$ rpki-client -vvf repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft File: 03832B38693F0F23EF49480775A2493B9E3F7FA0.mft (raw, json) Hash identifier: 2jlFg+XRigiPF6K/UlIcFtn8ehldWeDqgJMl05pDBEE= Subject key identifier: C7:F6:6E:93:EA:05:DA:F3:CB:17:8E:31:EA:F9:5D:DF:E5:B2:87:CD Authority key identifier: 03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 Certificate issuer: /CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Certificate serial: 30730E6D63EA9830330205000BB8968724FD9FD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft Manifest number: 0380 Signing time: Thu 26 Mar 2026 08:00:59 +0000 Manifest this update: Thu 26 Mar 2026 07:55:59 +0000 Manifest next update: Sun 29 Mar 2026 11:54:59 +0000 Files and hashes: 1: 03832B38693F0F23EF49480775A2493B9E3F7FA0.crl (hash: fLD/Q+s1TLwZmFJENQstFydMbTPVdlGwVCARs4P+7A8=) 2: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: C109hu1BJkl1pWWKKoRbk9sf7Lmm7AwONWDQ76EwY1Q=) 3: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: pmzgckCGAS5Ljr2SgdcTD9JmH8nize0p1NnNdSRs+P0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:73:0e:6d:63:ea:98:30:33:02:05:00:0b:b8:96:87:24:fd:9f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Validity Not Before: Mar 26 07:55:59 2026 GMT Not After : Mar 29 11:54:59 2026 GMT Subject: CN=C7F66E93EA05DAF3CB178E31EAF95DDFE5B287CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:ff:60:a2:aa:20:58:bd:57:e6:93:12:78: 68:48:b2:3f:d4:17:9d:ab:41:e6:b7:ec:3b:06:0c: 0a:d9:38:f4:d4:d2:4b:d4:fa:6a:f1:8d:83:b8:00: a5:e5:2d:fe:bf:11:8e:a5:e5:24:e5:a7:be:18:17: c7:d9:25:76:2d:a7:b1:a4:be:77:4c:8c:9c:a1:68: d9:bd:1f:11:f7:2f:93:34:98:af:77:16:cc:d9:01: 9a:46:15:e6:19:ba:26:ff:f3:a0:53:70:b1:c8:ba: c5:07:15:cf:e2:7b:6e:12:66:d3:43:44:c5:7f:6a: 7b:51:0c:43:3f:87:12:44:1e:fd:9e:ff:21:5c:82: 63:20:8e:4c:69:d4:78:71:75:7b:d1:a0:60:f5:b3: 0e:4e:97:2e:57:91:06:f3:96:58:d9:c3:f5:7a:6c: a3:2e:17:4c:be:e6:d3:5d:fa:59:fe:4a:80:db:42: e7:8f:42:3f:90:62:e9:b1:ba:2d:4d:82:b9:8d:2b: 33:9b:a9:3e:48:1b:d4:3d:73:07:91:03:7d:48:41: e5:f9:71:2c:48:34:83:51:e5:9b:65:59:24:93:d6: 52:38:64:4f:c8:d5:77:ee:6a:ec:70:ab:48:9a:2a: bd:d4:f8:f5:d4:ac:37:9f:65:52:8d:e7:2e:52:54: 19:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F6:6E:93:EA:05:DA:F3:CB:17:8E:31:EA:F9:5D:DF:E5:B2:87:CD X509v3 Authority Key Identifier: keyid:03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:94:33:26:10:e5:5d:c0:b0:19:f7:b8:17:d4:95:17:6a:c9: 14:b5:ec:9e:f2:6b:46:9d:f8:79:d9:49:e1:0a:7c:30:de:a0: 92:e1:96:a5:d2:cf:2c:e9:f3:da:af:12:10:91:0a:80:0a:d6: f2:63:52:fe:30:77:c2:52:8a:a9:0b:c9:7c:08:59:48:f2:fd: 4c:2f:2a:18:5d:e0:18:e0:b0:0d:2e:51:a9:08:06:01:3e:8a: 26:0f:fa:b6:7e:08:0b:4d:90:b2:86:0b:36:b2:5f:e4:39:26: c8:08:76:80:e1:d5:91:d5:6e:ac:bd:2a:03:ba:ae:57:91:a6: 36:0f:e7:9d:ec:99:39:7f:79:00:2a:ed:5a:ce:52:14:06:e2: e2:cb:8b:55:77:33:cd:7b:b0:4e:c6:2f:15:05:3b:72:5a:e5: 70:dc:a1:48:77:84:81:d7:3b:eb:60:77:1f:af:ab:4a:fe:de: 2b:79:6a:14:a9:1e:dd:42:b9:43:c4:77:b7:a1:4a:96:2c:71: 67:a6:a1:18:0b:03:9a:7d:ae:45:64:97:7f:fa:5e:b3:b0:1d: 7c:d1:20:ef:53:1b:3a:bd:20:a0:c3:0d:55:64:62:97:ad:10: 1a:dc:bc:de:60:e2:90:ad:04:46:8c:13:a9:b1:ac:a8:66:7f: 58:42:49:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMHMObWPqmDAzAgUAC7iWhyT9n9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5 RTNGN0ZBMDAeFw0yNjAzMjYwNzU1NTlaFw0yNjAzMjkxMTU0NTlaMDMxMTAvBgNV BAMTKEM3RjY2RTkzRUEwNURBRjNDQjE3OEUzMUVBRjk1RERGRTVCMjg3Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL7P9goqogWL1X5pMSeGhIsj/U F52rQea37DsGDArZOPTU0kvU+mrxjYO4AKXlLf6/EY6l5STlp74YF8fZJXYtp7Gk vndMjJyhaNm9HxH3L5M0mK93FszZAZpGFeYZuib/86BTcLHIusUHFc/ie24SZtND RMV/antRDEM/hxJEHv2e/yFcgmMgjkxp1HhxdXvRoGD1sw5Oly5XkQbzlljZw/V6 bKMuF0y+5tNd+ln+SoDbQuePQj+QYumxui1NgrmNKzObqT5IG9Q9cweRA31IQeX5 cSxININR5ZtlWSST1lI4ZE/I1Xfuauxwq0iaKr3U+PXUrDefZVKN5y5SVBmtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx/Zuk+oF2vPLF44x6vld3+Wyh80wHwYDVR0j BBgwFoAUA4MrOGk/DyPvSUgHdaJJO54/f6AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmVkMDU4NC1hYzJkLTQ2NjQtYmMxMS1kMDI2ZGRiZmFmN2MvMC8wMzgzMkIzODY5 M0YwRjIzRUY0OTQ4MDc3NUEyNDkzQjlFM0Y3RkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5RTNG N0ZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlZDA1ODQtYWMyZC00NjY0LWJj MTEtZDAyNmRkYmZhZjdjLzAvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5 M0I5RTNGN0ZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKUMyYQ5V3AsBn3uBfUlRdqyRS17J7ya0ad +HnZSeEKfDDeoJLhlqXSzyzp89qvEhCRCoAK1vJjUv4wd8JSiqkLyXwIWUjy/Uwv Khhd4BjgsA0uUakIBgE+iiYP+rZ+CAtNkLKGCzayX+Q5JsgIdoDh1ZHVbqy9KgO6 rleRpjYP553smTl/eQAq7VrOUhQG4uLLi1V3M817sE7GLxUFO3Ja5XDcoUh3hIHX O+tgdx+vq0r+3it5ahSpHt1CuUPEd7ehSpYscWemoRgLA5p9rkVkl3/6XrOwHXzR IO9TGzq9IKDDDVVkYpetEBrcvN5g4pCtBEaME6mxrKhmf1hCSTM= -----END CERTIFICATE-----Generated at Thu Mar 26 15:29:40 2026 by rpki-client