$ rpki-client -vvf repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.mft File: 2F225A0699074B5634923E69A9A4CE84DF3CAB03.mft (raw, json) Hash identifier: 8PYBCrsLUcMVNfbBCU+e2N3YkTWF1rZedbzOOBJzl3I= Subject key identifier: 68:01:74:29:3F:99:F8:9D:CC:42:7C:07:AA:2E:29:61:7C:B3:7C:B1 Authority key identifier: 2F:22:5A:06:99:07:4B:56:34:92:3E:69:A9:A4:CE:84:DF:3C:AB:03 Certificate issuer: /CN=2F225A0699074B5634923E69A9A4CE84DF3CAB03 Certificate serial: 591E06E83844A60EB48F278CE9E019DADDCA2EC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F225A0699074B5634923E69A9A4CE84DF3CAB03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.mft Manifest number: 11 Signing time: Sun 19 Apr 2026 03:11:02 +0000 Manifest this update: Sun 19 Apr 2026 03:06:02 +0000 Manifest next update: Wed 22 Apr 2026 12:57:02 +0000 Files and hashes: 1: 2F225A0699074B5634923E69A9A4CE84DF3CAB03.crl (hash: p+XASdMEXlaaalhqchR+ntiA/Gv+UOnGnzar3U/OOro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.crl rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F225A0699074B5634923E69A9A4CE84DF3CAB03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:1e:06:e8:38:44:a6:0e:b4:8f:27:8c:e9:e0:19:da:dd:ca:2e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F225A0699074B5634923E69A9A4CE84DF3CAB03 Validity Not Before: Apr 19 03:06:02 2026 GMT Not After : Apr 22 12:57:02 2026 GMT Subject: CN=680174293F99F89DCC427C07AA2E29617CB37CB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:43:30:03:82:af:d8:97:3e:17:ad:5b:d8:77: c6:1f:b7:5c:82:c8:6f:32:c4:41:8b:93:6c:54:c1: 0d:ee:a3:e5:9a:74:a6:df:56:a7:17:15:1c:25:e7: 79:43:53:4a:d6:65:58:ac:c3:85:32:80:05:23:67: 11:bb:b2:f7:22:93:a7:84:b5:9c:eb:95:e3:91:b7: 20:b8:99:c8:e5:a9:b1:94:26:5d:ae:84:38:cf:a2: 09:d6:1f:1d:1d:6e:0b:4f:20:62:64:81:70:7a:85: d9:f8:e1:14:dc:e8:a7:59:6a:7f:a3:d2:09:64:f8: fe:08:7b:bb:8c:12:bc:b6:81:b8:04:1b:56:0b:88: 23:07:ad:a4:bd:52:3c:dc:20:7c:bc:32:0d:a4:6b: af:15:7d:ea:e5:6b:e5:b7:92:db:e6:92:a1:ee:63: fc:69:13:f7:c3:bc:38:ed:3a:fd:e3:5c:d9:b0:96: 32:12:40:17:8e:17:7c:3e:71:f9:d0:9d:68:87:2d: 55:ed:47:43:fb:72:e3:78:24:74:32:dd:4f:d5:01: 23:4d:4e:4e:d9:0d:bc:1a:39:67:04:f1:7d:9c:4a: ce:39:bf:c7:90:57:04:7b:24:83:10:da:41:5e:f8: 86:79:fb:a4:82:03:1f:cc:b3:fa:5a:13:25:2e:4c: 8c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:01:74:29:3F:99:F8:9D:CC:42:7C:07:AA:2E:29:61:7C:B3:7C:B1 X509v3 Authority Key Identifier: keyid:2F:22:5A:06:99:07:4B:56:34:92:3E:69:A9:A4:CE:84:DF:3C:AB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F225A0699074B5634923E69A9A4CE84DF3CAB03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:95:a2:98:1a:62:14:d8:44:1d:db:8c:2f:76:28:5d:5e:74: d2:5e:e4:ec:26:6f:dd:51:1e:c9:83:dc:36:8e:fa:b1:c2:b2: 23:cb:70:8a:ef:d2:19:dd:e8:4c:5f:65:6c:65:eb:58:f7:1b: 91:e2:2d:5c:f7:d4:c0:4a:c8:ea:b4:39:d8:9b:f6:cf:94:6d: 82:e6:83:40:d1:2f:96:02:bc:f7:e5:3a:a9:7c:64:a3:41:22: 1c:d8:cf:7f:e9:c9:ed:72:28:3f:1f:8f:e2:5c:81:3f:a6:2a: 67:a2:0b:00:eb:60:46:23:05:d3:9d:04:33:13:6c:7d:bd:55: e4:b8:f2:56:bb:2e:e8:14:ee:f4:d5:43:13:6e:a4:65:63:ff: 86:4c:b7:98:57:c4:a6:0f:ee:e0:9b:83:92:5c:a3:b3:15:81: f7:97:63:d1:fd:c6:6c:a7:0f:19:d3:c1:ae:4c:17:36:67:61: 4e:f0:1a:50:f7:e3:0c:f5:10:67:b3:b6:e9:32:4c:a4:e2:6d: 16:bc:33:07:f8:d4:0f:b6:32:b4:f1:2d:96:f8:23:41:df:fb: bc:7c:1f:ae:5a:35:2c:64:ff:dd:0e:c7:ee:4c:7f:c0:b4:70: 79:d0:3f:cc:3d:96:ea:cb:72:e9:dc:8d:30:54:d6:d6:7d:7c: 78:09:61:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWR4G6DhEpg60jyeM6eAZ2t3KLsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyMjVBMDY5OTA3NEI1NjM0OTIzRTY5QTlBNENFODRE RjNDQUIwMzAeFw0yNjA0MTkwMzA2MDJaFw0yNjA0MjIxMjU3MDJaMDMxMTAvBgNV BAMTKDY4MDE3NDI5M0Y5OUY4OURDQzQyN0MwN0FBMkUyOTYxN0NCMzdDQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkQzADgq/Ylz4XrVvYd8Yft1yC yG8yxEGLk2xUwQ3uo+WadKbfVqcXFRwl53lDU0rWZVisw4UygAUjZxG7svcik6eE tZzrleORtyC4mcjlqbGUJl2uhDjPognWHx0dbgtPIGJkgXB6hdn44RTc6KdZan+j 0glk+P4Ie7uMEry2gbgEG1YLiCMHraS9UjzcIHy8Mg2ka68Vferla+W3ktvmkqHu Y/xpE/fDvDjtOv3jXNmwljISQBeOF3w+cfnQnWiHLVXtR0P7cuN4JHQy3U/VASNN Tk7ZDbwaOWcE8X2cSs45v8eQVwR7JIMQ2kFe+IZ5+6SCAx/Ms/paEyUuTIz9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaAF0KT+Z+J3MQnwHqi4pYXyzfLEwHwYDVR0j BBgwFoAULyJaBpkHS1Y0kj5pqaTOhN88qwMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzdmMTk1YS0zNjllLTQ0YmEtODBjZS03MjE3M2Q1MWEzNzIvMC8yRjIyNUEwNjk5 MDc0QjU2MzQ5MjNFNjlBOUE0Q0U4NERGM0NBQjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyMjVBMDY5OTA3NEI1NjM0OTIzRTY5QTlBNENFODRERjND QUIwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM3ZjE5NWEtMzY5ZS00NGJhLTgw Y2UtNzIxNzNkNTFhMzcyLzAvMkYyMjVBMDY5OTA3NEI1NjM0OTIzRTY5QTlBNENF ODRERjNDQUIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGVopgaYhTYRB3bjC92KF1edNJe5Owmb91R HsmD3DaO+rHCsiPLcIrv0hnd6ExfZWxl61j3G5HiLVz31MBKyOq0Odib9s+UbYLm g0DRL5YCvPflOql8ZKNBIhzYz3/pye1yKD8fj+JcgT+mKmeiCwDrYEYjBdOdBDMT bH29VeS48la7LugU7vTVQxNupGVj/4ZMt5hXxKYP7uCbg5Jco7MVgfeXY9H9xmyn DxnTwa5MFzZnYU7wGlD34wz1EGeztukyTKTibRa8Mwf41A+2MrTxLZb4I0Hf+7x8 H65aNSxk/90Ox+5Mf8C0cHnQP8w9lurLcuncjTBU1tZ9fHgJYbk= -----END CERTIFICATE-----Generated at Sun Apr 19 10:28:53 2026 by rpki-client