$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft File: 42042E672B688C3072FD4743B3E7DD81EC7CA306.mft (raw, json) Hash identifier: 5iYEz5wbHXMPiMLVOtTr7gdmOeksTopFA5Tq7t2bKIM= Subject key identifier: 8E:14:42:86:A5:9A:3D:96:1E:6F:F3:09:9E:6F:CF:9A:C3:59:81:75 Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 Certificate issuer: /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Certificate serial: 3DA051BD67417B0114132E58A3D873A038627FA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft Manifest number: 03A9 Signing time: Sat 21 Mar 2026 02:10:49 +0000 Manifest this update: Sat 21 Mar 2026 02:05:49 +0000 Manifest next update: Tue 24 Mar 2026 12:24:49 +0000 Files and hashes: 1: 323030313a6436383a31333a3a2f34382d3438203d3e203338373539.roa (hash: fFkVLevboYrZm0ldmwFZBHRDjcsbCO8x/cTP2HxOjwo=) 2: 323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa (hash: BnGtn4VWnuPol8Hcuxr+9+BtpB9xmH5yyn9/+BeKN6Y=) 3: 323030313a6436383a313a3a2f34382d3438203d3e2037353837.roa (hash: 3O9Dun/SNBINZ3B9YhjfBGGqTvlmzFCIO86PaMzUieA=) 4: 3230322e3138302e31312e302f32342d3234203d3e203338373539.roa (hash: ieZuTIxFCE7GT48kZHlnhDRdoyyMo22tAQF2MzZLBUM=) 5: 323030313a6436383a3a2f34382d3438203d3e2037353837.roa (hash: VNcs+Fmh0oNgiWo/oCDkDKUsnCnybqve/EpfB0M2J0s=) 6: 323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa (hash: ghIreGGw1MSr8fVsMwycbTOs/dBctFRQZd0vQbqY1I0=) 7: 3230322e3138302e372e302f32342d3234203d3e203338373539.roa (hash: 5jpE9PaDWg32h1mep4+lRpd6+XHerxcnHEsnK1sv4vU=) 8: 323030313a6436383a373a3a2f34382d3438203d3e203338373539.roa (hash: muxJdFe2pixOmgM0+n/vOhMDRG8grm2Btn/Nr9wnHdc=) 9: 3230322e3138302e31322e302f32342d3234203d3e203338373539.roa (hash: 99pjiFxy6i9aAF5V+k03NOY+ffA/N57vuM+xXi4hwV0=) 10: 3230322e3138302e312e302f32342d3234203d3e2037353837.roa (hash: NbHhFmy5+M9dcxTboMeZja93XE4Bi3M8QPJR5OVXXh0=) 11: 3230322e3138302e382e302f32342d3234203d3e203338373539.roa (hash: 6gKMD4zRtDAlRcIkaIZo0T1mR3a0YZm8KjfJzM2lqqc=) 12: 323030313a6436383a3a2f33322d3332203d3e2037353837.roa (hash: 8fbkbe+zjfoqQaxLOTN723BKYFqkAiYSq9UlyPBgR3c=) 13: 3230322e3138302e302e302f32342d3234203d3e2037353837.roa (hash: cje0RNSx9P/cOPpCtYQDwkY1I+kc9+6oUoy5ingJOIs=) 14: 3230322e3138302e31332e302f32342d3234203d3e203338373539.roa (hash: 7wzHDGiNPdR1rFQHicraAxcZjQRCh3/Q5KM8DSR+Lzc=) 15: 323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa (hash: CpXbrXmGX4ITchWOi7/vrQ9BAy1FQYBh+LSYePLlGN8=) 16: 3230322e3138302e392e302f32342d3234203d3e203338373539.roa (hash: 0wFTN/XqtAoutydwqc+DafnIfaxz+FirKWo3fLraaUs=) 17: 3230322e3138302e31302e302f32342d3234203d3e203338373539.roa (hash: W3Rk8oMCIZrZG18jw5tK5o5kQjsEemd0y2JxL184dQU=) 18: 323030313a6436383a3a2f33322d3332203d3e203338373539.roa (hash: PrDMvAYB7DejmELDT18axQRCP8RdhUdpLoyo3trY+po=) 19: 323030313a6436383a31323a3a2f34382d3438203d3e203338373539.roa (hash: BqoEpAp2+UEuN6knkf0iHBFe+NlPdDdo1asiTk5cnH4=) 20: 3230322e3138302e31362e302f32302d3234203d3e203338373538.roa (hash: HtfoWX2moqZb8+kymM9PVl+dux6Wm9LUZexAAwCV9Wk=) 21: 42042E672B688C3072FD4743B3E7DD81EC7CA306.crl (hash: WXApTiXXR5JfRbT9xJzH+M4hT7m5gP40Oo65DuDe1d8=) 22: 323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa (hash: U1oEb+i6KKGi7dOnpejft8TEWnvu9mWUcqiHJxud3FE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Mar 2026 11:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a0:51:bd:67:41:7b:01:14:13:2e:58:a3:d8:73:a0:38:62:7f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Validity Not Before: Mar 21 02:05:49 2026 GMT Not After : Mar 24 12:24:49 2026 GMT Subject: CN=8E144286A59A3D961E6FF3099E6FCF9AC3598175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b2:6c:27:bc:41:cc:d8:e0:c0:fb:9b:2e:87: 7f:41:0a:07:f2:18:54:80:c5:cd:75:d5:5c:38:e4: da:0d:ad:82:e1:8d:8c:77:de:d1:6c:18:aa:e2:e2: 5b:47:c1:0a:f0:e5:4c:27:d8:89:11:c9:d2:87:6a: ca:c7:07:cd:e5:7a:f4:38:de:09:eb:37:e1:09:18: cb:f6:67:9a:ec:e7:3e:ef:d6:33:91:7c:37:84:83: a7:24:a0:aa:e5:f6:82:af:cd:3f:90:15:c1:ff:7e: 6d:5e:d8:64:49:c6:a4:1f:1a:2c:28:87:12:a7:37: 35:7d:5c:2d:88:ad:33:87:04:6d:fc:a2:53:67:56: 30:1c:ce:93:88:e8:b5:04:3e:17:bd:4a:b4:ac:95: 80:67:45:dd:5f:02:09:86:0e:82:61:3e:93:c5:60: a5:5f:51:f0:ef:ff:ff:ca:54:d7:c6:47:d5:43:86: e5:8e:8f:56:a9:bb:bf:93:c7:7d:e8:a9:e8:de:f7: 8b:ff:78:19:db:47:b1:d4:15:8e:49:c7:ed:77:c0: 3b:0a:4b:39:21:c0:bf:9b:1b:45:37:8e:1f:ec:94: 3c:3e:13:3e:e6:ef:67:52:a5:c4:d0:11:21:02:f5: 4a:26:3d:aa:2a:e8:2a:7d:59:56:cb:da:b2:b4:16: 51:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:14:42:86:A5:9A:3D:96:1E:6F:F3:09:9E:6F:CF:9A:C3:59:81:75 X509v3 Authority Key Identifier: keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:e7:a1:a0:f0:09:2a:10:11:27:46:ec:7e:2e:6c:ae:d9:e4: b8:de:37:71:ec:dd:00:f6:3c:6d:60:77:6b:4e:76:a8:c6:5a: b9:0f:69:6d:7e:06:da:a6:76:57:37:9a:89:01:8e:30:17:f6: b7:39:3a:af:f6:bc:22:b7:d7:28:43:a2:67:8c:08:ed:78:2b: 1d:0e:69:f2:1e:17:73:f4:8b:d1:da:3f:02:39:ab:73:16:6b: 23:be:2c:af:59:c4:6d:20:c3:c5:03:01:fa:78:34:3d:69:8e: 6b:fe:cc:cc:9c:a4:e6:66:a3:5f:08:a6:e6:9f:8a:8f:ed:ec: 6a:60:ec:3b:23:77:f0:74:7c:a7:bc:b5:e6:04:e8:d0:3b:39: 69:71:9a:89:5d:e1:91:a8:ea:52:0d:36:c1:c3:cd:03:76:a0: a7:4a:7f:cc:f3:04:6e:44:60:04:1a:5c:27:e9:db:66:cc:db: 41:dd:13:af:f4:47:5f:7b:98:f5:8e:be:62:a2:5d:db:fb:15: aa:1b:2e:0f:74:9a:6b:25:25:08:33:73:72:51:66:01:f9:9a: 2a:a5:da:7d:9e:ca:7a:7c:79:1c:25:e4:6e:ec:fd:56:e4:85: be:5f:f3:bf:73:28:74:4c:e4:f5:5e:a0:f6:82:31:50:49:cb: d0:77:de:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPaBRvWdBewEUEy5Yo9hzoDhif6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFF QzdDQTMwNjAeFw0yNjAzMjEwMjA1NDlaFw0yNjAzMjQxMjI0NDlaMDMxMTAvBgNV BAMTKDhFMTQ0Mjg2QTU5QTNEOTYxRTZGRjMwOTlFNkZDRjlBQzM1OTgxNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCksmwnvEHM2ODA+5suh39BCgfy GFSAxc111Vw45NoNrYLhjYx33tFsGKri4ltHwQrw5Uwn2IkRydKHasrHB83levQ4 3gnrN+EJGMv2Z5rs5z7v1jORfDeEg6ckoKrl9oKvzT+QFcH/fm1e2GRJxqQfGiwo hxKnNzV9XC2IrTOHBG38olNnVjAczpOI6LUEPhe9SrSslYBnRd1fAgmGDoJhPpPF YKVfUfDv///KVNfGR9VDhuWOj1apu7+Tx33oqeje94v/eBnbR7HUFY5Jx+13wDsK SzkhwL+bG0U3jh/slDw+Ez7m72dSpcTQESEC9UomPaoq6Cp9WVbL2rK0FlFfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjhRChqWaPZYeb/MJnm/PmsNZgXUwHwYDVR0j BBgwFoAUQgQuZytojDBy/UdDs+fdgex8owYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTJmMjI4Yy1kZjIwLTQ3MjgtOWY5Ni04ZmFhMTM0MDAxN2EvMC80MjA0MkU2NzJC Njg4QzMwNzJGRDQ3NDNCM0U3REQ4MUVDN0NBMzA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFFQzdD QTMwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEyZjIyOGMtZGYyMC00NzI4LTlm OTYtOGZhYTEzNDAwMTdhLzAvNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0RE ODFFQzdDQTMwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbnoaDwCSoQESdG7H4ubK7Z5LjeN3Hs3QD2 PG1gd2tOdqjGWrkPaW1+Btqmdlc3mokBjjAX9rc5Oq/2vCK31yhDomeMCO14Kx0O afIeF3P0i9HaPwI5q3MWayO+LK9ZxG0gw8UDAfp4ND1pjmv+zMycpOZmo18Ipuaf io/t7Gpg7Dsjd/B0fKe8teYE6NA7OWlxmold4ZGo6lINNsHDzQN2oKdKf8zzBG5E YAQaXCfp22bM20HdE6/0R197mPWOvmKiXdv7FaobLg90mmslJQgzc3JRZgH5miql 2n2eynp8eRwl5G7s/Vbkhb5f879zKHRM5PVeoPaCMVBJy9B33vU= -----END CERTIFICATE-----Generated at Sat Mar 21 09:40:29 2026 by rpki-client