$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft File: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft (raw, json) Hash identifier: vKoCaTGw8r4QZ9W2pGYV+udwVEDtkVmamNqnWX8JNpk= Subject key identifier: 9B:AA:69:23:11:65:9A:78:16:CE:F5:38:C4:29:D7:E2:81:61:B4:10 Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Certificate serial: 3D69B80CAB3681A1B1A4AFD511FCE50CFB1EE8FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft Manifest number: 0566 Signing time: Wed 25 Mar 2026 22:42:24 +0000 Manifest this update: Wed 25 Mar 2026 22:37:24 +0000 Manifest next update: Sun 29 Mar 2026 08:14:24 +0000 Files and hashes: 1: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: LVzLvHlGvkclluFVEiY44EndzlPbN92fYYJEvFwmUZU=) 2: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: bOC+RmVGdVwwtAAFBHuMaIGcTf4BirQnm1dEmryUd+o=) 3: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: 0ks7Jrq8I5HGi1Y9q/tMRilmkwLdHpbwinToV9LEMG4=) 4: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: a/l5Zx5rwp7NSRqoYQhRrllZMVnmts+C/3rebqc1wt0=) 5: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: u+uBgrPGm+40zgnoGLAagJdkp/O9sV2Z6UZd95b5fdg=) 6: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: ob6mRc06BCeBAj0X28E3a80wGp9aApab42pA+hcHgrk=) 7: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl (hash: 72mpkNFe4WtRu2LFpGbhbJhEvVFcIr3fz32IV/WCDkA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:69:b8:0c:ab:36:81:a1:b1:a4:af:d5:11:fc:e5:0c:fb:1e:e8:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Validity Not Before: Mar 25 22:37:24 2026 GMT Not After : Mar 29 08:14:24 2026 GMT Subject: CN=9BAA692311659A7816CEF538C429D7E28161B410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ed:10:af:cf:3c:c7:21:bd:32:eb:c7:0a:f7: 32:3a:16:fa:ce:09:bb:2b:72:33:f8:77:5c:e1:5e: 50:ff:27:a3:14:ad:6b:b2:de:43:77:dc:45:06:9e: 17:28:f4:15:9f:66:87:ad:e7:73:80:9a:ae:d4:b6: 35:6c:f9:ef:73:54:22:86:ea:12:70:65:5d:8b:5e: 05:87:41:34:d0:f1:95:31:a8:ea:e0:40:f4:d5:71: 1d:3d:0e:54:1f:66:6f:c6:b0:74:c8:84:a6:1b:a6: ad:9b:12:22:79:24:4a:d3:d5:17:4e:bc:bb:42:2c: 6c:de:e9:5b:2d:f5:33:d8:1c:8e:81:63:28:9c:70: 3b:a5:83:91:24:a4:5c:62:48:bf:d4:73:3d:23:ae: bd:6d:e5:dd:0a:7a:87:87:c8:3f:1a:e9:76:a4:07: 12:73:6d:14:04:09:f6:57:59:14:f6:e3:ca:22:5e: d3:ac:b5:68:ea:da:de:73:f2:36:34:32:21:4a:99: cc:3a:bf:c9:1a:e1:25:45:37:b1:52:29:df:d9:bd: 4b:ee:e6:f1:e1:b8:9d:b2:b8:ab:b1:29:57:83:66: a7:2f:4d:c4:9d:7c:f6:be:49:4b:bf:4b:ec:38:ed: 24:16:c1:7f:d2:4d:ad:4d:a9:e6:1f:49:80:9b:11: e1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AA:69:23:11:65:9A:78:16:CE:F5:38:C4:29:D7:E2:81:61:B4:10 X509v3 Authority Key Identifier: keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f6:2b:2f:c9:5f:be:03:13:77:cb:1e:13:e2:b0:79:97:4b: 79:f2:29:a8:41:57:9b:ae:c8:48:01:50:7c:b8:33:d9:2e:44: 93:00:8c:b7:2a:61:cf:04:b1:77:97:df:7b:4c:5e:2a:1c:ea: d3:62:6c:49:20:52:81:aa:85:2c:51:3a:7d:f9:37:f3:11:e8: 2e:34:db:24:be:34:e2:d1:0a:2c:61:bb:7b:52:77:3c:ef:c8: 26:c8:c5:d9:f0:98:67:12:e8:33:b0:0a:f9:82:e5:0c:71:c1: e4:ab:99:26:a1:d7:77:fb:87:e0:e3:11:c1:7d:f1:64:a8:a1: bc:92:a8:b3:71:d4:22:39:ee:ff:77:3c:58:51:3f:d4:3c:62: c4:c8:74:89:77:30:7e:46:14:23:9c:81:51:f6:55:d9:11:57: 7c:c8:c3:bb:b9:59:dc:bd:76:a1:bc:57:22:ec:dd:f0:8e:34: 33:21:f4:77:10:a7:d2:f9:02:ce:40:43:8c:73:12:af:b1:b1: d2:07:fe:b3:d3:6d:de:07:1f:b4:d5:c5:df:1d:55:82:dc:24: 60:95:c5:37:89:b1:2e:6a:cf:9a:44:32:2d:3f:87:8e:e4:c5: 1d:61:fa:66:78:d5:77:b7:b2:1f:c8:9c:83:da:3b:aa:bb:cb: 3b:1a:40:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWm4DKs2gaGxpK/VEfzlDPse6PswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3 N0JFMTNDMTAeFw0yNjAzMjUyMjM3MjRaFw0yNjAzMjkwODE0MjRaMDMxMTAvBgNV BAMTKDlCQUE2OTIzMTE2NTlBNzgxNkNFRjUzOEM0MjlEN0UyODE2MUI0MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL7RCvzzzHIb0y68cK9zI6FvrO CbsrcjP4d1zhXlD/J6MUrWuy3kN33EUGnhco9BWfZoet53OAmq7UtjVs+e9zVCKG 6hJwZV2LXgWHQTTQ8ZUxqOrgQPTVcR09DlQfZm/GsHTIhKYbpq2bEiJ5JErT1RdO vLtCLGze6Vst9TPYHI6BYyiccDulg5EkpFxiSL/Ucz0jrr1t5d0KeoeHyD8a6Xak BxJzbRQECfZXWRT248oiXtOstWjq2t5z8jY0MiFKmcw6v8ka4SVFN7FSKd/ZvUvu 5vHhuJ2yuKuxKVeDZqcvTcSdfPa+SUu/S+w47SQWwX/STa1NqeYfSYCbEeFxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm6ppIxFlmngWzvU4xCnX4oFhtBAwHwYDVR0j BBgwFoAU8xjRXWjmPOvkv6AmpSafOHe+E8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDAxNDM2Yi0wMjY3LTQ2NmItYTM0MC1lMjg4ZDJlOTM0YTgvMC9GMzE4RDE1RDY4 RTYzQ0VCRTRCRkEwMjZBNTI2OUYzODc3QkUxM0MxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3N0JF MTNDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQwMTQzNmItMDI2Ny00NjZiLWEz NDAtZTI4OGQyZTkzNGE4LzAvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlG Mzg3N0JFMTNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACr2Ky/JX74DE3fLHhPisHmXS3nyKahBV5uu yEgBUHy4M9kuRJMAjLcqYc8EsXeX33tMXioc6tNibEkgUoGqhSxROn35N/MR6C40 2yS+NOLRCixhu3tSdzzvyCbIxdnwmGcS6DOwCvmC5QxxweSrmSah13f7h+DjEcF9 8WSoobySqLNx1CI57v93PFhRP9Q8YsTIdIl3MH5GFCOcgVH2VdkRV3zIw7u5Wdy9 dqG8VyLs3fCONDMh9HcQp9L5As5AQ4xzEq+xsdIH/rPTbd4HH7TVxd8dVYLcJGCV xTeJsS5qz5pEMi0/h47kxR1h+mZ41Xe3sh/InIPaO6q7yzsaQE0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:19:17 2026 by rpki-client