$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: AnwUyCYdDK7li+Rq/+S3pVknILVgSAFwpEj0vYtQjVc= Subject key identifier: 3C:A7:13:B1:66:10:80:BF:EE:9B:B4:37:B0:B6:61:03:1B:3B:DA:57 Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 6CDF793E37CF99095FE3848AB2C50162C2C2C0C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 0568 Signing time: Tue 24 Mar 2026 20:21:14 +0000 Manifest this update: Tue 24 Mar 2026 20:16:14 +0000 Manifest next update: Sat 28 Mar 2026 03:08:14 +0000 Files and hashes: 1: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: OD6ds+KTm//KkPIe0CnHbGgyxy24D56HEq7afLGbIc8=) 2: 3130332e3130302e3138302e302f32342d3234203d3e203435333035.roa (hash: FyAvBZY6W2L1HwVaWtdBn1JjIwyZj/UZUwMR3y/jc5Q=) 3: 3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa (hash: +Ohb8AmL80BPgaiVvFCd/BXY6tohGQvqr2SFVpjVHPk=) 4: 3130332e3130302e3138312e302f32342d3234203d3e203435333035.roa (hash: lt8611+icqcOlcb0vp3/L3lkdrCllwLsjssGKj3PZL0=) 5: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: S3hCOOrJdMdwVUhxvmD1LgRfK2KUvkwx0Y4KxbZtAOY=) 6: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: HP2CIuQ7HdSouFMxhc4gbLPN64fDpck7CCz5j9Fedrs=) 7: 3130332e3130302e3138302e302f32332d3234203d3e203435333035.roa (hash: 2OHD4uzXRRC+UwdGonPOMWJEcqOJBkhkj3qw69Y3hzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:df:79:3e:37:cf:99:09:5f:e3:84:8a:b2:c5:01:62:c2:c2:c0:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Mar 24 20:16:14 2026 GMT Not After : Mar 28 03:08:14 2026 GMT Subject: CN=3CA713B1661080BFEE9BB437B0B661031B3BDA57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0b:72:61:c4:82:2c:4b:3e:22:2b:6e:b1:2f: df:00:2f:de:8c:94:3c:ba:88:fb:2c:27:8f:1b:a4: a2:52:d2:0d:6d:08:ce:98:9c:5a:dd:a6:67:01:01: 3b:7e:2c:ca:06:ea:e7:37:51:2a:ff:dd:70:dc:37: ec:70:3d:8f:e1:73:08:5d:5b:12:00:46:e0:69:56: cc:c2:82:dc:4a:27:8a:ed:3f:11:b0:41:b3:cf:68: 77:6a:e2:4c:d6:33:2b:37:f4:ad:35:97:23:1d:0c: 8b:92:61:d4:be:b1:a0:12:57:e5:7e:f1:3f:b2:92: a7:9b:22:df:31:a0:a6:61:24:4c:48:da:3f:ed:91: a9:e8:fd:29:6d:48:41:74:0e:c4:e0:5b:46:ff:d3: 25:1a:55:cd:cf:e8:94:10:a8:bc:86:b6:71:07:02: fb:4d:e3:b7:ca:26:4a:9c:e3:1a:88:46:62:bf:55: 73:da:d4:7c:cf:d3:70:72:af:ee:ea:ae:ee:d5:35: 61:77:80:01:16:aa:f2:6b:6c:f0:61:fe:16:f5:a3: db:78:84:c5:c7:b9:e1:5d:2a:44:d8:d6:27:c9:76: 78:6f:06:12:c8:dc:38:1f:66:8d:aa:04:90:8b:ad: a2:a5:54:ce:ba:8c:b5:54:3d:29:f9:08:29:60:cd: c0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A7:13:B1:66:10:80:BF:EE:9B:B4:37:B0:B6:61:03:1B:3B:DA:57 X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2a:29:b5:1b:cc:37:98:fd:a9:21:a1:6c:b4:49:92:75:4e: 1c:eb:e4:32:ce:11:17:82:81:3f:59:9a:74:48:c0:6b:9f:f9: bf:bb:70:04:46:6b:9b:b1:53:07:ce:cd:31:09:a1:f5:cf:5f: dc:1f:90:f8:59:3e:27:11:13:da:c0:5c:37:41:31:62:cf:ad: dc:d3:4d:e8:2d:3b:18:8e:f4:61:ba:65:35:ee:f4:d0:55:d3: d3:8d:ca:c6:72:b7:b9:a5:f2:b0:b0:e0:f7:53:ec:4e:0e:96: 40:bd:f0:8e:30:8c:05:51:51:de:8b:1f:f5:63:1c:d0:6a:d9: 90:c0:bd:ce:af:3d:37:54:4d:34:2a:7f:ab:eb:0a:78:bd:0a: 14:b1:a6:5c:ce:fb:df:a4:05:4d:a6:db:0c:1c:05:08:3a:fd: 8d:34:ff:39:ad:9d:9f:ab:66:e3:37:77:a5:87:f7:ef:01:f4: 1a:41:5e:9d:2f:cc:db:29:74:3b:1a:fe:9d:99:98:fe:30:81: da:4e:0f:5b:52:c7:95:c3:f7:f3:fb:6c:2a:1b:05:72:71:74: c9:05:da:9b:fb:55:ac:05:ad:92:97:24:55:b1:cf:4e:dd:90: 20:53:b7:35:ca:79:df:fb:06:8c:62:b3:fe:8a:14:52:3c:e4: 8a:31:a9:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbN95PjfPmQlf44SKssUBYsLCwMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNjAzMjQyMDE2MTRaFw0yNjAzMjgwMzA4MTRaMDMxMTAvBgNV BAMTKDNDQTcxM0IxNjYxMDgwQkZFRTlCQjQzN0IwQjY2MTAzMUIzQkRBNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0C3JhxIIsSz4iK26xL98AL96M lDy6iPssJ48bpKJS0g1tCM6YnFrdpmcBATt+LMoG6uc3USr/3XDcN+xwPY/hcwhd WxIARuBpVszCgtxKJ4rtPxGwQbPPaHdq4kzWMys39K01lyMdDIuSYdS+saASV+V+ 8T+ykqebIt8xoKZhJExI2j/tkano/SltSEF0DsTgW0b/0yUaVc3P6JQQqLyGtnEH AvtN47fKJkqc4xqIRmK/VXPa1HzP03Byr+7qru7VNWF3gAEWqvJrbPBh/hb1o9t4 hMXHueFdKkTY1ifJdnhvBhLI3DgfZo2qBJCLraKlVM66jLVUPSn5CClgzcBPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPKcTsWYQgL/um7Q3sLZhAxs72lcwHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwqKbUbzDeY/akhoWy0SZJ1Thzr5DLOEReC gT9ZmnRIwGuf+b+7cARGa5uxUwfOzTEJofXPX9wfkPhZPicRE9rAXDdBMWLPrdzT TegtOxiO9GG6ZTXu9NBV09ONysZyt7ml8rCw4PdT7E4OlkC98I4wjAVRUd6LH/Vj HNBq2ZDAvc6vPTdUTTQqf6vrCni9ChSxplzO+9+kBU2m2wwcBQg6/Y00/zmtnZ+r ZuM3d6WH9+8B9BpBXp0vzNspdDsa/p2ZmP4wgdpOD1tSx5XD9/P7bCobBXJxdMkF 2pv7VawFrZKXJFWxz07dkCBTtzXKed/7Boxis/6KFFI85Ioxqeo= -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:09 2026 by rpki-client