$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft File: 42467B1885830A9908EAE67935311639B090AA77.mft (raw, json) Hash identifier: iUFW4e7fZX3Zha+1VqJwgp7Qc/z/y8Kp9gjkW5S1/4s= Subject key identifier: 7A:6D:F3:05:13:BA:B2:C2:15:31:DC:97:90:13:E8:55:C4:05:8A:37 Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 Certificate issuer: /CN=42467B1885830A9908EAE67935311639B090AA77 Certificate serial: 7CB1AB67E81DA2F92697B1A6FDD00F79493EF9AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft Manifest number: 0188 Signing time: Sat 28 Feb 2026 22:01:54 +0000 Manifest this update: Sat 28 Feb 2026 21:56:54 +0000 Manifest next update: Wed 04 Mar 2026 00:09:54 +0000 Files and hashes: 1: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: ZWtRALMquKEFwYIWcUiF1poTwDnT8MPEPPx4FTc8PK0=) 2: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: DxKIyMO6WjD2qxH8BuKIvj+fKDvOwuaoHadDVnwc7A0=) 3: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: 3aVMhDduBFna4RKGejX/hPHloxIZcebZYuXr7SJbrkQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b1:ab:67:e8:1d:a2:f9:26:97:b1:a6:fd:d0:0f:79:49:3e:f9:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42467B1885830A9908EAE67935311639B090AA77 Validity Not Before: Feb 28 21:56:54 2026 GMT Not After : Mar 4 00:09:54 2026 GMT Subject: CN=7A6DF30513BAB2C21531DC979013E855C4058A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:63:e0:b3:04:fa:71:b0:6f:05:74:f4:bf:57: 7e:b6:ff:63:cd:7f:41:f8:6b:02:28:c7:58:9a:1e: 43:b2:c0:a0:d2:25:8f:15:09:4a:56:c0:81:78:e1: 74:d9:bb:45:92:9f:6d:71:ea:a1:3a:3c:59:12:c2: 70:e0:2b:ba:ed:5e:fa:3e:81:1d:e2:25:04:5a:d0: ae:84:1b:6e:be:02:81:33:47:11:3a:be:40:7f:fe: 35:ba:7d:82:9b:56:2d:21:27:65:58:95:39:57:4a: 0a:50:87:11:c8:b7:7d:34:51:ca:af:ee:a3:eb:fb: 57:95:18:41:f4:a4:9f:14:f5:e3:c7:74:7c:c0:1d: 71:34:b2:5a:37:08:09:1d:38:85:ca:d5:af:b8:45: f1:46:0c:b6:af:fe:23:94:b5:79:e9:7e:c7:2f:f1: 52:0f:0c:bf:d7:0d:17:74:d0:6b:a1:2c:73:a2:ed: 06:12:53:04:2b:9a:77:d7:17:5a:e2:2f:3f:34:c1: 46:8c:01:50:01:c5:66:38:7e:49:76:25:47:f8:78: 6f:b1:df:8e:4e:8e:53:82:b9:93:a8:07:1f:50:74: ca:b1:2d:7a:72:f5:02:ae:6e:74:e3:ae:bc:49:cf: ae:cc:fc:93:29:f2:d2:be:87:4c:58:10:f6:47:f2: 53:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6D:F3:05:13:BA:B2:C2:15:31:DC:97:90:13:E8:55:C4:05:8A:37 X509v3 Authority Key Identifier: keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ec:ee:b8:29:60:54:e1:39:50:b6:8f:8e:fe:e3:e2:66:06: 4b:6c:8c:20:de:77:68:d9:3e:bd:54:fa:18:dd:af:bf:d1:2f: e7:13:d4:7d:fc:23:27:ea:38:fd:07:ed:50:8a:12:b5:58:84: d8:e3:e2:f9:f2:3a:7b:01:82:d3:fa:e8:f3:a8:90:a2:d4:50: 68:b8:a0:bc:53:a5:04:37:b5:81:9e:c6:31:08:57:e4:0d:c5: 96:cc:47:33:b4:76:1d:94:ef:de:4c:f4:55:eb:8f:d5:8b:84: c0:aa:61:9c:2c:fc:58:64:0b:73:38:8c:8e:6e:f4:0d:70:2b: fd:a5:91:d4:d8:8f:e0:25:21:c0:fa:25:11:7e:64:44:b7:11: 05:e4:af:5e:b1:d2:e9:79:36:26:9c:3e:71:cd:47:de:f3:6f: b4:0f:01:d9:a2:55:47:f4:37:27:65:6d:99:41:fe:95:da:54: 38:65:88:1a:f3:6b:b2:9b:3a:81:ff:4f:88:5b:29:6e:72:d5: e0:9d:64:00:23:17:61:b7:d9:aa:50:f0:d0:1b:c5:75:09:b6: b9:39:d6:54:26:0f:63:78:f5:f4:8f:a6:e3:a0:32:5f:22:ba: a4:a7:b2:9c:4a:0c:61:ac:10:47:44:93:b8:b8:68:df:c0:43: 99:60:fa:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfLGrZ+gdovkml7Gm/dAPeUk++aswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlC MDkwQUE3NzAeFw0yNjAyMjgyMTU2NTRaFw0yNjAzMDQwMDA5NTRaMDMxMTAvBgNV BAMTKDdBNkRGMzA1MTNCQUIyQzIxNTMxREM5NzkwMTNFODU1QzQwNThBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrY+CzBPpxsG8FdPS/V362/2PN f0H4awIox1iaHkOywKDSJY8VCUpWwIF44XTZu0WSn21x6qE6PFkSwnDgK7rtXvo+ gR3iJQRa0K6EG26+AoEzRxE6vkB//jW6fYKbVi0hJ2VYlTlXSgpQhxHIt300Ucqv 7qPr+1eVGEH0pJ8U9ePHdHzAHXE0slo3CAkdOIXK1a+4RfFGDLav/iOUtXnpfscv 8VIPDL/XDRd00GuhLHOi7QYSUwQrmnfXF1riLz80wUaMAVABxWY4fkl2JUf4eG+x 345OjlOCuZOoBx9QdMqxLXpy9QKubnTjrrxJz67M/JMp8tK+h0xYEPZH8lMFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUem3zBRO6ssIVMdyXkBPoVcQFijcwHwYDVR0j BBgwFoAUQkZ7GIWDCpkI6uZ5NTEWObCQqncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWUyMDg4YS1jOWZmLTRkODQtYmU0ZS0xNDFkNWI4MGI1NDMvMC80MjQ2N0IxODg1 ODMwQTk5MDhFQUU2NzkzNTMxMTYzOUIwOTBBQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlCMDkw QUE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl NGUtMTQxZDViODBiNTQzLzAvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2 MzlCMDkwQUE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/s7rgpYFThOVC2j47+4+JmBktsjCDed2jZ Pr1U+hjdr7/RL+cT1H38IyfqOP0H7VCKErVYhNjj4vnyOnsBgtP66POokKLUUGi4 oLxTpQQ3tYGexjEIV+QNxZbMRzO0dh2U795M9FXrj9WLhMCqYZws/FhkC3M4jI5u 9A1wK/2lkdTYj+AlIcD6JRF+ZES3EQXkr16x0ul5NiacPnHNR97zb7QPAdmiVUf0 NydlbZlB/pXaVDhliBrza7KbOoH/T4hbKW5y1eCdZAAjF2G32apQ8NAbxXUJtrk5 1lQmD2N49fSPpuOgMl8iuqSnspxKDGGsEEdEk7i4aN/AQ5lg+u4= -----END CERTIFICATE-----Generated at Mon Mar 2 13:32:41 2026 by rpki-client