$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft File: 242C3836E42CEB6F48A0A20E144027DB2E93307A.mft (raw, json) Hash identifier: pWXm5eU5ikG39qBaH+0ko8qpESFRNU/gy4mBnrRihJo= Subject key identifier: AA:85:FA:CE:81:79:83:64:D2:BB:56:54:6F:54:57:B1:2F:D9:B9:70 Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Certificate serial: 7CB5926FC675B813E84C30ECC9BCCEBF0E2CB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft Manifest number: B1 Signing time: Tue 24 Mar 2026 19:11:02 +0000 Manifest this update: Tue 24 Mar 2026 19:06:02 +0000 Manifest next update: Sat 28 Mar 2026 06:05:02 +0000 Files and hashes: 1: 242C3836E42CEB6F48A0A20E144027DB2E93307A.crl (hash: LlYRCr4zQ4UMhDkHR1pE2QMnTnFgxnsBO3QY88yeku8=) 2: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: F2Fq1JIaVx4Lm0Y6ySRa15KYpOzONwIDOWqD+ttq4p8=) 3: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: sD1qHrh4KAHA7ZoVkGVUT23ArBwKJeS4vBzo7kZeF9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b5:92:6f:c6:75:b8:13:e8:4c:30:ec:c9:bc:ce:bf:0e:2c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Validity Not Before: Mar 24 19:06:02 2026 GMT Not After : Mar 28 06:05:02 2026 GMT Subject: CN=AA85FACE81798364D2BB56546F5457B12FD9B970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d8:2a:1b:4f:c0:d6:1f:e5:84:ae:5f:ca:ca: 6c:d2:65:c7:e3:77:14:5b:45:f3:6e:83:2b:03:6a: c9:83:2b:de:c8:0f:21:10:eb:a6:ea:51:19:37:9a: 0f:e5:af:17:d1:ff:69:75:b1:cf:31:5c:17:e1:06: c9:a3:63:55:70:df:5a:77:4c:22:3e:4b:e7:9e:27: 6d:b4:40:d2:29:3d:51:6f:1f:a2:27:72:d1:50:e1: 23:ee:d6:b9:c7:17:39:7e:56:a8:49:a9:c4:d9:af: 0f:26:b4:db:69:4f:43:d4:a4:3a:75:c2:10:0e:c6: 43:56:0d:3a:a1:c0:1f:86:e9:8c:3a:be:97:10:cc: 33:6f:dc:7a:3e:b2:a0:9a:7b:04:49:16:89:03:ba: ea:99:0d:09:42:aa:5e:90:d5:11:9d:52:d6:b1:dc: 77:15:06:45:39:f2:6d:54:f8:ba:7f:e0:04:6f:db: 3b:4d:a4:78:65:3e:af:c2:dd:23:76:37:4e:7b:e2: cf:9b:e9:13:c3:24:18:b0:31:94:62:e6:f9:84:63: 8b:5f:f1:d4:c0:fa:01:71:68:74:4e:0c:37:73:a3: 0b:9f:98:78:fa:8e:f4:ca:b8:9b:22:90:d8:1e:a9: 5e:4b:39:2e:85:db:a1:cb:cc:88:97:9e:a0:ed:23: 52:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:85:FA:CE:81:79:83:64:D2:BB:56:54:6F:54:57:B1:2F:D9:B9:70 X509v3 Authority Key Identifier: keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:7c:3b:ec:66:24:19:04:5a:36:62:47:d5:ca:d3:8d:cd:98: fd:48:ef:1e:f4:21:50:05:cf:10:da:35:3a:4f:ad:23:11:d4: 33:32:c0:ae:38:27:b4:ac:29:55:6d:2e:b4:0b:ff:c7:0c:a8: 5c:74:0d:ac:01:0a:6d:2f:7a:7f:9a:18:07:2a:0b:47:b9:48: 3f:c5:1e:d7:4a:51:d5:20:23:95:09:b0:95:38:85:9e:36:d1: 93:10:02:2e:0e:6b:d1:4e:9c:df:68:68:f5:13:61:0b:ae:1e: 47:4f:f7:26:24:4c:ba:df:82:10:a7:0c:60:16:ff:a2:df:5f: d8:d5:1d:62:16:6b:2f:02:3e:a9:d9:87:b4:cc:7b:b4:e0:46: 05:7c:3a:2f:5e:4b:87:72:9c:e0:b9:c0:fa:fb:fc:76:6b:1c: a9:d5:d3:d6:09:d9:98:49:05:8e:bb:de:ce:a8:7d:cf:f3:a7: 44:e9:69:8a:54:8d:99:bf:ed:d2:3a:98:8a:21:31:52:e8:7c: 46:52:b5:81:3b:b2:83:3e:1b:90:5a:1e:11:16:eb:9f:36:22: 51:42:6f:e7:fe:79:92:5c:d7:98:02:50:2f:45:16:b4:58:cb: eb:32:f8:56:33:fa:85:f3:eb:bb:94:98:c1:14:94:a7:4a:fa: f5:7f:6f:9b -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITfLWSb8Z1uBPoTDDsybzOvw4suDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygyNDJDMzgzNkU0MkNFQjZGNDhBMEEyMEUxNDQwMjdEQjJF OTMzMDdBMB4XDTI2MDMyNDE5MDYwMloXDTI2MDMyODA2MDUwMlowMzExMC8GA1UE AxMoQUE4NUZBQ0U4MTc5ODM2NEQyQkI1NjU0NkY1NDU3QjEyRkQ5Qjk3MDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMfYKhtPwNYf5YSuX8rKbNJlx+N3 FFtF826DKwNqyYMr3sgPIRDrpupRGTeaD+WvF9H/aXWxzzFcF+EGyaNjVXDfWndM Ij5L554nbbRA0ik9UW8foidy0VDhI+7WuccXOX5WqEmpxNmvDya022lPQ9SkOnXC EA7GQ1YNOqHAH4bpjDq+lxDMM2/cej6yoJp7BEkWiQO66pkNCUKqXpDVEZ1S1rHc dxUGRTnybVT4un/gBG/bO02keGU+r8LdI3Y3Tnviz5vpE8MkGLAxlGLm+YRji1/x 1MD6AXFodE4MN3OjC5+YePqO9Mq4myKQ2B6pXks5LoXbocvMiJeeoO0jUlcCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBSqhfrOgXmDZNK7VlRvVFexL9m5cDAfBgNVHSME GDAWgBQkLDg25Czrb0igog4UQCfbLpMwejAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzli NmFlMmEyLWQ5M2YtNDljYS1iYTRiLTE3MWZmOGQxZTU3Zi8wLzI0MkMzODM2RTQy Q0VCNkY0OEEwQTIwRTE0NDAyN0RCMkU5MzMwN0EuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi8yNDJDMzgzNkU0MkNFQjZGNDhBMEEyMEUxNDQwMjdEQjJFOTMz MDdBLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0 Yi0xNzFmZjhkMWU1N2YvMC8yNDJDMzgzNkU0MkNFQjZGNDhBMEEyMEUxNDQwMjdE QjJFOTMzMDdBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAu3w77GYkGQRaNmJH1crTjc2Y/UjvHvQhUAXP ENo1Ok+tIxHUMzLArjgntKwpVW0utAv/xwyoXHQNrAEKbS96f5oYByoLR7lIP8Ue 10pR1SAjlQmwlTiFnjbRkxACLg5r0U6c32ho9RNhC64eR0/3JiRMut+CEKcMYBb/ ot9f2NUdYhZrLwI+qdmHtMx7tOBGBXw6L15Lh3Kc4LnA+vv8dmscqdXT1gnZmEkF jrvezqh9z/OnROlpilSNmb/t0jqYiiExUuh8RlK1gTuygz4bkFoeERbrnzYiUUJv 5/55klzXmAJQL0UWtFjL6zL4VjP6hfPru5SYwRSUp0r69X9vmw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:21:28 2026 by rpki-client