$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft File: 242C3836E42CEB6F48A0A20E144027DB2E93307A.mft (raw, json) Hash identifier: BeEg5lA55NvQ1iXCKSs6M40gdH2nmDuYylZdpZ9afXI= Subject key identifier: 02:DE:8E:B8:02:71:1F:F2:3F:6F:15:99:01:68:F9:5C:09:BD:E9:EE Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Certificate serial: 0E6C7A4DEF01C01155740F6718CC474DE45BCEC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft Manifest number: A6 Signing time: Sat 28 Feb 2026 12:51:01 +0000 Manifest this update: Sat 28 Feb 2026 12:46:01 +0000 Manifest next update: Tue 03 Mar 2026 21:12:01 +0000 Files and hashes: 1: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: sD1qHrh4KAHA7ZoVkGVUT23ArBwKJeS4vBzo7kZeF9k=) 2: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: F2Fq1JIaVx4Lm0Y6ySRa15KYpOzONwIDOWqD+ttq4p8=) 3: 242C3836E42CEB6F48A0A20E144027DB2E93307A.crl (hash: jGs+VZiGl4Ui1a62IGFJgu94CgXx5rD8bgj8uVzYTUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:6c:7a:4d:ef:01:c0:11:55:74:0f:67:18:cc:47:4d:e4:5b:ce:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Validity Not Before: Feb 28 12:46:01 2026 GMT Not After : Mar 3 21:12:01 2026 GMT Subject: CN=02DE8EB802711FF23F6F15990168F95C09BDE9EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:6a:89:41:3f:11:63:96:1c:8e:2f:df:46: 2c:16:f5:ff:49:a8:71:b9:a4:20:85:f1:29:17:1a: 5e:81:f0:51:f1:3a:27:67:f5:36:1c:6a:8d:e9:92: f4:b8:4f:18:54:17:2e:3a:fe:03:1e:2f:3f:34:5a: d8:18:25:25:d0:4b:f3:96:73:cd:8c:5c:55:a0:18: 11:19:0d:c1:a5:4c:f9:54:8b:6e:d1:3d:25:88:f9: 0a:41:71:59:98:55:45:35:af:3f:29:53:4d:d1:3e: 8d:91:e7:cf:18:82:52:83:2d:2e:a5:05:82:9c:c8: c7:a3:9b:f6:23:49:1c:9b:96:0e:54:8c:a1:80:27: 2f:9b:e8:41:c3:3d:e5:60:9e:f9:7a:1a:6b:a0:2a: 47:56:7e:7a:78:93:5c:bb:03:6e:55:42:ee:5c:08: 55:a0:e6:fc:a5:ab:7e:ce:69:1f:e6:9b:30:85:b0: a8:47:d0:3c:63:69:cc:f3:01:0d:03:8c:28:36:2e: 6f:ce:f2:74:34:e4:06:d0:76:75:5b:ab:a7:17:e3: b7:a2:4f:e8:d0:c2:77:c4:ff:5f:f5:b0:e3:bf:b7: 6b:80:08:30:40:10:fe:40:01:b7:ce:42:2c:6e:52: 96:45:7e:32:86:13:31:9f:34:e2:71:9e:7f:f2:ed: 12:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DE:8E:B8:02:71:1F:F2:3F:6F:15:99:01:68:F9:5C:09:BD:E9:EE X509v3 Authority Key Identifier: keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e0:7e:51:94:82:0e:f0:a3:59:22:ea:5c:11:2d:4a:b9:98: 9a:8f:e2:7c:12:3c:3c:2d:dc:f3:7c:27:01:31:47:16:47:f6: fe:5a:42:1b:dd:a6:fb:b9:9a:95:05:3b:06:ce:68:e2:08:8e: 8e:c5:30:a4:d1:53:b1:0b:3d:61:ea:66:8f:31:0f:ce:98:70: 7a:88:27:52:a2:f2:dc:ec:30:9b:d3:60:05:ba:25:d7:28:d0: a6:61:55:2a:1b:c5:58:86:88:72:42:d9:1f:6a:6c:6b:5b:2a: cb:48:ce:5f:56:ea:f8:96:c2:db:13:9a:17:ef:60:02:32:ee: e5:f8:3b:c5:09:d0:a7:42:63:d8:5e:6a:1a:00:10:7c:5f:c0: c4:45:f1:35:5e:97:17:a2:cc:e0:1b:a2:f8:d2:0e:ea:6d:37: 3a:6a:ca:25:7c:63:b9:c3:4c:4a:b4:1f:0d:fd:5e:0e:50:a5: 88:cd:64:cc:44:2a:da:63:b3:6c:d6:f1:9b:14:4e:19:53:20: 07:d8:9d:8d:68:0a:b9:bb:5a:7d:56:cd:1d:14:85:13:c9:72: 49:b5:27:17:3e:d4:39:4d:13:ab:e8:56:31:d5:61:a9:2b:e3: b8:88:c4:60:f3:c4:67:1e:dc:e0:bb:23:c6:bf:3f:38:78:9a: 42:1c:ad:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDmx6Te8BwBFVdA9nGMxHTeRbzsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIy RTkzMzA3QTAeFw0yNjAyMjgxMjQ2MDFaFw0yNjAzMDMyMTEyMDFaMDMxMTAvBgNV BAMTKDAyREU4RUI4MDI3MTFGRjIzRjZGMTU5OTAxNjhGOTVDMDlCREU5RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8fmqJQT8RY5Ycji/fRiwW9f9J qHG5pCCF8SkXGl6B8FHxOidn9TYcao3pkvS4TxhUFy46/gMeLz80WtgYJSXQS/OW c82MXFWgGBEZDcGlTPlUi27RPSWI+QpBcVmYVUU1rz8pU03RPo2R588YglKDLS6l BYKcyMejm/YjSRyblg5UjKGAJy+b6EHDPeVgnvl6GmugKkdWfnp4k1y7A25VQu5c CFWg5vylq37OaR/mmzCFsKhH0DxjaczzAQ0DjCg2Lm/O8nQ05AbQdnVbq6cX47ei T+jQwnfE/1/1sOO/t2uACDBAEP5AAbfOQixuUpZFfjKGEzGfNOJxnn/y7RKdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAt6OuAJxH/I/bxWZAWj5XAm96e4wHwYDVR0j BBgwFoAUJCw4NuQs629IoKIOFEAn2y6TMHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0Yi0xNzFmZjhkMWU1N2YvMC8yNDJDMzgzNkU0 MkNFQjZGNDhBMEEyMEUxNDQwMjdEQjJFOTMzMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIyRTkz MzA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3 REIyRTkzMzA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPgflGUgg7wo1ki6lwRLUq5mJqP4nwSPDwt 3PN8JwExRxZH9v5aQhvdpvu5mpUFOwbOaOIIjo7FMKTRU7ELPWHqZo8xD86YcHqI J1Ki8tzsMJvTYAW6Jdco0KZhVSobxViGiHJC2R9qbGtbKstIzl9W6viWwtsTmhfv YAIy7uX4O8UJ0KdCY9heahoAEHxfwMRF8TVelxeizOAbovjSDuptNzpqyiV8Y7nD TEq0Hw39Xg5QpYjNZMxEKtpjs2zW8ZsUThlTIAfYnY1oCrm7Wn1WzR0UhRPJckm1 Jxc+1DlNE6voVjHVYakr47iIxGDzxGce3OC7I8a/Pzh4mkIcrb8= -----END CERTIFICATE-----Generated at Mon Mar 2 04:14:33 2026 by rpki-client