$ rpki-client -vvf repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft File: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft (raw, json) Hash identifier: DPTBJ8NQyoSGSXbghpGLB1XKv7Dxt9PWiihUHHF42Co= Subject key identifier: 03:09:CE:14:82:DD:9A:63:5C:A8:B7:6C:05:48:A5:21:30:11:B7:A6 Authority key identifier: 22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F Certificate issuer: /CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Certificate serial: 57599C982973908F758FD8870EBC329AEC8AD2C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft Manifest number: 0208 Signing time: Fri 17 Apr 2026 00:40:52 +0000 Manifest this update: Fri 17 Apr 2026 00:35:52 +0000 Manifest next update: Mon 20 Apr 2026 03:25:52 +0000 Files and hashes: 1: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl (hash: jqdhbRW6hgdmRYUxBzy3RF+CisVcNFgB9A5qR2OyrUA=) 2: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: /z/ZhPaw5F3TCZQvmgqcleuF3rFMMJYxb+Mr//w9yXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:59:9c:98:29:73:90:8f:75:8f:d8:87:0e:bc:32:9a:ec:8a:d2:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Validity Not Before: Apr 17 00:35:52 2026 GMT Not After : Apr 20 03:25:52 2026 GMT Subject: CN=0309CE1482DD9A635CA8B76C0548A5213011B7A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:a2:bc:b5:cc:de:8c:82:8c:f3:be:93:a4: 8c:0c:ce:c9:5f:50:5c:96:e9:1c:04:00:40:00:f8: 37:f7:75:87:d4:fe:db:ad:d9:c9:97:4e:43:c8:3f: 12:5e:29:7a:09:44:e7:35:c4:d0:ab:0f:dd:f7:e7: d1:09:5e:2d:c5:d0:fa:cc:03:db:f2:e5:e0:1f:93: 5b:8e:d8:2d:39:b3:f0:79:47:08:6c:f4:1d:60:98: a0:da:04:2e:dd:7f:09:4d:85:cd:47:dd:31:05:02: cf:09:08:5b:bd:dc:4f:87:e4:b9:14:e0:ef:df:a4: 5b:5f:af:69:5f:13:9c:e8:2f:eb:6a:10:40:d4:c1: 42:5c:a1:88:f5:7e:84:c8:3d:ee:a5:a3:9f:23:4a: 78:67:9b:97:cb:69:b3:e1:fa:a8:0a:25:ce:cf:36: 72:e5:d3:34:f6:79:a2:c8:aa:f5:e9:33:f8:62:0c: 8f:b4:b6:ea:bd:19:be:0d:d9:bc:f9:80:42:6c:84: a9:57:0f:21:f4:5c:e7:c5:66:2e:8c:fd:d5:56:57: ec:ab:a6:18:67:4b:ca:96:d9:17:14:1a:f5:95:4b: d2:5d:68:2b:c6:35:4f:61:c3:7b:17:41:0a:77:24: a6:76:3d:8e:fc:6a:34:30:f6:12:93:90:0e:24:de: 1a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:09:CE:14:82:DD:9A:63:5C:A8:B7:6C:05:48:A5:21:30:11:B7:A6 X509v3 Authority Key Identifier: keyid:22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e1:40:e2:bc:24:1c:f6:57:7f:85:b7:ec:53:b2:76:9b:3d: ed:66:c0:d6:b4:de:4c:40:25:c8:fa:08:b3:65:12:f8:9f:24: 86:87:37:e7:d8:be:33:15:f5:ef:a6:d0:86:ea:06:08:77:84: 74:56:10:1f:55:db:a2:9a:57:5d:7a:63:38:4e:b1:b7:7f:27: 5d:ba:9e:2d:65:7b:f5:2b:7b:03:ae:e6:1c:f5:53:45:19:ae: 41:ae:29:a5:68:65:cb:0c:66:d4:52:48:10:55:4d:d6:bb:3d: df:26:5e:2b:84:81:48:0a:6b:e4:63:59:61:d3:43:8b:86:ff: b4:5b:f9:e8:6c:78:8b:8e:de:4a:8a:6b:06:18:91:35:72:90: f8:a5:c4:c0:bd:12:b5:08:30:e9:ba:eb:e2:02:01:7a:29:e6: b8:9a:e6:82:1b:5b:bd:1b:d1:10:e1:15:84:ee:67:72:46:d7: 5a:8a:6a:34:00:8d:6c:db:e2:c8:f6:19:d6:9e:72:32:bb:3e: be:02:1f:2d:79:f6:07:c6:c7:e1:fc:8a:b4:ce:96:8c:63:71: a2:a2:2c:7a:3b:f0:55:93:ef:cf:da:a8:61:e7:5a:cc:42:c1: f2:63:bd:91:66:ea:8c:c1:7d:1d:21:a2:dd:3f:38:b2:ac:a5: e3:05:2c:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1mcmClzkI91j9iHDrwymuyK0sIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1QUY4 QzFDMjI4RjAeFw0yNjA0MTcwMDM1NTJaFw0yNjA0MjAwMzI1NTJaMDMxMTAvBgNV BAMTKDAzMDlDRTE0ODJERDlBNjM1Q0E4Qjc2QzA1NDhBNTIxMzAxMUI3QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8yaK8tczejIKM876TpIwMzslf UFyW6RwEAEAA+Df3dYfU/tut2cmXTkPIPxJeKXoJROc1xNCrD93359EJXi3F0PrM A9vy5eAfk1uO2C05s/B5Rwhs9B1gmKDaBC7dfwlNhc1H3TEFAs8JCFu93E+H5LkU 4O/fpFtfr2lfE5zoL+tqEEDUwUJcoYj1foTIPe6lo58jSnhnm5fLabPh+qgKJc7P NnLl0zT2eaLIqvXpM/hiDI+0tuq9Gb4N2bz5gEJshKlXDyH0XOfFZi6M/dVWV+yr phhnS8qW2RcUGvWVS9JdaCvGNU9hw3sXQQp3JKZ2PY78ajQw9hKTkA4k3hq9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAwnOFILdmmNcqLdsBUilITARt6YwHwYDVR0j BBgwFoAUIoJaC+6SZoOsQaBIau9Vr4wcIo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTAwMjA4Yi0zMmFjLTRhMjYtOWQ5Mi02MDlhZDc2MTgzYzEvMC8yMjgyNUEwQkVF OTI2NjgzQUM0MUEwNDg2QUVGNTVBRjhDMUMyMjhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1QUY4QzFD MjI4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzkwMDIwOGItMzJhYy00YTI2LTlk OTItNjA5YWQ3NjE4M2MxLzAvMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1 QUY4QzFDMjI4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3hQOK8JBz2V3+Ft+xTsnabPe1mwNa03kxA Jcj6CLNlEvifJIaHN+fYvjMV9e+m0IbqBgh3hHRWEB9V26KaV116YzhOsbd/J126 ni1le/UrewOu5hz1U0UZrkGuKaVoZcsMZtRSSBBVTda7Pd8mXiuEgUgKa+RjWWHT Q4uG/7Rb+ehseIuO3kqKawYYkTVykPilxMC9ErUIMOm66+ICAXop5ria5oIbW70b 0RDhFYTuZ3JG11qKajQAjWzb4sj2GdaecjK7Pr4CHy159gfGx+H8irTOloxjcaKi LHo78FWT78/aqGHnWsxCwfJjvZFm6ozBfR0hot0/OLKspeMFLFE= -----END CERTIFICATE-----Generated at Fri Apr 17 23:02:53 2026 by rpki-client