$ rpki-client -vvf repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft File: 42CB30013F9704EFBDCF784FCD60289C7620A373.mft (raw, json) Hash identifier: 0hpoxmaSbcBzGa8Zyv54roDkt8ZYQodXNo+v/K47YNY= Subject key identifier: F7:1C:1F:E3:30:AB:E7:A1:03:57:ED:0A:9C:F5:D5:A3:AB:56:FB:33 Authority key identifier: 42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 Certificate issuer: /CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Certificate serial: 34942EA388CD17171F4D72764512455C16930892 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft Manifest number: 03D4 Signing time: Wed 18 Mar 2026 08:21:20 +0000 Manifest this update: Wed 18 Mar 2026 08:16:20 +0000 Manifest next update: Sat 21 Mar 2026 16:48:20 +0000 Files and hashes: 1: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: Xwns5Ogpfyb6PVc5ICTvXYVnJhIy9x8E6M2bieEhjv0=) 2: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: MCsJamis6iOXm6hLXc7OaIE2GZNYqTtsiTRjdaXwpbo=) 3: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: 8aR3sz5ao9x8srIIfDbOvigwX9Z+EpDkLEUEJhCZRRU=) 4: 42CB30013F9704EFBDCF784FCD60289C7620A373.crl (hash: 1ZEuiqEl3R8HK8x+Wk5P3IIaWzwQQ6zjaisOm9rSDyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 16:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:94:2e:a3:88:cd:17:17:1f:4d:72:76:45:12:45:5c:16:93:08:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Validity Not Before: Mar 18 08:16:20 2026 GMT Not After : Mar 21 16:48:20 2026 GMT Subject: CN=F71C1FE330ABE7A10357ED0A9CF5D5A3AB56FB33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:19:82:62:bd:59:4f:6e:aa:65:07:8b:b9:2c: a6:a7:d5:bc:5e:03:41:a1:06:aa:ae:08:30:94:bc: 80:42:d6:be:ff:12:61:c3:3d:70:a5:d9:9d:2c:af: e0:b6:e6:5e:e6:7f:74:5f:66:2a:cf:41:ad:67:09: 80:38:70:01:ff:b0:91:5b:e9:9f:00:ba:d7:51:49: 90:31:63:ee:55:f3:85:4d:2c:b9:00:3e:7e:91:39: a7:4c:41:6a:1e:11:ef:14:a7:62:e7:cd:fd:dc:80: bc:33:b8:d8:cb:0a:7c:5b:3a:a2:11:c2:04:be:1f: 2b:e0:4b:3c:4b:2b:8d:31:ac:22:92:fd:8a:3e:c0: 37:c0:30:31:91:70:d5:b5:96:f5:b3:0a:1b:26:2f: cf:4e:76:26:44:7d:8a:5b:21:9a:0a:d5:0e:92:3d: 0d:fa:c8:6b:67:5e:5e:f2:56:ae:6a:0e:b9:2f:e9: db:0b:b7:98:d3:3d:16:6f:43:ba:d2:98:24:e2:e1: a5:02:99:e5:71:d2:c9:8a:87:20:a0:cc:33:06:ed: 0f:be:23:f4:d3:1f:85:63:f8:5d:8a:0a:42:5b:3c: d3:d0:6e:fd:a9:81:3f:be:80:97:dc:b1:08:69:af: c8:47:f2:dd:df:0b:bd:b7:0b:5e:56:f6:13:ec:e4: 90:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1C:1F:E3:30:AB:E7:A1:03:57:ED:0A:9C:F5:D5:A3:AB:56:FB:33 X509v3 Authority Key Identifier: keyid:42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:de:98:6f:85:77:01:60:ab:b6:b5:84:3b:ce:5e:10:a3:c5: c3:e6:d6:ed:1e:9a:52:1f:29:68:c4:c4:1c:b2:44:a1:59:71: 53:1e:9d:57:83:50:be:9f:69:8a:dd:24:64:85:0e:1b:78:f8: 77:66:a2:18:2b:08:32:93:70:42:91:ca:ff:fe:fc:2c:61:dc: d4:10:48:90:26:97:4f:2e:44:d5:df:19:4c:22:74:e5:57:67: ba:a0:96:7d:c3:dc:60:10:08:48:10:7f:26:b9:d2:d0:fa:6c: d8:60:3b:a4:51:55:9d:a8:d2:b9:d5:90:9e:b7:a8:85:83:d1: 88:34:be:51:e2:25:53:b4:cb:77:96:29:88:90:16:f2:06:82: 2e:fa:a4:4b:e8:46:18:36:df:97:3b:df:81:8a:ef:df:b4:ad: 08:ba:1b:df:4b:0b:d3:cc:6e:3f:10:ea:ce:44:25:fd:f2:e9: d3:0c:ef:1a:54:95:ad:f2:d0:1d:ff:7d:5f:05:f5:29:f8:03: dd:d2:33:d8:b4:45:6e:15:99:3d:ac:5c:11:b0:5d:96:97:ed: 33:d7:8e:21:34:e0:87:8b:5b:16:a3:9b:a1:68:96:76:98:8e: d7:fb:19:b9:99:d7:08:ff:16:e2:25:9b:12:d9:e6:b3:6f:bd: 5f:35:b2:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNJQuo4jNFxcfTXJ2RRJFXBaTCJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3 NjIwQTM3MzAeFw0yNjAzMTgwODE2MjBaFw0yNjAzMjExNjQ4MjBaMDMxMTAvBgNV BAMTKEY3MUMxRkUzMzBBQkU3QTEwMzU3RUQwQTlDRjVENUEzQUI1NkZCMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGYJivVlPbqplB4u5LKan1bxe A0GhBqquCDCUvIBC1r7/EmHDPXCl2Z0sr+C25l7mf3RfZirPQa1nCYA4cAH/sJFb 6Z8AutdRSZAxY+5V84VNLLkAPn6ROadMQWoeEe8Up2Lnzf3cgLwzuNjLCnxbOqIR wgS+HyvgSzxLK40xrCKS/Yo+wDfAMDGRcNW1lvWzChsmL89OdiZEfYpbIZoK1Q6S PQ36yGtnXl7yVq5qDrkv6dsLt5jTPRZvQ7rSmCTi4aUCmeVx0smKhyCgzDMG7Q++ I/TTH4Vj+F2KCkJbPNPQbv2pgT++gJfcsQhpr8hH8t3fC723C15W9hPs5JB/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9xwf4zCr56EDV+0KnPXVo6tW+zMwHwYDVR0j BBgwFoAUQsswAT+XBO+9z3hPzWAonHYgo3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTAwM2Q2Yy05NWYxLTQ3YTQtOWQ1ZC1mN2I0OGNhYWE3ZjQvMC80MkNCMzAwMTNG OTcwNEVGQkRDRjc4NEZDRDYwMjg5Qzc2MjBBMzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3NjIw QTM3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4 OUM3NjIwQTM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALfemG+FdwFgq7a1hDvOXhCjxcPm1u0emlIf KWjExByyRKFZcVMenVeDUL6faYrdJGSFDht4+HdmohgrCDKTcEKRyv/+/Cxh3NQQ SJAml08uRNXfGUwidOVXZ7qgln3D3GAQCEgQfya50tD6bNhgO6RRVZ2o0rnVkJ63 qIWD0Yg0vlHiJVO0y3eWKYiQFvIGgi76pEvoRhg235c734GK79+0rQi6G99LC9PM bj8Q6s5EJf3y6dMM7xpUla3y0B3/fV8F9Sn4A93SM9i0RW4VmT2sXBGwXZaX7TPX jiE04IeLWxajm6FolnaYjtf7GbmZ1wj/FuIlmxLZ5rNvvV81smk= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:05 2026 by rpki-client