$ rpki-client -vvf repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft File: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft (raw, json) Hash identifier: ZFni5TftkTYMqnJAD1Ye0lGE4otiYeMAoe1jPK4XgeQ= Subject key identifier: 81:DA:07:F9:3A:A8:AD:87:1D:DD:27:EE:02:04:57:10:5E:AC:5B:18 Authority key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 Certificate issuer: /CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Certificate serial: 2C1AC4FD703A514002B2FF9593DA20AA666521E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft Manifest number: 0233 Signing time: Mon 02 Mar 2026 17:21:58 +0000 Manifest this update: Mon 02 Mar 2026 17:16:58 +0000 Manifest next update: Thu 05 Mar 2026 19:19:58 +0000 Files and hashes: 1: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl (hash: 18+Uxc1jSA4VQvLfyacGK/E/AyMbHRVeILdlLz0bvwI=) 2: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: 59yz865tKQpU8UqeDFR2Q6MBnW99RvQGBX6jv6dW3C0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:1a:c4:fd:70:3a:51:40:02:b2:ff:95:93:da:20:aa:66:65:21:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Validity Not Before: Mar 2 17:16:58 2026 GMT Not After : Mar 5 19:19:58 2026 GMT Subject: CN=81DA07F93AA8AD871DDD27EE020457105EAC5B18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:15:f0:e7:36:39:5b:54:7b:b7:d6:a4:12:d7: 14:99:59:6a:0f:c0:35:d5:fb:68:8c:4e:10:fe:37: 9a:b0:69:03:5e:07:8f:57:68:d4:98:2c:15:5e:3f: e4:ff:40:26:92:4f:31:1b:ba:75:11:c4:02:7b:9a: 9b:41:f3:f2:3a:7c:a0:7d:9a:8b:87:e3:d6:ec:f1: 97:06:37:64:9e:2a:68:24:5c:9b:dd:0a:4b:5b:d6: d2:ff:ef:c7:67:39:0b:52:50:6e:c1:4e:eb:19:3c: 6d:d2:ea:24:6b:09:e0:cb:32:8f:ca:ad:12:39:67: 6a:4b:16:3b:2a:14:82:5b:00:7d:c5:ca:a9:e1:5c: 15:74:4a:1a:7b:95:74:1e:9b:f4:4a:d0:d2:93:54: c8:38:bb:40:f7:0f:10:31:a3:4c:ea:13:46:ee:e8: 1e:59:5b:03:55:be:57:2f:6a:4a:5e:66:64:62:c6: ed:b2:83:3b:01:de:f2:c3:a7:ca:91:cc:01:e0:d1: 32:34:f2:2f:08:ce:1b:fe:31:08:25:dc:cb:17:1a: 14:5f:fd:1c:97:73:7d:ea:b4:53:e4:40:df:8b:da: 1c:b7:cf:d2:89:b1:c6:c6:2c:d9:4f:c9:1f:bd:e9: 87:71:74:4a:d7:61:27:cd:cb:d3:3e:ec:c7:64:21: 43:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DA:07:F9:3A:A8:AD:87:1D:DD:27:EE:02:04:57:10:5E:AC:5B:18 X509v3 Authority Key Identifier: keyid:D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:36:24:16:95:b9:f5:da:25:88:16:d5:6b:35:6d:2a:db:b2: 31:74:98:d9:cf:bb:70:60:92:8f:ce:e8:09:16:21:d1:4d:87: d1:fa:e0:4c:ef:1c:eb:63:fe:92:d5:c6:a8:bb:94:32:bf:53: 4a:f9:46:da:3e:19:aa:6e:04:27:91:b2:d6:9c:e8:92:90:1c: 00:02:e0:1c:fc:0c:29:44:03:72:f6:a0:67:78:a6:df:79:86: 6a:53:dd:74:a0:63:8a:d0:f8:dc:32:d9:3a:af:0c:a5:1c:15: 31:19:89:f3:3e:88:9b:15:fd:36:60:ad:dd:ef:af:20:27:94: ea:71:de:16:bc:2d:53:4a:d6:f1:6c:c8:b0:60:52:43:7c:86: 9f:88:14:82:60:29:09:a8:50:ec:69:76:80:03:b5:3f:4b:1e: 8a:17:10:94:39:b9:01:89:4c:35:af:88:b4:7b:2d:b8:bb:a7: a2:ec:49:8d:33:b7:38:f6:ca:67:b5:8b:56:2a:cc:c6:c1:f9: 9a:25:a4:cc:40:75:97:6e:64:28:f9:54:55:ed:e7:14:3b:eb: 93:d8:9e:c9:ba:0c:f6:24:98:af:a1:75:23:96:9b:53:26:2d: 38:c5:39:b1:f4:02:a4:c5:48:da:ca:2e:7a:cd:85:69:de:04: e6:39:28:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULBrE/XA6UUACsv+Vk9ogqmZlIecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRC MDIzNUZBNzAeFw0yNjAzMDIxNzE2NThaFw0yNjAzMDUxOTE5NThaMDMxMTAvBgNV BAMTKDgxREEwN0Y5M0FBOEFEODcxREREMjdFRTAyMDQ1NzEwNUVBQzVCMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFfDnNjlbVHu31qQS1xSZWWoP wDXV+2iMThD+N5qwaQNeB49XaNSYLBVeP+T/QCaSTzEbunURxAJ7mptB8/I6fKB9 mouH49bs8ZcGN2SeKmgkXJvdCktb1tL/78dnOQtSUG7BTusZPG3S6iRrCeDLMo/K rRI5Z2pLFjsqFIJbAH3FyqnhXBV0Shp7lXQem/RK0NKTVMg4u0D3DxAxo0zqE0bu 6B5ZWwNVvlcvakpeZmRixu2ygzsB3vLDp8qRzAHg0TI08i8Izhv+MQgl3MsXGhRf /RyXc33qtFPkQN+L2hy3z9KJscbGLNlPyR+96YdxdErXYSfNy9M+7MdkIUPjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgdoH+TqorYcd3SfuAgRXEF6sWxgwHwYDVR0j BBgwFoAU0EPCorOV5qe8ijLxrmwZNLAjX6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2FkMzc1Ny05M2EwLTRiMzMtOTEyOC0yNGFhNjEzMDRlZmYvMC9EMDQzQzJBMkIz OTVFNkE3QkM4QTMyRjFBRTZDMTkzNEIwMjM1RkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRCMDIz NUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5 MzRCMDIzNUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACI2JBaVufXaJYgW1Ws1bSrbsjF0mNnPu3Bg ko/O6AkWIdFNh9H64EzvHOtj/pLVxqi7lDK/U0r5Rto+GapuBCeRstac6JKQHAAC 4Bz8DClEA3L2oGd4pt95hmpT3XSgY4rQ+Nwy2TqvDKUcFTEZifM+iJsV/TZgrd3v ryAnlOpx3ha8LVNK1vFsyLBgUkN8hp+IFIJgKQmoUOxpdoADtT9LHooXEJQ5uQGJ TDWviLR7Lbi7p6LsSY0ztzj2yme1i1YqzMbB+ZolpMxAdZduZCj5VFXt5xQ765PY nsm6DPYkmK+hdSOWm1MmLTjFObH0AqTFSNrKLnrNhWneBOY5KGE= -----END CERTIFICATE-----Generated at Mon Mar 2 21:11:57 2026 by rpki-client