4d:49:2a:37:66:c4:91:84:ba:3b:e6:8e:f2:b6: 6b:9b:27:4d:b3:14:3f:de:92:3c:96:a4:98:bd:f2: 1d:b0:ff:31:67:a0:16:be:a4:e6:98:ce:ae:5f:8c: 06:ec:81:ed:10:1d:05:71:ac:d6:ab:67:cf:fb:be: 4b:9b:81:1c:21:8b:8d:aa:99:7f:a6:83:92:81:b5: 5d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:72:DF:CC:60:4F:44:2D:A0:1A:6E:AC:92:92:76:63:CE:B5:33:89 X509v3 Authority Key Identifier: keyid:1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:d4:4b:df:c8:23:3d:f1:76:84:93:22:0a:4a:78:23:80:c5: e5:63:27:ae:ef:af:05:13:c0:95:e4:90:ae:10:c9:f6:87:23: 71:d5:7d:03:e1:65:a4:d6:43:53:71:ef:8b:d5:96:47:85:9d: 23:11:ab:50:19:3e:2a:7f:aa:13:f4:84:87:ae:78:49:af:c3: 09:2f:b7:e5:3e:1e:a7:8d:76:e8:37:30:6b:73:3d:9c:eb:89: f8:0a:cf:f2:f0:3f:b0:e1:d9:a2:ab:a8:2f:6b:58:11:6f:7f: 40:18:08:4f:0f:05:ff:df:59:94:5a:cd:e1:d3:60:f9:a4:b4: b5:f5:bd:8f:4f:5b:16:24:a3:17:bf:db:26:60:85:a1:06:01: 46:66:50:a3:c2:3c:5c:b4:79:bf:8b:2f:3b:9d:a4:2a:0c:c6: 22:7d:69:0b:2f:1e:f3:50:ec:8a:e1:41:53:ab:11:c5:09:17: 74:4c:d8:81:d3:a1:75:25:6f:50:5e:4a:16:5b:bf:b6:56:95: b6:fe:0e:94:74:b9:fa:0d:28:36:57:67:b8:6d:f1:27:93:0a: c5:51:5e:8d:ff:09:ab:3b:7d:ef:03:d6:48:f4:92:d1:7d:55: ff:a4:0b:c8:a8:46:f5:1a:ad:c5:62:94:c2:8e:5f:35:3e:10: b5:cb:1e:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcfad8Tomw0aoUgHkwT7qrRhTCGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVE NUU0NjQyQTAeFw0yNjAyMjgxMDQ2MTNaFw0yNjAzMDMxMjQ3MTNaMDMxMTAvBgNV BAMTKDIzNzJERkNDNjA0RjQ0MkRBMDFBNkVBQzkyOTI3NjYzQ0VCNTMzODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN2uRihX5SMazHSLJqk0bP3Ti2 6HRdrI7230tN/cZXVysa3WojikHFmf4PmfUP75npDHv5PnmCX0qlkiyKpMpodpDm wa1u9vNPYptW4pL/yeOt8e/sdBvz2S3nIljmTOcBXx1rAcuRvLZtONlopUUNbREj VE33qvV529V6XhLdyW3Md1VuaZdD1EfTU9JxwLnpf3DFP/HEeHYbzYcEkLkpfRAj FEo6VkbI3nXm4Z55lhKdbK5NSSo3ZsSRhLo75o7ytmubJ02zFD/ekjyWpJi98h2w /zFnoBa+pOaYzq5fjAbsge0QHQVxrNarZ8/7vkubgRwhi42qmX+mg5KBtV1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI3LfzGBPRC2gGm6skpJ2Y861M4kwHwYDVR0j BBgwFoAUHCLNPXeRp5GH2p0DTrS7XtXkZCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDQxYjQ4ZC03M2M0LTRjZGQtYmNhYy1hNTk2OTliY2JiYzEvMC8xQzIyQ0QzRDc3 OTFBNzkxODdEQTlEMDM0RUI0QkI1RUQ1RTQ2NDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVENUU0 NjQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJC NUVENUU0NjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnUS9/IIz3xdoSTIgpKeCOAxeVjJ67vrwUT wJXkkK4QyfaHI3HVfQPhZaTWQ1Nx74vVlkeFnSMRq1AZPip/qhP0hIeueEmvwwkv t+U+HqeNdug3MGtzPZzrifgKz/LwP7Dh2aKrqC9rWBFvf0AYCE8PBf/fWZRazeHT YPmktLX1vY9PWxYkoxe/2yZghaEGAUZmUKPCPFy0eb+LLzudpCoMxiJ9aQsvHvNQ 7IrhQVOrEcUJF3RM2IHToXUlb1BeShZbv7ZWlbb+DpR0ufoNKDZXZ7ht8SeTCsVR Xo3/Cas7fe8D1kj0ktF9Vf+kC8ioRvUarcVilMKOXzU+ELXLHiM= -----END CERTIFICATE-----Generated at Mon Mar 2 03:40:45 2026 by rpki-client