$ rpki-client -vvf repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft File: 03F45A130990D1072FE172E1EF64AAFAEC347834.mft (raw, json) Hash identifier: NJDskPsr9y8NlTVTajwa4fuZNTT7kgfooOJD31ObsiU= Subject key identifier: DD:C5:9C:93:42:D0:93:AE:8A:19:B8:57:4F:66:1F:77:C8:49:40:A0 Authority key identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 Certificate issuer: /CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Certificate serial: 466AF47C585D3745D3871A7A6BD49562419D9545 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft Manifest number: 0439 Signing time: Sun 01 Mar 2026 22:31:17 +0000 Manifest this update: Sun 01 Mar 2026 22:26:17 +0000 Manifest next update: Thu 05 Mar 2026 07:58:17 +0000 Files and hashes: 1: 03F45A130990D1072FE172E1EF64AAFAEC347834.crl (hash: plRYCQSH0Arz1s28wOD6Bpmp9ZB2DHCVPp24MGZIzFQ=) 2: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: 2HuZv4Ja6YvRs50s/AvvVTs4SzEqz98r1HP9GJBz7UE=) 3: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: q2zoM+wvljCJma+BNVrs4roku1rpn2bEEOd2FS2g3aQ=) 4: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: zm5n3GOGREs/7wstc0BHEn5R1puxQvUBN1+zTBkXQdk=) 5: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: g83O77cuv/czxZuSd3skhM6J6984QBC8vJgtKHDY3UY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:6a:f4:7c:58:5d:37:45:d3:87:1a:7a:6b:d4:95:62:41:9d:95:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Validity Not Before: Mar 1 22:26:17 2026 GMT Not After : Mar 5 07:58:17 2026 GMT Subject: CN=DDC59C9342D093AE8A19B8574F661F77C84940A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e7:f6:67:42:c0:d1:76:e3:fd:75:ed:0d:85: 73:2b:e5:1c:19:4b:0d:45:08:ca:f4:ef:eb:1b:f5: 3a:42:6d:7a:f2:e8:8a:1c:04:e5:03:b7:15:2e:95: b3:78:d3:99:b6:1a:ff:ed:0f:1e:f8:7b:6c:94:53: 96:19:ed:8e:ca:6f:ad:8e:11:1e:80:86:8d:fc:10: 95:bf:64:52:2d:91:2e:b2:35:3f:a2:3b:70:c0:9e: b5:ec:44:a2:2b:84:cf:77:6e:6c:d9:70:1d:c3:c4: b5:b6:08:ed:50:5b:3f:f2:b5:29:be:ea:95:18:d0: 7e:51:77:69:43:43:51:b3:c6:4d:39:c6:98:e2:b2: b2:8e:b1:29:76:6a:80:26:06:cb:3c:cd:6c:2a:70: d2:65:44:5c:7c:62:d8:1c:8a:15:f4:37:13:1d:65: c6:f5:37:3d:46:c5:e4:fc:5d:52:ce:3f:2e:da:fb: f2:1e:bd:f2:81:c4:73:63:98:8f:a9:71:2e:27:2f: ec:c1:6c:a5:f6:3b:97:e6:e8:c0:8f:9f:99:2c:fd: 46:48:b9:21:3c:6d:42:31:ff:18:59:ae:88:96:08: 89:b7:02:46:99:bb:a6:a1:b1:cd:65:46:cf:a9:ed: a7:a3:70:f6:87:eb:35:d3:dd:b0:fb:a3:50:3e:82: 0f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C5:9C:93:42:D0:93:AE:8A:19:B8:57:4F:66:1F:77:C8:49:40:A0 X509v3 Authority Key Identifier: keyid:03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:50:31:53:3d:6c:ba:ab:23:93:c4:49:f5:00:31:f8:20:49: 5a:8e:1e:7b:d2:62:60:91:9b:93:f9:5b:16:ab:2b:7b:89:05: 6a:fa:79:79:e5:c4:b7:6f:14:d6:28:f3:29:80:b7:99:a0:80: ab:47:37:46:94:36:cf:17:32:03:8d:60:de:6e:3f:c0:ec:a3: 22:4f:8e:16:22:58:e2:69:5d:c0:12:b9:af:0d:b8:83:64:c1: 1f:5a:a5:7e:76:57:d7:da:56:9d:69:e9:34:b6:18:dc:59:bc: b0:6f:5c:59:79:7f:77:a6:97:32:df:a4:b4:64:86:98:d0:ac: 94:9e:4e:57:40:38:06:dd:cb:9e:c3:bc:25:f4:10:86:04:6f: 6b:4d:09:49:a9:f0:4b:44:20:4e:a7:8c:9a:43:4d:ac:5c:fd: 2f:ba:fe:fb:1a:0d:f2:58:45:17:cd:8a:45:e3:04:3f:2b:36: ca:cf:68:00:44:27:2c:3b:4b:ff:88:e2:74:a7:1c:7d:8f:ce: 5f:e8:e6:7a:c9:14:40:09:e1:d1:c0:f2:87:4e:64:15:af:63: 3d:d3:23:74:cf:b7:08:24:7c:53:a4:e7:76:e3:e3:04:c4:2a: 27:b4:92:49:0c:a8:9d:96:dd:4a:8f:24:49:02:2f:4b:b3:d6: 50:42:23:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURmr0fFhdN0XThxp6a9SVYkGdlUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFF QzM0NzgzNDAeFw0yNjAzMDEyMjI2MTdaFw0yNjAzMDUwNzU4MTdaMDMxMTAvBgNV BAMTKEREQzU5QzkzNDJEMDkzQUU4QTE5Qjg1NzRGNjYxRjc3Qzg0OTQwQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP5/ZnQsDRduP9de0NhXMr5RwZ Sw1FCMr07+sb9TpCbXry6IocBOUDtxUulbN405m2Gv/tDx74e2yUU5YZ7Y7Kb62O ER6Aho38EJW/ZFItkS6yNT+iO3DAnrXsRKIrhM93bmzZcB3DxLW2CO1QWz/ytSm+ 6pUY0H5Rd2lDQ1Gzxk05xpjisrKOsSl2aoAmBss8zWwqcNJlRFx8YtgcihX0NxMd Zcb1Nz1GxeT8XVLOPy7a+/IevfKBxHNjmI+pcS4nL+zBbKX2O5fm6MCPn5ks/UZI uSE8bUIx/xhZroiWCIm3AkaZu6ahsc1lRs+p7aejcPaH6zXT3bD7o1A+gg8LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3cWck0LQk66KGbhXT2Yfd8hJQKAwHwYDVR0j BBgwFoAUA/RaEwmQ0Qcv4XLh72Sq+uw0eDQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk4ZDZlZS02ZmQ3LTRlMmQtYWU0MS02OTM5ZmRiMTUzZWUvMC8wM0Y0NUExMzA5 OTBEMTA3MkZFMTcyRTFFRjY0QUFGQUVDMzQ3ODM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFFQzM0 NzgzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFB RkFFQzM0NzgzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdQMVM9bLqrI5PESfUAMfggSVqOHnvSYmCR m5P5WxarK3uJBWr6eXnlxLdvFNYo8ymAt5mggKtHN0aUNs8XMgONYN5uP8DsoyJP jhYiWOJpXcASua8NuINkwR9apX52V9faVp1p6TS2GNxZvLBvXFl5f3emlzLfpLRk hpjQrJSeTldAOAbdy57DvCX0EIYEb2tNCUmp8EtEIE6njJpDTaxc/S+6/vsaDfJY RRfNikXjBD8rNsrPaABEJyw7S/+I4nSnHH2Pzl/o5nrJFEAJ4dHA8odOZBWvYz3T I3TPtwgkfFOk53bj4wTEKie0kkkMqJ2W3UqPJEkCL0uz1lBCI4A= -----END CERTIFICATE-----Generated at Mon Mar 2 06:02:31 2026 by rpki-client