$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft File: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft (raw, json) Hash identifier: ZTdtMVzy1R+wMAnS4J6+cXMnqsXAQ1LAadBU0rtv+x8= Subject key identifier: 04:F2:C7:13:3D:03:D6:A9:0E:4B:1B:41:D5:95:85:88:2F:C9:A9:96 Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 Certificate issuer: /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Certificate serial: 4E34834724F1A8FE28E6AEC1E10BC7FE98FA2908 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft Manifest number: 0247 Signing time: Tue 24 Mar 2026 19:20:59 +0000 Manifest this update: Tue 24 Mar 2026 19:15:59 +0000 Manifest next update: Fri 27 Mar 2026 23:44:59 +0000 Files and hashes: 1: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: exnV2in0lMY4Abx7/bcqLUFJk6DG/znMQfleVx5p9FM=) 2: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl (hash: P2N1ThTd0+xSYlcrXXNOkFyPgQb9dhcUZMWmdWJI25A=) 3: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: J4NiRzqR7OJJpZcBvTEqABRnGVn4+G6RK0nifMHQkIc=) 4: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: Ef88gL2i03irobp5ZP/X9ru7ObHhZljwJfbQzBpUyHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:34:83:47:24:f1:a8:fe:28:e6:ae:c1:e1:0b:c7:fe:98:fa:29:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Validity Not Before: Mar 24 19:15:59 2026 GMT Not After : Mar 27 23:44:59 2026 GMT Subject: CN=04F2C7133D03D6A90E4B1B41D59585882FC9A996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:51:1d:fa:bc:5b:03:f0:7b:10:99:55:7b:14: 30:8e:11:84:c1:a3:33:fa:21:63:e0:50:84:4a:fe: 16:a9:6b:f2:07:9b:eb:0e:c2:2b:4d:94:cc:5e:56: 94:55:7d:67:a9:d6:0b:d5:f0:bd:fd:c5:be:ee:c2: e9:a3:a2:47:e8:5b:f2:a6:2e:27:e7:c2:21:0c:05: 7a:b6:8a:34:07:b5:a3:af:79:64:43:90:16:13:a1: 41:ab:ac:6a:26:35:3e:e5:0d:7e:e4:f1:62:d8:a0: 8f:87:df:5d:1b:c1:51:1f:23:73:0d:ce:f3:9c:23: 4c:5c:38:8b:ef:6b:bb:12:41:d7:82:fc:78:f5:b2: 63:aa:de:fe:5f:72:f7:10:9d:f6:32:a5:f8:e8:34: 4d:ff:3b:c0:0a:a8:58:0e:71:5c:01:c6:c8:85:16: 2c:d0:86:cd:c3:94:3b:7c:46:9d:45:99:28:10:3b: c9:33:a4:2a:31:d4:48:ca:41:e2:f5:17:fb:fe:d4: 61:2b:ee:f8:f8:18:97:2e:39:97:29:cb:ec:3f:6b: aa:d5:fe:db:04:a4:1e:11:10:87:1f:e0:5d:63:08: dd:ca:86:5d:fa:6c:d2:c4:d2:d5:f3:41:28:97:4b: c0:5d:cb:15:c0:6b:76:c1:b6:1d:d0:95:37:30:c9: c4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F2:C7:13:3D:03:D6:A9:0E:4B:1B:41:D5:95:85:88:2F:C9:A9:96 X509v3 Authority Key Identifier: keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ee:05:23:e4:7c:52:37:4e:2d:ab:f2:41:df:1c:44:c7:c7:77: 1d:c7:45:5e:0b:d6:73:a0:ac:47:e2:12:3a:aa:e6:13:ed:44: f9:cb:99:5d:58:2c:36:ed:32:48:5e:90:9f:52:b9:7e:fd:7a: 13:8e:78:62:df:7c:c3:81:80:c4:c1:ca:d1:1a:43:8a:0b:19: 83:74:67:b5:5a:d7:71:ff:50:d3:1c:3d:96:2b:9b:05:1a:79: ef:c3:ad:e4:49:75:20:dc:34:7a:a6:12:eb:a7:fb:50:c4:fb: 31:6c:21:37:4e:63:63:33:e3:4e:5c:1e:74:df:d8:35:2d:28: 34:a0:ef:31:5e:1d:38:e2:0b:bf:9f:a4:67:cd:6b:a8:48:dc: 87:d9:b9:60:c8:ec:2c:41:5f:18:75:25:ce:f9:52:5e:58:c8: b6:56:61:27:8e:fb:09:10:59:7f:0c:ea:df:3e:0f:f5:9a:14: 27:21:9f:28:d2:92:af:a0:7b:51:91:83:d0:e5:40:0e:63:22: 4b:9f:c7:64:8a:d0:aa:f8:ef:1e:b5:3e:8f:17:79:9c:21:24: 39:6a:fb:c3:7a:c0:a8:dd:ce:44:f8:72:9f:a1:7a:14:a5:ed: e4:a3:fa:36:93:b1:fc:9f:f6:68:f1:8d:6b:af:e5:94:40:c5: 40:b0:54:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTjSDRyTxqP4o5q7B4QvH/pj6KQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1 NTA1RUQzMDAeFw0yNjAzMjQxOTE1NTlaFw0yNjAzMjcyMzQ0NTlaMDMxMTAvBgNV BAMTKDA0RjJDNzEzM0QwM0Q2QTkwRTRCMUI0MUQ1OTU4NTg4MkZDOUE5OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCUR36vFsD8HsQmVV7FDCOEYTB ozP6IWPgUIRK/hapa/IHm+sOwitNlMxeVpRVfWep1gvV8L39xb7uwumjokfoW/Km LifnwiEMBXq2ijQHtaOveWRDkBYToUGrrGomNT7lDX7k8WLYoI+H310bwVEfI3MN zvOcI0xcOIvva7sSQdeC/Hj1smOq3v5fcvcQnfYypfjoNE3/O8AKqFgOcVwBxsiF FizQhs3DlDt8Rp1FmSgQO8kzpCox1EjKQeL1F/v+1GEr7vj4GJcuOZcpy+w/a6rV /tsEpB4REIcf4F1jCN3Khl36bNLE0tXzQSiXS8BdyxXAa3bBth3QlTcwycQDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBPLHEz0D1qkOSxtB1ZWFiC/JqZYwHwYDVR0j BBgwFoAUOZ+EEY7e+q1d2TZzv9Ybn1UF7TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmMxMjcwMy1mMWY3LTQzYzktYTIyMC05MmVkZDg2ZWZlNWUvMC8zOTlGODQxMThF REVGQUFENUREOTM2NzNCRkQ2MUI5RjU1MDVFRDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1NTA1 RUQzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFC OUY1NTA1RUQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO4FI+R8UjdOLavyQd8cRMfHdx3HRV4L1nOg rEfiEjqq5hPtRPnLmV1YLDbtMkhekJ9SuX79ehOOeGLffMOBgMTBytEaQ4oLGYN0 Z7Va13H/UNMcPZYrmwUaee/DreRJdSDcNHqmEuun+1DE+zFsITdOY2Mz405cHnTf 2DUtKDSg7zFeHTjiC7+fpGfNa6hI3IfZuWDI7CxBXxh1Jc75Ul5YyLZWYSeO+wkQ WX8M6t8+D/WaFCchnyjSkq+ge1GRg9DlQA5jIkufx2SK0Kr47x61Po8XeZwhJDlq +8N6wKjdzkT4cp+hehSl7eSj+jaTsfyf9mjxjWuv5ZRAxUCwVGU= -----END CERTIFICATE-----Generated at Thu Mar 26 17:25:53 2026 by rpki-client