$ rpki-client -vvf repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft File: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft (raw, json) Hash identifier: yAVB4sRvtuEIblslUc2jnki8xd9eKHMy7yCKEK1GT/o= Subject key identifier: A0:DD:63:6B:7E:4E:B8:9B:7E:BD:A2:5B:E4:E8:52:48:12:26:C4:62 Authority key identifier: F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D Certificate issuer: /CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Certificate serial: 0E58FE414603F4FD3F131220D22404BF676A62FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft Manifest number: 01D2 Signing time: Mon 23 Mar 2026 21:22:24 +0000 Manifest this update: Mon 23 Mar 2026 21:17:24 +0000 Manifest next update: Fri 27 Mar 2026 05:32:24 +0000 Files and hashes: 1: 3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (hash: BC5B2GF9VTfzPbd5lot6DqU5Mr48ZffzIu7OMz01VQI=) 2: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl (hash: mbbXcxgmHVoLI1QJfuhtgt7bPmJKJJqL04tdDVwvGFk=) 3: 3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa (hash: rsMro+val7v1wrwhLknq6/6YpaGLKJ+zkAstX6h2R5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:58:fe:41:46:03:f4:fd:3f:13:12:20:d2:24:04:bf:67:6a:62:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Validity Not Before: Mar 23 21:17:24 2026 GMT Not After : Mar 27 05:32:24 2026 GMT Subject: CN=A0DD636B7E4EB89B7EBDA25BE4E852481226C462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:99:4e:49:b0:20:4e:22:8f:79:32:91:39:a6: 9f:18:5c:22:fd:06:52:9f:f3:77:ad:3e:b0:c6:cc: 9d:e3:37:c7:05:64:f9:06:19:61:67:75:69:9d:2c: fd:43:21:e2:a1:8f:6f:0a:a3:c5:63:a3:b9:b6:7a: da:82:56:bb:c7:57:21:80:59:b6:fb:bb:cf:26:a7: a6:3d:a9:43:87:9e:b4:4d:89:ca:96:4f:0d:18:a0: 52:50:6e:14:a1:e3:54:29:4a:68:be:ef:22:a0:ac: 19:f2:9c:2d:5c:97:bb:4e:9b:f5:37:31:8a:40:bd: 21:91:a9:33:c5:eb:e6:e3:9d:05:f2:a9:33:b0:3e: c0:36:9d:7d:99:9c:06:f3:e1:cf:b6:b7:5b:d3:5f: 3c:de:2a:6b:39:a9:7f:e6:db:41:79:3a:4b:37:51: 06:52:0d:1d:f9:24:b4:bb:77:fd:44:ae:0c:da:80: e2:22:a4:c1:4a:84:09:b0:e2:6a:ff:7a:6f:91:b3: 11:2b:87:c7:c5:8e:3c:46:c3:cd:35:f6:a5:be:47: 32:54:25:29:19:f2:2c:a9:96:e1:4f:c8:e3:50:5a: 4e:e9:fd:fb:c7:5a:75:01:cd:e7:b5:9e:8e:20:99: 41:64:c7:14:79:b0:c5:b3:96:c3:55:95:f4:78:8b: c8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DD:63:6B:7E:4E:B8:9B:7E:BD:A2:5B:E4:E8:52:48:12:26:C4:62 X509v3 Authority Key Identifier: keyid:F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:d5:98:b2:e3:55:f8:ee:88:21:f5:ac:d1:bb:36:af:52:c3: 18:57:7f:5d:80:43:03:a1:f4:50:18:60:b7:ed:47:e2:b8:5f: 27:7c:c6:67:73:f7:cc:ad:2c:4d:f1:83:c0:00:89:eb:63:18: 8f:e6:6d:57:bc:95:f4:d9:33:d1:e2:b2:01:44:9b:57:d4:d4: 01:92:9f:c8:16:0a:e5:d9:42:03:b3:23:d0:91:0a:4e:f5:aa: 34:d4:6f:85:cd:ca:43:49:2d:41:b5:1c:1a:7c:c4:8a:ea:2e: 70:34:fd:e6:a7:ee:e7:92:d9:d5:b1:29:27:f1:03:97:37:98: 49:4a:00:98:79:44:6e:ac:b9:ff:9d:0e:fc:e6:8e:30:64:72: 54:2d:2b:79:2f:31:57:af:4b:34:a1:c7:44:7e:5e:20:18:06: 2e:a7:d1:0a:74:29:8a:75:cd:ab:cd:24:c9:68:65:dc:81:21: cd:3a:8b:b7:70:26:c4:a8:29:d6:9f:3e:1b:1c:1d:9e:e4:c9: dc:21:ad:d8:0e:43:5f:d5:06:77:27:03:7f:c2:63:f3:e8:20: 06:96:ae:1e:93:20:1f:f5:23:b2:db:2f:e8:dc:79:af:07:af: f5:2a:de:1c:4c:99:10:ad:a3:22:cb:eb:0e:81:da:48:fa:55: 0c:38:82:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDlj+QUYD9P0/ExIg0iQEv2dqYv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJG MUU5RjY3RDAeFw0yNjAzMjMyMTE3MjRaFw0yNjAzMjcwNTMyMjRaMDMxMTAvBgNV BAMTKEEwREQ2MzZCN0U0RUI4OUI3RUJEQTI1QkU0RTg1MjQ4MTIyNkM0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDemU5JsCBOIo95MpE5pp8YXCL9 BlKf83etPrDGzJ3jN8cFZPkGGWFndWmdLP1DIeKhj28Ko8Vjo7m2etqCVrvHVyGA Wbb7u88mp6Y9qUOHnrRNicqWTw0YoFJQbhSh41QpSmi+7yKgrBnynC1cl7tOm/U3 MYpAvSGRqTPF6+bjnQXyqTOwPsA2nX2ZnAbz4c+2t1vTXzzeKms5qX/m20F5Oks3 UQZSDR35JLS7d/1ErgzagOIipMFKhAmw4mr/em+RsxErh8fFjjxGw8019qW+RzJU JSkZ8iypluFPyONQWk7p/fvHWnUBzee1no4gmUFkxxR5sMWzlsNVlfR4i8jZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoN1ja35OuJt+vaJb5OhSSBImxGIwHwYDVR0j BBgwFoAU8DSZs8/CXHxQjBRGKsQmi/Hp9n0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDA0ZTUzMC0yZmNmLTRjZDYtYjA1Yy1lYjNjMGMxMzU2MDgvMC9GMDM0OTlCM0NG QzI1QzdDNTA4QzE0NDYyQUM0MjY4QkYxRTlGNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJGMUU5 RjY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTAwNGU1MzAtMmZjZi00Y2Q2LWIw NWMtZWIzYzBjMTM1NjA4LzAvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2 OEJGMUU5RjY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvVmLLjVfjuiCH1rNG7Nq9SwxhXf12AQwOh 9FAYYLftR+K4Xyd8xmdz98ytLE3xg8AAietjGI/mbVe8lfTZM9HisgFEm1fU1AGS n8gWCuXZQgOzI9CRCk71qjTUb4XNykNJLUG1HBp8xIrqLnA0/ean7ueS2dWxKSfx A5c3mElKAJh5RG6suf+dDvzmjjBkclQtK3kvMVevSzShx0R+XiAYBi6n0Qp0KYp1 zavNJMloZdyBIc06i7dwJsSoKdafPhscHZ7kydwhrdgOQ1/VBncnA3/CY/PoIAaW rh6TIB/1I7LbL+jcea8Hr/Uq3hxMmRCtoyLL6w6B2kj6VQw4goM= -----END CERTIFICATE-----Generated at Thu Mar 26 07:25:45 2026 by rpki-client