$ rpki-client -vvf repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft File: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft (raw, json) Hash identifier: fD/q3T8YssPPD8/6hZGBh3jKV+CDx14Bwk/nOuF/G3I= Subject key identifier: 32:3A:C1:27:0B:92:A7:09:BC:E8:D0:DD:19:75:05:6A:68:73:38:4D Authority key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 Certificate issuer: /CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Certificate serial: 6070D76F05523EA320BBD9E141B243F633BE1A58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft Manifest number: 0235 Signing time: Sat 07 Mar 2026 05:01:58 +0000 Manifest this update: Sat 07 Mar 2026 04:56:58 +0000 Manifest next update: Tue 10 Mar 2026 13:40:58 +0000 Files and hashes: 1: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl (hash: CTyy3PLNiM45pqL2sDzKWnKOtdfpF0u3ydH8OXsuGmk=) 2: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: 59yz865tKQpU8UqeDFR2Q6MBnW99RvQGBX6jv6dW3C0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:70:d7:6f:05:52:3e:a3:20:bb:d9:e1:41:b2:43:f6:33:be:1a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Validity Not Before: Mar 7 04:56:58 2026 GMT Not After : Mar 10 13:40:58 2026 GMT Subject: CN=323AC1270B92A709BCE8D0DD1975056A6873384D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:97:9d:e4:20:b6:45:1b:b7:06:3a:57:fb:4f: e8:33:7c:0a:57:ed:5d:a9:cd:a4:b4:a6:10:f9:7d: 4f:d0:46:24:23:5c:2b:23:bd:8f:1b:14:ab:64:16: 1c:df:25:b7:c1:18:8c:63:ac:37:ae:2f:17:ed:93: 91:4a:12:57:9a:e7:e8:74:7b:53:65:25:e4:3a:10: c4:e3:92:f2:34:fe:6e:b1:e9:77:b1:ce:95:e5:ac: d4:b2:a7:0b:29:4b:be:af:30:17:66:b2:e1:4a:c5: de:d7:88:c2:6c:9c:6e:e8:4e:a4:0c:6f:9c:82:8a: 98:ef:fb:b7:d0:87:6a:b0:6e:14:e8:45:08:f5:8f: 21:47:48:90:0a:17:5b:b1:98:ac:77:8c:c1:78:09: 08:f1:be:3b:9c:e1:f0:ad:81:a9:cd:84:fa:0b:91: f8:ac:f1:ac:cf:b8:a4:bc:7a:eb:03:54:22:7a:de: ef:97:6b:4f:e5:a5:3d:31:7e:bf:e3:60:73:d2:74: 01:94:c1:65:fe:80:a1:44:a2:b4:89:2d:ba:9a:ab: 7e:ac:e5:ef:8b:13:c6:87:e3:eb:65:96:bf:6e:c0: 1b:3e:99:30:b8:5d:c8:32:46:f7:16:52:76:7a:fc: 36:23:92:2c:b3:24:27:55:dc:26:91:53:25:45:ae: a9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3A:C1:27:0B:92:A7:09:BC:E8:D0:DD:19:75:05:6A:68:73:38:4D X509v3 Authority Key Identifier: keyid:D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:9c:a0:b1:e2:d8:29:bd:4f:77:98:5d:0b:12:08:ca:7c:07: f7:5f:5a:0f:3a:bb:91:1b:69:f2:f9:8d:d1:26:eb:af:dd:a0: 0d:f5:f8:a5:da:7f:de:fc:f5:dc:f2:97:ab:f3:ad:8a:0d:8c: 16:eb:9e:f1:3a:d3:98:ea:11:f0:54:4a:51:0c:8a:a6:ce:db: 66:91:99:85:1d:62:81:fa:1e:aa:c6:5a:39:eb:72:47:f2:85: 5c:68:d0:42:01:58:89:fe:1c:74:12:c9:1c:a5:4f:64:93:d2: 6b:47:4a:f3:d6:da:4a:54:6a:ff:50:69:ce:77:fd:45:be:6c: 20:de:ef:99:ad:ce:8d:5d:67:ce:3e:54:e7:d7:03:58:39:c8: b9:79:13:22:ec:39:27:66:11:59:40:e2:1e:c1:03:be:0e:aa: ca:d6:77:79:21:5b:19:16:74:07:ce:ab:f6:e4:34:65:07:01: 29:ab:ab:25:b3:fe:e0:ad:7f:b6:50:b2:24:7b:3a:e3:4c:cf: 11:23:3f:f7:3f:f9:04:30:25:8d:72:6b:9e:f3:6b:bf:c4:41: 18:2a:29:b6:2e:dc:ba:c4:11:fa:1b:cc:d4:eb:88:27:02:80: ad:99:e4:93:2e:ee:df:09:23:9d:43:b8:a3:89:dd:4c:66:d4: 4b:96:65:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHDXbwVSPqMgu9nhQbJD9jO+GlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRC MDIzNUZBNzAeFw0yNjAzMDcwNDU2NThaFw0yNjAzMTAxMzQwNThaMDMxMTAvBgNV BAMTKDMyM0FDMTI3MEI5MkE3MDlCQ0U4RDBERDE5NzUwNTZBNjg3MzM4NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJl53kILZFG7cGOlf7T+gzfApX 7V2pzaS0phD5fU/QRiQjXCsjvY8bFKtkFhzfJbfBGIxjrDeuLxftk5FKElea5+h0 e1NlJeQ6EMTjkvI0/m6x6XexzpXlrNSypwspS76vMBdmsuFKxd7XiMJsnG7oTqQM b5yCipjv+7fQh2qwbhToRQj1jyFHSJAKF1uxmKx3jMF4CQjxvjuc4fCtganNhPoL kfis8azPuKS8eusDVCJ63u+Xa0/lpT0xfr/jYHPSdAGUwWX+gKFEorSJLbqaq36s 5e+LE8aH4+tllr9uwBs+mTC4XcgyRvcWUnZ6/DYjkiyzJCdV3CaRUyVFrqmPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMjrBJwuSpwm86NDdGXUFamhzOE0wHwYDVR0j BBgwFoAU0EPCorOV5qe8ijLxrmwZNLAjX6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2FkMzc1Ny05M2EwLTRiMzMtOTEyOC0yNGFhNjEzMDRlZmYvMC9EMDQzQzJBMkIz OTVFNkE3QkM4QTMyRjFBRTZDMTkzNEIwMjM1RkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRCMDIz NUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5 MzRCMDIzNUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACScoLHi2Cm9T3eYXQsSCMp8B/dfWg86u5Eb afL5jdEm66/doA31+KXaf9789dzyl6vzrYoNjBbrnvE605jqEfBUSlEMiqbO22aR mYUdYoH6HqrGWjnrckfyhVxo0EIBWIn+HHQSyRylT2ST0mtHSvPW2kpUav9Qac53 /UW+bCDe75mtzo1dZ84+VOfXA1g5yLl5EyLsOSdmEVlA4h7BA74OqsrWd3khWxkW dAfOq/bkNGUHASmrqyWz/uCtf7ZQsiR7OuNMzxEjP/c/+QQwJY1ya57za7/EQRgq KbYu3LrEEfobzNTriCcCgK2Z5JMu7t8JI51DuKOJ3Uxm1EuWZWk= -----END CERTIFICATE-----Generated at Sun Mar 8 00:39:52 2026 by rpki-client