$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft File: 42467B1885830A9908EAE67935311639B090AA77.mft (raw, json) Hash identifier: tEnORPpi2aP+go7Ykl2G85TZR4b2N/X4JgShEvy3FqQ= Subject key identifier: BC:75:BB:AB:13:58:FC:FF:C9:39:3F:89:FE:DE:00:2F:8F:A5:66:0D Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 Certificate issuer: /CN=42467B1885830A9908EAE67935311639B090AA77 Certificate serial: 33F3456B3F85B23F48970BF954E784905603207A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft Manifest number: 0192 Signing time: Tue 24 Mar 2026 07:51:57 +0000 Manifest this update: Tue 24 Mar 2026 07:46:57 +0000 Manifest next update: Fri 27 Mar 2026 10:18:57 +0000 Files and hashes: 1: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: D/zVmqD0GuEMmLX7u7pkEmOmEA/IGXOECKRNGXGpD/c=) 2: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: ZWtRALMquKEFwYIWcUiF1poTwDnT8MPEPPx4FTc8PK0=) 3: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: DxKIyMO6WjD2qxH8BuKIvj+fKDvOwuaoHadDVnwc7A0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 10:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f3:45:6b:3f:85:b2:3f:48:97:0b:f9:54:e7:84:90:56:03:20:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42467B1885830A9908EAE67935311639B090AA77 Validity Not Before: Mar 24 07:46:57 2026 GMT Not After : Mar 27 10:18:57 2026 GMT Subject: CN=BC75BBAB1358FCFFC9393F89FEDE002F8FA5660D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:f4:83:74:d8:f3:10:2d:cc:e5:79:2c:07: 0a:a1:95:c6:ae:22:3f:9b:ba:57:26:ac:d3:85:1e: 30:bf:7f:9d:e2:77:cf:3a:de:01:73:8a:c0:f3:ba: c4:2c:d5:1e:1d:36:85:f0:3c:29:10:9b:2d:8a:57: 52:49:c1:06:f0:da:04:19:7b:86:f4:ed:7c:31:87: 22:c0:a5:df:d9:36:e6:45:e7:49:8e:15:db:fd:17: 5e:e7:83:1d:ac:62:11:0a:94:e8:68:d7:7a:55:fa: 44:c0:fa:86:ad:0b:16:27:ec:ad:5d:f9:3c:86:ad: 0f:08:93:7e:5f:67:77:c6:96:c0:ef:f2:55:14:3b: 59:0e:73:3f:01:a7:c7:6f:9f:e6:42:0c:d1:de:17: 98:ca:3c:6f:3f:6e:10:af:94:ba:85:ad:91:3b:0b: 80:e3:a7:0c:f1:76:cb:70:e5:44:c2:2a:57:66:07: 85:ae:6b:e1:a5:13:6b:8a:37:3b:48:3f:a8:c1:62: b2:88:79:5a:f0:94:fa:7e:34:c0:e6:53:2f:e0:1e: 5e:4a:95:30:e5:53:7d:bc:2e:01:58:a4:61:bf:a8: 58:17:e9:09:8e:a9:08:30:63:3d:0c:98:21:2a:a3: 00:6d:de:7f:df:f6:ae:7d:6b:fa:5d:9c:9a:4c:ea: f1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:75:BB:AB:13:58:FC:FF:C9:39:3F:89:FE:DE:00:2F:8F:A5:66:0D X509v3 Authority Key Identifier: keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:67:01:f4:55:f1:f5:2e:9f:3f:82:9a:0c:b6:57:ac:e4:a7: 7a:62:3b:34:0e:67:0a:43:7b:65:e5:72:7e:73:47:26:c4:56: 15:ad:c0:7b:3f:a4:ef:bd:11:06:3d:3d:83:35:bd:d5:3f:de: 69:4e:ce:a3:ad:c9:6f:d4:0d:5d:64:63:58:42:3a:01:bb:0a: a5:08:8b:b9:26:38:fa:53:e6:46:fb:85:4b:57:07:ed:92:b3: 04:15:5c:a0:b5:c5:b2:f2:8a:99:5b:9b:8b:8a:6b:c1:13:93: a5:f6:ca:b7:f9:25:69:6e:0e:e3:73:d3:29:ff:eb:33:2b:98: 56:7a:65:74:51:9c:53:b6:6d:30:4b:13:a2:b5:4a:0d:74:7f: 81:bc:68:95:73:ad:66:83:13:fa:c7:0f:d6:ec:15:03:eb:52: fc:8d:30:74:71:2d:b7:31:27:b5:ec:2b:0d:41:26:d5:76:f6: 56:df:15:df:57:81:c8:67:12:6c:f4:7c:36:e6:b4:87:bf:07: 7e:39:f9:2b:4d:28:72:30:21:fa:77:2c:35:e4:6d:c6:1b:12: d2:f3:64:2d:44:68:be:92:45:12:ce:aa:3e:1f:67:61:b9:7d: 21:f0:e9:37:b4:a3:95:96:33:98:1f:30:7a:a7:44:73:2e:c5: cf:31:df:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/NFaz+Fsj9Ilwv5VOeEkFYDIHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlC MDkwQUE3NzAeFw0yNjAzMjQwNzQ2NTdaFw0yNjAzMjcxMDE4NTdaMDMxMTAvBgNV BAMTKEJDNzVCQkFCMTM1OEZDRkZDOTM5M0Y4OUZFREUwMDJGOEZBNTY2MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1qPSDdNjzEC3M5XksBwqhlcau Ij+bulcmrNOFHjC/f53id8863gFzisDzusQs1R4dNoXwPCkQmy2KV1JJwQbw2gQZ e4b07XwxhyLApd/ZNuZF50mOFdv9F17ngx2sYhEKlOho13pV+kTA+oatCxYn7K1d +TyGrQ8Ik35fZ3fGlsDv8lUUO1kOcz8Bp8dvn+ZCDNHeF5jKPG8/bhCvlLqFrZE7 C4Djpwzxdstw5UTCKldmB4Wua+GlE2uKNztIP6jBYrKIeVrwlPp+NMDmUy/gHl5K lTDlU328LgFYpGG/qFgX6QmOqQgwYz0MmCEqowBt3n/f9q59a/pdnJpM6vEDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvHW7qxNY/P/JOT+J/t4AL4+lZg0wHwYDVR0j BBgwFoAUQkZ7GIWDCpkI6uZ5NTEWObCQqncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWUyMDg4YS1jOWZmLTRkODQtYmU0ZS0xNDFkNWI4MGI1NDMvMC80MjQ2N0IxODg1 ODMwQTk5MDhFQUU2NzkzNTMxMTYzOUIwOTBBQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlCMDkw QUE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl NGUtMTQxZDViODBiNTQzLzAvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2 MzlCMDkwQUE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9nAfRV8fUunz+Cmgy2V6zkp3piOzQOZwpD e2Xlcn5zRybEVhWtwHs/pO+9EQY9PYM1vdU/3mlOzqOtyW/UDV1kY1hCOgG7CqUI i7kmOPpT5kb7hUtXB+2SswQVXKC1xbLyiplbm4uKa8ETk6X2yrf5JWluDuNz0yn/ 6zMrmFZ6ZXRRnFO2bTBLE6K1Sg10f4G8aJVzrWaDE/rHD9bsFQPrUvyNMHRxLbcx J7XsKw1BJtV29lbfFd9XgchnEmz0fDbmtIe/B345+StNKHIwIfp3LDXkbcYbEtLz ZC1EaL6SRRLOqj4fZ2G5fSHw6Te0o5WWM5gfMHqnRHMuxc8x3xU= -----END CERTIFICATE-----Generated at Thu Mar 26 12:03:16 2026 by rpki-client