$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft File: 04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json) Hash identifier: 7j1jtD/Og5mcPsj6SOP8D4PXpyt5lWIK9PCZnR2u8W4= Subject key identifier: D9:67:24:28:C1:24:23:7F:EB:30:B9:FC:E0:D2:5D:35:44:1C:CB:DA Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 38B0F04F681B2B98349BCAACE6FAF5C593617008 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft Manifest number: 012E Signing time: Wed 25 Mar 2026 05:22:11 +0000 Manifest this update: Wed 25 Mar 2026 05:17:11 +0000 Manifest next update: Sat 28 Mar 2026 06:31:11 +0000 Files and hashes: 1: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: tAOR3+qopwEEpOJ1MoufsE4Gb6QgCqX7uwexYPM3lns=) 2: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: UvJvnJi0DpPbEtS7oOVZoco+ytQPNHRypimtkzre3+M=) 3: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: nbQEkdfGxUP7diiYduRDIgIWqOc68+EqfTJuoRsq4Tw=) 4: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: MxcV0VQaTxMuBGbZxjauXv5QA5Vg8BL6BVoMBR3myP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b0:f0:4f:68:1b:2b:98:34:9b:ca:ac:e6:fa:f5:c5:93:61:70:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Mar 25 05:17:11 2026 GMT Not After : Mar 28 06:31:11 2026 GMT Subject: CN=D9672428C124237FEB30B9FCE0D25D35441CCBDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:52:17:19:58:57:2a:75:9f:6c:78:e3:61:37: ea:48:12:3b:22:0a:21:8e:26:11:60:b0:10:78:a8: 27:0e:51:06:a7:04:34:a8:67:42:60:1a:f8:d3:c3: c2:81:24:96:d9:a0:ba:89:e4:41:f6:95:45:1c:aa: d0:5f:e0:61:9e:8a:32:a9:5d:fd:5e:34:43:1d:1a: 69:2e:ba:54:13:4e:02:e4:28:29:2f:6e:3e:9c:87: 59:7b:15:54:73:9e:b7:92:8b:4f:14:68:93:57:7d: 61:a2:a0:0b:4c:38:d3:fa:43:83:8c:92:6f:94:7c: 1e:3a:bc:7e:c4:13:2a:3f:58:ed:26:73:6a:00:f1: e6:00:bc:02:d2:e2:e2:e4:b4:52:44:28:01:66:ff: e6:3c:4d:17:f5:1c:36:ab:88:37:c1:b1:89:b5:79: 1d:0d:6a:09:d6:1c:5e:f1:5a:cc:67:a2:39:2a:ed: 25:92:31:7a:b8:47:1d:6f:89:8f:f0:2e:a5:78:dc: 81:90:b8:6f:7e:fa:9b:e2:bd:eb:da:92:a2:ea:34: 3a:5a:57:e6:85:f1:21:60:38:80:7e:c0:78:9d:51: 94:c0:76:23:8d:b2:19:14:58:81:33:cc:66:dc:39: 6a:4b:95:2b:91:f2:7e:ee:38:26:bd:9b:2e:8f:25: 16:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:67:24:28:C1:24:23:7F:EB:30:B9:FC:E0:D2:5D:35:44:1C:CB:DA X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:13:a3:4b:84:21:3a:12:45:15:a7:b1:bf:21:76:40:68:e2: cd:f1:55:94:89:fd:d5:73:c0:e3:7e:55:3e:64:5b:8a:42:9c: a5:34:d2:e8:e7:9e:a8:4e:c6:38:5f:44:ed:88:85:b5:1b:80: 51:a6:ea:99:d8:91:9e:9e:cb:2a:5f:3f:e6:82:25:b8:5e:45: c3:c0:a3:3e:1a:0a:be:43:c6:13:bf:73:eb:bc:c7:14:de:b4: 8f:40:46:2a:cb:d8:82:09:30:41:51:9a:20:3b:d9:2a:94:d2: 60:b4:a2:b9:00:ce:87:c2:6d:ff:68:5c:77:c8:e2:74:6f:8a: a1:71:86:66:00:e3:d9:6c:51:77:f1:2f:0d:19:59:a0:63:eb: c1:b6:d5:fa:3e:d2:34:cc:6c:b8:69:dc:3a:2e:a6:06:0f:8d: 95:81:da:8c:86:0d:8a:bc:18:24:67:ec:69:98:d3:27:a8:04: b4:d2:fe:eb:72:01:74:64:3c:7f:30:79:ab:c4:ad:d0:27:9f: b1:de:d0:c3:56:1c:fb:83:4f:1a:f7:45:19:1c:94:78:b1:af: 78:b2:9d:c2:a7:96:e0:d3:f0:70:1d:76:57:35:68:b6:e1:35: bc:f1:1b:76:d3:3f:c5:dc:de:32:92:63:0c:b5:c7:0b:a9:60: 01:99:68:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLDwT2gbK5g0m8qs5vr1xZNhcAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNjAzMjUwNTE3MTFaFw0yNjAzMjgwNjMxMTFaMDMxMTAvBgNV BAMTKEQ5NjcyNDI4QzEyNDIzN0ZFQjMwQjlGQ0UwRDI1RDM1NDQxQ0NCREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCUhcZWFcqdZ9seONhN+pIEjsi CiGOJhFgsBB4qCcOUQanBDSoZ0JgGvjTw8KBJJbZoLqJ5EH2lUUcqtBf4GGeijKp Xf1eNEMdGmkuulQTTgLkKCkvbj6ch1l7FVRznreSi08UaJNXfWGioAtMONP6Q4OM km+UfB46vH7EEyo/WO0mc2oA8eYAvALS4uLktFJEKAFm/+Y8TRf1HDariDfBsYm1 eR0NagnWHF7xWsxnojkq7SWSMXq4Rx1viY/wLqV43IGQuG9++pvivevakqLqNDpa V+aF8SFgOIB+wHidUZTAdiONshkUWIEzzGbcOWpLlSuR8n7uOCa9my6PJRYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2WckKMEkI3/rMLn84NJdNUQcy9owHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRB ODA1RURFMzMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQTo0uEIToSRRWnsb8hdkBo4s3xVZSJ/dVz wON+VT5kW4pCnKU00ujnnqhOxjhfRO2IhbUbgFGm6pnYkZ6eyypfP+aCJbheRcPA oz4aCr5DxhO/c+u8xxTetI9ARirL2IIJMEFRmiA72SqU0mC0orkAzofCbf9oXHfI 4nRviqFxhmYA49lsUXfxLw0ZWaBj68G21fo+0jTMbLhp3DoupgYPjZWB2oyGDYq8 GCRn7GmY0yeoBLTS/utyAXRkPH8weavErdAnn7He0MNWHPuDTxr3RRkclHixr3iy ncKnluDT8HAddlc1aLbhNbzxG3bTP8Xc3jKSYwy1xwupYAGZaOo= -----END CERTIFICATE-----Generated at Thu Mar 26 07:21:56 2026 by rpki-client