$ rpki-client -vvf repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft File: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft (raw, json) Hash identifier: pSgbvvafCwUFh6jXjoeH97QFHhp05QFgjObQ0d6K6cM= Subject key identifier: 0D:41:93:DC:2A:BB:C4:CA:B9:2F:91:25:E9:CB:44:7A:C4:11:89:C7 Authority key identifier: 22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C Certificate issuer: /CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Certificate serial: 3D5BF3280B5A4BD547AA6528AB28E160E606C946 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft Manifest number: 015E Signing time: Sun 19 Apr 2026 09:02:59 +0000 Manifest this update: Sun 19 Apr 2026 08:57:59 +0000 Manifest next update: Wed 22 Apr 2026 19:04:59 +0000 Files and hashes: 1: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl (hash: WNkpe0ULBfi32d76aLoOEoR1QkAYmp2a9yPMEQs1iNU=) 2: 3130332e32332e3130302e302f32322d3234203d3e203538343030.roa (hash: 4im0dAUjJ5EmF2QitBsdvP03bvYCuVuY3T2j8x1WL4g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 14:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:5b:f3:28:0b:5a:4b:d5:47:aa:65:28:ab:28:e1:60:e6:06:c9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Validity Not Before: Apr 19 08:57:59 2026 GMT Not After : Apr 22 19:04:59 2026 GMT Subject: CN=0D4193DC2ABBC4CAB92F9125E9CB447AC41189C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:55:3d:1f:eb:5b:51:93:c3:82:ed:a9:a4:39: ca:33:b6:7f:05:df:71:5f:27:ea:bd:1f:6c:ff:f4: d1:7a:82:c8:ab:1a:f1:63:eb:0b:c7:76:3a:12:49: a8:92:62:69:23:99:35:a6:d3:4b:0e:f7:90:a9:61: 05:74:de:51:35:2c:5a:0f:59:67:ec:52:d3:7b:13: 38:09:5b:e1:37:de:f3:68:c1:65:eb:26:2a:c7:fe: 9e:55:8e:7c:e3:77:0f:2f:39:6f:d8:9f:36:03:e6: 28:ab:9d:70:bc:d2:ca:1d:be:10:23:c1:dd:ef:e8: de:70:a2:a7:2f:7f:4c:b4:c9:d1:9a:3d:ab:e4:47: b6:c1:9e:b4:b0:d7:3a:61:0a:4c:c1:db:64:a6:5d: 6f:cf:b5:ae:d5:68:bf:45:82:88:7d:63:15:e4:76: 29:c3:c0:4f:a2:39:8f:28:bb:f6:e3:09:75:ed:c3: ac:dd:c2:8e:0c:13:7c:22:be:61:ee:44:65:e0:5c: 83:a9:ac:1e:87:1c:00:3b:d3:64:5c:5c:0f:c6:f8: 62:4d:ea:06:5d:08:43:4e:5e:83:7b:72:3e:a0:78: 80:d3:e0:55:2f:1f:fa:aa:da:75:bb:00:80:85:89: 4c:fa:35:98:09:53:a9:18:4a:d8:2a:42:70:14:6c: c1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:41:93:DC:2A:BB:C4:CA:B9:2F:91:25:E9:CB:44:7A:C4:11:89:C7 X509v3 Authority Key Identifier: keyid:22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:29:b7:8c:54:24:11:5d:7d:e9:9a:66:45:53:e0:08:73:75: cd:ce:16:0b:cd:27:e9:ca:8f:8b:f5:cd:83:cc:0f:f2:e6:67: ed:11:7b:57:f8:aa:1e:5e:ab:c7:67:2e:52:e1:46:fb:ea:59: 50:4b:f2:a1:12:21:9b:99:b9:99:25:93:a9:ea:32:b7:92:91: 57:ae:ab:0e:ce:cd:b1:37:17:92:4c:97:9d:fd:bc:d0:13:06: 95:28:e2:15:e9:c1:47:f8:3c:ab:64:46:97:48:cf:24:d1:db: 23:2e:da:62:6f:c1:7b:c2:75:63:44:bb:08:42:67:be:d1:94: 19:d5:63:c8:22:9d:52:fe:26:45:2e:4a:a0:58:88:25:aa:22: 3e:9e:f3:8d:a8:ed:63:c3:d3:0b:27:38:f5:00:19:f9:ec:a3: 19:a6:4e:a6:49:66:d6:5c:45:4d:af:be:7a:d1:25:a4:96:cb: 4a:b9:f1:f7:56:16:7d:35:90:3e:4e:71:96:53:88:37:a5:fa: fc:06:72:cc:d4:a9:d0:28:b1:f1:a3:dc:4c:0a:c6:2b:1d:aa: 83:c8:36:c0:d6:38:57:31:43:64:3c:a7:4a:34:45:c8:ae:a3: f9:ed:4a:57:bc:f7:1c:1e:e6:b9:83:2d:ce:90:97:11:3e:94: 10:2c:fe:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVvzKAtaS9VHqmUoqyjhYOYGyUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlD MEE5Q0UyQzAeFw0yNjA0MTkwODU3NTlaFw0yNjA0MjIxOTA0NTlaMDMxMTAvBgNV BAMTKDBENDE5M0RDMkFCQkM0Q0FCOTJGOTEyNUU5Q0I0NDdBQzQxMTg5QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0VT0f61tRk8OC7amkOcoztn8F 33FfJ+q9H2z/9NF6gsirGvFj6wvHdjoSSaiSYmkjmTWm00sO95CpYQV03lE1LFoP WWfsUtN7EzgJW+E33vNowWXrJirH/p5Vjnzjdw8vOW/YnzYD5iirnXC80sodvhAj wd3v6N5woqcvf0y0ydGaPavkR7bBnrSw1zphCkzB22SmXW/Pta7VaL9Fgoh9YxXk dinDwE+iOY8ou/bjCXXtw6zdwo4ME3wivmHuRGXgXIOprB6HHAA702RcXA/G+GJN 6gZdCENOXoN7cj6geIDT4FUvH/qq2nW7AICFiUz6NZgJU6kYStgqQnAUbMEPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDUGT3Cq7xMq5L5El6ctEesQRiccwHwYDVR0j BBgwFoAUIs06IM9iGlsLmeQoyOVzGcCpziwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzE4MDcwNC02YjY0LTRhNDAtOGYzZC1mZmRmZDVlMzdkZWYvMC8yMkNEM0EyMENG NjIxQTVCMEI5OUU0MjhDOEU1NzMxOUMwQTlDRTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlDMEE5 Q0UyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcxODA3MDQtNmI2NC00YTQwLThm M2QtZmZkZmQ1ZTM3ZGVmLzAvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTcz MTlDMEE5Q0UyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEpt4xUJBFdfemaZkVT4Ahzdc3OFgvNJ+nK j4v1zYPMD/LmZ+0Re1f4qh5eq8dnLlLhRvvqWVBL8qESIZuZuZklk6nqMreSkVeu qw7OzbE3F5JMl539vNATBpUo4hXpwUf4PKtkRpdIzyTR2yMu2mJvwXvCdWNEuwhC Z77RlBnVY8ginVL+JkUuSqBYiCWqIj6e842o7WPD0wsnOPUAGfnsoxmmTqZJZtZc RU2vvnrRJaSWy0q58fdWFn01kD5OcZZTiDel+vwGcszUqdAosfGj3EwKxisdqoPI NsDWOFcxQ2Q8p0o0Rciuo/ntSle89xwe5rmDLc6QlxE+lBAs/qs= -----END CERTIFICATE-----Generated at Sun Apr 19 13:00:11 2026 by rpki-client