$ rpki-client -vvf repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft File: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft (raw, json) Hash identifier: VNuZCIOhb4rFiANmArsBMLYTYmyMWGBvdukLJA9qW3U= Subject key identifier: 81:1B:24:33:B8:96:E0:19:BF:11:A1:15:49:01:79:C1:E4:2F:B5:68 Authority key identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE Certificate issuer: /CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Certificate serial: 7DEF62FEA5705F9DFE0246838B5C71FB774A25CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft Manifest number: 03D1 Signing time: Fri 27 Feb 2026 22:51:04 +0000 Manifest this update: Fri 27 Feb 2026 22:46:04 +0000 Manifest next update: Tue 03 Mar 2026 07:06:04 +0000 Files and hashes: 1: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl (hash: Cch4uvW1GMwDgyE3ehCyMJOT5xYXGw1cYuFdJxHb2g4=) 2: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: LeAX921PuFORgks79ePG8mv8iLwlKYZRHuQBuRA29no=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 07:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ef:62:fe:a5:70:5f:9d:fe:02:46:83:8b:5c:71:fb:77:4a:25:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Validity Not Before: Feb 27 22:46:04 2026 GMT Not After : Mar 3 07:06:04 2026 GMT Subject: CN=811B2433B896E019BF11A115490179C1E42FB568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:37:db:d1:b1:d1:47:dc:cd:99:1f:d1:0d: 02:2d:88:2c:9c:e2:e0:1d:7d:a6:1d:e9:b1:3f:c2: dc:19:8d:5f:83:1f:0d:4f:ee:54:eb:ae:5b:c3:7b: 17:79:19:91:83:77:50:2f:77:d3:51:0f:2c:6d:a6: d0:0c:e3:4f:c3:eb:58:d6:12:32:8c:02:f0:3b:54: eb:98:4b:c5:b3:54:7f:53:36:3e:f8:df:d6:cb:76: d5:c6:5c:fe:83:20:f5:96:95:a0:2b:ac:bc:f3:6c: 59:70:cd:3e:24:3f:08:f1:9b:87:54:db:9f:02:e9: e4:25:e5:ba:73:02:bc:c2:8d:ab:76:ac:c6:89:68: 5f:d2:8b:55:40:1a:e4:bd:ae:f9:bc:16:60:77:0c: 18:a3:54:10:d2:f2:ce:a0:c4:28:88:71:28:90:1e: 07:f5:ab:2b:e5:cb:42:e9:f8:5d:cf:b3:a4:15:f3: 17:31:9d:dd:59:c9:5b:1e:d3:d6:15:df:f8:4a:39: 33:b4:21:c9:2f:f7:bb:2e:70:3a:0a:fd:df:18:57: 79:65:35:61:85:3d:96:15:c0:87:7b:b9:85:84:d5: a2:d7:65:3f:33:ef:c8:f7:23:2b:4f:6d:59:37:7e: 93:15:fc:71:b6:b5:ba:19:86:14:ba:85:69:2b:32: a0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1B:24:33:B8:96:E0:19:BF:11:A1:15:49:01:79:C1:E4:2F:B5:68 X509v3 Authority Key Identifier: keyid:03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:59:ae:d0:f7:c1:5b:1c:d9:96:74:cd:ab:9e:1a:c3:4d:25: f3:dd:05:5f:b5:d6:5c:cd:4c:4a:01:b2:b3:93:a7:bd:51:1b: 29:16:86:8c:dc:6d:84:fe:95:93:f2:71:01:c1:bf:b3:1c:8a: c5:3f:bc:1c:c0:53:08:5a:e0:b7:41:fd:d4:40:f5:2f:d4:d0: 96:61:bf:a4:69:fb:f7:d8:f9:fa:58:19:24:77:3b:f7:d2:66: c1:af:0f:9f:23:c8:ad:ab:e6:29:7f:9c:1b:f1:4f:3e:93:db: f6:06:aa:70:c1:f2:a9:f2:51:4b:fe:db:30:59:e4:be:25:0b: ea:d2:e8:83:57:c2:96:f5:2d:64:a2:9b:ce:83:be:18:6b:d9: 72:1f:cf:4e:ea:90:fa:14:88:92:13:6d:22:27:61:17:4a:3d: 45:4d:33:73:c8:ea:2e:fa:bc:f0:3a:11:13:7c:6a:d9:22:6b: c7:e7:b5:01:13:e4:6b:8f:dd:7c:92:20:14:41:08:ce:10:3f: 18:fc:f8:94:09:fd:6b:bc:3f:de:53:a9:b3:47:e8:79:43:c2: fa:f2:30:70:90:64:f6:ce:92:83:2f:90:01:24:4f:12:2c:6a: 65:be:23:ca:1c:d0:42:f1:b5:6d:48:a3:1f:fa:b3:6b:86:e2: c1:34:2f:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfe9i/qVwX53+AkaDi1xx+3dKJcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5 NzE0MjZGRTAeFw0yNjAyMjcyMjQ2MDRaFw0yNjAzMDMwNzA2MDRaMDMxMTAvBgNV BAMTKDgxMUIyNDMzQjg5NkUwMTlCRjExQTExNTQ5MDE3OUMxRTQyRkI1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCEjfb0bHRR9zNmR/RDQItiCyc 4uAdfaYd6bE/wtwZjV+DHw1P7lTrrlvDexd5GZGDd1Avd9NRDyxtptAM40/D61jW EjKMAvA7VOuYS8WzVH9TNj7439bLdtXGXP6DIPWWlaArrLzzbFlwzT4kPwjxm4dU 258C6eQl5bpzArzCjat2rMaJaF/Si1VAGuS9rvm8FmB3DBijVBDS8s6gxCiIcSiQ Hgf1qyvly0Lp+F3Ps6QV8xcxnd1ZyVse09YV3/hKOTO0Ickv97sucDoK/d8YV3ll NWGFPZYVwId7uYWE1aLXZT8z78j3IytPbVk3fpMV/HG2tboZhhS6hWkrMqDzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgRskM7iW4Bm/EaEVSQF5weQvtWgwHwYDVR0j BBgwFoAUA+9BScXbB6w0jljk2jm93ZcUJv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTdlNWIwZS01OTY0LTQ2M2YtODA0MS0zMzdmODA1NTY0M2MvMC8wM0VGNDE0OUM1 REIwN0FDMzQ4RTU4RTREQTM5QkRERDk3MTQyNkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5NzE0 MjZGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3ZTViMGUtNTk2NC00NjNmLTgw NDEtMzM3ZjgwNTU2NDNjLzAvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJE REQ5NzE0MjZGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJZrtD3wVsc2ZZ0zaueGsNNJfPdBV+11lzN TEoBsrOTp71RGykWhozcbYT+lZPycQHBv7McisU/vBzAUwha4LdB/dRA9S/U0JZh v6Rp+/fY+fpYGSR3O/fSZsGvD58jyK2r5il/nBvxTz6T2/YGqnDB8qnyUUv+2zBZ 5L4lC+rS6INXwpb1LWSim86Dvhhr2XIfz07qkPoUiJITbSInYRdKPUVNM3PI6i76 vPA6ERN8atkia8fntQET5GuP3XySIBRBCM4QPxj8+JQJ/Wu8P95TqbNH6HlDwvry MHCQZPbOkoMvkAEkTxIsamW+I8oc0ELxtW1Iox/6s2uG4sE0Lyk= -----END CERTIFICATE-----Generated at Mon Mar 2 10:13:28 2026 by rpki-client