$ rpki-client -vvf repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft File: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft (raw, json) Hash identifier: WUcrYV/8iSaWY2A0y4+k+uWKUFhXk9kOcSBJkZq1688= Subject key identifier: 3C:D7:77:03:2D:A3:69:24:2C:F5:E3:14:97:2D:17:57:57:E2:79:BD Authority key identifier: F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22 Certificate issuer: /CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22 Certificate serial: 177839E8198AF145F098EE3CBF7B2EDCD393537F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft Manifest number: 0142 Signing time: Thu 26 Mar 2026 13:02:19 +0000 Manifest this update: Thu 26 Mar 2026 12:57:19 +0000 Manifest next update: Sun 29 Mar 2026 15:51:19 +0000 Files and hashes: 1: 3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa (hash: yE+USKMsb9lpbpjN38Yp2/xMu2avQMNjXPmfwu/UPEs=) 2: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl (hash: pr3TtTuX2r/Kzn1io/C3nQZ0Axk6YKyaA3c/1J8Lmww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:78:39:e8:19:8a:f1:45:f0:98:ee:3c:bf:7b:2e:dc:d3:93:53:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22 Validity Not Before: Mar 26 12:57:19 2026 GMT Not After : Mar 29 15:51:19 2026 GMT Subject: CN=3CD777032DA369242CF5E314972D175757E279BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:24:13:66:98:1b:e3:0b:47:44:0c:2d:7a:a2: d2:a3:b0:a8:9f:86:67:9f:24:4c:fc:0d:d2:13:66: 21:d0:f0:77:c5:e1:38:6c:00:22:d2:af:1a:f0:81: 60:40:1b:71:ce:94:71:62:25:0d:33:71:90:0e:c8: 44:e9:09:00:ee:2a:1c:a0:35:f5:19:71:97:6e:71: 8e:30:4c:b4:c3:bf:50:31:29:f0:96:75:d1:97:a9: ea:43:0b:e0:93:54:82:5f:d9:5f:20:42:f1:3e:fe: ee:c2:ac:55:b4:5c:59:c8:9b:45:a9:87:9f:65:a0: 79:db:c9:f7:fb:12:d8:78:e9:74:0e:88:d9:b5:53: 9d:0b:f5:6c:20:3c:19:dd:4a:6e:20:1a:40:ca:95: 9e:5d:10:7c:9d:be:f7:61:a3:93:3b:3d:47:af:d6: b2:3d:1d:3b:0d:9b:1c:50:f8:2d:f7:fb:4f:15:bf: b6:09:46:c9:1c:ce:78:4d:b6:17:bc:10:68:61:3a: f5:ef:f2:d8:43:26:d9:c3:6b:cd:f2:94:20:da:92: 47:96:b2:da:56:c9:ce:46:7d:3a:a9:36:91:a7:02: 96:c1:ee:9b:36:26:c7:0b:6f:55:c8:96:ba:c6:2b: d9:5a:e4:d2:49:d0:c8:d3:f7:74:ef:f1:3e:a9:a2: 24:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D7:77:03:2D:A3:69:24:2C:F5:E3:14:97:2D:17:57:57:E2:79:BD X509v3 Authority Key Identifier: keyid:F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:55:ae:11:c4:5d:ad:84:78:72:d2:08:e5:ba:37:58:57:cd: e9:5e:0e:bf:56:a3:45:b1:fd:d0:dd:ee:73:56:ad:e4:9d:50: bb:f9:62:5f:dc:ae:54:25:ad:11:d6:ab:9b:57:17:c1:34:b6: a2:f1:87:bc:54:54:2d:56:c7:18:34:0e:ef:20:aa:d4:db:3e: 8d:42:ae:ac:6d:bd:08:8a:49:34:00:c1:d1:1b:27:2e:c4:df: ad:cb:dd:17:9e:68:2c:35:07:d4:d4:cb:1e:7c:7f:3d:37:3e: 01:90:cf:6c:5d:e2:bb:c5:dd:27:23:4e:a1:b7:56:de:e6:6d: 74:69:33:ca:c3:9a:7b:a5:97:9b:6e:c4:ff:e2:0e:db:76:2d: e8:65:34:0f:d4:2b:91:3c:16:45:27:75:bc:90:fb:e7:15:b4: d5:c2:eb:aa:0f:68:b1:b5:19:3a:4e:6c:ed:64:1e:8f:1c:79: 32:ff:79:7c:a2:1a:1b:40:52:bc:3e:46:39:9c:d6:a8:85:26: 0f:fc:24:6a:7f:0b:12:67:f8:16:1c:86:93:67:2b:09:a9:ae: d1:9b:14:28:a8:ac:9e:c3:c4:22:5c:c9:a2:40:3d:02:1a:ec: 5e:d9:67:4c:95:45:9f:5b:dc:34:1d:01:10:e4:c6:4d:cc:0a: 43:df:3c:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF3g56BmK8UXwmO48v3su3NOTU38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIw Q0EwMUUyMjAeFw0yNjAzMjYxMjU3MTlaFw0yNjAzMjkxNTUxMTlaMDMxMTAvBgNV BAMTKDNDRDc3NzAzMkRBMzY5MjQyQ0Y1RTMxNDk3MkQxNzU3NTdFMjc5QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNJBNmmBvjC0dEDC16otKjsKif hmefJEz8DdITZiHQ8HfF4ThsACLSrxrwgWBAG3HOlHFiJQ0zcZAOyETpCQDuKhyg NfUZcZducY4wTLTDv1AxKfCWddGXqepDC+CTVIJf2V8gQvE+/u7CrFW0XFnIm0Wp h59loHnbyff7Eth46XQOiNm1U50L9WwgPBndSm4gGkDKlZ5dEHydvvdho5M7PUev 1rI9HTsNmxxQ+C33+08Vv7YJRskcznhNthe8EGhhOvXv8thDJtnDa83ylCDakkeW stpWyc5GfTqpNpGnApbB7ps2JscLb1XIlrrGK9la5NJJ0MjT93Tv8T6poiQDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPNd3Ay2jaSQs9eMUly0XV1fieb0wHwYDVR0j BBgwFoAU84tnUkErulumoA4L1ADQkgygHiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDFmYzFhMi1lZTc3LTQwNWYtOWUzMS1hZGM2ZGZjOWI3NGMvMC9GMzhCNjc1MjQx MkJCQTVCQTZBMDBFMEJENDAwRDA5MjBDQTAxRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIwQ0Ew MUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQxZmMxYTItZWU3Ny00MDVmLTll MzEtYWRjNmRmYzliNzRjLzAvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQw OTIwQ0EwMUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1VrhHEXa2EeHLSCOW6N1hXzeleDr9Wo0Wx /dDd7nNWreSdULv5Yl/crlQlrRHWq5tXF8E0tqLxh7xUVC1Wxxg0Du8gqtTbPo1C rqxtvQiKSTQAwdEbJy7E363L3ReeaCw1B9TUyx58fz03PgGQz2xd4rvF3ScjTqG3 Vt7mbXRpM8rDmnull5tuxP/iDtt2LehlNA/UK5E8FkUndbyQ++cVtNXC66oPaLG1 GTpObO1kHo8ceTL/eXyiGhtAUrw+Rjmc1qiFJg/8JGp/CxJn+BYchpNnKwmprtGb FCiorJ7DxCJcyaJAPQIa7F7ZZ0yVRZ9b3DQdARDkxk3MCkPfPEI= -----END CERTIFICATE-----Generated at Thu Mar 26 19:29:29 2026 by rpki-client