$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft File: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft (raw, json) Hash identifier: OWfa0zNBCTuGfoPl29gAk4v08UEcooKUnR6wDqZTwgI= Subject key identifier: A8:14:89:B2:DD:23:27:97:54:D9:15:5D:21:2F:F9:1E:05:DF:61:EF Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 Certificate issuer: /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Certificate serial: 324C8E2E3881D21A6C6C6F61B7192A4FDBDFE14C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft Manifest number: 035A Signing time: Tue 24 Mar 2026 15:51:15 +0000 Manifest this update: Tue 24 Mar 2026 15:46:15 +0000 Manifest next update: Sat 28 Mar 2026 02:41:15 +0000 Files and hashes: 1: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: umMXNYB5RwjlwGFC5Wpd2rzxhTLaoa08yJ2/wNUcpx0=) 2: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl (hash: XcOr4892IuW0aDRTf7LvpoWZ1PhObD+e9NqgnFVnpHY=) 3: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: u4aBEtuM2QHTp7BELhEUw3EMWzsVzmaE71DRbevw9IE=) 4: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: tU2O/OAH1O/qSyyJqDlWC4HBTQpL06kLsKSpR1jZ5rg=) 5: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: wesud4Ud3HCpFz3TbmwbzTcWOeds/1nSTc4iWrxHtOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:4c:8e:2e:38:81:d2:1a:6c:6c:6f:61:b7:19:2a:4f:db:df:e1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Validity Not Before: Mar 24 15:46:15 2026 GMT Not After : Mar 28 02:41:15 2026 GMT Subject: CN=A81489B2DD23279754D9155D212FF91E05DF61EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a2:15:b9:5d:4f:d4:36:2e:18:31:02:0f:0d: 92:e6:61:a7:61:95:99:8c:df:e7:79:cc:20:ef:1c: fc:99:21:46:12:e9:d3:13:92:97:2c:12:6c:c6:e0: 54:f6:ba:c1:6a:7e:a4:16:56:4d:86:24:01:5a:aa: 75:85:31:a1:7d:a3:c4:2b:bc:e5:a8:8f:f0:f8:b6: 51:18:30:59:3c:a6:70:db:ad:d6:a8:5b:45:82:6d: 3d:8b:6e:88:27:5d:8f:01:49:0f:43:f8:61:ad:b7: cd:31:c6:4b:ce:9c:fd:0a:82:fe:75:92:7c:f9:b2: c8:af:b5:89:c9:9d:28:4f:1f:02:a3:41:26:51:30: 02:bd:d1:63:bc:bd:90:ba:cc:52:09:36:88:e6:dd: f4:b4:57:fe:29:23:79:f3:8e:b9:97:72:07:89:79: 17:fb:81:fb:3c:e4:22:ed:63:52:8f:1d:8a:2e:15: 7c:d6:37:80:f7:bc:fc:93:5e:a8:26:c6:65:78:62: df:cc:b6:bf:50:a1:3c:28:f9:25:f9:8e:36:59:e5: 11:af:9f:9f:9d:b0:bb:7b:5c:4c:50:e3:a2:c4:c2: 83:3e:55:01:dc:bf:59:c8:28:d9:e3:2c:dd:05:61: 6a:71:27:25:cd:37:cc:4f:fd:f3:c3:81:3b:f9:aa: 64:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:14:89:B2:DD:23:27:97:54:D9:15:5D:21:2F:F9:1E:05:DF:61:EF X509v3 Authority Key Identifier: keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:41:b8:ec:00:c8:7f:ea:2b:e4:e6:78:f6:b8:d6:2e:de:a0: a0:5b:c6:ed:6b:bb:b9:06:de:06:0b:42:01:18:32:9c:6a:19: 66:7c:fe:bc:ce:14:f7:11:91:be:1c:c0:8f:4d:87:80:9b:7c: c7:76:92:5a:75:e4:ea:32:5e:2c:dc:2d:87:08:1c:93:8f:87: cb:3d:5b:77:c1:87:23:05:d9:25:c3:80:f5:5f:a8:2a:de:28: 14:89:63:54:52:50:ed:5e:e7:24:ce:c9:b8:5a:89:cf:bb:0d: 2d:16:0a:ac:f4:12:45:6b:4f:10:9a:71:eb:1e:29:49:ff:4d: ae:89:5d:82:0e:4b:a7:33:7b:ec:3a:3c:74:d0:22:c9:e8:77: 23:6d:23:30:e3:41:f7:a3:d4:1e:68:97:6a:2d:71:b1:18:88: dc:ec:90:b7:86:7c:21:42:89:42:d5:d1:0b:d8:31:e5:59:8b: 7a:47:48:7d:af:c0:2a:29:d7:63:2d:95:fb:71:67:00:22:69: 03:4a:5f:ba:ad:ce:19:de:3d:50:ac:95:6b:2d:f0:f0:fb:37: a8:ad:ed:08:12:3a:14:2e:40:0a:59:5a:aa:83:f8:8c:47:9c: c3:d6:d6:e0:52:af:06:32:7a:b5:9c:8f:a2:64:cc:a8:f7:c3: 8d:58:a7:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMkyOLjiB0hpsbG9htxkqT9vf4UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1 NzVBRjdEMTAeFw0yNjAzMjQxNTQ2MTVaFw0yNjAzMjgwMjQxMTVaMDMxMTAvBgNV BAMTKEE4MTQ4OUIyREQyMzI3OTc1NEQ5MTU1RDIxMkZGOTFFMDVERjYxRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeohW5XU/UNi4YMQIPDZLmYadh lZmM3+d5zCDvHPyZIUYS6dMTkpcsEmzG4FT2usFqfqQWVk2GJAFaqnWFMaF9o8Qr vOWoj/D4tlEYMFk8pnDbrdaoW0WCbT2LbognXY8BSQ9D+GGtt80xxkvOnP0Kgv51 knz5ssivtYnJnShPHwKjQSZRMAK90WO8vZC6zFIJNojm3fS0V/4pI3nzjrmXcgeJ eRf7gfs85CLtY1KPHYouFXzWN4D3vPyTXqgmxmV4Yt/Mtr9QoTwo+SX5jjZZ5RGv n5+dsLt7XExQ46LEwoM+VQHcv1nIKNnjLN0FYWpxJyXNN8xP/fPDgTv5qmTBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqBSJst0jJ5dU2RVdIS/5HgXfYe8wHwYDVR0j BBgwFoAUOZMVsYun0N1mbcqMPbvgE1da99EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmYyODg3OS00ODQ0LTQyZGUtYjJkOS1hOTY2NmRlMjgyZWEvMC8zOTkzMTVCMThC QTdEMERENjY2RENBOEMzREJCRTAxMzU3NUFGN0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1NzVB RjdEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUw MTM1NzVBRjdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdBuOwAyH/qK+TmePa41i7eoKBbxu1ru7kG 3gYLQgEYMpxqGWZ8/rzOFPcRkb4cwI9Nh4CbfMd2klp15OoyXizcLYcIHJOPh8s9 W3fBhyMF2SXDgPVfqCreKBSJY1RSUO1e5yTOybhaic+7DS0WCqz0EkVrTxCacese KUn/Ta6JXYIOS6cze+w6PHTQIsnodyNtIzDjQfej1B5ol2otcbEYiNzskLeGfCFC iULV0QvYMeVZi3pHSH2vwCop12MtlftxZwAiaQNKX7qtzhnePVCslWst8PD7N6it 7QgSOhQuQApZWqqD+IxHnMPW1uBSrwYyerWcj6JkzKj3w41Yp1U= -----END CERTIFICATE-----Generated at Thu Mar 26 12:29:12 2026 by rpki-client