$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft File: 03315D0E966A85B878EA9058B8CF03EAF2881889.mft (raw, json) Hash identifier: iIPZNeWTqqfDllbbjIU2PAii3jsE0jGKopLcCy8GBpY= Subject key identifier: 1D:BE:B0:34:DF:62:69:5F:43:AC:48:05:E9:DA:8D:D7:BF:A2:76:CB Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89 Certificate issuer: /CN=03315D0E966A85B878EA9058B8CF03EAF2881889 Certificate serial: 020B5D5858850E531ADB9E8E8260E54C8A6470BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer Subject info access: rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft Manifest number: 0566 Signing time: Thu 16 Apr 2026 13:22:09 +0000 Manifest this update: Thu 16 Apr 2026 13:17:09 +0000 Manifest next update: Mon 20 Apr 2026 00:41:09 +0000 Files and hashes: 1: 34352e3132322e35322e302f32322d3234203d3e20313335343438.roa (hash: DkpLk9wjtee+olEloYKtXa5HH1pKUw3+B87062+6qXc=) 2: 3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa (hash: hoLbivleHtt89cCReqbvfZYyTkoCRfwcqA081C1+9Gw=) 3: 3132352e36322e39322e302f32322d3234203d3e20313338383032.roa (hash: /mrf9uGudGqcY2xOJDkK2ay/Dazo8lduBDgmiiL0FaY=) 4: 34352e3132352e37322e302f32322d3234203d3e20313335343438.roa (hash: 0xR4iUHdKDDCOxdGEjjw5dfszyruo+MDrchNeNEqs2w=) 5: 03315D0E966A85B878EA9058B8CF03EAF2881889.crl (hash: /dgUcNsDiHzK8PQ4KJZArXBxy6DLXxEjfzb+by6a+wI=) 6: 3133392e352e34302e302f32322d3234203d3e20313335343438.roa (hash: FiOfMQpB+2gj2/QXJXJKgiwN/buCJemHWYRysKfxPV0=) 7: 3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa (hash: FQaLrXQaTAavmrBmVo9QPPvdOGdpfu5PAx/qFXOh+QY=) 8: 3130332e36342e31342e302f32342d3234203d3e20313335343438.roa (hash: QC8bpRsjoPax2VeFVISF7pou7WEj+SsbxVAbvHu+cPo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:0b:5d:58:58:85:0e:53:1a:db:9e:8e:82:60:e5:4c:8a:64:70:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889 Validity Not Before: Apr 16 13:17:09 2026 GMT Not After : Apr 20 00:41:09 2026 GMT Subject: CN=1DBEB034DF62695F43AC4805E9DA8DD7BFA276CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ae:48:90:f7:fd:17:5a:df:1d:6c:3f:94:d6: d9:f7:b9:d1:8e:82:f9:81:29:3e:52:98:b9:bb:0c: a8:b3:0f:a5:bc:9a:d0:dd:31:02:04:27:d1:31:ba: ac:71:4e:89:ad:34:9a:dc:d4:f5:d6:a5:41:a3:ac: 74:f1:f3:26:b9:df:60:8c:d0:b3:59:6b:ff:9b:6d: c9:53:aa:33:c6:20:bc:83:59:5b:cd:76:c5:1b:1d: ac:04:ee:a9:f7:06:7a:5b:80:2b:fb:f2:54:d9:f0: b4:60:c7:c1:f9:e5:0e:f5:41:7e:e5:dd:8b:c6:61: 93:f3:08:61:03:0c:a6:90:d1:1b:21:66:13:1d:a5: 31:83:53:18:47:78:0f:47:b5:17:12:b4:8a:53:ca: 89:63:2d:d1:36:46:d8:81:0e:d0:a0:75:12:f4:f8: 1d:84:2f:07:42:f2:f8:79:9b:77:c4:01:5c:ff:d0: 8e:59:e5:5c:8c:9d:61:fa:9d:75:43:67:b2:8b:d4: 4c:29:60:78:a1:82:0f:83:e9:c2:a6:87:1c:99:56: d2:2b:30:61:b3:03:66:f7:63:0b:7f:b9:f1:32:1b: dd:5d:da:20:1b:2a:fb:2a:b4:7b:50:37:96:0f:ee: c9:12:bf:85:26:f1:95:6f:c3:df:9a:a0:b2:1f:98: cc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BE:B0:34:DF:62:69:5F:43:AC:48:05:E9:DA:8D:D7:BF:A2:76:CB X509v3 Authority Key Identifier: keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:fa:a0:fd:9f:7e:72:1f:73:55:12:56:fc:3e:f6:a9:11:21: 6a:e2:84:db:f2:19:35:fe:b7:61:ba:7e:a6:3c:7a:06:18:0d: 71:18:64:63:bf:d5:d5:2c:f3:0a:bb:d7:12:06:08:c7:60:4a: e6:c6:e9:ff:78:ea:23:23:f5:91:ab:47:94:ad:8d:b5:d3:c5: 3b:3d:3a:df:76:a6:41:f9:f3:12:36:13:67:b4:03:33:ff:20: 4f:f8:57:c7:f5:e0:72:af:ee:28:29:56:5c:aa:0b:00:24:44: 59:fb:e2:1e:60:33:cc:ea:5a:35:bc:43:14:57:be:54:ab:00: 51:6e:46:63:bc:25:88:f7:29:f3:be:bf:f1:9c:0a:0b:39:5f: 14:6e:41:93:b9:be:6f:4d:33:69:2b:98:2a:76:23:35:ba:37: 49:b3:47:d4:b0:3a:56:04:55:6d:d4:6e:08:51:ed:b0:1d:a9: 3d:d3:04:ac:34:07:c0:6d:4b:5d:73:53:90:10:95:db:3f:d5: e8:e5:ef:f7:fd:c6:0b:d3:7a:79:1f:c4:ea:c8:a9:bb:44:0c: b7:70:76:09:fd:1d:0a:06:14:0e:3f:ab:ac:54:2a:de:c3:00: a1:db:ab:3c:96:5e:57:42:fc:f8:67:97:04:01:57:57:a1:b6: 67:ad:36:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAgtdWFiFDlMa256OgmDlTIpkcLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAzRUFG Mjg4MTg4OTAeFw0yNjA0MTYxMzE3MDlaFw0yNjA0MjAwMDQxMDlaMDMxMTAvBgNV BAMTKDFEQkVCMDM0REY2MjY5NUY0M0FDNDgwNUU5REE4REQ3QkZBMjc2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCirkiQ9/0XWt8dbD+U1tn3udGO gvmBKT5SmLm7DKizD6W8mtDdMQIEJ9ExuqxxTomtNJrc1PXWpUGjrHTx8ya532CM 0LNZa/+bbclTqjPGILyDWVvNdsUbHawE7qn3BnpbgCv78lTZ8LRgx8H55Q71QX7l 3YvGYZPzCGEDDKaQ0RshZhMdpTGDUxhHeA9HtRcStIpTyoljLdE2RtiBDtCgdRL0 +B2ELwdC8vh5m3fEAVz/0I5Z5VyMnWH6nXVDZ7KL1EwpYHihgg+D6cKmhxyZVtIr MGGzA2b3Ywt/ufEyG91d2iAbKvsqtHtQN5YP7skSv4Um8ZVvw9+aoLIfmMz/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHb6wNN9iaV9DrEgF6dqN17+idsswHwYDVR0j BBgwFoAUAzFdDpZqhbh46pBYuM8D6vKIGIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTlhY2I5Ny02ZTg3LTRlMzEtYTU2OS1hMjY2MGRmNGYyYjgvMC8wMzMxNUQwRTk2 NkE4NUI4NzhFQTkwNThCOENGMDNFQUYyODgxODg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAzRUFGMjg4 MTg4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU5YWNiOTctNmU4Ny00ZTMxLWE1 NjktYTI2NjBkZjRmMmI4LzAvMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAz RUFGMjg4MTg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFj6oP2ffnIfc1USVvw+9qkRIWrihNvyGTX+ t2G6fqY8egYYDXEYZGO/1dUs8wq71xIGCMdgSubG6f946iMj9ZGrR5StjbXTxTs9 Ot92pkH58xI2E2e0AzP/IE/4V8f14HKv7igpVlyqCwAkRFn74h5gM8zqWjW8QxRX vlSrAFFuRmO8JYj3KfO+v/GcCgs5XxRuQZO5vm9NM2krmCp2IzW6N0mzR9SwOlYE VW3UbghR7bAdqT3TBKw0B8BtS11zU5AQlds/1ejl7/f9xgvTenkfxOrIqbtEDLdw dgn9HQoGFA4/q6xUKt7DAKHbqzyWXldC/PhnlwQBV1ehtmetNpA= -----END CERTIFICATE-----Generated at Fri Apr 17 20:56:23 2026 by rpki-client