$ rpki-client -vvf repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft File: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft (raw, json) Hash identifier: XAyxnD6HRSYA3VyfN7/SirPhrbr0jjgEmyngUNt6yWw= Subject key identifier: 4F:0B:0C:31:C4:48:A8:D0:EA:36:E8:D3:31:E8:77:DD:F0:42:68:14 Authority key identifier: 42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF Certificate issuer: /CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Certificate serial: 6E92FC8C243A33B577468758BAC6F253283ED1E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft Manifest number: 01F1 Signing time: Tue 24 Mar 2026 08:02:33 +0000 Manifest this update: Tue 24 Mar 2026 07:57:33 +0000 Manifest next update: Fri 27 Mar 2026 08:20:33 +0000 Files and hashes: 1: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl (hash: qF+lyIi8RHYnjKu6ErXt0+5P4ni7ELypuf5pWzpho9I=) 2: 3130332e3134382e38362e302f32332d3234203d3e20313430343136.roa (hash: Im9caE29LrIEyyw1N4Depx5/vTj8Y8+2ed9BSKso6Pk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 08:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:92:fc:8c:24:3a:33:b5:77:46:87:58:ba:c6:f2:53:28:3e:d1:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Validity Not Before: Mar 24 07:57:33 2026 GMT Not After : Mar 27 08:20:33 2026 GMT Subject: CN=4F0B0C31C448A8D0EA36E8D331E877DDF0426814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:27:9e:b1:ba:ee:0f:16:bb:40:16:2f:57:37: 2b:f1:20:a9:81:b5:1e:3c:03:a2:2a:5d:78:86:9f: dd:31:eb:4f:65:dc:82:c7:10:f3:ec:93:6c:d9:cc: c5:88:6b:94:f1:3d:91:32:2a:91:7c:c4:3c:ee:4a: fb:88:16:d2:c9:f5:27:e0:d5:52:e0:a8:0f:64:c7: 65:a4:da:09:0f:90:f6:51:c0:bb:aa:1b:db:10:82: db:e9:e9:cb:dc:1e:59:2b:c8:1d:61:b7:90:0f:f7: 10:2a:80:a7:bc:30:e5:0c:89:6c:4c:50:51:b0:31: 60:ec:a9:d2:2b:4f:b1:f0:7b:1a:21:c4:7c:da:4c: ca:e1:76:8f:c0:f6:87:51:06:42:ac:81:fd:1c:b3: d8:31:59:cb:25:78:c4:59:e8:e2:a6:d6:c3:05:5b: 0c:be:15:8c:e4:7b:03:87:76:ca:32:c6:ae:65:7c: 51:af:23:fd:f7:98:a5:4c:25:de:ec:af:49:c3:79: 22:bc:27:75:97:7d:e4:08:7a:ee:e3:ea:32:d7:76: 39:24:91:7b:15:99:2f:0d:0b:73:ed:c4:05:93:de: c5:eb:d9:37:f1:28:48:e4:91:38:54:7b:0c:48:d4: 7a:2b:61:75:51:d5:38:2f:4f:49:f3:63:28:ce:4c: 84:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0B:0C:31:C4:48:A8:D0:EA:36:E8:D3:31:E8:77:DD:F0:42:68:14 X509v3 Authority Key Identifier: keyid:42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:5b:24:fa:27:bb:46:f1:16:d6:6e:d4:19:bb:f7:2b:c8:78: 1b:a4:17:ac:84:33:ae:b0:ff:e2:7a:3c:fa:9a:2a:dd:21:58: 13:d2:53:34:af:d3:f1:02:97:15:a2:c8:0d:a1:c1:35:3e:ac: 00:92:0e:1f:ed:bb:d9:bd:01:cb:a5:a8:4d:da:06:83:a8:2b: a5:f4:f7:12:25:3b:97:cb:3f:a4:a5:a9:7c:be:c9:8a:36:1a: 44:ec:b5:41:aa:dd:5e:58:40:b6:90:23:7f:43:a0:6c:c2:5b: 5a:e6:5d:95:54:0f:f6:dc:28:e7:2e:db:2e:16:bd:83:0f:63: 0e:3b:fd:ac:20:4c:fc:09:b5:72:bc:7d:a3:5a:41:e2:90:33: c3:e6:24:86:5e:13:a4:3c:52:77:c0:53:e2:1f:43:72:3e:d3: 85:13:a2:d3:9c:a8:62:e5:49:62:7e:0e:44:1c:fb:44:08:d4: ce:c4:e6:2d:82:93:58:45:06:ca:15:53:f9:70:6f:1f:c2:f4: cd:34:b5:b7:e5:ed:99:c3:ae:65:6a:29:01:3f:e3:4b:5f:03: a2:81:91:32:88:4f:dd:98:d4:1b:65:65:ed:8e:3f:6c:05:a6: fd:da:20:78:8e:45:2d:18:c8:b6:41:21:91:24:32:a9:47:87: 5e:d2:b0:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbpL8jCQ6M7V3RodYusbyUyg+0eQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUz NkZCQjZBRjAeFw0yNjAzMjQwNzU3MzNaFw0yNjAzMjcwODIwMzNaMDMxMTAvBgNV BAMTKDRGMEIwQzMxQzQ0OEE4RDBFQTM2RThEMzMxRTg3N0RERjA0MjY4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJ56xuu4PFrtAFi9XNyvxIKmB tR48A6IqXXiGn90x609l3ILHEPPsk2zZzMWIa5TxPZEyKpF8xDzuSvuIFtLJ9Sfg 1VLgqA9kx2Wk2gkPkPZRwLuqG9sQgtvp6cvcHlkryB1ht5AP9xAqgKe8MOUMiWxM UFGwMWDsqdIrT7HwexohxHzaTMrhdo/A9odRBkKsgf0cs9gxWcsleMRZ6OKm1sMF Wwy+FYzkewOHdsoyxq5lfFGvI/33mKVMJd7sr0nDeSK8J3WXfeQIeu7j6jLXdjkk kXsVmS8NC3PtxAWT3sXr2TfxKEjkkThUewxI1HorYXVR1TgvT0nzYyjOTIQdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTwsMMcRIqNDqNujTMeh33fBCaBQwHwYDVR0j BBgwFoAUQhmRaZRO0i0f6s/MQI+u5Tb7tq8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDE4ZGVhMi1hODkxLTQ5ZWYtYTA2Zi1mZTdmMmM4MzI1OGIvMC80MjE5OTE2OTk0 NEVEMjJEMUZFQUNGQ0M0MDhGQUVFNTM2RkJCNkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUzNkZC QjZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQxOGRlYTItYTg5MS00OWVmLWEw NmYtZmU3ZjJjODMyNThiLzAvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFF RTUzNkZCQjZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFbJPonu0bxFtZu1Bm79yvIeBukF6yEM66w /+J6PPqaKt0hWBPSUzSv0/EClxWiyA2hwTU+rACSDh/tu9m9AculqE3aBoOoK6X0 9xIlO5fLP6SlqXy+yYo2GkTstUGq3V5YQLaQI39DoGzCW1rmXZVUD/bcKOcu2y4W vYMPYw47/awgTPwJtXK8faNaQeKQM8PmJIZeE6Q8UnfAU+IfQ3I+04UTotOcqGLl SWJ+DkQc+0QI1M7E5i2Ck1hFBsoVU/lwbx/C9M00tbfl7ZnDrmVqKQE/40tfA6KB kTKIT92Y1BtlZe2OP2wFpv3aIHiORS0YyLZBIZEkMqlHh17SsPc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:04:53 2026 by rpki-client