$ rpki-client -vvf repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft File: F03C1838587677BF6505C46715F42F8B8416F949.mft (raw, json) Hash identifier: JxjUJFqqdncz8mqm7W6zz0tt4E2Cg3I4sRqqG1RMu1A= Subject key identifier: FF:29:79:F8:CE:A8:02:39:B2:58:ED:81:3E:81:71:D2:DD:F9:26:77 Authority key identifier: F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 Certificate issuer: /CN=F03C1838587677BF6505C46715F42F8B8416F949 Certificate serial: 7411B661D381010F89E8294F21B47EBAB06450FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft Manifest number: 022E Signing time: Thu 26 Mar 2026 06:21:58 +0000 Manifest this update: Thu 26 Mar 2026 06:16:58 +0000 Manifest next update: Sun 29 Mar 2026 07:45:58 +0000 Files and hashes: 1: F03C1838587677BF6505C46715F42F8B8416F949.crl (hash: rwvnH+bds4q4lnT7anYB1Ghd8hJXeBYbNV8GDK7QzRg=) 2: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: o1axn6FylL5HDL/+cmxNZgdh+qBhrW0MUa5ofe3vKgY=) 3: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: 5d7eyl15yI3SPHjS9CWQbB/B/JL+7bbkCavXXd21rTk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:11:b6:61:d3:81:01:0f:89:e8:29:4f:21:b4:7e:ba:b0:64:50:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03C1838587677BF6505C46715F42F8B8416F949 Validity Not Before: Mar 26 06:16:58 2026 GMT Not After : Mar 29 07:45:58 2026 GMT Subject: CN=FF2979F8CEA80239B258ED813E8171D2DDF92677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f7:e6:60:fe:01:98:22:5c:9a:c0:5e:9d:d1: 64:03:aa:92:fb:34:b2:07:61:cd:48:d0:58:04:5e: 67:d0:df:50:b4:b0:b8:9b:f2:23:c9:fc:b9:04:21: 7d:f8:8a:31:42:72:47:3f:4e:00:ba:b2:87:2f:b8: 55:43:4a:2b:54:9d:fb:19:49:ac:87:57:21:d8:74: d9:06:e6:48:27:93:fe:df:8d:1c:1b:44:6c:a8:dd: 2d:b2:94:0f:26:fc:91:28:c9:4c:46:18:29:bf:18: a7:3c:a3:13:b6:29:46:f7:34:1e:da:f8:97:e4:64: ac:01:bd:4e:98:5d:06:a8:4d:5d:53:a2:cb:d5:d2: c3:e9:ad:1a:21:ad:ee:57:d8:ca:3a:9c:04:0b:38: 7d:b3:0f:2c:8c:15:e1:a7:6b:39:55:97:6a:21:c7: 45:eb:ac:59:e0:15:f8:1d:83:46:c5:e4:d4:d9:9b: 63:eb:8b:c2:58:12:c1:0a:dc:86:4f:1c:f4:ff:45: ca:7d:c7:8b:82:7b:a4:1a:56:70:ce:7c:d8:f5:a7: 65:60:66:cd:19:e2:5b:87:9b:9e:c0:b1:13:b2:d9: e2:53:bc:dd:a5:94:b0:fb:44:cb:8a:04:7e:d8:8c: 4d:fd:3c:3f:97:f0:b0:35:37:da:a8:4f:d6:c7:02: e3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:29:79:F8:CE:A8:02:39:B2:58:ED:81:3E:81:71:D2:DD:F9:26:77 X509v3 Authority Key Identifier: keyid:F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:29:aa:a4:5c:3a:17:47:25:0a:68:bc:27:c6:99:e1:61:dd: 73:85:0c:68:49:d2:d1:cc:2e:15:ba:bf:c8:ed:28:ca:b0:43: 5c:57:e8:19:38:67:58:93:a2:66:22:fc:70:2b:3a:0c:99:09: 7b:df:4a:9a:20:b4:3e:98:24:ad:5c:f5:c2:3c:79:be:4d:5b: 5d:b8:a3:35:e2:3b:92:6f:b2:09:05:45:9a:22:e3:4a:57:22: 2d:3d:74:0a:4e:08:cd:6a:af:3a:f8:81:17:25:4b:4e:0f:a7: 47:63:b2:7b:eb:b6:83:34:45:e2:ba:e4:ce:41:ef:bd:59:9c: ec:f9:42:cb:56:95:d2:83:37:7c:c5:1f:a8:12:6a:35:24:40: bc:ab:76:b5:23:b0:cf:78:59:52:03:94:5e:45:1d:81:f8:16: 01:8a:78:73:76:9f:24:69:96:5d:53:97:fe:2f:fd:78:e3:53: e3:09:3e:16:16:fa:43:b3:7b:c1:91:c5:9b:52:75:1b:af:c4: ad:ff:61:a3:05:98:95:8e:10:42:de:86:1f:ce:5a:d0:08:a9: 8b:2b:c4:2b:41:a1:c8:ea:ad:36:41:79:0d:14:0e:11:81:2c: ae:df:5d:2b:7c:b0:62:d5:7c:2e:17:ba:38:8a:07:f1:7e:b5: b0:b0:c2:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdBG2YdOBAQ+J6ClPIbR+urBkUP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4 NDE2Rjk0OTAeFw0yNjAzMjYwNjE2NThaFw0yNjAzMjkwNzQ1NThaMDMxMTAvBgNV BAMTKEZGMjk3OUY4Q0VBODAyMzlCMjU4RUQ4MTNFODE3MUQyRERGOTI2NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN9+Zg/gGYIlyawF6d0WQDqpL7 NLIHYc1I0FgEXmfQ31C0sLib8iPJ/LkEIX34ijFCckc/TgC6socvuFVDSitUnfsZ SayHVyHYdNkG5kgnk/7fjRwbRGyo3S2ylA8m/JEoyUxGGCm/GKc8oxO2KUb3NB7a +JfkZKwBvU6YXQaoTV1TosvV0sPprRohre5X2Mo6nAQLOH2zDyyMFeGnazlVl2oh x0XrrFngFfgdg0bF5NTZm2Pri8JYEsEK3IZPHPT/Rcp9x4uCe6QaVnDOfNj1p2Vg Zs0Z4luHm57AsROy2eJTvN2llLD7RMuKBH7YjE39PD+X8LA1N9qoT9bHAuMPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/yl5+M6oAjmyWO2BPoFx0t35JncwHwYDVR0j BBgwFoAU8DwYOFh2d79lBcRnFfQvi4QW+UkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmQzZGQ3OS04NjM1LTQ4NTctOGEzYy05ODU5NTQ1MTZmOWUvMC9GMDNDMTgzODU4 NzY3N0JGNjUwNUM0NjcxNUY0MkY4Qjg0MTZGOTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4NDE2 Rjk0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJG OEI4NDE2Rjk0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABopqqRcOhdHJQpovCfGmeFh3XOFDGhJ0tHM LhW6v8jtKMqwQ1xX6Bk4Z1iTomYi/HArOgyZCXvfSpogtD6YJK1c9cI8eb5NW124 ozXiO5JvsgkFRZoi40pXIi09dApOCM1qrzr4gRclS04Pp0djsnvrtoM0ReK65M5B 771ZnOz5QstWldKDN3zFH6gSajUkQLyrdrUjsM94WVIDlF5FHYH4FgGKeHN2nyRp ll1Tl/4v/XjjU+MJPhYW+kOze8GRxZtSdRuvxK3/YaMFmJWOEELehh/OWtAIqYsr xCtBocjqrTZBeQ0UDhGBLK7fXSt8sGLVfC4XujiKB/F+tbCwwvE= -----END CERTIFICATE-----Generated at Thu Mar 26 19:09:20 2026 by rpki-client