$ rpki-client -vvf repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.mft File: F39BE26D48730B565C23C6A842B313B08B39B1C6.mft (raw, json) Hash identifier: HHWaSa1xWIffQ0xYIWgqT7P+PtI92LPqUO5iBivfxIs= Subject key identifier: 00:C8:BB:39:39:55:3D:86:54:4F:FF:38:06:4A:19:7B:5F:1A:F0:64 Authority key identifier: F3:9B:E2:6D:48:73:0B:56:5C:23:C6:A8:42:B3:13:B0:8B:39:B1:C6 Certificate issuer: /CN=F39BE26D48730B565C23C6A842B313B08B39B1C6 Certificate serial: 383EB07269AC428C4C641FD157403604772FDBDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39BE26D48730B565C23C6A842B313B08B39B1C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.mft Manifest number: 036D Signing time: Wed 25 Mar 2026 08:00:42 +0000 Manifest this update: Wed 25 Mar 2026 07:55:42 +0000 Manifest next update: Sat 28 Mar 2026 13:55:42 +0000 Files and hashes: 1: F39BE26D48730B565C23C6A842B313B08B39B1C6.crl (hash: tenJr1jzp0rzdelYso0qeo+Yz7XyXgZ1U4GIws5Gja0=) 2: 3130332e3136322e3234302e302f32332d3234203d3e20313431363731.roa (hash: NsTk3LwG0u5kc3QUM4C41dpciSHuC8BHPLSvS5qOqNA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.crl rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39BE26D48730B565C23C6A842B313B08B39B1C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:3e:b0:72:69:ac:42:8c:4c:64:1f:d1:57:40:36:04:77:2f:db:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39BE26D48730B565C23C6A842B313B08B39B1C6 Validity Not Before: Mar 25 07:55:42 2026 GMT Not After : Mar 28 13:55:42 2026 GMT Subject: CN=00C8BB3939553D86544FFF38064A197B5F1AF064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:cc:1e:15:db:67:ff:a4:49:86:83:99:e8: 6d:3a:64:28:f7:03:83:e7:71:8c:11:6f:29:a4:ae: 29:2a:6f:2c:cf:61:d8:92:3a:6f:fb:6c:74:dd:39: fe:88:51:d5:69:0c:a3:f2:87:e9:0d:70:d1:08:61: ca:59:11:15:f7:ef:af:e7:2b:0c:ec:fd:38:a7:9e: 6a:45:15:6d:4d:82:fe:de:3f:36:8e:87:cb:7b:bb: 28:27:0e:9d:92:b0:45:74:02:16:7a:83:e7:69:74: d4:f7:75:00:b5:86:8a:33:bb:0a:fe:44:5c:2f:65: f8:e9:d2:e2:c7:1b:3e:3a:9e:9c:cd:b4:1b:94:00: 39:3a:9d:b1:58:05:71:d9:f6:5a:cd:1f:c5:b0:03: 15:87:85:a7:a4:bc:2e:78:9e:18:56:8d:ec:15:4b: 8a:87:07:ca:85:89:ec:33:74:50:96:fc:ea:7a:11: 3d:43:bb:e5:5c:96:35:8e:53:1f:f3:e0:73:d0:bb: f6:ee:d9:d8:25:2e:01:a5:d9:a8:24:6a:f4:63:66: 0f:d4:a7:07:28:29:64:61:73:1e:0c:ee:1f:44:8d: 55:e9:4a:0b:dc:b1:19:b1:cf:b9:c8:97:e1:f3:00: 29:6d:21:54:00:d3:c1:f2:77:be:1f:3f:46:5f:de: af:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C8:BB:39:39:55:3D:86:54:4F:FF:38:06:4A:19:7B:5F:1A:F0:64 X509v3 Authority Key Identifier: keyid:F3:9B:E2:6D:48:73:0B:56:5C:23:C6:A8:42:B3:13:B0:8B:39:B1:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39BE26D48730B565C23C6A842B313B08B39B1C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:06:4d:2e:47:50:b5:eb:da:fa:0f:96:7b:89:c1:d0:33:e9: 6d:46:6e:2d:d8:bf:05:7c:67:49:13:ce:6d:9c:aa:17:c6:22: 29:b5:84:1a:b6:bb:0e:58:c3:e0:31:7f:7e:6e:c9:58:a3:58: bf:f2:bd:d9:77:c3:90:f4:9e:1f:bc:46:58:e4:c4:bf:f7:de: b7:54:fa:66:eb:20:c1:4f:42:36:99:10:43:3c:f9:f4:f4:d0: c9:e2:bc:ff:82:01:ca:04:f8:d2:ac:d4:2a:e9:c7:e9:b7:96: 9f:85:13:46:5d:29:0a:d5:49:13:8f:72:33:ea:a7:06:f5:de: a1:6b:4f:0f:e5:4d:b5:c8:a1:66:8f:bd:43:bb:43:50:cc:76: f8:d0:ac:95:04:62:68:d8:e0:51:c5:79:2e:af:eb:56:7d:54: 1f:f6:b8:da:99:29:51:7b:f0:27:7c:d0:7d:0a:9e:50:a9:33: 2a:55:b8:bb:c6:4c:e6:1e:d9:50:c1:14:41:e7:2d:0f:44:1b: 05:e7:7b:e8:25:2f:46:da:67:c4:87:cf:cd:33:9a:ad:f7:dc: b1:0d:8e:a5:8f:6d:62:31:30:ba:dc:2a:1e:37:0c:95:4a:cb: 17:78:b7:6b:7e:01:de:bc:8c:6d:c8:64:52:62:99:0c:d0:4f: 3f:fd:d2:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOD6wcmmsQoxMZB/RV0A2BHcv29wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5QkUyNkQ0ODczMEI1NjVDMjNDNkE4NDJCMzEzQjA4 QjM5QjFDNjAeFw0yNjAzMjUwNzU1NDJaFw0yNjAzMjgxMzU1NDJaMDMxMTAvBgNV BAMTKDAwQzhCQjM5Mzk1NTNEODY1NDRGRkYzODA2NEExOTdCNUYxQUYwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3cweFdtn/6RJhoOZ6G06ZCj3 A4PncYwRbymkrikqbyzPYdiSOm/7bHTdOf6IUdVpDKPyh+kNcNEIYcpZERX376/n Kwzs/TinnmpFFW1Ngv7ePzaOh8t7uygnDp2SsEV0AhZ6g+dpdNT3dQC1hoozuwr+ RFwvZfjp0uLHGz46npzNtBuUADk6nbFYBXHZ9lrNH8WwAxWHhaekvC54nhhWjewV S4qHB8qFiewzdFCW/Op6ET1Du+VcljWOUx/z4HPQu/bu2dglLgGl2agkavRjZg/U pwcoKWRhcx4M7h9EjVXpSgvcsRmxz7nIl+HzACltIVQA08Hyd74fP0Zf3q+dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAMi7OTlVPYZUT/84BkoZe18a8GQwHwYDVR0j BBgwFoAU85vibUhzC1ZcI8aoQrMTsIs5scYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzAyNGQyNC05ZmFhLTRhYjAtOGZhNC0wY2U2MDhjNmQwYTMvMC9GMzlCRTI2RDQ4 NzMwQjU2NUMyM0M2QTg0MkIzMTNCMDhCMzlCMUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5QkUyNkQ0ODczMEI1NjVDMjNDNkE4NDJCMzEzQjA4QjM5 QjFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjMwMjRkMjQtOWZhYS00YWIwLThm YTQtMGNlNjA4YzZkMGEzLzAvRjM5QkUyNkQ0ODczMEI1NjVDMjNDNkE4NDJCMzEz QjA4QjM5QjFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkGTS5HULXr2voPlnuJwdAz6W1Gbi3YvwV8 Z0kTzm2cqhfGIim1hBq2uw5Yw+Axf35uyVijWL/yvdl3w5D0nh+8RljkxL/33rdU +mbrIMFPQjaZEEM8+fT00MnivP+CAcoE+NKs1Crpx+m3lp+FE0ZdKQrVSROPcjPq pwb13qFrTw/lTbXIoWaPvUO7Q1DMdvjQrJUEYmjY4FHFeS6v61Z9VB/2uNqZKVF7 8Cd80H0KnlCpMypVuLvGTOYe2VDBFEHnLQ9EGwXne+glL0baZ8SHz80zmq333LEN jqWPbWIxMLrcKh43DJVKyxd4t2t+Ad68jG3IZFJimQzQTz/90vM= -----END CERTIFICATE-----Generated at Thu Mar 26 20:10:18 2026 by rpki-client