$ rpki-client -vvf repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft File: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft (raw, json) Hash identifier: oTXmCgOzDXQV96/jmKZ065gZ+Hg7KKe6mYNBI7Jlzos= Subject key identifier: 47:8A:66:C4:C4:90:63:FA:A6:14:E0:48:5C:CA:A8:4F:04:64:F5:00 Authority key identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 Certificate issuer: /CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Certificate serial: 2941FCFB732EB3842B2ACBE724061880EFB788E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft Manifest number: 0101 Signing time: Wed 25 Mar 2026 15:51:31 +0000 Manifest this update: Wed 25 Mar 2026 15:46:31 +0000 Manifest next update: Sat 28 Mar 2026 18:56:31 +0000 Files and hashes: 1: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl (hash: ZAQ+/abIgNTd07tXLL/UUmDXNfMd/2qRaNEhv9tmojI=) 2: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: H3T3VBAkYGZBVt4prOPaCEzHSlQDxm09XEH58hbRsm0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:41:fc:fb:73:2e:b3:84:2b:2a:cb:e7:24:06:18:80:ef:b7:88:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Validity Not Before: Mar 25 15:46:31 2026 GMT Not After : Mar 28 18:56:31 2026 GMT Subject: CN=478A66C4C49063FAA614E0485CCAA84F0464F500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:86:13:70:98:8f:9f:e6:4e:af:dd:be:53: 04:3e:c1:ab:34:06:fb:d8:f7:ed:e2:75:78:88:29: a4:66:84:0f:7f:98:71:3b:b3:1c:1b:0f:91:0e:87: 27:5e:ca:a6:70:ab:6a:3a:36:00:c6:4a:a3:db:b5: 73:57:54:37:0c:3b:fa:d2:b6:70:c2:0a:fe:2b:ca: 57:3c:6f:fd:1f:95:3a:bd:a2:93:a5:1d:7d:fd:a4: 4f:ca:ff:11:ca:75:1a:57:62:cc:1d:9c:96:6a:04: 59:be:68:d7:c0:6f:b2:ad:36:65:10:c5:73:a1:93: 2e:76:a8:0d:39:4a:20:0f:fb:c7:a6:10:8d:7e:2b: a9:57:1c:83:79:43:84:16:07:11:af:8f:c6:86:a6: 89:c4:34:c7:01:ad:85:9b:18:25:3d:0e:29:46:39: db:fa:93:58:ba:6d:98:ee:8a:8a:e7:78:26:e3:48: 7f:35:f9:5a:30:72:42:0e:90:c8:8e:4c:0b:ca:0d: 53:8b:c7:df:70:5b:22:07:41:35:75:b5:45:87:89: a9:27:86:52:51:81:22:64:0b:72:23:29:2e:46:51: cc:63:4f:b9:62:9a:33:77:60:c6:fa:ae:23:ae:c7: 65:53:ed:3f:8a:58:bb:61:c9:a9:b2:2c:73:b7:23: a4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8A:66:C4:C4:90:63:FA:A6:14:E0:48:5C:CA:A8:4F:04:64:F5:00 X509v3 Authority Key Identifier: keyid:F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:13:37:03:96:b6:d0:19:5c:9d:dc:c5:f2:d8:6e:29:31:d7: c9:e7:f1:48:8f:94:53:f9:b8:e4:a9:45:fc:bc:df:ef:9d:ba: fd:0f:26:f6:19:b6:c6:3c:49:77:dc:84:a2:e7:1f:a2:c3:dc: 0c:05:40:0e:50:fa:e7:d9:44:30:16:bc:7e:11:79:6e:09:40: b4:72:1f:b8:53:a8:37:ae:3e:08:fa:f9:14:b3:4f:12:c7:72: 6e:22:a6:a6:da:93:22:d8:71:a4:8f:39:68:84:41:c8:da:76: ff:d5:7e:c7:51:94:d9:37:99:c5:1b:6b:76:4b:bb:22:c4:4a: 64:11:4f:04:7b:4a:e0:33:5d:87:f3:10:c8:b0:8e:22:67:e4: 9e:b9:e8:a6:59:7a:ff:a4:71:bd:a5:c9:6a:05:51:d3:f2:4e: 5f:be:c7:dd:ce:97:8d:4b:79:37:7a:38:8f:22:c9:cb:f1:54: 71:69:23:d7:68:3f:cd:c0:06:9e:87:57:c1:f3:2d:b6:7a:f2: ed:06:01:d2:5f:01:21:75:12:68:1f:67:71:cd:40:d5:3b:84: d1:45:30:b7:7b:07:02:f9:4f:b9:5d:4d:16:1d:e1:57:a6:e4: 6f:46:26:e5:61:1e:62:bb:14:0e:be:e4:79:16:16:07:fe:da: 49:16:23:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKUH8+3Mus4QrKsvnJAYYgO+3iOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQx QjQ5NEI1ODAeFw0yNjAzMjUxNTQ2MzFaFw0yNjAzMjgxODU2MzFaMDMxMTAvBgNV BAMTKDQ3OEE2NkM0QzQ5MDYzRkFBNjE0RTA0ODVDQ0FBODRGMDQ2NEY1MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/iYYTcJiPn+ZOr92+UwQ+was0 BvvY9+3idXiIKaRmhA9/mHE7sxwbD5EOhydeyqZwq2o6NgDGSqPbtXNXVDcMO/rS tnDCCv4rylc8b/0flTq9opOlHX39pE/K/xHKdRpXYswdnJZqBFm+aNfAb7KtNmUQ xXOhky52qA05SiAP+8emEI1+K6lXHIN5Q4QWBxGvj8aGponENMcBrYWbGCU9DilG Odv6k1i6bZjuiorneCbjSH81+VowckIOkMiOTAvKDVOLx99wWyIHQTV1tUWHiakn hlJRgSJkC3IjKS5GUcxjT7limjN3YMb6riOux2VT7T+KWLthyamyLHO3I6TTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR4pmxMSQY/qmFOBIXMqoTwRk9QAwHwYDVR0j BBgwFoAU88RQcWl6to/err9YIOcN3RtJS1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDliMzUxOS0zZGYzLTQ0MDYtODI4Zi0zZWJiOTFkOTI5NDQvMC9GM0M0NTA3MTY5 N0FCNjhGREVBRUJGNTgyMEU3MERERDFCNDk0QjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQxQjQ5 NEI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5YjM1MTktM2RmMy00NDA2LTgy OGYtM2ViYjkxZDkyOTQ0LzAvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBE REQxQjQ5NEI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEATNwOWttAZXJ3cxfLYbikx18nn8UiPlFP5 uOSpRfy83++duv0PJvYZtsY8SXfchKLnH6LD3AwFQA5Q+ufZRDAWvH4ReW4JQLRy H7hTqDeuPgj6+RSzTxLHcm4ipqbakyLYcaSPOWiEQcjadv/VfsdRlNk3mcUba3ZL uyLESmQRTwR7SuAzXYfzEMiwjiJn5J656KZZev+kcb2lyWoFUdPyTl++x93Ol41L eTd6OI8iycvxVHFpI9doP83ABp6HV8HzLbZ68u0GAdJfASF1EmgfZ3HNQNU7hNFF MLd7BwL5T7ldTRYd4Vem5G9GJuVhHmK7FA6+5HkWFgf+2kkWIzU= -----END CERTIFICATE-----Generated at Thu Mar 26 16:30:37 2026 by rpki-client