$ rpki-client -vvf repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft File: 41820333252DF92B1DBA238F558CC8D822C768EF.mft (raw, json) Hash identifier: lUd79YGrSuXXuY2T8vLij+HHvkz+T4GQH7JNspGnRPc= Subject key identifier: A1:A7:C9:19:DD:A8:B3:BD:C0:BD:CC:47:5D:3F:CF:A9:09:D1:F8:FA Authority key identifier: 41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF Certificate issuer: /CN=41820333252DF92B1DBA238F558CC8D822C768EF Certificate serial: 67F371FC7493C5C896DE5C1F653B823790388DA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft Manifest number: 01EF Signing time: Sun 01 Mar 2026 10:41:21 +0000 Manifest this update: Sun 01 Mar 2026 10:36:21 +0000 Manifest next update: Wed 04 Mar 2026 17:32:21 +0000 Files and hashes: 1: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (hash: uQsxGbefiEsVtpCcyhbMnpmwezO+DzoY1mF96tzo5Pg=) 2: 41820333252DF92B1DBA238F558CC8D822C768EF.crl (hash: PQDp1Wxzg7K0d1p0t1RRAGfb3y7ocf9jeuy1E1/+r9s=) 3: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (hash: RVo6qspo0NsN9BxZrHPSAeKSfxIe7qLdXa5VG0+wvkA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f3:71:fc:74:93:c5:c8:96:de:5c:1f:65:3b:82:37:90:38:8d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41820333252DF92B1DBA238F558CC8D822C768EF Validity Not Before: Mar 1 10:36:21 2026 GMT Not After : Mar 4 17:32:21 2026 GMT Subject: CN=A1A7C919DDA8B3BDC0BDCC475D3FCFA909D1F8FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:8f:4a:ab:5d:2e:df:00:6b:13:cd:55:03: 66:62:77:08:bd:f2:34:90:36:56:45:58:e8:8b:74: ba:63:a2:ce:10:e8:f0:78:8d:47:52:79:21:d7:f0: ed:c7:e2:28:4b:ae:b4:22:e5:1f:7d:cf:fa:b3:a7: df:b9:82:b8:57:5c:84:d0:e1:bb:82:49:0e:ce:3d: 0b:c4:bb:47:1a:ec:21:9c:e4:46:be:17:b2:f3:fa: ab:9a:9b:b1:18:cc:63:9b:31:0b:d9:3a:09:2c:2e: e6:65:8b:c5:86:17:51:5e:f0:08:6d:d4:e7:5c:c2: 43:10:4a:1a:50:bb:d3:9c:ab:65:d3:ce:df:0d:cf: 4c:f7:6e:44:6e:e7:5c:2d:5d:f8:0c:24:e2:6a:fc: 81:20:25:a2:f8:13:e3:b5:65:b5:75:df:4d:3d:09: 84:a3:9b:79:39:11:90:16:8f:74:a9:6e:75:c0:a3: cf:e0:32:37:60:96:6c:45:7b:ad:2f:17:af:0b:82: b4:84:d4:88:7b:ce:37:1a:d0:60:1c:44:39:ec:e4: a3:17:5e:b1:e7:e2:cb:74:7e:be:0b:eb:94:b8:8f: 83:3f:1d:32:d0:a0:ea:aa:eb:7a:dc:e4:bf:c8:6c: fb:00:c8:94:9a:6f:29:09:de:b7:2c:2c:32:fe:cd: 70:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A7:C9:19:DD:A8:B3:BD:C0:BD:CC:47:5D:3F:CF:A9:09:D1:F8:FA X509v3 Authority Key Identifier: keyid:41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:94:0e:25:d6:68:aa:0e:56:47:a4:fc:17:53:9d:39:22:22: fd:e2:0d:8a:43:15:e7:d1:21:9f:db:65:0a:f3:55:8b:72:af: da:27:c1:d6:df:6e:09:cd:e2:3f:ff:f2:29:b8:97:88:96:73: a2:fe:30:49:cc:a8:f2:af:1b:d6:51:c1:19:65:a0:bc:bb:c1: 55:a6:03:8a:35:ab:4d:ca:fd:e8:dd:cc:f8:1f:55:57:e8:3a: a8:c9:e6:bc:3d:b6:95:f6:29:31:1a:43:33:cb:46:f1:a4:19: 0d:70:5e:a6:90:ba:58:24:d3:d6:f7:44:c1:c5:6a:8a:ad:75: 2b:09:55:5b:8a:e2:b6:86:c7:75:14:a3:80:62:88:7b:69:91: 64:d3:0d:cb:37:bb:a0:5f:67:f5:cd:30:9b:25:74:20:f7:61: d6:10:02:b7:2b:65:9f:5e:ce:67:fc:a1:67:c0:56:5e:1d:ac: 14:c0:6e:11:b0:34:ed:b0:51:06:87:0c:45:bd:29:3d:66:ec: 4d:86:07:05:36:61:8b:50:c7:37:fc:56:9a:4d:a1:74:75:f2: bb:53:5f:69:a6:cb:0e:9b:b9:04:50:c2:d3:b4:b4:ed:cc:b2: c9:5c:59:30:c3:eb:85:0a:cf:07:b5:72:97:e8:5a:4a:ed:57: d5:13:5c:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/Nx/HSTxciW3lwfZTuCN5A4jaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE4MjAzMzMyNTJERjkyQjFEQkEyMzhGNTU4Q0M4RDgy MkM3NjhFRjAeFw0yNjAzMDExMDM2MjFaFw0yNjAzMDQxNzMyMjFaMDMxMTAvBgNV BAMTKEExQTdDOTE5RERBOEIzQkRDMEJEQ0M0NzVEM0ZDRkE5MDlEMUY4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQo9Kq10u3wBrE81VA2Zidwi9 8jSQNlZFWOiLdLpjos4Q6PB4jUdSeSHX8O3H4ihLrrQi5R99z/qzp9+5grhXXITQ 4buCSQ7OPQvEu0ca7CGc5Ea+F7Lz+quam7EYzGObMQvZOgksLuZli8WGF1Fe8Aht 1OdcwkMQShpQu9Ocq2XTzt8Nz0z3bkRu51wtXfgMJOJq/IEgJaL4E+O1ZbV13009 CYSjm3k5EZAWj3SpbnXAo8/gMjdglmxFe60vF68LgrSE1Ih7zjca0GAcRDns5KMX XrHn4st0fr4L65S4j4M/HTLQoOqq63rc5L/IbPsAyJSabykJ3rcsLDL+zXB1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoafJGd2os73AvcxHXT/PqQnR+PowHwYDVR0j BBgwFoAUQYIDMyUt+SsduiOPVYzI2CLHaO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NTk3MWFlOS01Y2RkLTRkNDEtYjYyYS01YzI4NGFhODA5OGUvMC80MTgyMDMzMzI1 MkRGOTJCMURCQTIzOEY1NThDQzhEODIyQzc2OEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE4MjAzMzMyNTJERjkyQjFEQkEyMzhGNTU4Q0M4RDgyMkM3 NjhFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODU5NzFhZTktNWNkZC00ZDQxLWI2 MmEtNWMyODRhYTgwOThlLzAvNDE4MjAzMzMyNTJERjkyQjFEQkEyMzhGNTU4Q0M4 RDgyMkM3NjhFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGUDiXWaKoOVkek/BdTnTkiIv3iDYpDFefR IZ/bZQrzVYtyr9onwdbfbgnN4j//8im4l4iWc6L+MEnMqPKvG9ZRwRlloLy7wVWm A4o1q03K/ejdzPgfVVfoOqjJ5rw9tpX2KTEaQzPLRvGkGQ1wXqaQulgk09b3RMHF aoqtdSsJVVuK4raGx3UUo4BiiHtpkWTTDcs3u6BfZ/XNMJsldCD3YdYQArcrZZ9e zmf8oWfAVl4drBTAbhGwNO2wUQaHDEW9KT1m7E2GBwU2YYtQxzf8VppNoXR18rtT X2mmyw6buQRQwtO0tO3MsslcWTDD64UKzwe1cpfoWkrtV9UTXG0= -----END CERTIFICATE-----Generated at Mon Mar 2 10:01:56 2026 by rpki-client