$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft File: A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft (raw, json) Hash identifier: u+Bc2aTRayA+NtrY9OZgALR4bkYKTXUyzeEqBFjIQtM= Subject key identifier: 0F:4D:48:D6:FD:34:B6:98:E8:3E:E5:FF:EF:02:4D:87:A9:6B:4F:78 Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 Certificate issuer: /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Certificate serial: 0B1410B250B082B23C5C6B8D38617AEA0C302695 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft Manifest number: 03CA Signing time: Wed 25 Mar 2026 01:00:01 +0000 Manifest this update: Wed 25 Mar 2026 00:55:01 +0000 Manifest next update: Sat 28 Mar 2026 06:06:01 +0000 Files and hashes: 1: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: NxcYlLW+ZkGtzpqXd2yoeS5VdB40v+IZaaf0YTRRXYQ=) 2: A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl (hash: giK6MrUCfNHR9e9MSTR9aa7tBi/t7MocRUVmxK51QjM=) 3: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: C2QFcfs/YhAogD6WV5sZt+GhgdgTDt0K+flb9n7TxLw=) 4: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: VC593Cs/cLK37Y65raPKe4El4PGI0Yr3mzjDSbZO0QM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:14:10:b2:50:b0:82:b2:3c:5c:6b:8d:38:61:7a:ea:0c:30:26:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Validity Not Before: Mar 25 00:55:01 2026 GMT Not After : Mar 28 06:06:01 2026 GMT Subject: CN=0F4D48D6FD34B698E83EE5FFEF024D87A96B4F78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ef:9f:a9:d5:00:ed:87:0e:00:70:ad:fa:1d: 53:6d:60:b5:d6:77:0a:54:62:c9:64:9b:4a:a1:4a: 62:52:38:20:e6:13:07:9e:f2:61:40:36:0c:4e:72: db:12:6f:ea:14:bc:16:b3:64:8f:b8:ab:d7:5b:d0: f4:68:c1:ee:a5:bc:f9:d9:4f:21:df:bb:d9:b2:2f: 1e:f9:84:a9:b4:37:a1:92:43:d1:5e:9a:cc:26:eb: 22:6f:13:23:7a:c8:3b:27:3f:b9:eb:a4:27:aa:e3: 7d:0b:38:b4:62:35:5e:07:8c:db:ec:67:d2:60:bb: 8f:51:ec:9a:3c:35:fd:8b:c4:fe:42:01:43:b1:8c: d6:93:b7:af:e2:eb:b3:1c:5f:0c:f0:2d:96:a9:69: f6:e2:f5:6e:32:e6:89:ec:41:5b:82:2f:91:86:f3: 04:5a:c5:82:01:c6:15:c3:fc:63:ad:47:5e:0a:be: ab:d2:3a:1d:37:d9:12:75:e6:78:b9:33:40:3d:e8: 6c:38:4a:eb:f0:a6:57:8b:9a:1a:8f:12:e0:52:00: 14:25:01:64:b8:11:63:d3:41:1e:86:c0:72:01:9d: 9d:b2:b5:48:7c:53:2a:04:6a:2c:85:64:3b:ff:bb: 3a:8f:73:26:45:c5:70:da:f5:7b:1f:b5:c3:37:0d: 90:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4D:48:D6:FD:34:B6:98:E8:3E:E5:FF:EF:02:4D:87:A9:6B:4F:78 X509v3 Authority Key Identifier: keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:b3:ba:b3:e1:47:a1:ef:37:4f:f9:65:5e:a3:7f:8d:3a:70: e3:35:91:9b:c1:83:11:00:ae:88:4d:d0:86:f0:af:c2:76:2a: 29:96:da:4d:46:02:a5:c6:bf:1c:b6:71:14:b0:ad:29:7d:0f: a8:67:a8:93:81:65:23:4c:9e:a9:d1:2e:5c:16:1f:86:28:9e: f1:99:4c:40:00:8a:1f:94:ca:30:db:29:a1:4c:8e:19:75:b5: 96:ec:1e:bf:19:a0:04:03:ca:76:75:a4:87:3c:0a:02:09:72: 89:cf:61:73:81:fa:d8:f4:c8:8e:58:1f:ba:1b:72:2c:d4:03: 65:80:d2:cb:69:cb:24:91:3f:88:97:83:40:b8:f5:9e:25:f1: 1c:65:c1:75:d5:b2:af:e4:62:0e:bb:98:a7:3e:c9:c5:5c:59: 78:d9:eb:99:3d:41:4e:b2:97:10:75:06:84:f6:dd:cc:00:68: 74:9b:f8:da:f0:a4:62:ff:bf:e8:bc:34:65:e0:5b:f9:1e:21: 61:0f:0b:67:d6:10:26:c0:56:09:05:81:6e:11:62:29:3b:30: 26:9d:43:ae:b4:d8:60:9a:1b:54:56:83:a3:36:b3:48:db:ae: db:ba:13:65:d9:4f:13:33:e7:20:ca:46:bb:ef:ac:63:ef:d9: 4e:8e:0e:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxQQslCwgrI8XGuNOGF66gwwJpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2 MTc1NThBNjAeFw0yNjAzMjUwMDU1MDFaFw0yNjAzMjgwNjA2MDFaMDMxMTAvBgNV BAMTKDBGNEQ0OEQ2RkQzNEI2OThFODNFRTVGRkVGMDI0RDg3QTk2QjRGNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN75+p1QDthw4AcK36HVNtYLXW dwpUYslkm0qhSmJSOCDmEwee8mFANgxOctsSb+oUvBazZI+4q9db0PRowe6lvPnZ TyHfu9myLx75hKm0N6GSQ9Femswm6yJvEyN6yDsnP7nrpCeq430LOLRiNV4HjNvs Z9Jgu49R7Jo8Nf2LxP5CAUOxjNaTt6/i67McXwzwLZapafbi9W4y5onsQVuCL5GG 8wRaxYIBxhXD/GOtR14KvqvSOh032RJ15ni5M0A96Gw4SuvwpleLmhqPEuBSABQl AWS4EWPTQR6GwHIBnZ2ytUh8UyoEaiyFZDv/uzqPcyZFxXDa9XsftcM3DZA7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD01I1v00tpjoPuX/7wJNh6lrT3gwHwYDVR0j BBgwFoAUo5j73zV3kMfcZ8bZKhWj1GF1WKYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMxYzUyOS02MjQ0LTQ1MDMtYWY1Ni02OTQ1OWU0YTc2MGYvMC9BMzk4RkJERjM1 Nzc5MEM3REM2N0M2RDkyQTE1QTNENDYxNzU1OEE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2MTc1 NThBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMWM1MjktNjI0NC00NTAzLWFm NTYtNjk0NTllNGE3NjBmLzAvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEz RDQ2MTc1NThBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6zurPhR6HvN0/5ZV6jf406cOM1kZvBgxEA rohN0Ibwr8J2KimW2k1GAqXGvxy2cRSwrSl9D6hnqJOBZSNMnqnRLlwWH4YonvGZ TEAAih+UyjDbKaFMjhl1tZbsHr8ZoAQDynZ1pIc8CgIJconPYXOB+tj0yI5YH7ob cizUA2WA0stpyySRP4iXg0C49Z4l8RxlwXXVsq/kYg67mKc+ycVcWXjZ65k9QU6y lxB1BoT23cwAaHSb+NrwpGL/v+i8NGXgW/keIWEPC2fWECbAVgkFgW4RYik7MCad Q6602GCaG1RWg6M2s0jbrtu6E2XZTxMz5yDKRrvvrGPv2U6ODqM= -----END CERTIFICATE-----Generated at Thu Mar 26 18:57:50 2026 by rpki-client