$ rpki-client -vvf repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft File: 3703AC4154F05B1E642F31DEF71A238407E82D59.mft (raw, json) Hash identifier: LreXNNwNxd+oi8wRU64cni0Y9M0G7L2V0TIYPzi7N0g= Subject key identifier: A3:6C:7A:00:70:AA:85:6A:2B:DB:75:12:D1:28:1D:CB:01:D0:BF:29 Authority key identifier: 37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59 Certificate issuer: /CN=3703AC4154F05B1E642F31DEF71A238407E82D59 Certificate serial: 204C7A4D17FF42E9A7AE20D05DD8E2FB9CB87842 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft Manifest number: 04FA Signing time: Sun 01 Mar 2026 08:50:58 +0000 Manifest this update: Sun 01 Mar 2026 08:45:58 +0000 Manifest next update: Wed 04 Mar 2026 11:45:58 +0000 Files and hashes: 1: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: hTOnvJY78aaZJU0V/ewFlrDahpGLWlt1kXeTr26Q6jE=) 2: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: /26G7paj90BYpA/7obbRkQ0e5IpXJm+V8bRm2IMmu/M=) 3: 3703AC4154F05B1E642F31DEF71A238407E82D59.crl (hash: y6gKcQg7rks7MJcr6GWmv31xdFae505A95Vk+DVoiqE=) 4: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: RNQYxKN0Nubn/ygqO8rH37j/P4lI+9FQ1kXn5iYtC0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:4c:7a:4d:17:ff:42:e9:a7:ae:20:d0:5d:d8:e2:fb:9c:b8:78:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3703AC4154F05B1E642F31DEF71A238407E82D59 Validity Not Before: Mar 1 08:45:58 2026 GMT Not After : Mar 4 11:45:58 2026 GMT Subject: CN=A36C7A0070AA856A2BDB7512D1281DCB01D0BF29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:96:dc:78:58:55:b1:da:e6:bf:ec:34:a0:65: 63:3d:1b:18:8f:ec:6e:e6:94:dd:79:e0:29:14:69: 32:0f:fe:15:6b:f3:58:c8:12:3e:c5:b4:55:e3:7a: 98:65:ca:65:9e:cf:f1:16:22:d5:38:48:fd:02:d3: 2d:4c:27:6d:83:77:30:48:96:4c:d9:75:68:ae:cd: d4:49:58:f5:43:8d:55:fd:94:2c:45:c9:42:2e:5d: 21:65:d0:6a:a9:b8:e4:91:10:61:2f:2e:3f:07:2d: 42:16:66:6c:16:66:63:b1:5e:86:b1:63:a7:e2:56: 59:31:7f:1e:1a:c7:21:88:64:ac:d9:30:89:81:3d: 3f:de:6d:ee:cb:e5:9b:05:31:80:55:9a:d0:f9:5b: 20:ce:fa:b6:b0:89:38:6f:ff:b7:6e:53:61:d6:f9: 74:0c:87:da:9e:cd:32:d4:1d:e2:c8:cf:81:f5:f6: 19:05:72:f2:84:0e:16:31:55:58:e8:79:3f:ab:4b: 2e:37:41:e3:7f:39:b7:04:90:d0:95:15:eb:80:f9: 6b:69:06:e4:c9:f8:3f:4d:72:de:a4:12:08:aa:1b: 28:cb:f4:f5:fe:29:47:ac:3a:92:b4:be:19:57:c7: 4d:6a:ee:6f:17:d6:5c:73:49:a0:dd:9e:79:9c:4f: 15:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6C:7A:00:70:AA:85:6A:2B:DB:75:12:D1:28:1D:CB:01:D0:BF:29 X509v3 Authority Key Identifier: keyid:37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:71:13:65:01:ee:3e:a5:1a:b3:ca:13:9f:4f:50:1d:29:a0: 2f:4f:1b:82:47:5d:43:52:17:dd:c5:4b:70:1a:88:b0:6e:30: 84:71:86:64:65:b1:9a:1f:37:7c:ed:d8:22:4b:84:85:b6:6c: 4c:10:d5:82:24:52:87:05:50:d9:66:43:7f:1c:89:51:13:61: ee:fe:48:3c:c0:8a:d9:c8:cf:1e:df:a5:87:c4:0b:29:79:08: 43:94:84:af:83:b1:52:a2:d4:5c:0c:ad:ac:bb:48:6f:c5:0e: 0f:ee:ba:73:72:1d:f8:78:5f:ed:0d:cd:d2:19:88:e9:e4:0e: 0f:50:d6:92:5b:f2:12:8c:e1:f8:bf:5c:08:83:10:07:21:0f: 17:37:b1:88:9f:48:7d:5c:c9:73:c2:8a:b4:ca:8a:3e:d7:c4: 16:0f:f6:24:44:89:dd:43:c4:6f:06:74:37:13:a0:05:10:ff: 7d:d9:b0:1f:8b:16:b4:50:64:f5:87:9a:8e:b2:7c:74:b1:9d: 85:59:19:c7:d2:88:a3:a1:19:e5:1b:96:d3:b1:b7:9f:17:61: 66:4c:8b:75:de:db:8a:70:80:df:49:0b:be:e7:a2:9a:a7:7b: 30:b1:1c:0f:b9:f4:5c:df:27:e2:c3:ad:4a:60:69:5d:07:e7: 4f:e5:69:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIEx6TRf/QumnriDQXdji+5y4eEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQw N0U4MkQ1OTAeFw0yNjAzMDEwODQ1NThaFw0yNjAzMDQxMTQ1NThaMDMxMTAvBgNV BAMTKEEzNkM3QTAwNzBBQTg1NkEyQkRCNzUxMkQxMjgxRENCMDFEMEJGMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZltx4WFWx2ua/7DSgZWM9GxiP 7G7mlN154CkUaTIP/hVr81jIEj7FtFXjephlymWez/EWItU4SP0C0y1MJ22DdzBI lkzZdWiuzdRJWPVDjVX9lCxFyUIuXSFl0GqpuOSREGEvLj8HLUIWZmwWZmOxXoax Y6fiVlkxfx4axyGIZKzZMImBPT/ebe7L5ZsFMYBVmtD5WyDO+rawiThv/7duU2HW +XQMh9qezTLUHeLIz4H19hkFcvKEDhYxVVjoeT+rSy43QeN/ObcEkNCVFeuA+Wtp BuTJ+D9Nct6kEgiqGyjL9PX+KUesOpK0vhlXx01q7m8X1lxzSaDdnnmcTxWvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo2x6AHCqhWor23US0SgdywHQvykwHwYDVR0j BBgwFoAUNwOsQVTwWx5kLzHe9xojhAfoLVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTA5OWFkZi03ZTEyLTRlODMtOTVjMi1kZDdmNzc0OTQ3ODgvMC8zNzAzQUM0MTU0 RjA1QjFFNjQyRjMxREVGNzFBMjM4NDA3RTgyRDU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQwN0U4 MkQ1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEwOTlhZGYtN2UxMi00ZTgzLTk1 YzItZGQ3Zjc3NDk0Nzg4LzAvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIz ODQwN0U4MkQ1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMtxE2UB7j6lGrPKE59PUB0poC9PG4JHXUNS F93FS3AaiLBuMIRxhmRlsZofN3zt2CJLhIW2bEwQ1YIkUocFUNlmQ38ciVETYe7+ SDzAitnIzx7fpYfECyl5CEOUhK+DsVKi1FwMray7SG/FDg/uunNyHfh4X+0NzdIZ iOnkDg9Q1pJb8hKM4fi/XAiDEAchDxc3sYifSH1cyXPCirTKij7XxBYP9iREid1D xG8GdDcToAUQ/33ZsB+LFrRQZPWHmo6yfHSxnYVZGcfSiKOhGeUbltOxt58XYWZM i3Xe24pwgN9JC77nopqnezCxHA+59FzfJ+LDrUpgaV0H50/laaQ= -----END CERTIFICATE-----Generated at Mon Mar 2 16:47:39 2026 by rpki-client