$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft File: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft (raw, json) Hash identifier: LIo66MwD4Bdv+SkQpTXtfckALPocuETd749G5QyQFMY= Subject key identifier: 2A:3A:61:23:4C:5A:12:EE:2A:99:2A:74:4E:EC:01:C4:87:78:FE:E4 Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C Certificate issuer: /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C Certificate serial: 67F84A4247B6934BF0EEDD93FD3FBB67F89D5C04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft Manifest number: 0555 Signing time: Sun 01 Mar 2026 17:32:25 +0000 Manifest this update: Sun 01 Mar 2026 17:27:25 +0000 Manifest next update: Thu 05 Mar 2026 01:45:25 +0000 Files and hashes: 1: 3130332e38302e39312e302f32342d3234203d3e20313337333033.roa (hash: nLub1P+aFMPWReFe8FfiX+yqIND5D1X2l5ebLcrAixg=) 2: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (hash: wlegEJoNWqrWT2tySFrwLRqLsXDXFl0OFT0Nuvvp7LI=) 3: 3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (hash: LfUE4rPNFz/aR5lxsCZpCHmmGGAgXk5P43w+IeyGgRE=) 4: 3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (hash: TuOuwC+HTY3+zsq30NoK3C4u4uR9Kt6tuzw+MAyTb4o=) 5: 3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (hash: ShEOWvu/KCYTTrKo5vrKeCwlexfHyDbC4uTV8yZtzEM=) 6: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl (hash: Xdn8uJi93K1Bx3DAwxsaxGVsBAXVSGwlLiE+0+7PmW4=) 7: 3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (hash: lX37Ym1HtH8/+BNNZ7vVVvmLTRPAVgTV6qXoJU01xNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f8:4a:42:47:b6:93:4b:f0:ee:dd:93:fd:3f:bb:67:f8:9d:5c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C Validity Not Before: Mar 1 17:27:25 2026 GMT Not After : Mar 5 01:45:25 2026 GMT Subject: CN=2A3A61234C5A12EE2A992A744EEC01C48778FEE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:19:c0:e7:7a:a7:48:e9:b8:82:19:9a:30:cc: 82:be:7c:7b:20:f2:45:0d:a1:61:7e:cb:d5:e5:62: c5:1e:91:7c:70:22:a6:aa:8c:9c:1a:1e:8f:c6:58: 80:14:38:39:8e:06:2b:3c:16:1f:fc:aa:dc:75:7f: 88:26:ca:2f:ac:96:18:89:54:c3:2b:e4:32:df:af: e0:3c:b9:0c:ee:a5:23:73:e4:85:b1:da:94:d4:a2: 3d:24:43:2f:64:5c:4c:0f:3f:70:bf:36:41:86:27: 5b:1d:5b:aa:7b:3b:37:20:2e:3f:9a:ba:ff:6d:d3: ce:93:51:fa:a2:f9:65:76:98:17:08:6d:2e:79:b4: ae:8f:32:a4:23:27:ed:81:d9:50:7a:33:60:25:dd: 96:d8:00:be:33:61:8e:87:26:2c:91:61:84:7f:e8: 1c:a0:b7:8d:20:1a:d5:74:8c:de:31:60:b0:05:9e: cf:aa:d8:c8:3a:68:89:f6:e1:eb:98:6d:25:df:e2: b0:ca:bd:0d:c2:01:8c:1a:17:d3:ee:66:56:de:88: 3d:9f:32:be:58:ea:06:0b:c3:e0:cf:dd:4d:b5:b6: 47:c4:d0:41:df:55:69:2e:cb:7c:53:ee:d2:08:ae: 94:a0:c4:2a:9f:18:e6:e2:5e:1a:50:c9:ca:a6:b5: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3A:61:23:4C:5A:12:EE:2A:99:2A:74:4E:EC:01:C4:87:78:FE:E4 X509v3 Authority Key Identifier: keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:13:62:4b:96:4b:52:49:82:46:d1:93:5f:31:9f:ab:22:6c: 6f:03:fb:43:d4:0a:f6:e4:61:4f:51:87:e8:63:1b:67:86:31: ec:2e:21:e7:d1:10:43:0e:c4:0a:8e:af:b6:04:52:3e:0a:b8: 84:89:87:7b:47:19:09:01:bd:a1:1e:c8:7e:de:a0:f3:ee:4b: 2f:0a:08:78:98:49:f5:ab:72:d4:40:af:ae:be:fb:d5:09:44: 1b:44:d0:80:69:f9:88:50:77:74:a9:77:b3:a6:c7:3e:c0:4b: 92:7f:b0:69:c9:a0:8f:04:f8:14:36:43:32:d2:f3:80:c3:2f: 6d:9f:3d:99:0b:3c:14:b2:ed:8f:cf:56:a7:c7:2c:34:47:07: c7:91:db:bb:30:f2:66:83:68:f1:3d:96:e7:4e:5e:8b:79:dc: a3:1c:a2:a0:0c:e3:ee:5e:b2:7e:b7:7a:d1:73:d6:2e:e7:86: b2:28:7a:69:b2:bd:ec:fd:df:95:22:59:67:ec:a6:7f:73:4d: 1d:33:57:42:63:b9:3b:b8:dc:0b:0f:a5:26:eb:f2:3f:4e:db: 19:a3:2b:5a:1c:f1:67:88:68:2b:12:cc:2d:9c:6f:72:d8:f1: 2f:07:df:0c:7b:08:c9:3a:40:f9:65:a1:c8:f8:9b:40:7a:c0: 93:ed:61:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/hKQke2k0vw7t2T/T+7Z/idXAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQw MTI1MkE1QzAeFw0yNjAzMDExNzI3MjVaFw0yNjAzMDUwMTQ1MjVaMDMxMTAvBgNV BAMTKDJBM0E2MTIzNEM1QTEyRUUyQTk5MkE3NDRFRUMwMUM0ODc3OEZFRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGcDneqdI6biCGZowzIK+fHsg 8kUNoWF+y9XlYsUekXxwIqaqjJwaHo/GWIAUODmOBis8Fh/8qtx1f4gmyi+slhiJ VMMr5DLfr+A8uQzupSNz5IWx2pTUoj0kQy9kXEwPP3C/NkGGJ1sdW6p7OzcgLj+a uv9t086TUfqi+WV2mBcIbS55tK6PMqQjJ+2B2VB6M2Al3ZbYAL4zYY6HJiyRYYR/ 6Bygt40gGtV0jN4xYLAFns+q2Mg6aIn24euYbSXf4rDKvQ3CAYwaF9PuZlbeiD2f Mr5Y6gYLw+DP3U21tkfE0EHfVWkuy3xT7tIIrpSgxCqfGObiXhpQycqmtbBbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKjphI0xaEu4qmSp0TuwBxId4/uQwHwYDVR0j BBgwFoAUOJ58E89jRK65MAHNTFrHlAElKlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjAzMmJjOS02MDVhLTQyNTMtYTRjZC02MmYxMjQxMjZlYWMvMC8zODlFN0MxM0NG NjM0NEFFQjkzMDAxQ0Q0QzVBQzc5NDAxMjUyQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQwMTI1 MkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIwMzJiYzktNjA1YS00MjUzLWE0 Y2QtNjJmMTI0MTI2ZWFjLzAvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3 OTQwMTI1MkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUTYkuWS1JJgkbRk18xn6sibG8D+0PUCvbk YU9Rh+hjG2eGMewuIefREEMOxAqOr7YEUj4KuISJh3tHGQkBvaEeyH7eoPPuSy8K CHiYSfWrctRAr66++9UJRBtE0IBp+YhQd3Spd7Omxz7AS5J/sGnJoI8E+BQ2QzLS 84DDL22fPZkLPBSy7Y/PVqfHLDRHB8eR27sw8maDaPE9ludOXot53KMcoqAM4+5e sn63etFz1i7nhrIoemmyvez935UiWWfspn9zTR0zV0JjuTu43AsPpSbr8j9O2xmj K1oc8WeIaCsSzC2cb3LY8S8H3wx7CMk6QPllocj4m0B6wJPtYSA= -----END CERTIFICATE-----Generated at Mon Mar 2 16:34:20 2026 by rpki-client