$ rpki-client -vvf repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft File: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft (raw, json) Hash identifier: mRPYterVR6HDv8acfW5fP1WSHi9Qqf8lyd/Ue9+Ep+A= Subject key identifier: 4A:43:FC:E0:14:57:8B:51:4D:B8:EB:99:F3:EB:14:55:21:7D:D1:D2 Authority key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 Certificate issuer: /CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Certificate serial: 2BED35C9B0F053F7029F7AF592D0E631766883B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft Manifest number: 023E Signing time: Thu 26 Mar 2026 15:01:57 +0000 Manifest this update: Thu 26 Mar 2026 14:56:57 +0000 Manifest next update: Mon 30 Mar 2026 01:38:57 +0000 Files and hashes: 1: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: 59yz865tKQpU8UqeDFR2Q6MBnW99RvQGBX6jv6dW3C0=) 2: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl (hash: bcYvROUEssibc/QuxCw7mChtOxtKBl3caRqXGnMQwKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 00:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ed:35:c9:b0:f0:53:f7:02:9f:7a:f5:92:d0:e6:31:76:68:83:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Validity Not Before: Mar 26 14:56:57 2026 GMT Not After : Mar 30 01:38:57 2026 GMT Subject: CN=4A43FCE014578B514DB8EB99F3EB1455217DD1D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f6:20:96:ef:8e:6a:ae:dc:13:b7:3f:2e:b3: 4e:9d:d9:e1:a9:a6:88:53:ea:74:be:e8:78:96:88: 6e:50:d6:db:0d:15:d8:4d:08:2e:95:80:2b:2c:d3: 39:9c:d8:b1:17:35:50:b0:0a:4b:0e:85:bf:f6:41: 5d:74:67:00:4e:f1:a3:e6:45:90:90:72:ca:02:43: 27:42:b5:82:a4:fb:01:1a:2e:ef:99:7e:b0:72:36: a2:f8:48:45:73:76:d5:9c:c9:c5:a6:c8:33:bd:67: 2d:55:2c:38:65:b8:2d:35:38:b3:44:66:62:1c:69: b6:ca:43:b9:31:39:57:ed:f0:66:89:c3:8d:b0:3f: c5:16:a4:c1:cb:8c:e2:de:f0:62:32:c2:66:c3:72: 1a:89:c0:94:d7:bd:11:15:94:ad:a1:a7:64:6b:51: 97:02:94:91:af:08:f9:13:f0:08:e6:3e:5e:a0:b8: 7d:9f:9f:67:81:89:61:1e:d7:5d:75:92:a4:4b:eb: c0:39:d8:a2:67:0c:e2:64:09:0a:3e:32:6a:f4:cd: aa:22:4f:f0:94:4c:fa:0b:71:52:1d:45:d6:90:e0: 63:50:0b:7d:48:4c:28:7a:d5:f4:9f:05:b5:aa:bd: 76:4c:b7:c8:75:d8:5c:e8:39:21:86:1c:70:8b:32: a0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:43:FC:E0:14:57:8B:51:4D:B8:EB:99:F3:EB:14:55:21:7D:D1:D2 X509v3 Authority Key Identifier: keyid:D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:28:ca:f6:5a:5c:58:ed:c5:b1:71:5f:f3:7e:d4:ca:c2:fc: 62:e9:f2:28:be:23:81:c8:43:db:14:80:31:fc:ef:48:79:ab: c0:c5:2e:d5:87:c8:79:8c:93:09:b8:a4:34:da:05:dc:7a:1b: a4:8d:c9:fb:aa:33:b4:6c:d4:b7:65:6a:4c:11:dc:8a:f4:45: 4c:29:fe:a9:ad:70:cf:cd:c0:f8:85:d8:5f:a3:9e:2f:31:62: 2c:18:72:c8:89:51:a1:66:d6:be:65:43:4a:11:fd:94:2e:b3: b0:e0:50:68:b6:20:7a:47:b4:2d:dc:bb:42:27:7f:d5:17:c7: 35:0a:05:21:c5:4d:bc:eb:b1:20:be:82:a4:23:4d:b1:93:62: ac:d6:06:71:99:83:27:84:85:06:67:1e:9f:74:fc:95:b9:9c: d8:28:31:7b:0e:b4:49:2e:c1:f1:54:0e:4d:75:79:7a:0a:37: f0:32:c9:1a:2f:8e:6c:cf:79:4a:c8:40:07:85:e8:cf:de:38: a3:8d:37:6b:77:a2:21:cf:8a:a7:bd:84:71:29:3c:78:56:d2: 8b:07:cb:56:0f:05:01:87:54:9c:b6:8f:a7:84:42:d4:59:a8: ff:6e:8c:29:e4:71:a7:b6:31:fa:44:fd:20:4b:73:fe:fa:99: d0:a4:fe:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK+01ybDwU/cCn3r1ktDmMXZog7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRC MDIzNUZBNzAeFw0yNjAzMjYxNDU2NTdaFw0yNjAzMzAwMTM4NTdaMDMxMTAvBgNV BAMTKDRBNDNGQ0UwMTQ1NzhCNTE0REI4RUI5OUYzRUIxNDU1MjE3REQxRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA9iCW745qrtwTtz8us06d2eGp pohT6nS+6HiWiG5Q1tsNFdhNCC6VgCss0zmc2LEXNVCwCksOhb/2QV10ZwBO8aPm RZCQcsoCQydCtYKk+wEaLu+ZfrByNqL4SEVzdtWcycWmyDO9Zy1VLDhluC01OLNE ZmIcabbKQ7kxOVft8GaJw42wP8UWpMHLjOLe8GIywmbDchqJwJTXvREVlK2hp2Rr UZcClJGvCPkT8AjmPl6guH2fn2eBiWEe1111kqRL68A52KJnDOJkCQo+Mmr0zaoi T/CUTPoLcVIdRdaQ4GNQC31ITCh61fSfBbWqvXZMt8h12FzoOSGGHHCLMqCvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSkP84BRXi1FNuOuZ8+sUVSF90dIwHwYDVR0j BBgwFoAU0EPCorOV5qe8ijLxrmwZNLAjX6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2FkMzc1Ny05M2EwLTRiMzMtOTEyOC0yNGFhNjEzMDRlZmYvMC9EMDQzQzJBMkIz OTVFNkE3QkM4QTMyRjFBRTZDMTkzNEIwMjM1RkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRCMDIz NUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5 MzRCMDIzNUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsoyvZaXFjtxbFxX/N+1MrC/GLp8ii+I4HI Q9sUgDH870h5q8DFLtWHyHmMkwm4pDTaBdx6G6SNyfuqM7Rs1LdlakwR3Ir0RUwp /qmtcM/NwPiF2F+jni8xYiwYcsiJUaFm1r5lQ0oR/ZQus7DgUGi2IHpHtC3cu0In f9UXxzUKBSHFTbzrsSC+gqQjTbGTYqzWBnGZgyeEhQZnHp90/JW5nNgoMXsOtEku wfFUDk11eXoKN/AyyRovjmzPeUrIQAeF6M/eOKONN2t3oiHPiqe9hHEpPHhW0osH y1YPBQGHVJy2j6eEQtRZqP9ujCnkcae2MfpE/SBLc/76mdCk/hA= -----END CERTIFICATE-----Generated at Thu Mar 26 19:08:30 2026 by rpki-client