$ rpki-client -vvf repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft File: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft (raw, json) Hash identifier: zWw3M2gFpdhME/TgR2vxkOvc+xqWrV9JmtfKmglD3Ag= Subject key identifier: A8:AA:C5:41:25:17:71:7C:C5:C7:19:F7:7D:54:9A:A8:4D:84:71:F4 Authority key identifier: 22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C Certificate issuer: /CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Certificate serial: 3F711C994484E48E294B27B5D70E277A80E8953C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft Manifest number: 0148 Signing time: Sat 28 Feb 2026 23:41:13 +0000 Manifest this update: Sat 28 Feb 2026 23:36:13 +0000 Manifest next update: Wed 04 Mar 2026 07:02:13 +0000 Files and hashes: 1: 3130332e32332e3130302e302f32322d3234203d3e203538343030.roa (hash: 4im0dAUjJ5EmF2QitBsdvP03bvYCuVuY3T2j8x1WL4g=) 2: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl (hash: fpez1DxL1+m+jEeAWns4P1FgG3HAydBRwv9xy9Er07g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:71:1c:99:44:84:e4:8e:29:4b:27:b5:d7:0e:27:7a:80:e8:95:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Validity Not Before: Feb 28 23:36:13 2026 GMT Not After : Mar 4 07:02:13 2026 GMT Subject: CN=A8AAC5412517717CC5C719F77D549AA84D8471F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:56:9b:d7:8f:41:6b:e6:fb:0c:ca:8a:57:f9: 44:5f:8a:77:07:52:c6:20:11:4d:cc:e5:9b:4d:97: 13:38:b1:e0:af:9c:51:b8:1b:a8:f7:52:b0:76:bd: 5e:65:df:eb:d6:4f:81:e2:b2:2e:b8:36:f2:3b:95: 39:74:d1:09:cb:58:b2:34:c5:20:ac:6d:a5:b8:c8: a0:b5:82:4f:10:33:27:d8:69:55:95:7f:80:84:94: c8:b6:2f:4b:a4:22:d9:12:a2:ea:4f:fa:22:cf:e4: c9:ac:12:85:53:10:b5:04:ae:2f:90:42:70:40:a1: c4:5d:8d:69:cb:c2:42:7e:59:90:cf:48:d0:66:ee: ff:9c:bd:0b:77:81:06:29:9a:2a:68:19:56:45:e3: 9f:ae:cf:8a:e9:d9:db:82:f5:69:ba:62:dd:0f:53: 9d:25:6e:23:db:8e:87:93:71:85:03:56:50:74:14: 61:9e:0c:42:42:c7:73:cf:e5:ff:89:60:a5:62:ab: 46:ab:9f:05:46:14:4d:e1:3e:58:7e:38:ab:f3:6a: 1d:ca:04:2c:e5:31:a5:45:14:40:ac:8c:cd:1c:53: 86:c4:6a:ad:f2:5a:c1:88:48:3d:99:46:1f:02:fc: 96:a1:b7:30:76:d5:1c:36:76:24:67:40:70:cf:98: 7d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AA:C5:41:25:17:71:7C:C5:C7:19:F7:7D:54:9A:A8:4D:84:71:F4 X509v3 Authority Key Identifier: keyid:22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:21:83:c4:bc:bd:cf:80:74:87:99:92:bf:18:a5:e8:58:6b: 84:99:38:3a:2f:73:76:d3:03:53:83:4f:5a:e0:0d:80:e3:b4: 6d:e7:2a:22:63:86:36:99:b2:0d:e2:f2:ad:4c:32:88:2d:7e: a1:99:71:d9:ec:b1:a1:ff:0d:28:eb:12:75:58:e5:f3:14:61: a0:fa:e9:e2:ba:cc:43:14:e2:49:9d:ec:dc:bf:dd:8f:93:48: c4:e6:5d:b8:17:9c:43:df:d1:26:6d:f0:be:cc:8b:e4:41:e6: ea:13:61:f7:03:0f:f7:8c:5c:d0:25:f3:12:a0:f0:96:95:ec: 7b:ed:3e:4f:5e:0a:6c:48:ff:68:a7:f7:9e:b1:4c:38:a9:4e: 72:90:f9:bb:f6:8b:4d:1c:20:58:48:27:84:3c:20:db:73:1f: ac:9f:3b:38:e1:6b:c5:a9:b7:7d:b8:52:97:bf:08:0e:b5:89: 8c:4c:32:ed:fa:18:d8:59:90:19:56:74:10:80:90:2f:98:9a: b0:73:06:d3:d2:e0:0f:54:d3:55:b9:7c:c5:39:cc:e7:48:73: c0:ff:4f:dd:35:8f:14:8a:c6:7f:f0:27:d2:52:e9:c3:07:87: de:b5:80:b1:39:59:64:38:85:bf:b2:29:6d:67:9e:ac:f4:4a: 96:24:2d:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP3EcmUSE5I4pSye11w4neoDolTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlD MEE5Q0UyQzAeFw0yNjAyMjgyMzM2MTNaFw0yNjAzMDQwNzAyMTNaMDMxMTAvBgNV BAMTKEE4QUFDNTQxMjUxNzcxN0NDNUM3MTlGNzdENTQ5QUE4NEQ4NDcxRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0VpvXj0Fr5vsMyopX+URfincH UsYgEU3M5ZtNlxM4seCvnFG4G6j3UrB2vV5l3+vWT4Hisi64NvI7lTl00QnLWLI0 xSCsbaW4yKC1gk8QMyfYaVWVf4CElMi2L0ukItkSoupP+iLP5MmsEoVTELUEri+Q QnBAocRdjWnLwkJ+WZDPSNBm7v+cvQt3gQYpmipoGVZF45+uz4rp2duC9Wm6Yt0P U50lbiPbjoeTcYUDVlB0FGGeDEJCx3PP5f+JYKViq0arnwVGFE3hPlh+OKvzah3K BCzlMaVFFECsjM0cU4bEaq3yWsGISD2ZRh8C/JahtzB21Rw2diRnQHDPmH3jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqKrFQSUXcXzFxxn3fVSaqE2EcfQwHwYDVR0j BBgwFoAUIs06IM9iGlsLmeQoyOVzGcCpziwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzE4MDcwNC02YjY0LTRhNDAtOGYzZC1mZmRmZDVlMzdkZWYvMC8yMkNEM0EyMENG NjIxQTVCMEI5OUU0MjhDOEU1NzMxOUMwQTlDRTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlDMEE5 Q0UyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcxODA3MDQtNmI2NC00YTQwLThm M2QtZmZkZmQ1ZTM3ZGVmLzAvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTcz MTlDMEE5Q0UyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAhg8S8vc+AdIeZkr8YpehYa4SZODovc3bT A1ODT1rgDYDjtG3nKiJjhjaZsg3i8q1MMogtfqGZcdnssaH/DSjrEnVY5fMUYaD6 6eK6zEMU4kmd7Ny/3Y+TSMTmXbgXnEPf0SZt8L7Mi+RB5uoTYfcDD/eMXNAl8xKg 8JaV7HvtPk9eCmxI/2in956xTDipTnKQ+bv2i00cIFhIJ4Q8INtzH6yfOzjha8Wp t324Upe/CA61iYxMMu36GNhZkBlWdBCAkC+YmrBzBtPS4A9U01W5fMU5zOdIc8D/ T901jxSKxn/wJ9JS6cMHh961gLE5WWQ4hb+yKW1nnqz0SpYkLbU= -----END CERTIFICATE-----Generated at Mon Mar 2 04:00:12 2026 by rpki-client