$ rpki-client -vvf repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft File: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft (raw, json) Hash identifier: wUxShdEvefdX9kj0wl5eKcoo0i7RZ+/CDuY98uD29LA= Subject key identifier: DB:EB:3E:5C:F4:5C:E3:1A:FA:AB:3F:36:08:E1:BE:7F:04:24:47:68 Authority key identifier: 84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF Certificate issuer: /CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Certificate serial: 13E4F7FA2C755CB95C9F331E5F8BD0AC8BC8AB91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft Manifest number: 0175 Signing time: Sat 28 Feb 2026 13:40:49 +0000 Manifest this update: Sat 28 Feb 2026 13:35:49 +0000 Manifest next update: Tue 03 Mar 2026 14:33:49 +0000 Files and hashes: 1: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: /URm5Kz+lOTj8/0VCDqZYq+wPeWuBT+Tq5QLg7+ZM+8=) 2: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: 8svYl0PSwXQA1Wds9/vDZkzwkfX8sX1XjqIKznjwc2w=) 3: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl (hash: mVQjUu3wPgJHfx1YXpyvKUdJlTX3m06yKi5XX+ISy0I=) 4: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: 9S64FqiohF4/G4AR4prN454MPd/66wEeqEDt9vo/F+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 14:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e4:f7:fa:2c:75:5c:b9:5c:9f:33:1e:5f:8b:d0:ac:8b:c8:ab:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Validity Not Before: Feb 28 13:35:49 2026 GMT Not After : Mar 3 14:33:49 2026 GMT Subject: CN=DBEB3E5CF45CE31AFAAB3F3608E1BE7F04244768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:85:47:c6:8b:73:56:24:57:09:b2:8d:f2:e8: c7:fa:18:45:1f:bb:31:9d:5b:24:36:f6:2a:dd:7d: 9f:98:e0:55:0b:4e:cd:e0:54:67:c3:9b:6f:35:40: 74:f8:1a:87:9b:01:e2:ca:83:b7:62:e0:c6:cd:7b: f4:da:e3:1f:74:bf:a6:cb:78:8c:01:3f:51:6d:c8: 18:a5:67:61:86:f6:22:50:c3:fd:f3:41:12:20:34: 43:2d:d9:f2:00:98:b1:7e:72:0c:e2:a6:7f:cb:23: fa:87:0a:6e:09:14:17:51:2b:b6:db:74:61:ad:92: b5:13:cc:07:d4:f9:14:de:e4:36:1f:52:d8:04:2c: 32:a9:c9:51:40:9d:09:00:b6:12:69:98:ec:60:02: 53:69:3f:24:01:ea:a0:be:4d:46:2a:3f:91:b9:61: fb:04:9c:60:85:5c:93:6f:65:4f:ae:02:5d:70:dc: 8e:ad:82:42:91:e5:e7:e2:40:64:7b:bb:61:6b:fc: f0:19:a0:5c:0c:ae:ed:f0:0c:1b:64:77:b1:e6:cc: 19:e7:8b:bb:9f:18:c4:52:b4:07:4b:48:3b:6d:fe: 48:99:8c:16:4d:da:0f:0a:d9:b2:03:4d:ac:86:8d: 15:f8:ea:18:91:89:90:8b:d0:99:d6:db:de:a7:7b: a2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EB:3E:5C:F4:5C:E3:1A:FA:AB:3F:36:08:E1:BE:7F:04:24:47:68 X509v3 Authority Key Identifier: keyid:84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:d9:2c:91:4d:98:8a:11:42:57:cc:3f:c4:32:9a:77:f4:de: 58:4b:04:3c:d9:a0:cf:ea:0d:a3:0b:95:ed:34:af:2d:81:d1: 5a:dd:ea:34:0c:88:46:45:7e:e4:fe:cb:6e:c9:0c:7d:13:48: 8b:78:e2:6e:a8:26:11:10:14:0c:46:dc:4c:09:4c:1a:33:96: 93:52:1b:78:33:43:31:cb:82:b6:c9:fa:0c:54:86:02:a4:cd: 62:ca:20:68:2f:56:31:b0:9d:7a:aa:5d:83:ec:41:f9:af:aa: c2:09:af:97:82:0b:7d:f5:07:86:ab:57:87:d8:35:7c:ef:cc: 4a:1b:cd:0e:73:4a:96:a7:ba:9d:54:21:7f:59:92:3a:8c:9f: 75:8c:a4:0c:5b:d0:ca:46:2d:5d:d7:08:94:c9:bf:fb:f7:0e: cf:62:ea:97:65:b7:f6:8b:8d:0f:70:74:43:11:57:35:98:ea: 66:29:41:b6:05:db:95:23:5d:83:e1:fc:c0:93:38:c3:18:ed: fd:3f:d8:76:3a:2d:2e:09:11:da:4d:94:a4:78:26:e7:06:1f: ee:89:5f:ac:62:d8:10:08:3e:32:b6:97:b5:ec:07:5b:ce:ee: 1c:24:a8:28:2e:64:fb:64:40:1e:c3:f4:3a:b3:1f:40:8d:f5: 0a:6b:5a:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE+T3+ix1XLlcnzMeX4vQrIvIq5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5 N0NCMjlBRjAeFw0yNjAyMjgxMzM1NDlaFw0yNjAzMDMxNDMzNDlaMDMxMTAvBgNV BAMTKERCRUIzRTVDRjQ1Q0UzMUFGQUFCM0YzNjA4RTFCRTdGMDQyNDQ3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCthUfGi3NWJFcJso3y6Mf6GEUf uzGdWyQ29irdfZ+Y4FULTs3gVGfDm281QHT4GoebAeLKg7di4MbNe/Ta4x90v6bL eIwBP1FtyBilZ2GG9iJQw/3zQRIgNEMt2fIAmLF+cgzipn/LI/qHCm4JFBdRK7bb dGGtkrUTzAfU+RTe5DYfUtgELDKpyVFAnQkAthJpmOxgAlNpPyQB6qC+TUYqP5G5 YfsEnGCFXJNvZU+uAl1w3I6tgkKR5efiQGR7u2Fr/PAZoFwMru3wDBtkd7HmzBnn i7ufGMRStAdLSDtt/kiZjBZN2g8K2bIDTayGjRX46hiRiZCL0JnW296ne6IzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2+s+XPRc4xr6qz82COG+fwQkR2gwHwYDVR0j BBgwFoAUhCIz1udWvJPA25pF3S97zZfLKa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODEyNzRhZi03Y2QwLTQwYWYtYTMyMS02NzY4OThkNThkYjgvMC84NDIyMzNENkU3 NTZCQzkzQzBEQjlBNDVERDJGN0JDRDk3Q0IyOUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5N0NC MjlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgxMjc0YWYtN2NkMC00MGFmLWEz MjEtNjc2ODk4ZDU4ZGI4LzAvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdC Q0Q5N0NCMjlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHZLJFNmIoRQlfMP8Qymnf03lhLBDzZoM/q DaMLle00ry2B0Vrd6jQMiEZFfuT+y27JDH0TSIt44m6oJhEQFAxG3EwJTBozlpNS G3gzQzHLgrbJ+gxUhgKkzWLKIGgvVjGwnXqqXYPsQfmvqsIJr5eCC331B4arV4fY NXzvzEobzQ5zSpanup1UIX9ZkjqMn3WMpAxb0MpGLV3XCJTJv/v3Ds9i6pdlt/aL jQ9wdEMRVzWY6mYpQbYF25UjXYPh/MCTOMMY7f0/2HY6LS4JEdpNlKR4JucGH+6J X6xi2BAIPjK2l7XsB1vO7hwkqCguZPtkQB7D9DqzH0CN9QprWrg= -----END CERTIFICATE-----Generated at Mon Mar 2 10:00:23 2026 by rpki-client