$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft File: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft (raw, json) Hash identifier: K8tXDlqYuXwu23uztjE44qVqf0DrD5bLwyj0uL0fPvo= Subject key identifier: 2F:75:37:8A:B8:50:0C:64:1C:49:D0:61:08:35:0C:79:2A:4B:A5:F5 Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Certificate serial: 3CE5F49C31FCFF2D88A4EB923576BFDBD42563EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft Manifest number: 0554 Signing time: Mon 02 Mar 2026 07:01:48 +0000 Manifest this update: Mon 02 Mar 2026 06:56:48 +0000 Manifest next update: Thu 05 Mar 2026 08:28:48 +0000 Files and hashes: 1: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: NIprOafL/FkfE+7MXVPnJMsMOXtIi5Oz7VSZiSJ3HkA=) 2: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl (hash: LB3unnV+TAMKST8/DRyjJXfIUIKny2AR/MaHH2CqNZs=) 3: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: HfUy1Uhb3h99FOMvLMDprgyPmVmWuM8DW9xncpfi5EY=) 4: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: 8XDzxw0TaLUeJDSAqwkpcBgLpYWoQ6KOKlrexsJYJlI=) 5: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: V9ZamZCw6D4mYhUfCXfPGFZw7f/kJlQ2HuBrz1q+Cyg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e5:f4:9c:31:fc:ff:2d:88:a4:eb:92:35:76:bf:db:d4:25:63:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Validity Not Before: Mar 2 06:56:48 2026 GMT Not After : Mar 5 08:28:48 2026 GMT Subject: CN=2F75378AB8500C641C49D06108350C792A4BA5F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0e:87:d9:04:7c:d7:f1:67:b1:0b:fd:07:ed: ff:cf:8b:96:05:49:60:98:a7:3c:3c:75:34:df:e1: 14:07:46:5b:c7:81:5c:91:91:89:fc:4f:66:61:8f: 85:d0:d1:81:25:9e:07:1c:92:75:01:90:88:f6:10: c3:14:f9:cc:56:4d:fb:55:c6:5b:86:5d:55:34:b2: 50:31:8a:aa:02:c7:54:39:f8:fe:74:4a:0e:81:42: 38:22:e8:0e:d2:d3:b9:02:fa:1e:48:8b:1c:83:91: ec:6e:43:c4:a2:b9:61:6e:eb:c4:a4:82:21:eb:c5: c2:0c:a2:28:f4:a3:12:7a:f8:fd:b0:db:0d:fa:82: bb:4c:3f:b7:3a:19:5a:3a:ed:ca:8d:c6:57:99:b1: bd:8f:0c:e7:a4:2f:dd:1b:7b:b0:fc:f1:49:42:27: bc:d4:cf:13:2a:4e:30:67:51:ae:23:3a:b4:5b:ee: 71:46:68:13:1f:8f:ed:5d:d3:33:95:7b:d6:ec:92: 95:3e:73:c8:40:6b:a2:4f:66:07:d6:64:ea:49:06: cb:99:c0:3f:4f:57:0f:88:69:9a:56:6a:40:73:5b: 52:65:dc:4d:cf:12:6b:47:48:5e:39:2d:3f:f3:d6: e3:e3:38:e1:2d:9f:39:a2:3b:89:49:1f:51:01:87: ce:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:75:37:8A:B8:50:0C:64:1C:49:D0:61:08:35:0C:79:2A:4B:A5:F5 X509v3 Authority Key Identifier: keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6c:a1:f7:79:d4:b7:4d:1f:b4:bd:79:35:1d:e3:7d:c8:13: 1b:05:3d:0a:b1:08:91:2a:64:fb:c8:19:1d:d9:70:f7:9f:d9: 5b:ea:d1:57:c9:80:c3:85:27:fa:c1:df:dc:3b:a8:09:02:c7: c1:72:11:43:77:92:af:a5:01:8f:f2:20:2b:14:fc:99:4a:d9: d6:a0:97:e4:c9:fa:2d:29:94:e8:a0:c1:9d:6d:50:62:08:1e: 3e:36:b9:60:16:c6:85:25:26:1c:12:80:b7:ac:07:25:c6:ca: 70:e4:82:f2:c6:31:24:ed:cd:3c:68:ac:eb:4a:11:10:a4:bc: cb:f6:ea:a8:61:77:77:13:d5:c2:39:b7:01:ce:a2:3a:e6:1d: 89:5e:df:d8:7d:6d:e9:88:fc:61:97:2d:97:9f:8c:2d:95:4a: f4:85:66:8b:37:f9:66:d7:43:fa:85:77:13:42:e5:05:91:12: c8:3c:bf:d8:0d:32:c0:67:14:9a:ef:d2:c7:8a:2b:27:37:d5: 6d:15:cd:e6:25:e4:77:e5:79:25:0f:2a:d6:6a:22:f1:4e:a4: 6e:ad:f8:9d:9d:5f:bd:c9:dd:7e:66:cf:86:49:86:63:95:e2: 3d:1d:c0:fd:80:a3:82:1a:63:86:86:ad:c7:b0:ac:28:18:55: 35:86:31:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPOX0nDH8/y2IpOuSNXa/29QlY+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4 QTNCQjZENDAeFw0yNjAzMDIwNjU2NDhaFw0yNjAzMDUwODI4NDhaMDMxMTAvBgNV BAMTKDJGNzUzNzhBQjg1MDBDNjQxQzQ5RDA2MTA4MzUwQzc5MkE0QkE1RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDofZBHzX8WexC/0H7f/Pi5YF SWCYpzw8dTTf4RQHRlvHgVyRkYn8T2Zhj4XQ0YElngccknUBkIj2EMMU+cxWTftV xluGXVU0slAxiqoCx1Q5+P50Sg6BQjgi6A7S07kC+h5IixyDkexuQ8SiuWFu68Sk giHrxcIMoij0oxJ6+P2w2w36grtMP7c6GVo67cqNxleZsb2PDOekL90be7D88UlC J7zUzxMqTjBnUa4jOrRb7nFGaBMfj+1d0zOVe9bskpU+c8hAa6JPZgfWZOpJBsuZ wD9PVw+IaZpWakBzW1Jl3E3PEmtHSF45LT/z1uPjOOEtnzmiO4lJH1EBh84lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL3U3irhQDGQcSdBhCDUMeSpLpfUwHwYDVR0j BBgwFoAUNoNp0JbOCYLM8fERAB8qLoo7ttQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWYyNmZiOC03MmM0LTQ5ZDktOWNiZS04MjI2Mzk3MjcxYTIvMC8zNjgzNjlEMDk2 Q0UwOTgyQ0NGMUYxMTEwMDFGMkEyRThBM0JCNkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4QTNC QjZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj YmUtODIyNjM5NzI3MWEyLzAvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJB MkU4QTNCQjZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFsofd51LdNH7S9eTUd433IExsFPQqxCJEq ZPvIGR3ZcPef2Vvq0VfJgMOFJ/rB39w7qAkCx8FyEUN3kq+lAY/yICsU/JlK2dag l+TJ+i0plOigwZ1tUGIIHj42uWAWxoUlJhwSgLesByXGynDkgvLGMSTtzTxorOtK ERCkvMv26qhhd3cT1cI5twHOojrmHYle39h9bemI/GGXLZefjC2VSvSFZos3+WbX Q/qFdxNC5QWREsg8v9gNMsBnFJrv0seKKyc31W0VzeYl5HfleSUPKtZqIvFOpG6t +J2dX73J3X5mz4ZJhmOV4j0dwP2Ao4IaY4aGrcewrCgYVTWGMQ4= -----END CERTIFICATE-----Generated at Mon Mar 2 15:17:32 2026 by rpki-client