$ rpki-client -vvf repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft File: E42B0752D5FFAB254C3F0E221499F67420870FEB.mft (raw, json) Hash identifier: /+6xTMcKYrYUpE1JRPZsDOKQxN3FHw7GFPfkEa4dRN0= Subject key identifier: 9C:CB:B1:E3:3D:65:DE:88:3C:AA:43:E5:0F:DA:8C:3A:91:1D:F0:10 Authority key identifier: E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB Certificate issuer: /CN=E42B0752D5FFAB254C3F0E221499F67420870FEB Certificate serial: 20FD885B4FE5E774E620EDB629FFCDA86F6F05DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft Manifest number: 04D9 Signing time: Sun 01 Mar 2026 14:01:23 +0000 Manifest this update: Sun 01 Mar 2026 13:56:23 +0000 Manifest next update: Wed 04 Mar 2026 20:53:23 +0000 Files and hashes: 1: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: KXkQEzDE7eAOGwkwjqYSUBJ2gO8yBncemPnpiy3ztzA=) 2: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: U5G6WyuhUeeAyAkhv6VtLWLCxLc3eTUGqsMy7Fb3zes=) 3: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: TiBDscIwDM8LXa+oZsdSozLCIgCynFE1SJZ86LD1GBs=) 4: E42B0752D5FFAB254C3F0E221499F67420870FEB.crl (hash: 0+Q44A4pWL0lIMQb/lGf3sl/1dFAFNopBVQEtKZLHRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:fd:88:5b:4f:e5:e7:74:e6:20:ed:b6:29:ff:cd:a8:6f:6f:05:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E42B0752D5FFAB254C3F0E221499F67420870FEB Validity Not Before: Mar 1 13:56:23 2026 GMT Not After : Mar 4 20:53:23 2026 GMT Subject: CN=9CCBB1E33D65DE883CAA43E50FDA8C3A911DF010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:ba:6b:ba:cb:ad:dc:00:55:c2:46:8e:95: f3:57:60:c4:90:03:cf:cc:be:c8:c0:92:73:ae:8e: 7b:67:02:bc:14:1f:87:a3:51:de:85:ec:16:02:c5: be:01:77:d8:f2:12:a4:2e:12:a0:ff:2d:47:ef:61: ec:69:3d:2a:cb:05:91:45:b9:3c:30:5c:9f:5c:f5: 16:00:d8:54:ae:e8:07:e5:12:e7:50:b9:e2:c5:8b: ae:b6:cb:26:ff:8b:b6:1b:d5:85:ac:cb:ac:02:c4: 89:57:45:d8:5b:cd:f3:40:26:e6:e3:ab:f8:3c:91: 2e:26:8e:ca:4e:dd:e5:77:13:80:d0:f2:d5:f1:89: a0:9a:de:b2:3a:56:d6:1e:b8:8f:db:4c:26:d4:e3: 1e:6f:25:2e:6b:d8:51:3c:59:70:2d:2e:58:d2:ec: 08:f5:07:05:58:ff:9f:29:1a:a2:b3:2e:15:ec:c2: 19:90:15:07:9d:98:ed:da:ba:4b:0c:18:e5:a7:e7: b9:2f:72:00:52:1e:21:e4:2b:51:c0:5c:ca:42:e1: 0a:2f:de:19:7f:e9:bc:30:89:14:79:cf:9e:73:74: cb:bc:f8:d8:b4:76:96:3e:ba:be:d1:d4:8f:78:ae: 18:27:36:de:d1:c5:4e:d6:db:4a:b2:72:0b:d9:21: 5c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CB:B1:E3:3D:65:DE:88:3C:AA:43:E5:0F:DA:8C:3A:91:1D:F0:10 X509v3 Authority Key Identifier: keyid:E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:93:d9:f8:92:6f:18:54:90:18:5f:7e:62:6f:d4:b9:a3:87: a8:ea:36:c1:aa:6b:db:a7:ae:88:76:18:9c:fb:77:60:a7:bc: 04:47:7a:81:6e:b8:06:32:f2:dd:c8:21:e7:0c:6a:9e:bf:81: b5:30:b2:a4:f2:ff:da:c4:4d:5c:7a:e7:a6:19:2a:d7:c6:ac: 35:e8:60:6a:51:55:a1:9f:cf:fc:d1:49:9e:5d:42:da:15:8e: e7:77:f8:21:f3:da:e7:15:47:71:50:aa:2b:ff:18:18:a0:7c: 18:47:35:b2:d3:7e:5d:f3:2a:36:fb:f6:8e:83:6c:c9:99:d7: 7d:d6:1e:ee:fb:8b:d8:5b:17:cd:a0:0c:af:6e:e3:8b:18:35: e0:96:ff:72:6d:f5:d7:f6:31:d0:ce:db:89:66:96:d6:5b:a7: d2:01:f9:d7:37:58:ac:a3:c3:8e:d4:ab:d9:1f:c3:11:6d:f1: e6:fa:43:5f:42:1f:3e:4d:76:42:06:40:33:70:d0:9c:04:b7: b5:79:38:e5:a2:47:d4:28:4e:7f:4d:b6:d7:ba:8c:11:9f:4c: de:4e:a9:d7:1c:2b:37:f6:30:52:72:35:ed:3d:c9:14:6e:40: 2e:f0:92:10:bc:d3:db:a2:63:03:69:5a:25:3a:2f:01:a7:20: 09:49:7e:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIP2IW0/l53TmIO22Kf/NqG9vBd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQy MDg3MEZFQjAeFw0yNjAzMDExMzU2MjNaFw0yNjAzMDQyMDUzMjNaMDMxMTAvBgNV BAMTKDlDQ0JCMUUzM0Q2NURFODgzQ0FBNDNFNTBGREE4QzNBOTExREYwMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4w7prusut3ABVwkaOlfNXYMSQ A8/MvsjAknOujntnArwUH4ejUd6F7BYCxb4Bd9jyEqQuEqD/LUfvYexpPSrLBZFF uTwwXJ9c9RYA2FSu6AflEudQueLFi662yyb/i7Yb1YWsy6wCxIlXRdhbzfNAJubj q/g8kS4mjspO3eV3E4DQ8tXxiaCa3rI6VtYeuI/bTCbU4x5vJS5r2FE8WXAtLljS 7Aj1BwVY/58pGqKzLhXswhmQFQedmO3auksMGOWn57kvcgBSHiHkK1HAXMpC4Qov 3hl/6bwwiRR5z55zdMu8+Ni0dpY+ur7R1I94rhgnNt7RxU7W20qycgvZIVz5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnMux4z1l3og8qkPlD9qMOpEd8BAwHwYDVR0j BBgwFoAU5CsHUtX/qyVMPw4iFJn2dCCHD+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzUxMjllNC0yMzI4LTQzZDItYTQ1OC05ZDM4Mjk2MTQ4MTUvMC9FNDJCMDc1MkQ1 RkZBQjI1NEMzRjBFMjIxNDk5RjY3NDIwODcwRkVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQyMDg3 MEZFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM1MTI5ZTQtMjMyOC00M2QyLWE0 NTgtOWQzODI5NjE0ODE1LzAvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2 NzQyMDg3MEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyT2fiSbxhUkBhffmJv1Lmjh6jqNsGqa9un roh2GJz7d2CnvARHeoFuuAYy8t3IIecMap6/gbUwsqTy/9rETVx656YZKtfGrDXo YGpRVaGfz/zRSZ5dQtoVjud3+CHz2ucVR3FQqiv/GBigfBhHNbLTfl3zKjb79o6D bMmZ133WHu77i9hbF82gDK9u44sYNeCW/3Jt9df2MdDO24lmltZbp9IB+dc3WKyj w47Uq9kfwxFt8eb6Q19CHz5NdkIGQDNw0JwEt7V5OOWiR9QoTn9Ntte6jBGfTN5O qdccKzf2MFJyNe09yRRuQC7wkhC809uiYwNpWiU6LwGnIAlJfoU= -----END CERTIFICATE-----Generated at Mon Mar 2 15:39:17 2026 by rpki-client