$ rpki-client -vvf repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft File: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft (raw, json) Hash identifier: 5syMKmXOIVzZqOZye51kByLuwSmDSGTyiLr2e0CPLok= Subject key identifier: 29:8B:6C:C8:3A:A2:A2:57:E3:A4:18:01:F2:FD:FD:C7:DE:C8:4B:6A Authority key identifier: 80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 Certificate issuer: /CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Certificate serial: 7A6147E268B2B3E0B2920083ED865FCACCFE25B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft Manifest number: 0563 Signing time: Thu 26 Mar 2026 04:32:20 +0000 Manifest this update: Thu 26 Mar 2026 04:27:20 +0000 Manifest next update: Sun 29 Mar 2026 14:43:20 +0000 Files and hashes: 1: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl (hash: Hjdg86nT5Msn+TfqmBJy99BTfKsU7EJbP1NsuE/Ms0M=) 2: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: oWtepmBqBvebT0Z+AytYxvJ+nwN7a/Aha+0+yrTyMss=) 3: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: cp44WBbEQPeVS1mAfPisCHMGvuQWDdPCMl7LdQCGp3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:61:47:e2:68:b2:b3:e0:b2:92:00:83:ed:86:5f:ca:cc:fe:25:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Validity Not Before: Mar 26 04:27:20 2026 GMT Not After : Mar 29 14:43:20 2026 GMT Subject: CN=298B6CC83AA2A257E3A41801F2FDFDC7DEC84B6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:58:3a:08:75:06:b1:93:e2:00:7f:75:a4:47: dc:95:51:2b:89:bb:f4:f5:4c:ff:0a:6a:49:44:49: 40:60:dc:39:0e:32:4b:d0:0a:24:23:c6:75:4d:db: 94:07:83:36:4c:17:95:c5:6c:ea:10:f7:2d:70:63: 7c:1a:da:2d:89:ef:88:52:e6:c6:3f:cc:85:e4:e9: 62:72:c5:25:f7:53:9e:33:24:1e:7e:43:e6:cb:8a: 79:99:e3:bb:37:9e:9c:42:d7:f3:a2:c6:5d:e6:eb: b8:3e:9a:c5:76:79:a9:2d:a6:76:ee:7d:86:bd:9c: c4:71:85:94:73:8d:f1:51:80:ff:d2:48:da:22:22: 39:cb:1f:62:b6:bd:3f:f2:07:55:56:bb:25:9a:28: 47:ef:30:d2:33:14:de:c1:89:b2:dd:d8:83:cf:c0: f0:2e:95:81:52:f3:87:da:36:33:1a:a9:f4:39:8a: dc:85:64:54:0f:56:c9:40:85:2b:f2:48:97:46:66: 02:54:ae:d8:d7:82:27:51:2c:26:33:d4:bf:7e:c3: 7c:39:e6:1a:ac:1d:32:2a:6f:d1:d3:01:c9:d6:4f: 1e:a6:59:c5:51:8f:11:c7:39:29:a6:ab:60:b1:b5: 2b:04:9b:cc:c6:7a:29:37:72:d5:10:35:43:a2:39: ff:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8B:6C:C8:3A:A2:A2:57:E3:A4:18:01:F2:FD:FD:C7:DE:C8:4B:6A X509v3 Authority Key Identifier: keyid:80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:92:2c:b9:2a:4b:ec:65:b1:dc:62:90:c2:cd:89:e5:d2:91: 85:43:7c:cf:a2:1b:f0:7d:4c:0d:95:5d:4e:0d:d1:0f:af:8d: b7:87:5d:ce:70:5d:20:ab:20:9b:84:41:91:f4:6d:f8:55:d1: a5:1d:fa:0e:b4:64:99:ab:7c:a2:34:dc:5b:d6:24:38:83:f6: 0e:67:07:dd:62:29:b8:ac:b4:52:54:f0:3c:75:ac:22:81:a8: 06:53:ed:a8:cb:30:76:0d:5a:76:73:87:f5:f3:b1:ee:e0:68: 18:a0:62:83:cb:aa:d0:0b:30:af:f0:9f:8e:50:ed:0b:11:5f: f7:48:21:55:51:5e:5b:a3:99:75:db:eb:44:dd:5a:3d:81:f7: 2f:12:06:c0:e0:91:60:9a:2c:fa:dc:49:d1:34:e3:ac:71:e0: 3d:b8:89:4c:c1:a7:e1:83:da:4f:30:9b:b6:b7:ad:eb:15:b1: bd:28:e9:8a:1d:80:2d:ef:4e:c8:15:67:7a:5c:12:b3:77:b0: df:84:f7:b5:6a:73:40:f1:82:d9:63:63:94:0f:5f:33:b9:5d: 57:f3:ce:e8:a7:db:c7:71:eb:70:b3:34:57:71:f6:98:02:d9: 8a:fa:78:fd:7e:e2:09:84:ee:56:7d:4b:4c:70:8a:71:3e:2e: 0d:cd:d3:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUemFH4miys+CykgCD7YZfysz+JbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5 MkUyNkFGMzAeFw0yNjAzMjYwNDI3MjBaFw0yNjAzMjkxNDQzMjBaMDMxMTAvBgNV BAMTKDI5OEI2Q0M4M0FBMkEyNTdFM0E0MTgwMUYyRkRGREM3REVDODRCNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOWDoIdQaxk+IAf3WkR9yVUSuJ u/T1TP8KaklESUBg3DkOMkvQCiQjxnVN25QHgzZMF5XFbOoQ9y1wY3wa2i2J74hS 5sY/zIXk6WJyxSX3U54zJB5+Q+bLinmZ47s3npxC1/Oixl3m67g+msV2eaktpnbu fYa9nMRxhZRzjfFRgP/SSNoiIjnLH2K2vT/yB1VWuyWaKEfvMNIzFN7BibLd2IPP wPAulYFS84faNjMaqfQ5ityFZFQPVslAhSvySJdGZgJUrtjXgidRLCYz1L9+w3w5 5hqsHTIqb9HTAcnWTx6mWcVRjxHHOSmmq2CxtSsEm8zGeik3ctUQNUOiOf99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKYtsyDqiolfjpBgB8v39x97IS2owHwYDVR0j BBgwFoAUgDyf8QKDbOyM7EnwH8+qDpLiavMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzcyN2MzZS05YzFhLTQ2ZGUtYTJiOC1jODhiOTAzOTlmM2QvMC84MDNDOUZGMTAy ODM2Q0VDOENFQzQ5RjAxRkNGQUEwRTkyRTI2QUYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5MkUy NkFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFB MEU5MkUyNkFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGSLLkqS+xlsdxikMLNieXSkYVDfM+iG/B9 TA2VXU4N0Q+vjbeHXc5wXSCrIJuEQZH0bfhV0aUd+g60ZJmrfKI03FvWJDiD9g5n B91iKbistFJU8Dx1rCKBqAZT7ajLMHYNWnZzh/Xzse7gaBigYoPLqtALMK/wn45Q 7QsRX/dIIVVRXlujmXXb60TdWj2B9y8SBsDgkWCaLPrcSdE046xx4D24iUzBp+GD 2k8wm7a3resVsb0o6YodgC3vTsgVZ3pcErN3sN+E97Vqc0DxgtljY5QPXzO5XVfz zuin28dx63CzNFdx9pgC2Yr6eP1+4gmE7lZ9S0xwinE+Lg3N0x4= -----END CERTIFICATE-----Generated at Thu Mar 26 11:28:03 2026 by rpki-client