$ rpki-client -vvf repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft File: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft (raw, json) Hash identifier: YL4HnE3v5/zjW4810biJxQNFDaJkcu9+quBNZI6RIYs= Subject key identifier: 15:4B:8D:BB:B4:EB:42:43:14:B7:80:5E:96:79:05:C5:87:BB:79:1D Authority key identifier: 84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF Certificate issuer: /CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Certificate serial: 1F689E385A5FB8BE77344A9F0E69BBFAA9AC07C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft Manifest number: 0180 Signing time: Wed 25 Mar 2026 15:40:51 +0000 Manifest this update: Wed 25 Mar 2026 15:35:51 +0000 Manifest next update: Sat 28 Mar 2026 18:19:51 +0000 Files and hashes: 1: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl (hash: VlXY6WE46ByPNJEwgT1CWaiqNqBNUEKPjA4nhIpuo9s=) 2: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: 9S64FqiohF4/G4AR4prN454MPd/66wEeqEDt9vo/F+Y=) 3: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: 8svYl0PSwXQA1Wds9/vDZkzwkfX8sX1XjqIKznjwc2w=) 4: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: /URm5Kz+lOTj8/0VCDqZYq+wPeWuBT+Tq5QLg7+ZM+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:68:9e:38:5a:5f:b8:be:77:34:4a:9f:0e:69:bb:fa:a9:ac:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Validity Not Before: Mar 25 15:35:51 2026 GMT Not After : Mar 28 18:19:51 2026 GMT Subject: CN=154B8DBBB4EB424314B7805E967905C587BB791D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ac:a1:71:34:7a:34:d0:3e:5e:45:e4:a5:f9: 6a:45:5b:44:3e:72:c3:4d:49:8b:bb:de:22:9c:2c: e5:f0:0a:bf:5d:d8:45:88:f9:b0:b5:ba:f2:c4:6c: fc:b4:90:c8:d8:ca:65:92:8b:2b:8f:c9:2c:d4:fe: 45:e1:db:34:e0:b6:17:fd:dc:75:3f:be:59:8a:5f: ab:cd:7d:0a:16:79:ac:aa:31:a2:93:53:b5:78:81: 7d:37:b5:d3:92:ed:3b:6c:a2:81:86:76:90:89:8f: c4:2b:88:31:e2:60:4a:f4:d7:e8:37:df:61:8c:f3: 95:af:af:21:2c:92:9c:b1:b3:10:a2:7e:ab:1a:73: c3:ac:bd:7c:89:59:2b:34:e3:c0:3c:79:da:7a:d2: f7:ae:cc:34:70:76:11:03:2a:d4:bd:ce:68:b4:74: 90:7c:cb:c4:8d:6a:8e:5e:ea:0b:90:55:5d:98:3b: 6d:90:74:97:9b:cf:92:75:93:76:d4:ef:de:9b:42: db:eb:6f:1e:47:d3:23:84:81:19:0f:9f:8a:f0:d7: a8:19:2b:92:78:ff:2b:7e:97:15:e0:66:8c:8c:b1: b4:29:fa:a5:fa:ac:4c:8f:54:f8:ee:32:36:99:8e: 1c:49:a7:22:5a:66:87:e8:8a:4c:f1:55:ea:0f:fb: 4e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4B:8D:BB:B4:EB:42:43:14:B7:80:5E:96:79:05:C5:87:BB:79:1D X509v3 Authority Key Identifier: keyid:84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:52:f5:d6:9f:aa:be:8b:a3:f1:b9:36:64:65:3f:4a:17:2f: 9a:9b:1f:3f:fd:19:c3:1c:6d:ec:3a:24:ba:31:0c:b1:c5:d9: ce:9a:e9:f8:c9:0b:7b:8c:b4:27:9f:91:9c:a3:2c:e7:a3:37: 3a:4c:78:f0:2b:38:0b:37:df:a9:40:bf:e4:a8:37:de:e9:a9: 2c:d5:9f:2f:cc:dc:10:64:65:3f:e8:71:5f:20:b0:7f:0f:44: 52:0a:cd:28:bd:3b:1c:a2:c5:06:7a:62:5f:67:f9:1f:98:f3: af:78:ea:14:90:02:96:b7:b4:98:11:da:fc:77:07:20:a1:dc: 5f:cf:09:8e:df:7f:09:e9:a5:30:4d:ad:3b:cc:0a:52:13:61: c1:2d:d6:4b:45:33:b1:f6:74:9e:7e:d8:bf:e7:7b:c0:03:ea: 46:5b:e2:19:83:f8:58:40:c3:af:97:a0:d9:59:e7:75:99:db: 88:6d:d9:d9:9e:1a:cc:8b:07:75:ab:7b:3f:55:22:1d:e5:dc: ac:6d:7f:84:b7:5a:ef:8b:74:ce:45:61:c6:c5:24:9f:dc:a3: 3e:fe:50:11:70:ea:6a:54:33:6c:0b:7e:dc:2c:42:89:7c:4b: 2a:72:38:82:c4:a2:4d:a4:9b:0e:e3:02:8d:a5:43:d0:3c:e6: 83:1b:03:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH2ieOFpfuL53NEqfDmm7+qmsB8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5 N0NCMjlBRjAeFw0yNjAzMjUxNTM1NTFaFw0yNjAzMjgxODE5NTFaMDMxMTAvBgNV BAMTKDE1NEI4REJCQjRFQjQyNDMxNEI3ODA1RTk2NzkwNUM1ODdCQjc5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOrKFxNHo00D5eReSl+WpFW0Q+ csNNSYu73iKcLOXwCr9d2EWI+bC1uvLEbPy0kMjYymWSiyuPySzU/kXh2zTgthf9 3HU/vlmKX6vNfQoWeayqMaKTU7V4gX03tdOS7TtsooGGdpCJj8QriDHiYEr01+g3 32GM85WvryEskpyxsxCifqsac8OsvXyJWSs048A8edp60veuzDRwdhEDKtS9zmi0 dJB8y8SNao5e6guQVV2YO22QdJebz5J1k3bU796bQtvrbx5H0yOEgRkPn4rw16gZ K5J4/yt+lxXgZoyMsbQp+qX6rEyPVPjuMjaZjhxJpyJaZofoikzxVeoP+04rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFUuNu7TrQkMUt4BelnkFxYe7eR0wHwYDVR0j BBgwFoAUhCIz1udWvJPA25pF3S97zZfLKa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODEyNzRhZi03Y2QwLTQwYWYtYTMyMS02NzY4OThkNThkYjgvMC84NDIyMzNENkU3 NTZCQzkzQzBEQjlBNDVERDJGN0JDRDk3Q0IyOUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5N0NC MjlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgxMjc0YWYtN2NkMC00MGFmLWEz MjEtNjc2ODk4ZDU4ZGI4LzAvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdC Q0Q5N0NCMjlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxS9dafqr6Lo/G5NmRlP0oXL5qbHz/9GcMc bew6JLoxDLHF2c6a6fjJC3uMtCefkZyjLOejNzpMePArOAs336lAv+SoN97pqSzV ny/M3BBkZT/ocV8gsH8PRFIKzSi9OxyixQZ6Yl9n+R+Y86946hSQApa3tJgR2vx3 ByCh3F/PCY7ffwnppTBNrTvMClITYcEt1ktFM7H2dJ5+2L/ne8AD6kZb4hmD+FhA w6+XoNlZ53WZ24ht2dmeGsyLB3Wrez9VIh3l3Kxtf4S3Wu+LdM5FYcbFJJ/coz7+ UBFw6mpUM2wLftwsQol8SypyOILEok2kmw7jAo2lQ9A85oMbA1Y= -----END CERTIFICATE-----Generated at Thu Mar 26 10:18:38 2026 by rpki-client