$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json) Hash identifier: OEDaEi/anusUSF+IMum3UB32zDvOunhUp8w8YQ+s3YM= Subject key identifier: 65:0F:32:03:67:3C:C7:10:77:64:DB:91:C2:6D:64:59:3C:8D:49:8B Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 2E58FE9FD23721B2F3113C92D24031F2E146BB30 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft Manifest number: 056E Signing time: Thu 26 Mar 2026 03:17:03 +0000 Manifest this update: Thu 26 Mar 2026 03:12:03 +0000 Manifest next update: Sun 29 Mar 2026 08:46:03 +0000 Files and hashes: 1: 24D5D46277BE98F80EC6AF901FD4322AA2FAB208.cer (hash: t0TI2xUV9CSJIC6Ugf/2mUDyvpKoJrWf1xg05ApUJ+s=) 2: 3135312e3135382e38342e302f32332d3234203d3e20313534343737.roa (hash: IT9x0P/3RDDAHWuOeI/lOb1Fh67e62i5Nd9Bu80+ylI=) 3: 3135312e3135382e3233342e302f32342d3234203d3e20313534353230.roa (hash: /mPQp0zRLRixv4ruZ9YF3ierQjYd2QtemmGEIe6D21s=) 4: 3135312e3135382e31302e302f32332d3234203d3e20313331303735.roa (hash: cqvatD7Cg6pNEzgIw2WwWbtZBJHhttbVP+mmzWaLbBQ=) 5: 3135312e3135382e3230342e302f32332d3234203d3e20313534353232.roa (hash: DjXkhi3atbqk0A2teZVs4TmRpsS8LWjuJgAMaAjN4zY=) 6: 3135312e3135382e39322e302f32332d3234203d3e20313534343739.roa (hash: TL6kftFt7vP2GTuixxW6r7zs8Ky4SmBEeLPTG5yr9A0=) 7: 1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer (hash: fewpVNLy6/HRvoDNDTlZwpVW2bZGk39++Q7XR4HP7Tk=) 8: 3135312e3135382e3138362e302f32342d3234203d3e20313338393930.roa (hash: FbCxZ9NqNkRJEcyQ+Z9e28f1jgxdu0y84ManyawEjFs=) 9: 3135312e3135382e3235302e302f32342d3234203d3e20313432353636.roa (hash: snY8hCWpMQz3894nERSOV1ZUgmPo7DqaG6a4ucnpn8M=) 10: 3135312e3135382e3138372e302f32342d3234203d3e20313432353434.roa (hash: L/WdMdCAwsC0GOHs4/vQ2hYemSSZju15ZjyEZqkYmxU=) 11: 3135312e3135382e3233362e302f32332d3234203d3e20313534353233.roa (hash: 52qrDnM09tRZ9PTF92Y51pJWQ24eofPJfXULRl1uZ6c=) 12: 3135312e3135382e3133322e302f32332d3234203d3e20313334373238.roa (hash: 5lVjSKtWrmhtWPL47yMhwEDIaCukaKyrxLX70Wi5Smo=) 13: 3135312e3135382e3130362e302f32332d3234203d3e20313534343934.roa (hash: AZthBup3GN43JmRthTYHXFQog/yv2zTfPqeXiB57+AA=) 14: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: pTetVIjMw/HuQWdeII4UPbokdYNhDLd7y++lZpaMIUk=) 15: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: 5GheOB3UnfwRWeCo8/5o8Y/Ft2slsbsMBmf5vac32Sw=) 16: 38322e3135382e3132382e302f31392d3234203d3e2039333431.roa (hash: kXLN0HaZu/PhLPiFi30mit71JHQuO6u1X5gZIB305jg=) 17: 3135312e3135382e34322e302f32332d3234203d3e20313534343935.roa (hash: HOZT2Ynqka+xtNavl4KWOoX/MgQf9aLmuSZguGcd2u4=) 18: 3135312e3135382e3234302e302f32332d3234203d3e20313534353237.roa (hash: dM4L9Ic4RBC7usWTGbce/eZBXoOgJht8T0TuRtZKZGg=) 19: 3135312e3135382e3230332e302f32342d3234203d3e20313336373833.roa (hash: NPFmuPD5p1q4xsC0OUpbrvvz76wi/OaRGYsWFjn+/80=) 20: 3135312e3135382e3137362e302f32342d3234203d3e20313534353039.roa (hash: sij2ghOb/bHaf6sAnwpAnK7H2xX31zIFc2+5Lb2x4RM=) 21: 3135312e3135382e35362e302f32332d3234203d3e20313432323538.roa (hash: eQeLFKLBPCDpd3UM2/Z4NimaOA9d7w4AVtrEMyVO6ds=) 22: 3135312e3135382e342e302f32332d3234203d3e20313432313938.roa (hash: AFjW+EEHhzoA6cLg/0TGjATfpii/CqiAmCZUF80TZ90=) 23: 3135312e3135382e33362e302f32332d3234203d3e20313432323330.roa (hash: JlCq+CeQI0IRGssW+fbcqNZoEnvUp/ZiGtyW7tWM+TY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:58:fe:9f:d2:37:21:b2:f3:11:3c:92:d2:40:31:f2:e1:46:bb:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Mar 26 03:12:03 2026 GMT Not After : Mar 29 08:46:03 2026 GMT Subject: CN=650F3203673CC7107764DB91C26D64593C8D498B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8e:d3:70:fe:38:0d:42:53:4e:5f:f1:83:eb: 9e:e8:3a:85:42:7b:0c:47:6c:09:e4:1b:6e:ad:af: ab:0a:15:06:04:cf:f2:81:8c:7b:78:0e:75:cf:89: 41:78:24:33:12:c1:15:a8:5a:60:5c:54:91:fd:79: 57:2d:99:0e:e8:87:63:ee:5d:f2:d8:e6:11:2e:13: a3:73:4d:48:ea:2e:6f:cc:ac:ee:88:94:45:01:cc: 7a:ae:ba:9a:09:ff:62:a1:ad:7f:c7:01:15:72:c0: d4:b3:23:46:e5:f2:bd:5d:18:12:be:44:53:f1:2c: 51:e0:28:b4:8e:00:57:bd:0e:93:45:20:ec:f7:d5: 0d:7d:37:74:f4:b6:38:6e:98:6c:ad:23:f9:48:bd: 5d:89:41:ef:ab:32:2c:49:36:ee:58:fd:de:e6:f3: ad:34:6e:ed:77:69:91:21:47:9a:5b:f3:f1:b1:3c: 62:5f:09:19:88:1d:04:b9:75:58:56:e0:4b:7a:4d: a8:75:22:73:eb:1d:d6:25:0c:b0:0d:2b:fc:81:4d: 09:9d:8b:92:f6:be:ea:1a:7c:55:12:a7:52:6c:e6: 7a:5d:72:52:3c:32:b2:56:0d:af:90:ac:2a:87:a6: a5:cc:8f:fe:c3:79:42:b1:07:3c:86:78:9e:9f:79: 64:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0F:32:03:67:3C:C7:10:77:64:DB:91:C2:6D:64:59:3C:8D:49:8B X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d6:f0:e9:8f:b0:56:ef:45:e2:f3:95:9d:58:68:dc:cd:b8: 5a:c6:cf:35:01:77:62:2e:41:3b:59:0f:09:ba:53:ad:ad:68: 2b:3c:78:48:f6:c4:3a:c6:97:14:88:d8:e3:61:91:d1:36:94: 00:37:a1:50:32:e5:d3:e3:37:d3:06:42:3b:e0:34:76:c2:fe: 5e:49:d8:57:eb:c9:8b:e9:cf:9c:aa:d2:bd:20:05:45:ff:f0: 78:f3:c2:05:b2:8c:95:72:ba:39:40:d1:87:1b:4f:98:9f:65: c4:e7:d5:46:4d:10:55:05:b0:e1:2d:e7:7f:dd:6b:e2:8b:8e: d2:21:b2:88:61:27:e5:69:3f:89:6b:ff:64:29:15:81:a8:a5: e9:26:e3:6e:ed:23:02:94:30:20:34:34:db:b1:62:15:f5:7c: 08:66:1b:a4:8f:f5:48:cc:7d:60:7f:ae:14:d8:b7:a4:58:44: 06:1c:28:b7:28:bd:cb:71:10:83:26:e2:22:4e:30:8b:83:15: 47:46:23:76:48:0c:00:e7:74:13:fd:2d:3b:81:e7:84:00:c9: 85:5c:bb:3a:d4:e4:57:c3:aa:24:6e:35:3a:9d:a2:62:97:e2: 85:a0:b6:03:b0:04:12:93:4e:ff:a7:8c:5e:28:3b:44:3d:4e: e4:a6:b4:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIULlj+n9I3IbLzETyS0kAx8uFGuzAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI2MDMyNjAzMTIwM1oX DTI2MDMyOTA4NDYwM1owMzExMC8GA1UEAxMoNjUwRjMyMDM2NzNDQzcxMDc3NjRE QjkxQzI2RDY0NTkzQzhENDk4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANmO03D+OA1CU05f8YPrnug6hUJ7DEdsCeQbbq2vqwoVBgTP8oGMe3gOdc+J QXgkMxLBFahaYFxUkf15Vy2ZDuiHY+5d8tjmES4To3NNSOoub8ys7oiURQHMeq66 mgn/YqGtf8cBFXLA1LMjRuXyvV0YEr5EU/EsUeAotI4AV70Ok0Ug7PfVDX03dPS2 OG6YbK0j+Ui9XYlB76syLEk27lj93ubzrTRu7XdpkSFHmlvz8bE8Yl8JGYgdBLl1 WFbgS3pNqHUic+sd1iUMsA0r/IFNCZ2Lkva+6hp8VRKnUmzmel1yUjwyslYNr5Cs KoempcyP/sN5QrEHPIZ4np95ZC0CAwEAAaOCAgkwggIFMB0GA1UdDgQWBBRlDzID ZzzHEHdk25HCbWRZPI1JizAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9bw6Y+w Vu9F4vOVnVho3M24WsbPNQF3Yi5BO1kPCbpTra1oKzx4SPbEOsaXFIjY42GR0TaU ADehUDLl0+M30wZCO+A0dsL+XknYV+vJi+nPnKrSvSAFRf/wePPCBbKMlXK6OUDR hxtPmJ9lxOfVRk0QVQWw4S3nf91r4ouO0iGyiGEn5Wk/iWv/ZCkVgail6Sbjbu0j ApQwIDQ027FiFfV8CGYbpI/1SMx9YH+uFNi3pFhEBhwotyi9y3EQgybiIk4wi4MV R0YjdkgMAOd0E/0tO4HnhADJhVy7OtTkV8OqJG41Op2iYpfihaC2A7AEEpNO/6eM Xig7RD1O5Ka0zw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:39:39 2026 by rpki-client