$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft File: 22476F90C7B08131974F5B19834906C325ABEF12.mft (raw, json) Hash identifier: WFvywuL+MMsR8Ng6ihDiNd6ERxkhX9Nh5s/LLjXCW5g= Subject key identifier: 93:E0:69:13:19:39:28:48:FB:2C:1B:42:F1:42:F1:84:19:7E:D5:8E Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 Certificate issuer: /CN=22476F90C7B08131974F5B19834906C325ABEF12 Certificate serial: 2485301CDF56CA09832D8385A805534900836FBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft Manifest number: 0113 Signing time: Fri 17 Apr 2026 08:41:40 +0000 Manifest this update: Fri 17 Apr 2026 08:36:40 +0000 Manifest next update: Mon 20 Apr 2026 10:21:40 +0000 Files and hashes: 1: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 4w2+kmxxLlJwHRO1aqXjBz7ml3HwCrINsFeyiZehHq0=) 2: 22476F90C7B08131974F5B19834906C325ABEF12.crl (hash: m8nMIKEudG6rGxl9qOHUVtwhg8EFKbVvdxaVoZZcQqo=) 3: 3136302e32352e36392e302f32342d3234203d3e20313532383430.roa (hash: ZNeRwTvPRwYBLE5sdbgUPVVh8TQyG01EFXBOC/uWJbI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:85:30:1c:df:56:ca:09:83:2d:83:85:a8:05:53:49:00:83:6f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12 Validity Not Before: Apr 17 08:36:40 2026 GMT Not After : Apr 20 10:21:40 2026 GMT Subject: CN=93E0691319392848FB2C1B42F142F184197ED58E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:2c:f1:54:1c:3c:f6:b5:05:92:02:cb:eb: 5b:e5:4f:a3:af:94:af:ff:e6:55:24:1a:e5:0b:0c: 5d:da:25:ef:d7:d7:7d:6a:17:eb:43:a1:b1:bd:06: 58:be:3a:60:53:7c:9e:38:49:21:36:c5:a6:09:6b: d9:e0:3b:aa:e4:e7:1b:00:62:1e:49:61:fc:4e:04: 28:ef:0b:77:31:0b:bb:8b:96:0c:a5:0e:95:6c:06: 8a:42:fd:77:f8:1b:f7:36:f4:aa:07:d2:1d:44:47: af:11:87:20:9f:6d:63:79:72:81:60:05:00:a5:c9: b4:82:46:ff:c6:00:90:4b:26:9f:4c:72:31:f7:59: 94:48:33:c6:48:bd:39:8b:10:0a:02:7c:9d:ed:66: 81:16:75:f1:97:dd:43:48:f7:c3:4d:c1:c2:ed:2b: fa:40:72:19:e4:e6:33:3b:cb:f0:02:ea:55:d9:a0: d1:d3:c0:54:1d:2a:29:91:9e:40:e1:52:5e:b3:02: f1:11:3c:d5:54:89:d9:9b:3b:b9:11:0b:ee:de:83: f5:55:90:92:ff:11:79:1f:84:ac:d0:55:6a:5e:56: 9d:51:56:c7:a1:9a:bc:3a:b6:20:b5:1d:0b:cd:5b: ac:57:2b:17:cb:b9:82:b6:0d:8f:8f:ed:aa:f2:37: 9c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E0:69:13:19:39:28:48:FB:2C:1B:42:F1:42:F1:84:19:7E:D5:8E X509v3 Authority Key Identifier: keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:63:09:51:22:6f:ab:c2:73:dc:08:cd:07:91:68:22:a5:98: 5f:84:35:c0:b4:ee:c2:f4:f0:30:b1:46:47:7e:69:a4:1c:bd: c5:c6:80:40:05:65:4b:1f:c1:63:e0:c7:5d:b4:84:f9:80:ca: ef:b1:d4:d3:34:39:6d:1f:95:8b:77:7e:43:ed:ef:d0:a1:50: 18:ac:9b:27:d2:fc:2b:31:39:ee:76:45:c2:56:68:f2:ab:39: a4:e6:66:ba:96:80:19:63:20:ef:6e:bd:cc:6b:9e:2e:68:93: 39:d2:f5:bc:54:b5:77:8f:a8:3b:6e:c8:62:f6:3e:f1:6c:c1: 30:88:47:70:03:19:3f:78:ac:19:42:fd:e3:4d:6d:89:f9:21: c2:74:93:be:47:c8:2b:02:a9:8e:ff:84:0f:52:bf:d8:f9:6f: 2f:5d:a4:0f:3f:87:72:65:a5:c5:e3:00:da:60:93:4f:4c:0d: eb:88:9a:ce:f3:6c:e0:39:a7:09:b5:d4:54:3f:6a:66:c3:9b: ba:06:a3:a7:c9:ee:07:47:40:3d:07:87:e6:e7:d5:b6:06:65: e9:7c:41:e2:d3:99:06:08:e8:b0:14:80:00:85:18:59:eb:9a: f0:f4:fe:35:6b:6b:8c:3a:6d:22:f0:a7:6d:5d:08:3e:87:a9: 61:a5:8d:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJIUwHN9WygmDLYOFqAVTSQCDb7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMy NUFCRUYxMjAeFw0yNjA0MTcwODM2NDBaFw0yNjA0MjAxMDIxNDBaMDMxMTAvBgNV BAMTKDkzRTA2OTEzMTkzOTI4NDhGQjJDMUI0MkYxNDJGMTg0MTk3RUQ1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3zyzxVBw89rUFkgLL61vlT6Ov lK//5lUkGuULDF3aJe/X131qF+tDobG9Bli+OmBTfJ44SSE2xaYJa9ngO6rk5xsA Yh5JYfxOBCjvC3cxC7uLlgylDpVsBopC/Xf4G/c29KoH0h1ER68RhyCfbWN5coFg BQClybSCRv/GAJBLJp9McjH3WZRIM8ZIvTmLEAoCfJ3tZoEWdfGX3UNI98NNwcLt K/pAchnk5jM7y/AC6lXZoNHTwFQdKimRnkDhUl6zAvERPNVUidmbO7kRC+7eg/VV kJL/EXkfhKzQVWpeVp1RVsehmrw6tiC1HQvNW6xXKxfLuYK2DY+P7aryN5y5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk+BpExk5KEj7LBtC8ULxhBl+1Y4wHwYDVR0j BBgwFoAUIkdvkMewgTGXT1sZg0kGwyWr7xIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmZiYWFmYy00ZGIyLTRmYzQtYTFhOC0yZDhlNGM4YjJjZTAvMC8yMjQ3NkY5MEM3 QjA4MTMxOTc0RjVCMTk4MzQ5MDZDMzI1QUJFRjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMyNUFC RUYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2 QzMyNUFCRUYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9jCVEib6vCc9wIzQeRaCKlmF+ENcC07sL0 8DCxRkd+aaQcvcXGgEAFZUsfwWPgx120hPmAyu+x1NM0OW0flYt3fkPt79ChUBis myfS/CsxOe52RcJWaPKrOaTmZrqWgBljIO9uvcxrni5okznS9bxUtXePqDtuyGL2 PvFswTCIR3ADGT94rBlC/eNNbYn5IcJ0k75HyCsCqY7/hA9Sv9j5by9dpA8/h3Jl pcXjANpgk09MDeuIms7zbOA5pwm11FQ/ambDm7oGo6fJ7gdHQD0Hh+bn1bYGZel8 QeLTmQYI6LAUgACFGFnrmvD0/jVra4w6bSLwp21dCD6HqWGljcM= -----END CERTIFICATE-----Generated at Fri Apr 17 18:36:58 2026 by rpki-client