$ rpki-client -vvf repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft File: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft (raw, json) Hash identifier: OKcqmTnX32WdfPyvQ4f8Ozcw8ep9ETNT7lsrKQLncxc= Subject key identifier: A1:40:85:DA:E1:16:F7:0B:CB:65:AE:65:37:A4:D1:56:B6:FA:2D:D0 Authority key identifier: 42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF Certificate issuer: /CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Certificate serial: 1DE9D86AA0EB2750EEB902DD5E47F5D77E443151 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft Manifest number: 01E7 Signing time: Sun 01 Mar 2026 01:01:22 +0000 Manifest this update: Sun 01 Mar 2026 00:56:22 +0000 Manifest next update: Wed 04 Mar 2026 11:50:22 +0000 Files and hashes: 1: 3130332e3134382e38362e302f32332d3234203d3e20313430343136.roa (hash: Im9caE29LrIEyyw1N4Depx5/vTj8Y8+2ed9BSKso6Pk=) 2: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl (hash: jSG5ogICxCGRZq22da/fYI/O/bp04sAZmCjPfWnyVzw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e9:d8:6a:a0:eb:27:50:ee:b9:02:dd:5e:47:f5:d7:7e:44:31:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Validity Not Before: Mar 1 00:56:22 2026 GMT Not After : Mar 4 11:50:22 2026 GMT Subject: CN=A14085DAE116F70BCB65AE6537A4D156B6FA2DD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:89:c3:d7:a1:62:d3:46:df:54:b1:a7:d4: cb:66:9c:f8:b9:5a:3e:e2:a6:08:8e:ba:08:3e:21: f9:ed:d9:22:3b:de:2b:49:02:35:c4:55:ec:a2:df: 19:69:cc:34:80:6d:1e:59:21:b5:9d:f0:4c:91:c9: 9d:52:86:1d:d1:6f:33:a4:f9:0e:7f:f6:e5:42:22: cc:64:42:92:7d:5d:aa:07:aa:5b:82:9c:68:c0:c3: 9e:3c:f3:88:b6:6b:ab:e5:c7:1a:fb:02:89:bf:07: fe:d8:2e:77:d5:48:e4:a0:66:d9:51:d2:df:53:93: 16:f5:27:54:22:87:00:37:f9:b9:89:36:78:a3:42: fa:b4:25:b1:a3:c7:dc:ef:7b:b2:23:6e:c7:32:38: 46:22:91:b4:b9:cf:85:ff:ae:07:8a:19:bc:fa:bc: e2:61:b6:c5:11:d6:d0:cf:e2:02:76:a6:52:0d:bc: 0c:98:d7:40:b0:59:bb:52:e6:26:dc:b9:bd:2c:df: e7:ad:69:f0:43:5d:75:64:83:12:b4:4d:29:e7:2b: 63:63:c9:bc:80:46:36:67:1f:54:29:e0:4b:b3:38: 1c:db:18:46:56:2c:8c:e5:60:15:65:cc:51:af:63: c2:10:28:7c:45:4c:9a:5a:69:c5:da:17:71:cb:cf: c1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:40:85:DA:E1:16:F7:0B:CB:65:AE:65:37:A4:D1:56:B6:FA:2D:D0 X509v3 Authority Key Identifier: keyid:42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:31:20:32:8e:53:07:8a:d2:8c:ac:c1:d5:ee:b7:6f:a4:7d: 6a:fb:7d:ab:10:38:e1:7c:8d:71:4a:3f:a1:97:ec:ec:f6:8e: cf:31:53:d0:b3:5b:8b:63:95:66:ce:40:cc:87:04:15:10:02: 4d:59:58:13:56:4b:04:d7:2e:e6:eb:3a:4b:c3:0b:8e:d8:54: 70:7c:87:6c:76:30:1c:30:53:ae:68:b0:de:d2:a5:ed:5f:fd: 7f:b7:f4:6b:a6:05:6d:36:b4:be:c9:85:a5:7d:07:20:fe:4c: 6a:cc:40:64:e3:ae:7c:77:8f:ca:2f:2f:13:a2:ca:1c:58:07: d1:23:95:b0:f1:25:45:40:85:00:12:53:05:31:5e:1f:3a:d0: 22:db:fc:c9:85:ca:59:7b:b9:e2:cf:a1:95:5f:5e:ff:cc:50: e3:b0:0f:d3:64:19:44:ec:57:e8:94:13:1b:11:62:ea:78:e0: b9:9a:a4:c0:2c:7d:47:80:70:48:9b:9a:44:ff:93:8e:82:f5: 63:2e:eb:57:cb:fc:ba:34:f3:ea:c6:77:6c:41:02:7a:02:dd: d3:c1:71:97:4c:bc:76:9f:19:66:29:dd:d8:93:73:11:a7:f0: 50:1d:35:b7:a9:39:24:f4:9f:59:f4:63:13:22:2a:b7:a4:d4: 9a:dd:d6:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHenYaqDrJ1DuuQLdXkf1135EMVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUz NkZCQjZBRjAeFw0yNjAzMDEwMDU2MjJaFw0yNjAzMDQxMTUwMjJaMDMxMTAvBgNV BAMTKEExNDA4NURBRTExNkY3MEJDQjY1QUU2NTM3QTREMTU2QjZGQTJERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11InD16Fi00bfVLGn1MtmnPi5 Wj7ipgiOugg+Ifnt2SI73itJAjXEVeyi3xlpzDSAbR5ZIbWd8EyRyZ1Shh3RbzOk +Q5/9uVCIsxkQpJ9XaoHqluCnGjAw54884i2a6vlxxr7Aom/B/7YLnfVSOSgZtlR 0t9Tkxb1J1QihwA3+bmJNnijQvq0JbGjx9zve7IjbscyOEYikbS5z4X/rgeKGbz6 vOJhtsUR1tDP4gJ2plINvAyY10CwWbtS5ibcub0s3+etafBDXXVkgxK0TSnnK2Nj ybyARjZnH1Qp4EuzOBzbGEZWLIzlYBVlzFGvY8IQKHxFTJpaacXaF3HLz8EzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoUCF2uEW9wvLZa5lN6TRVrb6LdAwHwYDVR0j BBgwFoAUQhmRaZRO0i0f6s/MQI+u5Tb7tq8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDE4ZGVhMi1hODkxLTQ5ZWYtYTA2Zi1mZTdmMmM4MzI1OGIvMC80MjE5OTE2OTk0 NEVEMjJEMUZFQUNGQ0M0MDhGQUVFNTM2RkJCNkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUzNkZC QjZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQxOGRlYTItYTg5MS00OWVmLWEw NmYtZmU3ZjJjODMyNThiLzAvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFF RTUzNkZCQjZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYxIDKOUweK0oyswdXut2+kfWr7fasQOOF8 jXFKP6GX7Oz2js8xU9CzW4tjlWbOQMyHBBUQAk1ZWBNWSwTXLubrOkvDC47YVHB8 h2x2MBwwU65osN7Spe1f/X+39GumBW02tL7JhaV9ByD+TGrMQGTjrnx3j8ovLxOi yhxYB9EjlbDxJUVAhQASUwUxXh860CLb/MmFyll7ueLPoZVfXv/MUOOwD9NkGUTs V+iUExsRYup44LmapMAsfUeAcEibmkT/k46C9WMu61fL/Lo08+rGd2xBAnoC3dPB cZdMvHafGWYp3diTcxGn8FAdNbepOST0n1n0YxMiKrek1Jrd1pE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:06:11 2026 by rpki-client