$ rpki-client -vvf repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft File: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft (raw, json) Hash identifier: jVKciOW6/HaZ8nECbVXlBgss1MRpty39l4Zj0nHPcj8= Subject key identifier: D2:CE:3A:4A:E5:2D:42:EE:0E:48:F5:A5:2F:AB:19:59:9A:A6:B8:A2 Authority key identifier: 84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF Certificate issuer: /CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Certificate serial: 7066BFE60A6ECA0D0AC748E6F592813FEDA9CB3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft Manifest number: 018A Signing time: Fri 17 Apr 2026 23:10:51 +0000 Manifest this update: Fri 17 Apr 2026 23:05:51 +0000 Manifest next update: Tue 21 Apr 2026 04:04:51 +0000 Files and hashes: 1: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: /URm5Kz+lOTj8/0VCDqZYq+wPeWuBT+Tq5QLg7+ZM+8=) 2: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: 9S64FqiohF4/G4AR4prN454MPd/66wEeqEDt9vo/F+Y=) 3: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl (hash: 7GDf98fzQTwzG5W83NkWp1aqgVAaIOKyq40AXkzDNVM=) 4: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: 8svYl0PSwXQA1Wds9/vDZkzwkfX8sX1XjqIKznjwc2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:66:bf:e6:0a:6e:ca:0d:0a:c7:48:e6:f5:92:81:3f:ed:a9:cb:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Validity Not Before: Apr 17 23:05:51 2026 GMT Not After : Apr 21 04:04:51 2026 GMT Subject: CN=D2CE3A4AE52D42EE0E48F5A52FAB19599AA6B8A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:d1:db:d8:1b:bd:2d:65:d9:4f:27:01:d4: e2:24:f6:7a:e2:ea:e7:27:87:21:d7:9e:9a:94:e6: 5d:5d:22:8b:50:24:9d:06:cb:7e:5f:7d:f8:e1:43: 71:82:cf:54:ca:88:0c:fc:f0:bb:31:14:d6:7f:0a: af:ab:ec:c5:37:45:f1:e5:32:65:ae:a3:a6:c3:cf: 30:46:6f:7a:13:67:01:92:ab:dc:44:9c:26:80:28: 6b:a6:32:4e:bb:92:2c:f9:2c:2a:c1:65:bc:17:97: a7:62:a7:2a:b2:10:f9:36:2d:62:1c:af:59:c7:14: 5f:da:56:c9:98:f5:3e:5c:a0:e4:1b:d0:42:75:bb: b8:a3:19:14:1b:0b:96:4a:c0:a0:56:05:8e:10:7d: 14:6b:9a:57:70:e4:a3:c2:93:48:b1:66:a6:d7:54: 00:11:33:87:8b:68:59:58:67:06:25:17:9b:c2:70: b7:dd:ab:9f:e5:3a:13:eb:1f:ad:ea:f9:45:6c:ed: e7:3c:62:c9:38:42:bd:b2:30:62:a6:79:bf:f5:e6: 70:1b:6d:52:04:1c:29:93:4e:31:d5:14:f3:64:0c: a0:2f:50:cc:e2:e9:03:89:0c:96:f6:7d:3e:85:ac: da:5a:4f:ac:66:6d:78:02:29:be:d8:54:35:07:5c: 2e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CE:3A:4A:E5:2D:42:EE:0E:48:F5:A5:2F:AB:19:59:9A:A6:B8:A2 X509v3 Authority Key Identifier: keyid:84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b1:6b:a1:65:5d:54:26:f1:bd:9b:60:f5:e4:16:cc:f3:f7: df:c4:5d:67:81:96:95:28:fc:ad:7e:7e:78:78:80:4d:ee:4c: a7:c1:7b:f2:c0:6d:21:5e:6e:18:0f:77:32:4e:11:60:fc:53: 59:e1:30:c4:3d:75:1e:fb:e2:73:42:dc:06:63:35:25:70:38: 99:53:88:b9:8f:a9:00:86:93:d2:0b:bc:49:9d:76:75:da:fe: 0c:c8:28:83:d7:ac:ad:ae:b7:ae:89:7a:53:f3:9a:bf:96:2d: fc:0a:48:cb:4e:00:91:d5:9a:ce:51:71:83:58:2f:f4:33:b1: b1:0f:10:56:f3:b9:7b:78:29:7a:d5:f1:e3:0d:b1:58:8b:71: 51:7f:0a:a2:13:af:c8:4f:fe:f9:e4:1d:52:04:6c:71:57:b6: 82:c8:3c:26:32:86:27:a6:fc:69:55:e6:fd:a0:c8:01:f2:5f: 19:77:51:81:f6:c8:42:5e:6e:a5:d3:09:64:fb:7a:3b:69:6b: ec:a5:c5:fc:d4:fc:d8:04:82:6c:05:21:a9:94:cf:24:ed:05: 64:47:c7:8f:ff:f1:1d:1a:4d:01:c3:29:a7:07:a1:3c:cc:a7: 17:ae:ae:89:30:c4:25:53:40:7d:2e:7b:46:4e:06:1b:d4:e0: 4c:77:3c:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcGa/5gpuyg0Kx0jm9ZKBP+2pyzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5 N0NCMjlBRjAeFw0yNjA0MTcyMzA1NTFaFw0yNjA0MjEwNDA0NTFaMDMxMTAvBgNV BAMTKEQyQ0UzQTRBRTUyRDQyRUUwRTQ4RjVBNTJGQUIxOTU5OUFBNkI4QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLi9Hb2Bu9LWXZTycB1OIk9nri 6ucnhyHXnpqU5l1dIotQJJ0Gy35fffjhQ3GCz1TKiAz88LsxFNZ/Cq+r7MU3RfHl MmWuo6bDzzBGb3oTZwGSq9xEnCaAKGumMk67kiz5LCrBZbwXl6dipyqyEPk2LWIc r1nHFF/aVsmY9T5coOQb0EJ1u7ijGRQbC5ZKwKBWBY4QfRRrmldw5KPCk0ixZqbX VAARM4eLaFlYZwYlF5vCcLfdq5/lOhPrH63q+UVs7ec8Ysk4Qr2yMGKmeb/15nAb bVIEHCmTTjHVFPNkDKAvUMzi6QOJDJb2fT6FrNpaT6xmbXgCKb7YVDUHXC7dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0s46SuUtQu4OSPWlL6sZWZqmuKIwHwYDVR0j BBgwFoAUhCIz1udWvJPA25pF3S97zZfLKa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODEyNzRhZi03Y2QwLTQwYWYtYTMyMS02NzY4OThkNThkYjgvMC84NDIyMzNENkU3 NTZCQzkzQzBEQjlBNDVERDJGN0JDRDk3Q0IyOUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5N0NC MjlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgxMjc0YWYtN2NkMC00MGFmLWEz MjEtNjc2ODk4ZDU4ZGI4LzAvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdC Q0Q5N0NCMjlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmxa6FlXVQm8b2bYPXkFszz99/EXWeBlpUo /K1+fnh4gE3uTKfBe/LAbSFebhgPdzJOEWD8U1nhMMQ9dR774nNC3AZjNSVwOJlT iLmPqQCGk9ILvEmddnXa/gzIKIPXrK2ut66JelPzmr+WLfwKSMtOAJHVms5RcYNY L/QzsbEPEFbzuXt4KXrV8eMNsViLcVF/CqITr8hP/vnkHVIEbHFXtoLIPCYyhiem /GlV5v2gyAHyXxl3UYH2yEJebqXTCWT7ejtpa+ylxfzU/NgEgmwFIamUzyTtBWRH x4//8R0aTQHDKacHoTzMpxeurokwxCVTQH0ue0ZOBhvU4Ex3PLo= -----END CERTIFICATE-----Generated at Sun Apr 19 14:22:58 2026 by rpki-client