$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json) Hash identifier: Ou11WC+9xIE003fIIQDQoom22R6dzNWzDZ+ngxekeBE= Subject key identifier: 9F:DA:33:83:B9:71:83:BE:EC:0E:34:A4:B1:E3:CE:4A:46:BD:30:E4 Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 60D2961851AD1E393E8104F4C4C0C22EFB366250 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft Manifest number: 0389 Signing time: Thu 16 Apr 2026 23:41:33 +0000 Manifest this update: Thu 16 Apr 2026 23:36:33 +0000 Manifest next update: Mon 20 Apr 2026 01:18:33 +0000 Files and hashes: 1: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: TZjzQJ/LrhJF7zVdnfFBpEj32JG0cBhvivgCfWgeJQ0=) 2: AS10217.roa (hash: AKpcdslpGED1vOq8rbDyvewGD3kNp+be//qHRk5p0rQ=) 3: AS147168.roa (hash: sXrlmN+ZCRiNZeyqUN67fyS1tNOgP0RFDODnmFAtcLI=) 4: AS45700.roa (hash: /1LWrRhqReIukWiX2P9+azoAV5YJhAiOPALAX0RMuXs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 01:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d2:96:18:51:ad:1e:39:3e:81:04:f4:c4:c0:c2:2e:fb:36:62:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Apr 16 23:36:33 2026 GMT Not After : Apr 20 01:18:33 2026 GMT Subject: CN=9FDA3383B97183BEEC0E34A4B1E3CE4A46BD30E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:52:9c:58:e6:a9:d3:65:6c:19:20:9d:0e:15: 61:10:de:89:b8:71:41:9e:2e:1b:b8:6f:b9:77:8d: 65:60:61:e8:60:2e:29:f7:45:b1:be:55:07:14:2e: 3c:fa:b1:d0:84:51:43:cd:f9:3e:13:e1:26:16:7d: 3e:96:37:76:09:82:a6:1d:5b:6b:b4:82:bc:3a:12: 5f:c5:2e:1a:89:07:1a:97:8a:c9:46:75:98:94:4c: 98:09:04:50:85:9e:e6:81:ad:70:8c:16:67:71:4b: b6:a3:bf:e2:50:4e:04:73:5f:74:3a:f6:ac:aa:45: 01:ac:8f:25:87:29:3d:b2:2b:52:83:f5:a4:3e:db: 16:7c:e0:77:25:76:1f:4d:f6:41:a3:2f:93:d4:a2: 4a:aa:4e:2e:64:df:da:c3:f1:bc:c8:5a:81:c3:80: 7e:98:fd:48:6a:13:9d:ab:57:15:54:c6:0a:ed:1e: cf:ba:ed:59:bd:fa:d5:57:01:36:ab:ef:a1:c5:f8: 3b:51:07:f5:fd:a8:9a:c4:9e:6e:7b:1b:ef:26:06: 62:85:08:56:7d:7d:91:31:8b:0e:01:20:2d:57:ce: a8:26:01:cc:d7:62:41:f2:8c:cc:1c:64:1b:5e:72: e2:ae:50:37:c4:b5:e0:6e:bc:3d:8e:b8:25:03:1e: 08:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DA:33:83:B9:71:83:BE:EC:0E:34:A4:B1:E3:CE:4A:46:BD:30:E4 X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b3:8e:24:05:b3:32:8e:26:2a:e5:d0:d4:16:be:62:5d:25: 7a:ce:11:a6:f2:e3:22:93:5d:c5:3d:bd:ea:67:43:14:da:d6: ac:34:b4:f4:f8:a4:60:30:71:d1:39:7f:7c:24:55:d3:4a:0a: 29:50:29:b1:2e:6c:70:f2:b7:1e:71:d9:eb:3b:db:e8:d9:ab: 21:5c:f0:22:b6:43:45:60:a6:c4:3e:b7:17:e5:04:ab:1a:fc: b5:bd:52:db:c3:cc:14:70:09:c1:41:70:32:40:2c:41:15:f6: 31:14:a5:5e:6b:1d:ac:1c:f7:04:06:f0:bf:cf:20:13:54:c9: d0:d4:ee:93:7a:31:d0:74:97:cc:fc:f9:57:fe:e9:56:b7:84: 1d:15:67:ba:51:f6:5c:ec:ee:e5:d8:85:b6:1f:54:de:4e:e4: 46:dc:d4:14:26:fa:4d:1f:7b:18:f5:a1:a8:83:3b:e6:23:05: 72:03:27:83:58:15:62:98:60:4c:ac:03:b5:ee:eb:c6:b9:f2: 60:a3:c1:5e:e8:c0:5e:84:ca:d7:a8:1f:ac:e0:0a:de:7a:a4: 8d:26:39:ae:83:5b:e6:ff:1b:7c:1a:c0:b0:21:f4:72:dd:72: 8f:b6:81:7b:94:9d:89:4a:e8:5b:98:c5:92:46:c2:06:09:3e: 75:e6:30:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYNKWGFGtHjk+gQT0xMDCLvs2YlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNjA0MTYyMzM2MzNaFw0yNjA0MjAwMTE4MzNaMDMxMTAvBgNV BAMTKDlGREEzMzgzQjk3MTgzQkVFQzBFMzRBNEIxRTNDRTRBNDZCRDMwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdUpxY5qnTZWwZIJ0OFWEQ3om4 cUGeLhu4b7l3jWVgYehgLin3RbG+VQcULjz6sdCEUUPN+T4T4SYWfT6WN3YJgqYd W2u0grw6El/FLhqJBxqXislGdZiUTJgJBFCFnuaBrXCMFmdxS7ajv+JQTgRzX3Q6 9qyqRQGsjyWHKT2yK1KD9aQ+2xZ84Hcldh9N9kGjL5PUokqqTi5k39rD8bzIWoHD gH6Y/UhqE52rVxVUxgrtHs+67Vm9+tVXATar76HF+DtRB/X9qJrEnm57G+8mBmKF CFZ9fZExiw4BIC1XzqgmAczXYkHyjMwcZBtecuKuUDfEteBuvD2OuCUDHghRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn9ozg7lxg77sDjSksePOSka9MOQwHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4 MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWzjiQFszKOJirl0NQWvmJdJXrOEaby4yKT XcU9vepnQxTa1qw0tPT4pGAwcdE5f3wkVdNKCilQKbEubHDytx5x2es72+jZqyFc 8CK2Q0VgpsQ+txflBKsa/LW9UtvDzBRwCcFBcDJALEEV9jEUpV5rHawc9wQG8L/P IBNUydDU7pN6MdB0l8z8+Vf+6Va3hB0VZ7pR9lzs7uXYhbYfVN5O5Ebc1BQm+k0f exj1oaiDO+YjBXIDJ4NYFWKYYEysA7Xu68a58mCjwV7owF6EyteoH6zgCt56pI0m Oa6DW+b/G3wawLAh9HLdco+2gXuUnYlK6FuYxZJGwgYJPnXmMGA= -----END CERTIFICATE-----Generated at Fri Apr 17 12:15:09 2026 by rpki-client