$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: sji9upl2MrnmyvNTMXLhQ53e3iEFUOf+nb2VHPl1NeE= Subject key identifier: E9:E6:D0:64:2B:4B:BB:B7:C7:F0:07:52:E2:83:E6:D1:52:32:B5:FD Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 1657A366EF1DD3E2A1C22A54ACCB7306921A0490 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: 0145 Signing time: Sun 22 Feb 2026 12:32:08 +0000 Manifest this update: Sun 22 Feb 2026 12:27:08 +0000 Manifest next update: Wed 25 Feb 2026 14:47:08 +0000 Files and hashes: 1: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: 82ZZd9ZKqDtwhlONQ96AcoNzTHzQmEXlz9QIND1/UOU=) 2: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: vBd/o6+RGsJU4ZF5dz1yRiYJvku7rSkDAbo5yX1o1lY=) 3: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: 6a3uFez0jYHwPfcoejSZwkuEKsCjzoGZS6UYHm2zW4Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Feb 2026 20:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:57:a3:66:ef:1d:d3:e2:a1:c2:2a:54:ac:cb:73:06:92:1a:04:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: Feb 22 12:27:08 2026 GMT Not After : Feb 25 14:47:08 2026 GMT Subject: CN=E9E6D0642B4BBBB7C7F00752E283E6D15232B5FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3a:f2:a6:a9:86:66:7a:94:1b:1f:68:89:e1: 22:21:27:e1:33:79:dc:e6:fc:79:25:42:1c:42:94: b9:6e:30:a3:cf:f1:0c:c6:25:0c:f8:b5:b2:6f:4d: 48:a7:34:01:61:cf:a8:39:b4:eb:bf:e2:d5:4d:7b: ce:cd:c5:48:2c:d1:21:9f:60:3f:34:b9:46:db:cf: c0:b3:f0:e8:e1:97:59:42:6d:71:31:9d:27:0b:cf: 62:ec:cd:52:88:c3:8d:70:d9:a5:b1:53:0e:46:a7: 2e:91:b2:a2:d0:39:31:7c:6c:3f:0f:5e:90:e2:fa: 7c:f0:22:e3:0b:79:55:59:1a:2e:56:4f:52:3b:2e: d5:90:36:1f:00:b9:9c:cc:a6:ec:a3:2a:aa:12:3b: 2b:2b:dd:96:eb:b9:78:d3:b6:ff:ed:89:27:00:7b: 43:0c:99:e9:14:bd:43:5d:c0:da:9f:dd:d1:12:a3: 28:df:6b:13:b2:ec:2d:85:8c:51:6f:8f:d3:09:74: 3a:fd:46:24:9f:7f:c6:12:02:81:5d:a0:9d:c9:88: ad:3e:24:64:d9:08:c3:d4:8c:a9:a6:c6:33:71:ae: 5a:ce:4a:56:f3:f6:01:83:69:30:02:ab:de:54:ec: 38:52:9a:68:dc:25:00:ed:bb:69:23:82:94:16:dd: c9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E6:D0:64:2B:4B:BB:B7:C7:F0:07:52:E2:83:E6:D1:52:32:B5:FD X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:06:e3:38:97:a2:d2:6c:60:58:35:00:7d:a3:1a:a3:b3:8c: d4:25:3f:ab:ae:2f:00:02:e6:8e:3e:38:13:18:20:df:80:50: 6c:52:9f:c5:0b:61:52:19:01:23:40:1d:84:ab:96:9f:ea:c0: 0f:55:84:15:77:36:8c:90:c0:fa:4b:32:25:2b:26:6f:87:c2: 8f:e0:ca:38:b4:e7:58:68:c8:f4:a2:76:15:f3:7b:d7:82:83: c0:c4:45:fa:6d:12:b1:89:28:66:b5:fa:a7:f4:65:05:00:6c: e9:4c:b9:25:6c:61:bb:06:1e:71:80:28:f7:e8:7c:51:71:85: 98:d5:43:3a:c6:bc:5c:7d:28:02:36:82:93:f3:57:94:ce:02: 99:9e:28:ed:11:80:02:7c:70:de:13:78:21:80:1c:ca:c7:c6: 55:5f:7e:a5:e2:5d:af:cc:8f:2f:23:66:04:1b:84:82:ec:69: 05:37:bd:e0:e9:24:93:42:db:41:35:1f:c2:04:69:0a:74:ea: 57:d3:a2:4d:02:af:52:15:a9:ea:d8:78:ef:ff:b5:b5:34:a2: bb:51:c5:08:27:98:35:3a:55:76:de:3b:51:92:86:1b:a0:e3: 0b:9d:4b:c1:d2:f4:8f:64:2f:68:1d:65:28:8a:26:4c:fd:ae: 94:d7:bb:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFlejZu8d0+KhwipUrMtzBpIaBJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNjAyMjIxMjI3MDhaFw0yNjAyMjUxNDQ3MDhaMDMxMTAvBgNV BAMTKEU5RTZEMDY0MkI0QkJCQjdDN0YwMDc1MkUyODNFNkQxNTIzMkI1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUOvKmqYZmepQbH2iJ4SIhJ+Ez edzm/HklQhxClLluMKPP8QzGJQz4tbJvTUinNAFhz6g5tOu/4tVNe87NxUgs0SGf YD80uUbbz8Cz8Ojhl1lCbXExnScLz2LszVKIw41w2aWxUw5Gpy6RsqLQOTF8bD8P XpDi+nzwIuMLeVVZGi5WT1I7LtWQNh8AuZzMpuyjKqoSOysr3ZbruXjTtv/tiScA e0MMmekUvUNdwNqf3dESoyjfaxOy7C2FjFFvj9MJdDr9RiSff8YSAoFdoJ3JiK0+ JGTZCMPUjKmmxjNxrlrOSlbz9gGDaTACq95U7DhSmmjcJQDtu2kjgpQW3cmhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ebQZCtLu7fH8AdS4oPm0VIytf0wHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwG4ziXotJsYFg1AH2jGqOzjNQlP6uuLwAC 5o4+OBMYIN+AUGxSn8ULYVIZASNAHYSrlp/qwA9VhBV3NoyQwPpLMiUrJm+Hwo/g yji051hoyPSidhXze9eCg8DERfptErGJKGa1+qf0ZQUAbOlMuSVsYbsGHnGAKPfo fFFxhZjVQzrGvFx9KAI2gpPzV5TOApmeKO0RgAJ8cN4TeCGAHMrHxlVffqXiXa/M jy8jZgQbhILsaQU3veDpJJNC20E1H8IEaQp06lfTok0Cr1IVqerYeO//tbU0ortR xQgnmDU6VXbeO1GShhug4wudS8HS9I9kL2gdZSiKJkz9rpTXu50= -----END CERTIFICATE-----Generated at Sun Feb 22 23:28:09 2026 by rpki-client