$ rpki-client -vvf repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft File: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft (raw, json) Hash identifier: Ls/3nLktXaei99v016A+NlZDKiQ7WUdNL1y5Y85p1ks= Subject key identifier: 4D:CA:B5:7F:8D:CF:1A:08:EB:CF:A2:A7:14:CC:E6:93:13:4F:71:F1 Authority key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 Certificate issuer: /CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Certificate serial: 3A481C2BD133A6A524C41AE909FC2CAA32D7287E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft Manifest number: 0232 Signing time: Sat 28 Feb 2026 07:11:53 +0000 Manifest this update: Sat 28 Feb 2026 07:06:53 +0000 Manifest next update: Tue 03 Mar 2026 17:13:53 +0000 Files and hashes: 1: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl (hash: vvUwsvohnCaGQ4JJMnoGM7fsEDJWALXBAIY/z+7zlmU=) 2: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: 59yz865tKQpU8UqeDFR2Q6MBnW99RvQGBX6jv6dW3C0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:48:1c:2b:d1:33:a6:a5:24:c4:1a:e9:09:fc:2c:aa:32:d7:28:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Validity Not Before: Feb 28 07:06:53 2026 GMT Not After : Mar 3 17:13:53 2026 GMT Subject: CN=4DCAB57F8DCF1A08EBCFA2A714CCE693134F71F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0d:3f:75:62:85:0e:56:e1:8b:3b:c1:7b:e2: 7b:e6:14:08:da:e4:c2:9a:2b:09:cb:35:f0:1f:48: 1f:3b:f1:30:6a:07:24:fc:43:0e:b0:29:d0:d0:37: c3:9a:1b:b2:00:aa:a1:9b:ca:c9:ad:e9:ba:d8:72: b1:5b:ed:ef:a0:8a:e4:28:39:4f:9a:7f:a7:d2:02: 9d:44:72:ca:c9:82:04:fd:27:15:c0:41:19:f5:c7: 35:83:a8:54:ac:77:a3:71:47:28:26:51:07:03:df: 76:54:5d:7f:6e:49:11:ee:f6:f8:4f:bb:c2:98:2a: a4:56:81:31:ae:c3:1b:df:31:8a:8c:f6:b9:f4:bb: fa:e7:bb:c6:90:0c:3d:f8:df:f4:50:76:eb:d2:1d: ba:6b:75:ce:81:bb:56:3a:2c:9e:85:e8:56:c2:80: ed:61:28:06:cc:b9:c8:24:a4:c6:64:e0:e1:91:4d: 91:35:51:59:9a:59:19:01:90:73:3d:fe:6f:10:20: ab:7c:ab:e0:38:3d:66:1b:2e:d2:22:a4:a9:ef:6d: 9b:ad:31:93:b9:c2:e3:0d:b8:09:29:0d:a1:ba:e3: 0a:66:b5:ec:a4:94:85:36:26:4c:ba:b1:e7:d2:49: c5:f7:18:d6:e3:ba:cc:e1:79:a0:86:83:c4:96:1c: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CA:B5:7F:8D:CF:1A:08:EB:CF:A2:A7:14:CC:E6:93:13:4F:71:F1 X509v3 Authority Key Identifier: keyid:D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ba:dd:08:9b:18:f6:04:68:58:a8:e1:47:04:74:b3:2b:7c: ea:f1:20:dd:20:ad:d1:b5:91:04:17:91:9d:75:b8:be:a3:ef: 56:d8:23:ca:13:5b:09:68:45:d5:ce:10:bc:7c:fa:cf:3f:97: ce:ca:b7:c1:29:8c:de:24:dd:ce:86:06:cd:ad:c8:bb:47:74: 70:b8:45:f8:38:5b:ad:37:af:9d:50:e3:43:6d:78:78:ca:79: e5:f6:ea:38:0f:ea:22:b2:4e:5f:a5:73:3e:f8:6b:bc:66:c5: 61:3b:15:9c:e7:ee:58:59:d3:3d:f9:c2:48:09:f8:b8:72:04: 6a:15:f3:15:0c:ba:fe:ca:c4:cd:c4:8a:d1:15:cd:d5:2e:3b: c3:db:20:ab:a9:93:eb:aa:85:d2:c9:2b:0a:f2:da:0c:5e:16: a4:44:de:26:bc:26:8a:34:79:ef:a4:57:02:7d:04:45:3f:a9: f0:4d:c5:63:d4:ec:b1:b9:9b:6c:6b:35:bf:31:31:21:63:bf: 08:1c:e2:ee:3d:1e:64:d0:cb:45:b2:97:90:b9:3c:bc:84:e8: 37:64:d8:fb:03:15:fa:03:70:1d:89:af:b7:66:e8:2c:83:c1: d9:60:55:ed:f7:5f:5e:89:05:18:39:77:f1:19:e0:26:11:81: 73:4d:41:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOkgcK9EzpqUkxBrpCfwsqjLXKH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRC MDIzNUZBNzAeFw0yNjAyMjgwNzA2NTNaFw0yNjAzMDMxNzEzNTNaMDMxMTAvBgNV BAMTKDREQ0FCNTdGOERDRjFBMDhFQkNGQTJBNzE0Q0NFNjkzMTM0RjcxRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcDT91YoUOVuGLO8F74nvmFAja 5MKaKwnLNfAfSB878TBqByT8Qw6wKdDQN8OaG7IAqqGbysmt6brYcrFb7e+giuQo OU+af6fSAp1EcsrJggT9JxXAQRn1xzWDqFSsd6NxRygmUQcD33ZUXX9uSRHu9vhP u8KYKqRWgTGuwxvfMYqM9rn0u/rnu8aQDD343/RQduvSHbprdc6Bu1Y6LJ6F6FbC gO1hKAbMucgkpMZk4OGRTZE1UVmaWRkBkHM9/m8QIKt8q+A4PWYbLtIipKnvbZut MZO5wuMNuAkpDaG64wpmteyklIU2Jky6sefSScX3GNbjuszheaCGg8SWHENzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTcq1f43PGgjrz6KnFMzmkxNPcfEwHwYDVR0j BBgwFoAU0EPCorOV5qe8ijLxrmwZNLAjX6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2FkMzc1Ny05M2EwLTRiMzMtOTEyOC0yNGFhNjEzMDRlZmYvMC9EMDQzQzJBMkIz OTVFNkE3QkM4QTMyRjFBRTZDMTkzNEIwMjM1RkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRCMDIz NUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5 MzRCMDIzNUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFy63QibGPYEaFio4UcEdLMrfOrxIN0grdG1 kQQXkZ11uL6j71bYI8oTWwloRdXOELx8+s8/l87Kt8EpjN4k3c6GBs2tyLtHdHC4 Rfg4W603r51Q40NteHjKeeX26jgP6iKyTl+lcz74a7xmxWE7FZzn7lhZ0z35wkgJ +LhyBGoV8xUMuv7KxM3EitEVzdUuO8PbIKupk+uqhdLJKwry2gxeFqRE3ia8Joo0 ee+kVwJ9BEU/qfBNxWPU7LG5m2xrNb8xMSFjvwgc4u49HmTQy0Wyl5C5PLyE6Ddk 2PsDFfoDcB2Jr7dm6CyDwdlgVe33X16JBRg5d/EZ4CYRgXNNQUg= -----END CERTIFICATE-----Generated at Mon Mar 2 17:31:27 2026 by rpki-client