$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft File: 2042008AEC80152F373D2A04DFD3893EE2F92166.mft (raw, json) Hash identifier: G4FDozHODxETRGv0I8vp48nKz3dkva1dNuW6aMhIxFo= Subject key identifier: AA:89:A0:81:E9:43:1E:51:18:5F:5B:85:46:30:50:3A:96:29:DF:AB Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66 Certificate issuer: /CN=2042008AEC80152F373D2A04DFD3893EE2F92166 Certificate serial: 3CE395784CF3122E9120AC96E42348529BCA1E69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft Manifest number: 0207 Signing time: Tue 24 Mar 2026 15:11:40 +0000 Manifest this update: Tue 24 Mar 2026 15:06:40 +0000 Manifest next update: Fri 27 Mar 2026 19:23:40 +0000 Files and hashes: 1: 3230322e37332e31362e302f32342d3234203d3e203538383136.roa (hash: Fqdl1sb+h6leJuhfojKOfkvGAlovkHlBo0ChmPhMVvw=) 2: 3130332e3234382e35382e302f32332d3233203d3e203538383136.roa (hash: zc4ykLGcjnNqveO2/L+gaoTsTtypUdw4BR4ukEt5D9o=) 3: 3230322e37332e32312e302f32342d3234203d3e203538383136.roa (hash: iFyu0RvIHIUxWpTx5iIUKX8JKYiR6jVxgsobha6SsLM=) 4: 3130332e3234382e35392e302f32342d3234203d3e203538383136.roa (hash: nuaGJGZ3YXO78mNDVOo1HOsr1j0BBeisM+PdT4vV70U=) 5: 34332e3235322e3138342e302f32322d3232203d3e203538383136.roa (hash: SEJtrFMzCIxaL5HsTowHqKeGBeSHdUF6h109MbSr1hY=) 6: 34332e3235322e3138342e302f32342d3234203d3e203538383136.roa (hash: 6MaTCwYtKpnx6eg3KSD1AYOyXHo3i56ljG0wVGw46pk=) 7: 34332e3235322e3138372e302f32342d3234203d3e203538383136.roa (hash: u1OWVFREqAcpAaKhBDvotN6/FLB+6CJXG2VYGZmR91M=) 8: 34332e3235322e3138352e302f32342d3234203d3e203538383136.roa (hash: 6BAqv/xiDIdcXbsrmi/VI3hokjpdNRLqss/M7jAv0Ng=) 9: 3230322e37332e31362e302f32312d3231203d3e203538383136.roa (hash: UTxUdswuTF+ox6a5oV05W2D3Jcdyj/c1haTTHi/3q+U=) 10: 3230322e37332e31372e302f32342d3234203d3e203538383136.roa (hash: tIzQ0fE2t5htIEimJtucpSpR/DIQVl9j/kAVCJL7yGU=) 11: 3130332e3234382e35382e302f32342d3234203d3e203538383136.roa (hash: HErtndUjZ/ozeEwhpzkSIbCXdzX9M3k2UTeU3D4OhMc=) 12: 3230322e37332e32322e302f32342d3234203d3e203538383136.roa (hash: 92gMMhd+Gkfp9JvKTKRzEZUnEBDuEW+cld6SLZk7Ch0=) 13: 3130332e3234382e35362e302f32342d3234203d3e203538383136.roa (hash: WKrMoI06/p5+G+xllObLjjqyxyOkWyvvq+1tJPmPHZo=) 14: 3230322e37332e31382e302f32342d3234203d3e203538383136.roa (hash: tlFSnjt/7Il42+Z8+JdWz5/D5UHpSeVUkEDH7qf0tyo=) 15: 3230322e37332e31392e302f32342d3234203d3e203538383136.roa (hash: V7M1zpL5HWqjtqGN2V+pt/B4+kIX52JBUVO8WeQYP+0=) 16: 2042008AEC80152F373D2A04DFD3893EE2F92166.crl (hash: gUgn3mP/G/fQ4UdMG4EGAPd8xDvkZotYVqYyqk3U73M=) 17: 3230322e37332e32302e302f32342d3234203d3e203538383136.roa (hash: ibMCbvRmujOjjKM1ZMmmc3qZwnyhuI2nbsEkJjHoxDY=) 18: 3230322e37332e31362e302f32322d3232203d3e203538383136.roa (hash: ZqPK1HKbxGKM6vESgL5zXUqVRLE1KpGBZ+2gXnpqzvE=) 19: 34332e3235322e3138362e302f32342d3234203d3e203538383136.roa (hash: NEMz93mwD3naCevcMJlDXLjtSbxK/YWuzVt1EzrH4HQ=) 20: 3130332e3234382e35372e302f32342d3234203d3e203538383136.roa (hash: 0V5Fro7RDuZ50SZ8nyINvAin+y6VQoPMCRHhDarRRMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e3:95:78:4c:f3:12:2e:91:20:ac:96:e4:23:48:52:9b:ca:1e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166 Validity Not Before: Mar 24 15:06:40 2026 GMT Not After : Mar 27 19:23:40 2026 GMT Subject: CN=AA89A081E9431E51185F5B854630503A9629DFAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:37:29:e6:8a:2d:75:fd:28:c8:83:50:98:d6: 9d:00:72:c9:a7:72:22:c9:19:3d:05:42:03:3b:93: 7b:bb:7c:a9:68:22:d5:57:a7:1e:06:3e:56:18:f9: d8:17:28:88:01:e0:50:58:44:4f:14:30:8c:20:6a: f8:04:9e:09:48:29:63:e9:2c:50:33:22:e2:37:3f: d5:a1:36:91:62:82:9e:58:a3:4a:b8:01:2b:34:15: 8b:b6:da:d6:6f:ec:e1:1e:0f:2c:b5:1d:ae:6f:b9: a9:31:fa:f6:73:35:11:d2:02:1d:34:b7:8c:16:07: 13:74:19:3a:92:e0:9b:f4:cf:d8:71:75:d6:18:cd: a7:de:3f:12:ef:c9:60:d9:fc:2d:4b:a9:b7:5c:ba: ed:1c:17:04:18:39:9c:96:ac:95:da:a9:76:2a:19: 2c:d5:56:57:9b:67:b8:fa:5a:d2:12:9a:45:f6:99: 98:46:21:dc:5a:25:fd:f0:76:72:de:c5:e5:aa:13: c3:c3:4e:03:85:fe:e9:dd:f0:60:02:73:f7:0b:d8: b8:cb:73:fd:29:b2:64:e8:71:25:0e:d8:07:39:5f: 08:d7:70:f8:9c:78:97:e1:16:c7:4c:2d:af:46:70: cb:c6:aa:79:05:38:32:bd:b7:eb:5b:e8:d4:a7:1f: 01:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:89:A0:81:E9:43:1E:51:18:5F:5B:85:46:30:50:3A:96:29:DF:AB X509v3 Authority Key Identifier: keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:01:d8:cf:7a:e1:60:f1:c4:02:72:e3:c8:20:cc:a2:b3:ae: 70:f3:8c:f2:d0:b4:e1:64:98:ae:5f:8d:81:85:41:84:fc:36: 38:ff:7a:46:54:e3:67:90:79:2a:69:ed:16:a7:bf:ae:4b:58: a6:ce:fe:13:d1:9d:af:54:9a:b1:bf:4c:44:d6:f4:8e:5c:b1: 86:b5:32:ee:d0:e4:5c:f6:ac:50:d8:84:6e:c1:02:fd:9e:d7: ee:e1:3e:0b:2c:0b:28:9a:57:a7:f2:3e:dc:75:7f:85:79:48: e6:22:26:64:0e:df:28:ab:59:4e:30:ee:a0:e6:cb:c5:1f:02: fd:d7:fa:cd:a5:c5:a0:ae:ec:b9:0e:e1:e5:1e:65:35:95:0b: cd:e6:ad:f1:da:b3:e1:d8:74:68:a7:d0:c5:a9:38:b5:7c:0c: 11:6d:40:06:9f:df:21:0e:2f:51:0a:f3:dc:c4:83:b3:01:6a: 45:85:f9:99:c6:09:1e:13:ca:af:79:5d:60:52:e7:5a:49:fe: 77:55:a2:19:40:cf:d9:f0:37:44:0f:34:e7:7b:b0:d2:77:70: 36:cf:84:52:16:ff:e4:12:39:6a:18:2e:66:61:4c:22:9f:47: c9:1d:71:53:e1:56:f9:55:15:fe:88:49:e0:72:86:cf:81:17: 48:b8:48:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPOOVeEzzEi6RIKyW5CNIUpvKHmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VF MkY5MjE2NjAeFw0yNjAzMjQxNTA2NDBaFw0yNjAzMjcxOTIzNDBaMDMxMTAvBgNV BAMTKEFBODlBMDgxRTk0MzFFNTExODVGNUI4NTQ2MzA1MDNBOTYyOURGQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnNynmii11/SjIg1CY1p0Acsmn ciLJGT0FQgM7k3u7fKloItVXpx4GPlYY+dgXKIgB4FBYRE8UMIwgavgEnglIKWPp LFAzIuI3P9WhNpFigp5Yo0q4ASs0FYu22tZv7OEeDyy1Ha5vuakx+vZzNRHSAh00 t4wWBxN0GTqS4Jv0z9hxddYYzafePxLvyWDZ/C1Lqbdcuu0cFwQYOZyWrJXaqXYq GSzVVlebZ7j6WtISmkX2mZhGIdxaJf3wdnLexeWqE8PDTgOF/und8GACc/cL2LjL c/0psmTocSUO2Ac5XwjXcPiceJfhFsdMLa9GcMvGqnkFODK9t+tb6NSnHwHXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqomggelDHlEYX1uFRjBQOpYp36swHwYDVR0j BBgwFoAUIEIAiuyAFS83PSoE39OJPuL5IWYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmMzY2JjNC04ODgzLTQxMWMtODc2ZS1lOWUyM2E4ZDhhZDkvMC8yMDQyMDA4QUVD ODAxNTJGMzczRDJBMDRERkQzODkzRUUyRjkyMTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VFMkY5 MjE2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjM2NiYzQtODg4My00MTFjLTg3 NmUtZTllMjNhOGQ4YWQ5LzAvMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5 M0VFMkY5MjE2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAB2M964WDxxAJy48ggzKKzrnDzjPLQtOFk mK5fjYGFQYT8Njj/ekZU42eQeSpp7Ranv65LWKbO/hPRna9UmrG/TETW9I5csYa1 Mu7Q5Fz2rFDYhG7BAv2e1+7hPgssCyiaV6fyPtx1f4V5SOYiJmQO3yirWU4w7qDm y8UfAv3X+s2lxaCu7LkO4eUeZTWVC83mrfHas+HYdGin0MWpOLV8DBFtQAaf3yEO L1EK89zEg7MBakWF+ZnGCR4Tyq95XWBS51pJ/ndVohlAz9nwN0QPNOd7sNJ3cDbP hFIW/+QSOWoYLmZhTCKfR8kdcVPhVvlVFf6ISeByhs+BF0i4SOY= -----END CERTIFICATE-----Generated at Thu Mar 26 16:52:16 2026 by rpki-client