$ rpki-client -vvf repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft File: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft (raw, json) Hash identifier: kQSgRFoH6VnvtPSMoU61mbl6SOUbdbwBYwI5LFuJq3U= Subject key identifier: 5B:1A:8B:87:56:1C:DF:BC:D0:9B:3F:B6:96:BD:87:11:3E:DE:3C:C5 Authority key identifier: F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 Certificate issuer: /CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Certificate serial: 6852C99886196BF0541E00AC0A8FA1CEA7AF45B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft Manifest number: 0218 Signing time: Tue 24 Mar 2026 19:01:45 +0000 Manifest this update: Tue 24 Mar 2026 18:56:45 +0000 Manifest next update: Sat 28 Mar 2026 05:00:45 +0000 Files and hashes: 1: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl (hash: /17wUDyYAYvYnl0nNIW+K274XTbiOn05AhzP8oAtyWs=) 2: 3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa (hash: 12t3q8UKsyUaN7ZPmQ7oKlNAYfCglRtEXGNPube8E5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:52:c9:98:86:19:6b:f0:54:1e:00:ac:0a:8f:a1:ce:a7:af:45:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Validity Not Before: Mar 24 18:56:45 2026 GMT Not After : Mar 28 05:00:45 2026 GMT Subject: CN=5B1A8B87561CDFBCD09B3FB696BD87113EDE3CC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:12:69:a6:b3:0c:52:0a:d7:08:b5:cb:8f:e3: 38:63:8c:e2:c3:9c:35:7f:25:91:09:56:d6:08:26: c5:67:d6:a6:d7:de:cd:ad:ad:b8:26:52:f2:10:06: 23:6b:a4:69:10:fe:91:91:df:ac:6d:85:a2:b0:ff: be:93:ed:a5:a5:47:d1:c7:0f:d1:7f:39:f6:1a:b2: 14:24:5e:8f:7b:09:c8:93:92:c9:1c:46:34:15:71: 69:67:4f:04:99:40:73:cb:4a:6f:8f:ca:13:dc:2d: e4:a6:94:ce:76:eb:5a:66:ce:c3:e6:cb:e5:cb:70: 18:79:f7:a7:1b:5a:a5:1a:66:52:ae:bf:a2:ec:a2: 3e:03:65:78:aa:e3:ed:71:82:a2:c4:ea:f5:66:f7: 71:ab:0a:69:0a:ba:19:5d:fd:e8:be:27:2e:ef:d5: e3:c6:42:ed:e1:5f:b6:72:9a:3b:90:4b:31:a5:21: 00:a8:9a:c7:16:50:03:de:1a:b0:36:fa:3e:f1:67: ba:50:e9:46:f1:fc:b8:da:10:fe:e3:8f:cd:dc:13: 97:29:64:53:9f:f9:1f:1f:5a:5d:2b:f8:c5:d4:39: 80:d8:2f:ac:73:0e:b4:40:ca:62:60:5e:45:c5:4f: 10:2a:0d:d5:68:f2:91:02:13:1c:73:16:be:da:0b: c5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1A:8B:87:56:1C:DF:BC:D0:9B:3F:B6:96:BD:87:11:3E:DE:3C:C5 X509v3 Authority Key Identifier: keyid:F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:4c:62:45:df:29:0c:d2:f0:ec:fa:b3:fa:96:5e:10:54:1e: ea:69:70:ed:d2:51:f1:d9:da:be:24:f6:13:f7:e0:bf:0d:79: 00:05:74:e3:8d:2a:54:c6:d6:dd:80:e1:58:c2:0c:c6:39:2c: 4e:89:37:aa:92:d9:a2:3c:9d:45:95:30:18:27:8f:87:9e:fb: 1b:aa:59:d1:5b:be:cc:f0:84:54:b2:4a:32:e4:34:ca:86:ee: 80:0a:2c:4e:73:7e:31:62:99:9e:35:de:d7:29:79:e9:ac:d8: 29:83:71:b7:78:cc:75:3a:58:7c:bf:6e:5c:c9:50:0e:03:72: 11:36:e2:0c:a9:2d:32:ca:fb:a7:92:4f:c9:7d:2a:fe:69:62: d9:02:d4:ad:08:cb:a4:53:f8:d0:48:c4:e3:d8:b1:19:9b:64: fc:2d:3c:b9:7b:67:3a:9a:08:d6:3c:33:ea:3c:1d:ee:17:25: 22:d7:75:1e:2b:c1:34:61:3f:55:89:f7:ed:1a:71:8f:b6:b6: 0f:d2:23:15:34:ef:88:e9:cf:c4:e4:6b:69:9a:4b:9d:1f:12: 03:96:91:65:ba:33:11:60:52:e8:cb:bd:09:f5:07:51:05:c4: 2a:4e:f5:8a:26:43:15:9a:a2:b4:c2:b9:0d:c1:0b:fd:b7:c5: f6:38:c4:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaFLJmIYZa/BUHgCsCo+hzqevRbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhF RkUwRUMyNzAeFw0yNjAzMjQxODU2NDVaFw0yNjAzMjgwNTAwNDVaMDMxMTAvBgNV BAMTKDVCMUE4Qjg3NTYxQ0RGQkNEMDlCM0ZCNjk2QkQ4NzExM0VERTNDQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiEmmmswxSCtcItcuP4zhjjOLD nDV/JZEJVtYIJsVn1qbX3s2trbgmUvIQBiNrpGkQ/pGR36xthaKw/76T7aWlR9HH D9F/OfYashQkXo97CciTkskcRjQVcWlnTwSZQHPLSm+PyhPcLeSmlM5261pmzsPm y+XLcBh596cbWqUaZlKuv6Lsoj4DZXiq4+1xgqLE6vVm93GrCmkKuhld/ei+Jy7v 1ePGQu3hX7ZymjuQSzGlIQComscWUAPeGrA2+j7xZ7pQ6Ubx/LjaEP7jj83cE5cp ZFOf+R8fWl0r+MXUOYDYL6xzDrRAymJgXkXFTxAqDdVo8pECExxzFr7aC8VrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWxqLh1Yc37zQmz+2lr2HET7ePMUwHwYDVR0j BBgwFoAU84EI5z1Cx/IKZIypGT+/uO/g7CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM5ZmRjYi1jNDE3LTRmM2YtYjFjOS03ZTM2OWNkZTIxZmQvMC9GMzgxMDhFNzNE NDJDN0YyMEE2NDhDQTkxOTNGQkZCOEVGRTBFQzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhFRkUw RUMyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzOWZkY2ItYzQxNy00ZjNmLWIx YzktN2UzNjljZGUyMWZkLzAvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJG QjhFRkUwRUMyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBMYkXfKQzS8Oz6s/qWXhBUHuppcO3SUfHZ 2r4k9hP34L8NeQAFdOONKlTG1t2A4VjCDMY5LE6JN6qS2aI8nUWVMBgnj4ee+xuq WdFbvszwhFSySjLkNMqG7oAKLE5zfjFimZ413tcpeems2CmDcbd4zHU6WHy/blzJ UA4DchE24gypLTLK+6eST8l9Kv5pYtkC1K0Iy6RT+NBIxOPYsRmbZPwtPLl7Zzqa CNY8M+o8He4XJSLXdR4rwTRhP1WJ9+0acY+2tg/SIxU074jpz8Tka2maS50fEgOW kWW6MxFgUujLvQn1B1EFxCpO9YomQxWaorTCuQ3BC/23xfY4xAU= -----END CERTIFICATE-----Generated at Thu Mar 26 07:25:50 2026 by rpki-client