$ rpki-client -vvf repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft File: 42CB30013F9704EFBDCF784FCD60289C7620A373.mft (raw, json) Hash identifier: ItiXQ1z4N+mwJQEva3RaLNg6XcJPWaf+9G1wegw+LaQ= Subject key identifier: D8:3B:AA:C4:6E:F0:1E:1A:3C:3E:7C:A4:05:23:C2:09:B2:AC:D8:8C Authority key identifier: 42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 Certificate issuer: /CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Certificate serial: 6EA896EC36FE6DA3D0BCB0BEBA582C3AC1436BEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft Manifest number: 03E1 Signing time: Fri 17 Apr 2026 08:02:36 +0000 Manifest this update: Fri 17 Apr 2026 07:57:36 +0000 Manifest next update: Mon 20 Apr 2026 17:58:36 +0000 Files and hashes: 1: 42CB30013F9704EFBDCF784FCD60289C7620A373.crl (hash: Z/TMOr0Q2tUJVGFyZDiFhDREP00evc3WHJ1eRFlHS7I=) 2: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: 8aR3sz5ao9x8srIIfDbOvigwX9Z+EpDkLEUEJhCZRRU=) 3: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: Xwns5Ogpfyb6PVc5ICTvXYVnJhIy9x8E6M2bieEhjv0=) 4: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: MCsJamis6iOXm6hLXc7OaIE2GZNYqTtsiTRjdaXwpbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a8:96:ec:36:fe:6d:a3:d0:bc:b0:be:ba:58:2c:3a:c1:43:6b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Validity Not Before: Apr 17 07:57:36 2026 GMT Not After : Apr 20 17:58:36 2026 GMT Subject: CN=D83BAAC46EF01E1A3C3E7CA40523C209B2ACD88C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9e:dc:fb:94:fd:8b:ee:b4:a4:d9:50:9f:4d: 6d:7c:fc:79:4e:f4:b3:e6:f9:f4:53:be:36:7d:8c: c7:1e:73:36:84:a4:3e:9b:b2:56:8f:fb:e8:32:f6: c5:94:02:07:72:2f:49:a6:94:0b:13:05:67:ae:07: a2:19:ee:6f:fe:82:76:4b:67:58:0c:18:5c:51:5c: 50:bd:ad:c2:5e:fb:08:b3:dc:9f:6e:b2:ab:d2:a9: 8b:64:d9:a8:ec:58:ae:f5:8b:55:ba:14:7e:78:fb: 9e:fa:ee:e7:99:40:d7:6d:e1:70:a4:7c:fb:9e:47: 2c:62:45:a6:d9:a1:91:0c:7c:b1:7b:8e:85:bb:1d: 30:2d:b7:56:82:a0:c4:d3:bb:30:22:5b:8b:68:29: a8:66:28:64:c9:2e:21:e3:16:bc:45:6b:86:d3:95: 85:ac:92:99:09:fb:5c:db:2c:4d:73:95:68:0d:ec: 90:07:09:71:0b:d4:76:e1:3e:21:08:1c:c5:a9:89: c2:13:84:e3:57:d0:6e:a2:19:9b:d7:a1:eb:6a:17: c9:e2:5c:08:0b:11:5c:04:cc:0e:a8:eb:b5:8c:f5: b9:c2:5f:fe:1f:ed:db:5d:11:1f:be:fa:04:0c:7c: 2c:02:0a:37:46:e6:51:88:39:2a:fd:ff:5b:64:8e: 9f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3B:AA:C4:6E:F0:1E:1A:3C:3E:7C:A4:05:23:C2:09:B2:AC:D8:8C X509v3 Authority Key Identifier: keyid:42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:da:bb:ee:c7:cf:71:7d:a0:95:a7:2a:91:4e:d1:74:d9:1b: 3f:c8:24:b6:a7:4d:bc:52:7a:1f:53:79:e6:16:ea:d1:0b:9e: 54:00:94:3d:e1:9c:32:d3:72:ad:c1:ba:45:f4:83:56:c5:9f: d0:30:4c:1c:5d:cb:a6:a8:9a:f9:79:33:be:9c:6f:8b:54:3f: 50:68:5a:fb:03:03:8b:70:b1:15:76:c8:85:71:bb:f9:91:29: bc:4a:41:60:93:e7:92:ec:5b:62:fb:8f:ff:65:3d:7c:ed:1a: c0:5f:e7:ff:46:36:c9:39:ac:69:de:89:c5:33:c2:8c:3b:b5: e9:79:53:88:8d:4d:d1:83:32:10:30:c9:33:de:7e:f6:60:a1: 33:c2:d3:16:b9:46:e9:b8:e8:15:c6:ee:14:c8:48:68:3d:13: bc:46:97:a9:35:fa:89:b7:bf:0b:f2:c8:c6:95:3f:da:b6:88: 27:2f:86:cb:0e:7a:85:c9:c1:5a:f7:5d:2a:4b:36:b5:07:63: a4:d4:9b:1f:51:e5:1c:d1:1c:b7:aa:48:44:fa:c2:77:aa:0e: b4:8a:88:df:0d:d4:54:02:9e:6d:53:13:bd:fb:0e:4f:9c:1f: cf:13:0e:f6:89:96:77:79:bf:c9:00:f8:67:13:a7:01:e5:95: 45:e4:85:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbqiW7Db+baPQvLC+ulgsOsFDa+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3 NjIwQTM3MzAeFw0yNjA0MTcwNzU3MzZaFw0yNjA0MjAxNzU4MzZaMDMxMTAvBgNV BAMTKEQ4M0JBQUM0NkVGMDFFMUEzQzNFN0NBNDA1MjNDMjA5QjJBQ0Q4OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWntz7lP2L7rSk2VCfTW18/HlO 9LPm+fRTvjZ9jMceczaEpD6bslaP++gy9sWUAgdyL0mmlAsTBWeuB6IZ7m/+gnZL Z1gMGFxRXFC9rcJe+wiz3J9usqvSqYtk2ajsWK71i1W6FH54+5767ueZQNdt4XCk fPueRyxiRabZoZEMfLF7joW7HTAtt1aCoMTTuzAiW4toKahmKGTJLiHjFrxFa4bT lYWskpkJ+1zbLE1zlWgN7JAHCXEL1HbhPiEIHMWpicIThONX0G6iGZvXoetqF8ni XAgLEVwEzA6o67WM9bnCX/4f7dtdER+++gQMfCwCCjdG5lGIOSr9/1tkjp+vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2DuqxG7wHho8PnykBSPCCbKs2IwwHwYDVR0j BBgwFoAUQsswAT+XBO+9z3hPzWAonHYgo3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTAwM2Q2Yy05NWYxLTQ3YTQtOWQ1ZC1mN2I0OGNhYWE3ZjQvMC80MkNCMzAwMTNG OTcwNEVGQkRDRjc4NEZDRDYwMjg5Qzc2MjBBMzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3NjIw QTM3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4 OUM3NjIwQTM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvau+7Hz3F9oJWnKpFO0XTZGz/IJLanTbxS eh9TeeYW6tELnlQAlD3hnDLTcq3BukX0g1bFn9AwTBxdy6aomvl5M76cb4tUP1Bo WvsDA4twsRV2yIVxu/mRKbxKQWCT55LsW2L7j/9lPXztGsBf5/9GNsk5rGneicUz wow7tel5U4iNTdGDMhAwyTPefvZgoTPC0xa5Rum46BXG7hTISGg9E7xGl6k1+om3 vwvyyMaVP9q2iCcvhssOeoXJwVr3XSpLNrUHY6TUmx9R5RzRHLeqSET6wneqDrSK iN8N1FQCnm1TE737Dk+cH88TDvaJlnd5v8kA+GcTpwHllUXkhVo= -----END CERTIFICATE-----Generated at Fri Apr 17 18:31:17 2026 by rpki-client