$ rpki-client -vvf repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft File: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft (raw, json) Hash identifier: zhI+kLsO7sl12uycraovhUavoozxT5ly/zmklwb1Bs0= Subject key identifier: 39:5C:AB:2C:33:EA:61:E4:27:BB:F0:00:17:69:EF:3E:69:01:F4:56 Authority key identifier: 22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F Certificate issuer: /CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Certificate serial: 2397A5DEC6D9550658E84005ED8D93D36DC5CEDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft Manifest number: 01F3 Signing time: Sat 28 Feb 2026 12:20:50 +0000 Manifest this update: Sat 28 Feb 2026 12:15:50 +0000 Manifest next update: Tue 03 Mar 2026 12:52:50 +0000 Files and hashes: 1: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl (hash: SZ05CytoQz196M98hzTotA7OzV6N64qiH1m0p1lkvgQ=) 2: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: /z/ZhPaw5F3TCZQvmgqcleuF3rFMMJYxb+Mr//w9yXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:97:a5:de:c6:d9:55:06:58:e8:40:05:ed:8d:93:d3:6d:c5:ce:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Validity Not Before: Feb 28 12:15:50 2026 GMT Not After : Mar 3 12:52:50 2026 GMT Subject: CN=395CAB2C33EA61E427BBF0001769EF3E6901F456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c5:d9:f8:5c:a0:c2:5b:20:47:60:57:bf:1a: 21:c8:7e:64:e1:79:e2:c6:30:8f:f9:45:9a:85:13: fe:0b:04:39:07:46:ca:64:d8:0b:56:57:e3:4b:c4: 43:86:f2:75:ee:93:26:82:84:15:bb:31:aa:7a:2b: 81:e8:c7:0f:f3:ff:11:50:3a:18:09:44:e4:a2:e3: 18:6d:a1:b5:d0:f7:db:1a:ed:15:58:b8:82:85:79: 1a:35:3d:a1:d5:ae:ed:15:93:bc:dd:97:3a:40:cf: 8d:60:6b:4a:57:51:87:5e:46:69:9f:66:2b:bf:b6: c2:99:d8:29:5c:40:f8:66:8d:86:b0:ff:d0:8b:88: ee:2b:b8:62:92:8f:5e:c2:b8:04:73:31:0b:bd:9d: cc:8b:8c:7b:80:55:e3:40:d8:98:82:5a:a1:57:22: 9c:98:9f:8a:09:e8:f9:a0:c5:9b:9b:cf:83:d2:26: b7:7f:81:5d:44:19:08:a6:4b:64:0d:10:8c:85:c3: 97:af:7b:63:49:b8:04:ee:62:95:53:a7:18:99:03: 7a:7b:ba:ad:16:1e:9d:ae:22:70:ae:cc:ea:70:10: 06:22:d3:41:95:bb:2e:87:0e:4f:55:db:92:39:14: 00:92:ec:ad:e8:f5:88:a0:36:33:d5:07:21:3c:c3: e4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5C:AB:2C:33:EA:61:E4:27:BB:F0:00:17:69:EF:3E:69:01:F4:56 X509v3 Authority Key Identifier: keyid:22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:c0:72:e7:83:13:47:79:3f:a6:aa:83:76:4e:f2:1a:c9:57: 08:dc:6e:ed:0d:b6:29:95:26:13:2f:cc:fa:41:52:c8:63:36: b4:68:1a:9d:93:3e:56:3a:95:f5:19:cd:b2:a3:5d:33:bf:a2: 8f:5f:3c:44:0e:7e:66:13:24:44:c9:53:a4:6f:e9:db:77:31: ad:04:44:d3:b6:76:bd:d6:78:95:bd:b3:7b:1a:4c:27:1f:43: 71:fe:b2:f4:cc:34:fe:2d:e2:4e:46:ce:29:74:90:9b:38:4f: 8c:9f:51:a9:1a:19:a5:95:53:09:85:a4:32:80:00:1b:94:83: 08:e6:90:fc:31:82:09:c9:cc:8e:17:2a:28:f9:26:13:81:5e: 32:7b:be:32:04:41:97:15:42:45:cb:cc:bd:19:75:65:fd:81: 63:8d:5f:65:65:fa:28:0a:b3:43:a7:8d:ed:3e:81:c4:25:eb: 05:18:2b:ee:ab:14:62:07:d4:a1:16:3b:55:9b:3a:41:a4:df: 4d:8c:9d:4b:49:c3:90:51:a6:19:4d:0f:f7:7a:7a:34:96:27: 40:6a:a2:72:a0:58:2e:da:d1:2a:49:77:ad:59:df:82:90:9a: 62:a0:b7:00:c3:db:d8:0b:67:ea:09:bb:93:f4:30:b4:10:60: 8f:21:b1:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5el3sbZVQZY6EAF7Y2T023FztswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1QUY4 QzFDMjI4RjAeFw0yNjAyMjgxMjE1NTBaFw0yNjAzMDMxMjUyNTBaMDMxMTAvBgNV BAMTKDM5NUNBQjJDMzNFQTYxRTQyN0JCRjAwMDE3NjlFRjNFNjkwMUY0NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDexdn4XKDCWyBHYFe/GiHIfmTh eeLGMI/5RZqFE/4LBDkHRspk2AtWV+NLxEOG8nXukyaChBW7Map6K4Hoxw/z/xFQ OhgJROSi4xhtobXQ99sa7RVYuIKFeRo1PaHVru0Vk7zdlzpAz41ga0pXUYdeRmmf Ziu/tsKZ2ClcQPhmjYaw/9CLiO4ruGKSj17CuARzMQu9ncyLjHuAVeNA2JiCWqFX IpyYn4oJ6PmgxZubz4PSJrd/gV1EGQimS2QNEIyFw5eve2NJuATuYpVTpxiZA3p7 uq0WHp2uInCuzOpwEAYi00GVuy6HDk9V25I5FACS7K3o9YigNjPVByE8w+RTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOVyrLDPqYeQnu/AAF2nvPmkB9FYwHwYDVR0j BBgwFoAUIoJaC+6SZoOsQaBIau9Vr4wcIo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTAwMjA4Yi0zMmFjLTRhMjYtOWQ5Mi02MDlhZDc2MTgzYzEvMC8yMjgyNUEwQkVF OTI2NjgzQUM0MUEwNDg2QUVGNTVBRjhDMUMyMjhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1QUY4QzFD MjI4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzkwMDIwOGItMzJhYy00YTI2LTlk OTItNjA5YWQ3NjE4M2MxLzAvMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1 QUY4QzFDMjI4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDAcueDE0d5P6aqg3ZO8hrJVwjcbu0NtimV JhMvzPpBUshjNrRoGp2TPlY6lfUZzbKjXTO/oo9fPEQOfmYTJETJU6Rv6dt3Ma0E RNO2dr3WeJW9s3saTCcfQ3H+svTMNP4t4k5Gzil0kJs4T4yfUakaGaWVUwmFpDKA ABuUgwjmkPwxggnJzI4XKij5JhOBXjJ7vjIEQZcVQkXLzL0ZdWX9gWONX2Vl+igK s0Onje0+gcQl6wUYK+6rFGIH1KEWO1WbOkGk302MnUtJw5BRphlND/d6ejSWJ0Bq onKgWC7a0SpJd61Z34KQmmKgtwDD29gLZ+oJu5P0MLQQYI8hsTU= -----END CERTIFICATE-----Generated at Mon Mar 2 11:40:43 2026 by rpki-client