$ rpki-client -vvf repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft File: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft (raw, json) Hash identifier: igF/BPXMdLN/0s1cRUX17Onf9hCq8KJbLxEIc56YgdQ= Subject key identifier: DD:A3:B2:24:62:E6:BC:4E:46:D7:E7:7F:4F:12:5B:82:71:00:BB:26 Authority key identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 Certificate issuer: /CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Certificate serial: 5C6E185A161FB98621FC9C417826F611EABA0002 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft Manifest number: 0263 Signing time: Tue 24 Mar 2026 16:40:54 +0000 Manifest this update: Tue 24 Mar 2026 16:35:54 +0000 Manifest next update: Fri 27 Mar 2026 18:19:54 +0000 Files and hashes: 1: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl (hash: ORjkL5dgSxmxeEXI6ynBtE54lSzSqFUkCOMrgwG0heo=) 2: 3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa (hash: TU/lPlfDzJtw35bEd20WHsVMGmXj/m5tHMEpU4CBLtI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:6e:18:5a:16:1f:b9:86:21:fc:9c:41:78:26:f6:11:ea:ba:00:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Validity Not Before: Mar 24 16:35:54 2026 GMT Not After : Mar 27 18:19:54 2026 GMT Subject: CN=DDA3B22462E6BC4E46D7E77F4F125B827100BB26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:76:0e:d9:d4:b0:39:21:be:64:6d:61:95:e6: b5:66:a2:d7:d2:c6:bf:f4:d2:1f:c5:46:74:79:dd: 03:f8:3f:24:8c:0c:0d:7e:3e:9d:c2:4f:8e:d3:fe: 3a:2b:07:92:03:74:ad:66:83:b4:11:b7:b8:53:45: 8c:13:ef:2a:6d:e0:41:ea:79:55:ad:cd:59:12:fb: 88:e9:42:f6:f2:ce:b1:40:c6:28:bc:b8:0e:9f:38: 59:00:45:b4:b2:50:81:c1:a8:7c:f2:79:bf:31:81: ad:79:58:78:49:97:bc:8d:f7:76:a0:82:b9:a6:bd: d3:7f:3a:51:16:79:ca:82:13:37:b4:45:c6:e5:65: 7d:94:c0:2a:ad:d1:9b:80:1c:f9:f2:20:19:0e:80: fb:33:b5:7d:ba:cc:d0:82:56:ca:b6:c7:10:18:2c: c8:63:05:75:f1:ce:77:2a:bd:ec:90:f1:46:2a:aa: aa:05:c4:71:a4:f4:7c:f3:92:c2:95:b7:5e:5b:05: b3:b1:eb:d3:81:6a:a9:cc:b9:1d:e4:ef:09:77:2e: ab:a0:92:26:a6:1d:d5:6b:e9:f2:75:38:87:a7:57: 8d:09:90:40:1e:b5:01:a0:81:2a:29:f6:9c:c9:60: 82:74:0b:03:33:d4:e1:0b:c6:a2:69:8d:72:7e:0f: 5d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A3:B2:24:62:E6:BC:4E:46:D7:E7:7F:4F:12:5B:82:71:00:BB:26 X509v3 Authority Key Identifier: keyid:43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:21:fb:ac:7b:a8:c7:0d:61:ff:33:49:9d:fa:a1:d6:ac:37: 98:ec:79:71:53:ac:6f:b6:20:df:13:da:b0:3d:4d:35:6f:1c: 49:99:81:3c:dc:6d:33:ec:9f:ce:85:80:1e:5e:58:0e:dd:be: fe:5f:d3:b7:73:73:96:61:a0:45:28:f6:0f:29:f8:96:2c:ca: e4:09:1f:82:a3:98:84:d8:5f:01:06:2b:1a:05:ae:53:1c:47: 61:57:f9:12:c4:53:e3:c2:43:64:0d:b7:cf:b3:a5:08:19:18: 55:60:d8:77:56:3e:58:a3:df:27:c2:f7:93:ad:92:d8:69:ed: c8:6b:2f:73:f0:59:4c:ad:77:de:c3:d9:d6:a7:34:84:c6:0f: 7f:77:35:01:0b:01:ca:10:81:be:62:37:9a:1e:cd:9f:d6:10: 2f:fc:5f:73:1a:66:13:ff:76:7d:7f:30:06:c9:a9:c1:0f:77: 41:95:68:89:33:55:6f:4b:20:e1:83:f7:6b:c7:8f:1b:75:24: 20:57:29:20:b6:ae:09:6b:ac:a1:d3:e9:ca:61:92:20:7e:11: bb:2b:8c:70:09:24:47:dc:d2:62:ce:a5:2b:e2:ea:c0:01:48: 7c:2f:72:6d:cd:16:cd:47:90:98:12:bb:ad:c5:f6:fc:9f:71: 0c:b3:34:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXG4YWhYfuYYh/JxBeCb2Eeq6AAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIz MDEwNTA1NzAeFw0yNjAzMjQxNjM1NTRaFw0yNjAzMjcxODE5NTRaMDMxMTAvBgNV BAMTKEREQTNCMjI0NjJFNkJDNEU0NkQ3RTc3RjRGMTI1QjgyNzEwMEJCMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9dg7Z1LA5Ib5kbWGV5rVmotfS xr/00h/FRnR53QP4PySMDA1+Pp3CT47T/jorB5IDdK1mg7QRt7hTRYwT7ypt4EHq eVWtzVkS+4jpQvbyzrFAxii8uA6fOFkARbSyUIHBqHzyeb8xga15WHhJl7yN93ag grmmvdN/OlEWecqCEze0RcblZX2UwCqt0ZuAHPnyIBkOgPsztX26zNCCVsq2xxAY LMhjBXXxzncqveyQ8UYqqqoFxHGk9HzzksKVt15bBbOx69OBaqnMuR3k7wl3Lqug kiamHdVr6fJ1OIenV40JkEAetQGggSop9pzJYIJ0CwMz1OELxqJpjXJ+D10xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3aOyJGLmvE5G1+d/TxJbgnEAuyYwHwYDVR0j BBgwFoAUQ50W4D0F1c7KK38TXSu7GzAQUFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGYzYjM3ZC1mZTRkLTQzNmQtYTkzYi1lMWY2ZmNjOWZjNGQvMC80MzlEMTZFMDNE MDVENUNFQ0EyQjdGMTM1RDJCQkIxQjMwMTA1MDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIzMDEw NTA1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThmM2IzN2QtZmU0ZC00MzZkLWE5 M2ItZTFmNmZjYzlmYzRkLzAvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJC MUIzMDEwNTA1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwh+6x7qMcNYf8zSZ36odasN5jseXFTrG+2 IN8T2rA9TTVvHEmZgTzcbTPsn86FgB5eWA7dvv5f07dzc5ZhoEUo9g8p+JYsyuQJ H4KjmITYXwEGKxoFrlMcR2FX+RLEU+PCQ2QNt8+zpQgZGFVg2HdWPlij3yfC95Ot kthp7chrL3PwWUytd97D2danNITGD393NQELAcoQgb5iN5oezZ/WEC/8X3MaZhP/ dn1/MAbJqcEPd0GVaIkzVW9LIOGD92vHjxt1JCBXKSC2rglrrKHT6cphkiB+Ebsr jHAJJEfc0mLOpSvi6sABSHwvcm3NFs1HkJgSu63F9vyfcQyzNCM= -----END CERTIFICATE-----Generated at Thu Mar 26 13:07:37 2026 by rpki-client