$ rpki-client -vvf repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft File: 42CB30013F9704EFBDCF784FCD60289C7620A373.mft (raw, json) Hash identifier: UvqwEhBim9zN38eZxvAFX0vc+hKbT9RqSMj03+x28os= Subject key identifier: 85:6F:6F:51:52:2C:D5:44:7F:1E:74:B9:71:87:87:74:D2:71:12:10 Authority key identifier: 42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 Certificate issuer: /CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Certificate serial: 7AF38E2577EB71DD95CAA073A36D339D16EC8AAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft Manifest number: 03D7 Signing time: Wed 25 Mar 2026 13:01:20 +0000 Manifest this update: Wed 25 Mar 2026 12:56:20 +0000 Manifest next update: Sun 29 Mar 2026 00:09:20 +0000 Files and hashes: 1: 42CB30013F9704EFBDCF784FCD60289C7620A373.crl (hash: 1sp/i64fkkX6ui+GnR1CVdPqfkZRQJbxMU7uSx9BdiE=) 2: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: Xwns5Ogpfyb6PVc5ICTvXYVnJhIy9x8E6M2bieEhjv0=) 3: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: 8aR3sz5ao9x8srIIfDbOvigwX9Z+EpDkLEUEJhCZRRU=) 4: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: MCsJamis6iOXm6hLXc7OaIE2GZNYqTtsiTRjdaXwpbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f3:8e:25:77:eb:71:dd:95:ca:a0:73:a3:6d:33:9d:16:ec:8a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Validity Not Before: Mar 25 12:56:20 2026 GMT Not After : Mar 29 00:09:20 2026 GMT Subject: CN=856F6F51522CD5447F1E74B971878774D2711210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ca:42:1c:82:bd:96:02:6e:60:e1:fe:b8:64: 8b:34:cb:ca:87:80:29:05:ee:b2:ac:fa:b2:f5:45: a3:e9:00:e9:66:76:ad:d8:5a:66:a6:b7:66:ae:f9: c9:f7:8e:2f:0d:c8:05:7b:c4:10:c6:0b:07:16:78: 97:08:e0:64:9d:e1:c0:1b:f8:4f:c8:7e:36:94:8a: 9e:b4:68:07:df:81:27:ad:42:24:db:5a:9c:ac:b3: fc:7e:46:9d:0f:28:66:df:fa:8f:38:dc:fb:18:98: 77:76:c6:a6:f3:f2:24:a1:fb:46:28:d8:66:18:44: 15:04:c5:70:15:77:1b:dd:10:b9:64:35:94:d7:c8: fe:9d:67:28:14:a3:be:ec:a2:45:f0:c4:9e:3d:b1: 3c:a7:cc:b7:00:c9:8d:47:3b:40:af:be:1e:8a:f2: 7a:f2:aa:18:66:1f:e2:0a:51:d3:0b:03:66:54:37: 55:24:4a:52:79:37:d0:f4:89:35:c4:50:90:9a:8a: 1c:d8:20:99:c3:58:64:10:f0:37:1c:25:b4:aa:57: c0:d0:a6:84:ce:76:43:ad:c2:e4:87:e4:56:1a:c8: e3:f3:6c:1b:2e:d6:29:b2:ff:4d:e8:28:8d:17:c9: 48:27:77:82:3d:aa:2c:65:a0:ca:b2:0a:92:c2:6c: 8c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6F:6F:51:52:2C:D5:44:7F:1E:74:B9:71:87:87:74:D2:71:12:10 X509v3 Authority Key Identifier: keyid:42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:21:9b:8f:4c:5e:5e:4f:fb:9f:27:f8:78:f3:0f:32:52:bb: 2a:45:58:1c:66:26:2f:82:26:1b:44:8b:10:a6:3f:3b:94:2c: b7:b9:4d:af:c1:6c:23:b1:7d:78:67:ea:b8:77:3a:3d:b6:9f: f3:94:3b:e1:90:56:e8:66:f3:f7:13:2b:3a:0f:a5:82:55:ad: 99:10:13:6b:99:80:dc:7a:87:bf:68:f7:57:49:59:ea:12:15: ec:17:ce:82:58:ae:54:c8:21:9a:48:36:10:88:ba:b0:80:89: fa:46:e4:6f:5d:bd:07:3b:95:20:68:c0:fc:25:ac:86:cf:51: 51:de:9a:50:8c:93:7b:6f:32:cd:f3:ab:7b:8d:05:d5:6c:76: 90:83:6d:a3:db:c3:b1:4e:27:5a:ce:b3:ac:44:b1:9e:66:81: 90:b5:fa:48:be:b4:7b:c0:b0:ae:dc:c5:d9:9c:f6:e0:02:2f: cf:ad:f0:40:c7:af:37:d1:e8:dc:b1:e4:86:a1:f5:b1:e7:54: e8:ac:64:b8:5e:60:a8:49:c3:db:03:54:3b:99:4c:a4:7e:35: 7a:c0:cd:6e:b4:5f:92:19:e9:ff:64:48:ef:20:ea:5d:56:be: d5:1e:ef:98:28:a6:67:5a:20:46:5c:65:83:7d:94:b6:b0:75: a0:dd:25:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUevOOJXfrcd2VyqBzo20znRbsiqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3 NjIwQTM3MzAeFw0yNjAzMjUxMjU2MjBaFw0yNjAzMjkwMDA5MjBaMDMxMTAvBgNV BAMTKDg1NkY2RjUxNTIyQ0Q1NDQ3RjFFNzRCOTcxODc4Nzc0RDI3MTEyMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUykIcgr2WAm5g4f64ZIs0y8qH gCkF7rKs+rL1RaPpAOlmdq3YWmamt2au+cn3ji8NyAV7xBDGCwcWeJcI4GSd4cAb +E/IfjaUip60aAffgSetQiTbWpyss/x+Rp0PKGbf+o843PsYmHd2xqbz8iSh+0Yo 2GYYRBUExXAVdxvdELlkNZTXyP6dZygUo77sokXwxJ49sTynzLcAyY1HO0Cvvh6K 8nryqhhmH+IKUdMLA2ZUN1UkSlJ5N9D0iTXEUJCaihzYIJnDWGQQ8DccJbSqV8DQ poTOdkOtwuSH5FYayOPzbBsu1imy/03oKI0XyUgnd4I9qixloMqyCpLCbIyBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhW9vUVIs1UR/HnS5cYeHdNJxEhAwHwYDVR0j BBgwFoAUQsswAT+XBO+9z3hPzWAonHYgo3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTAwM2Q2Yy05NWYxLTQ3YTQtOWQ1ZC1mN2I0OGNhYWE3ZjQvMC80MkNCMzAwMTNG OTcwNEVGQkRDRjc4NEZDRDYwMjg5Qzc2MjBBMzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3NjIw QTM3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4 OUM3NjIwQTM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIhm49MXl5P+58n+HjzDzJSuypFWBxmJi+C JhtEixCmPzuULLe5Ta/BbCOxfXhn6rh3Oj22n/OUO+GQVuhm8/cTKzoPpYJVrZkQ E2uZgNx6h79o91dJWeoSFewXzoJYrlTIIZpINhCIurCAifpG5G9dvQc7lSBowPwl rIbPUVHemlCMk3tvMs3zq3uNBdVsdpCDbaPbw7FOJ1rOs6xEsZ5mgZC1+ki+tHvA sK7cxdmc9uACL8+t8EDHrzfR6Nyx5Iah9bHnVOisZLheYKhJw9sDVDuZTKR+NXrA zW60X5IZ6f9kSO8g6l1WvtUe75gopmdaIEZcZYN9lLawdaDdJWw= -----END CERTIFICATE-----Generated at Thu Mar 26 18:32:05 2026 by rpki-client