$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft File: F39284EDA8B81E5F498D167C4DB09075943DA23C.mft (raw, json) Hash identifier: QfV+w4nBXGDAYQS2o/0IX9uUk5xrzxPNEUjtvQzFBaA= Subject key identifier: 07:71:C5:71:45:A7:8A:01:E1:88:24:00:7C:33:5E:92:C8:17:F3:A8 Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C Certificate issuer: /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Certificate serial: 19003938864461856A3F2CD6C2F942004D541485 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft Manifest number: 021C Signing time: Sun 01 Mar 2026 15:42:19 +0000 Manifest this update: Sun 01 Mar 2026 15:37:19 +0000 Manifest next update: Thu 05 Mar 2026 02:55:19 +0000 Files and hashes: 1: F39284EDA8B81E5F498D167C4DB09075943DA23C.crl (hash: PmItWyPGrqGRlm1yKhpahL7AMAuLm85XBaoigQehJ8c=) 2: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: m+kNLMS39T1XrNLiDk6g1NJ5jtLDLBZdzAOZl+Ww9Ks=) 3: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: zkN9KM3zjX+gsUQDtCei38obRvmk7IKvdyrKuozTeis=) 4: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: ZH95fzIk5wuuT+vd4hIsCcqQWDxd7AjWMS1Ri5F0arI=) 5: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: 1gzxa88JIBim0N0R/uC1nAl7S+pBY42/XBrZ+VIbBR0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:00:39:38:86:44:61:85:6a:3f:2c:d6:c2:f9:42:00:4d:54:14:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Validity Not Before: Mar 1 15:37:19 2026 GMT Not After : Mar 5 02:55:19 2026 GMT Subject: CN=0771C57145A78A01E18824007C335E92C817F3A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a5:1c:2a:e7:e6:c1:ce:b8:99:96:a0:3d:01: 2c:37:1e:9a:75:20:2f:e3:59:16:48:ac:a2:c9:e4: c4:79:93:3b:8f:12:b5:8e:4b:5f:d2:6e:ff:e1:3b: 8c:ac:c8:c9:f3:34:f9:9a:8e:a2:6c:90:28:d7:df: 91:2a:41:73:9a:86:94:22:60:bd:bf:ec:7c:4d:58: 53:ff:d5:43:81:74:7e:e8:b9:31:72:f2:60:4a:28: 62:ce:36:eb:c9:36:b1:55:51:03:85:a5:20:49:79: 92:e1:ba:da:b5:9c:76:b5:f0:8d:ab:fa:3b:50:47: 16:bb:4f:16:08:88:c1:d4:eb:65:1a:3c:44:ff:87: 30:f2:2a:6f:f1:6f:8e:09:0c:90:95:66:77:d3:f3: fe:02:bf:6e:bb:b4:a3:33:22:4e:1a:9e:c4:ed:b4: 12:7a:74:56:b1:3a:45:c5:67:6f:bb:fd:b4:f4:0f: 7e:48:6d:f4:15:35:e1:12:3d:ca:cb:b2:bb:75:71: eb:87:41:76:a8:f0:e7:86:dd:94:17:41:3c:9c:e1: 2b:d0:0c:82:7e:94:72:a7:6e:8e:f0:37:13:e1:4c: 95:e0:2b:27:c0:1b:0b:f6:64:d4:b0:0b:e9:40:f5: b6:54:37:3d:78:62:ee:c4:da:b7:d9:a1:44:8c:c7: 68:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:71:C5:71:45:A7:8A:01:E1:88:24:00:7C:33:5E:92:C8:17:F3:A8 X509v3 Authority Key Identifier: keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:31:23:35:fb:8f:aa:80:fa:33:80:76:d7:b5:fc:60:93:5d: cf:a9:9e:f9:92:bb:b5:ef:29:69:f3:77:3a:b8:a8:f4:a8:c4: 8c:38:14:d9:ab:5d:bd:00:14:30:f4:ce:bf:91:3e:9f:5d:78: 9b:29:98:78:df:c8:b8:9b:20:7e:74:41:55:48:85:33:e0:45: 6a:85:c4:72:d5:19:c6:f2:af:00:2e:1a:73:95:56:e7:50:97: 17:cb:70:52:76:e9:fd:27:a1:e9:d2:61:1d:ce:08:a0:ef:09: e3:0e:5a:31:cd:f0:83:7a:02:b3:cc:a8:bf:85:4c:1b:a1:97: b1:80:bd:df:4e:f3:f7:e0:b1:cd:7b:ce:b4:dc:d0:c8:b0:f9: da:c0:a9:44:f3:68:bc:63:38:6b:8a:dd:d6:a3:aa:a3:88:8b: 16:31:88:b1:fe:1b:d9:b8:e5:ac:ed:34:e9:8a:87:ab:a4:ad: b3:82:cf:a7:41:17:df:c7:2e:70:cf:60:28:3a:bd:0c:62:da: fd:26:6b:90:12:21:e2:97:ce:dd:0c:9c:e3:7c:ad:8f:a1:05: 0e:8b:38:f0:ee:f0:89:55:b3:29:d8:9b:f7:be:52:6f:cd:31: cb:4c:11:e5:f9:97:34:82:61:c8:0b:73:b6:1a:24:78:59:b2: a4:c5:44:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGQA5OIZEYYVqPyzWwvlCAE1UFIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5 NDNEQTIzQzAeFw0yNjAzMDExNTM3MTlaFw0yNjAzMDUwMjU1MTlaMDMxMTAvBgNV BAMTKDA3NzFDNTcxNDVBNzhBMDFFMTg4MjQwMDdDMzM1RTkyQzgxN0YzQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpRwq5+bBzriZlqA9ASw3Hpp1 IC/jWRZIrKLJ5MR5kzuPErWOS1/Sbv/hO4ysyMnzNPmajqJskCjX35EqQXOahpQi YL2/7HxNWFP/1UOBdH7ouTFy8mBKKGLONuvJNrFVUQOFpSBJeZLhutq1nHa18I2r +jtQRxa7TxYIiMHU62UaPET/hzDyKm/xb44JDJCVZnfT8/4Cv267tKMzIk4ansTt tBJ6dFaxOkXFZ2+7/bT0D35IbfQVNeESPcrLsrt1ceuHQXao8OeG3ZQXQTyc4SvQ DIJ+lHKnbo7wNxPhTJXgKyfAGwv2ZNSwC+lA9bZUNz14Yu7E2rfZoUSMx2hXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB3HFcUWnigHhiCQAfDNeksgX86gwHwYDVR0j BBgwFoAU85KE7ai4Hl9JjRZ8TbCQdZQ9ojwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2VkY2I3ZS1jMzhkLTRlNjctODJiZC00ZTgxNTBiODg1NjEvMC9GMzkyODRFREE4 QjgxRTVGNDk4RDE2N0M0REIwOTA3NTk0M0RBMjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5NDNE QTIzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy YmQtNGU4MTUwYjg4NTYxLzAvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkw NzU5NDNEQTIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQxIzX7j6qA+jOAdte1/GCTXc+pnvmSu7Xv KWnzdzq4qPSoxIw4FNmrXb0AFDD0zr+RPp9deJspmHjfyLibIH50QVVIhTPgRWqF xHLVGcbyrwAuGnOVVudQlxfLcFJ26f0noenSYR3OCKDvCeMOWjHN8IN6ArPMqL+F TBuhl7GAvd9O8/fgsc17zrTc0Miw+drAqUTzaLxjOGuK3dajqqOIixYxiLH+G9m4 5aztNOmKh6ukrbOCz6dBF9/HLnDPYCg6vQxi2v0ma5ASIeKXzt0MnON8rY+hBQ6L OPDu8IlVsynYm/e+Um/NMctMEeX5lzSCYcgLc7YaJHhZsqTFRAQ= -----END CERTIFICATE-----Generated at Mon Mar 2 07:39:45 2026 by rpki-client