$ rpki-client -vvf repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft File: 42CB30013F9704EFBDCF784FCD60289C7620A373.mft (raw, json) Hash identifier: bWenMJU4/GkNS76LzXZAsTjAX+WrlA7cLCP2LKuzypU= Subject key identifier: F2:A4:89:AC:B4:B8:F4:C9:EE:DC:F2:9A:EE:44:C0:A6:48:18:64:8A Authority key identifier: 42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 Certificate issuer: /CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Certificate serial: 69EF1DE829D43880EBE1EF09C7F3F8DB73A9418E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft Manifest number: 03CB Signing time: Sun 01 Mar 2026 10:21:18 +0000 Manifest this update: Sun 01 Mar 2026 10:16:18 +0000 Manifest next update: Wed 04 Mar 2026 11:29:18 +0000 Files and hashes: 1: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: PLelRX92KnqBZTiq93z7FJFIC0ok4NpLF8ErJ3rGKfw=) 2: 42CB30013F9704EFBDCF784FCD60289C7620A373.crl (hash: k9FVFgJ9CgH2Qj3Mr5TLRqUaUW3uVULz7xaHzDBHI8I=) 3: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: tZygjXNqZieNjL+HqAvvCVSbJQiTp3/pMsS78j175rQ=) 4: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: hMyDLqAom528DiTqwsKMUbv/O7C6Y2ZAhArZmLvzcpE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ef:1d:e8:29:d4:38:80:eb:e1:ef:09:c7:f3:f8:db:73:a9:41:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Validity Not Before: Mar 1 10:16:18 2026 GMT Not After : Mar 4 11:29:18 2026 GMT Subject: CN=F2A489ACB4B8F4C9EEDCF29AEE44C0A64818648A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:61:f7:90:2d:55:37:70:fa:c8:a9:93:0b:a0: 70:21:29:be:ac:f0:18:32:41:0c:0a:d1:e8:75:84: 4d:ff:c0:3b:62:06:be:b4:9a:e9:c8:61:86:87:8d: ac:6d:aa:13:14:92:bf:83:83:ad:ae:d9:9a:62:85: 32:b8:4f:1e:3d:34:99:6f:ce:ec:42:c4:cb:08:e6: c1:8f:04:81:d4:2b:55:33:d5:12:7b:25:6d:ba:df: 9c:c9:5e:f1:ec:e7:a5:19:e6:8f:53:d2:c3:d3:1c: 90:d0:62:65:1c:43:2b:16:00:44:be:e0:a9:d5:71: 47:f7:5a:9e:7c:d8:73:82:82:5a:24:5b:fe:05:b1: e8:1f:9f:85:30:bc:a6:39:57:6d:ea:b6:18:bc:4d: a2:b2:bb:55:fd:7a:52:e1:3b:03:7e:b7:47:3a:ca: 02:21:44:37:7d:83:2d:83:9a:63:e9:c1:a5:cb:6c: cb:4f:d0:f1:c0:03:7c:be:fe:30:bc:68:1b:b7:2e: 23:44:3c:a3:76:9d:84:55:ea:af:c8:7a:13:27:4e: 3e:db:0d:b9:09:1d:3e:39:52:4d:2b:53:41:d9:03: c8:67:d3:a2:6a:59:ab:8c:6e:62:5a:b8:28:96:8b: c5:16:99:0c:60:30:5b:fd:14:e0:e4:14:1b:f0:f2: ad:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A4:89:AC:B4:B8:F4:C9:EE:DC:F2:9A:EE:44:C0:A6:48:18:64:8A X509v3 Authority Key Identifier: keyid:42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:1c:be:33:40:52:b1:89:fa:6c:44:4a:f5:41:db:e7:d2:9e: 0d:aa:f7:bd:09:f5:2c:46:ba:2b:52:43:11:54:6d:65:60:c8: a9:04:15:60:65:49:49:b0:c4:6e:bf:35:32:1f:7f:b4:38:89: 9c:88:95:9d:94:7e:c9:2e:b9:03:19:cc:b4:29:22:a0:09:f8: e3:72:1d:85:d5:81:bd:04:20:ea:34:a1:b3:f8:df:aa:fc:a5: 2d:f2:a9:46:88:d7:ef:3e:b5:21:4b:93:fe:91:4a:6f:01:95: dc:0e:bb:4b:ff:2f:cb:85:bf:17:96:81:5c:f5:74:83:b3:50: 48:4e:ff:88:b5:a7:b7:d0:d6:ed:6b:d4:f1:b0:13:f2:ac:75: bb:32:d0:2f:49:a1:73:11:26:b1:bc:3c:c6:a0:09:70:92:d0: 03:b1:d9:21:17:4a:77:98:d5:52:14:89:61:8e:ec:b3:b6:94: 70:ca:3a:55:4c:2a:eb:e7:90:9b:98:9d:ac:cb:bd:94:69:b5: 86:ca:db:ba:40:74:0a:a6:c9:9b:26:a4:f2:cc:26:ce:a9:e5: 72:45:86:e4:8e:92:73:c7:4d:0a:7c:21:d5:55:7e:1d:95:8c: d8:d9:73:3e:9f:95:ee:b4:2b:22:ca:2f:70:93:3f:8c:0c:fd: e4:ab:09:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUae8d6CnUOIDr4e8Jx/P423OpQY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3 NjIwQTM3MzAeFw0yNjAzMDExMDE2MThaFw0yNjAzMDQxMTI5MThaMDMxMTAvBgNV BAMTKEYyQTQ4OUFDQjRCOEY0QzlFRURDRjI5QUVFNDRDMEE2NDgxODY0OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDYfeQLVU3cPrIqZMLoHAhKb6s 8BgyQQwK0eh1hE3/wDtiBr60munIYYaHjaxtqhMUkr+Dg62u2ZpihTK4Tx49NJlv zuxCxMsI5sGPBIHUK1Uz1RJ7JW2635zJXvHs56UZ5o9T0sPTHJDQYmUcQysWAES+ 4KnVcUf3Wp582HOCglokW/4Fsegfn4UwvKY5V23qthi8TaKyu1X9elLhOwN+t0c6 ygIhRDd9gy2DmmPpwaXLbMtP0PHAA3y+/jC8aBu3LiNEPKN2nYRV6q/IehMnTj7b DbkJHT45Uk0rU0HZA8hn06JqWauMbmJauCiWi8UWmQxgMFv9FODkFBvw8q1fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8qSJrLS49Mnu3PKa7kTApkgYZIowHwYDVR0j BBgwFoAUQsswAT+XBO+9z3hPzWAonHYgo3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTAwM2Q2Yy05NWYxLTQ3YTQtOWQ1ZC1mN2I0OGNhYWE3ZjQvMC80MkNCMzAwMTNG OTcwNEVGQkRDRjc4NEZDRDYwMjg5Qzc2MjBBMzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3NjIw QTM3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4 OUM3NjIwQTM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYcvjNAUrGJ+mxESvVB2+fSng2q970J9SxG uitSQxFUbWVgyKkEFWBlSUmwxG6/NTIff7Q4iZyIlZ2UfskuuQMZzLQpIqAJ+ONy HYXVgb0EIOo0obP436r8pS3yqUaI1+8+tSFLk/6RSm8BldwOu0v/L8uFvxeWgVz1 dIOzUEhO/4i1p7fQ1u1r1PGwE/Ksdbsy0C9JoXMRJrG8PMagCXCS0AOx2SEXSneY 1VIUiWGO7LO2lHDKOlVMKuvnkJuYnazLvZRptYbK27pAdAqmyZsmpPLMJs6p5XJF huSOknPHTQp8IdVVfh2VjNjZcz6fle60KyLKL3CTP4wM/eSrCZ8= -----END CERTIFICATE-----Generated at Mon Mar 2 16:31:52 2026 by rpki-client