$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft File: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft (raw, json) Hash identifier: NmQiYjq9JuDGJHo/v14KukOLJzq5bJphRd2PdqvtKI4= Subject key identifier: FA:32:AB:1E:71:91:0C:3C:91:3F:54:7A:4F:32:61:E9:5C:C2:7E:3E Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 Certificate issuer: /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Certificate serial: 359DBA05C5530597C94AC1473C0069F14C2484DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft Manifest number: 023D Signing time: Sun 01 Mar 2026 23:00:58 +0000 Manifest this update: Sun 01 Mar 2026 22:55:58 +0000 Manifest next update: Thu 05 Mar 2026 06:17:58 +0000 Files and hashes: 1: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl (hash: UQ2BVv3vSBfiaFuARkZyFblR+ejwvE/lwoBYd/isWLU=) 2: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: Ef88gL2i03irobp5ZP/X9ru7ObHhZljwJfbQzBpUyHw=) 3: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: exnV2in0lMY4Abx7/bcqLUFJk6DG/znMQfleVx5p9FM=) 4: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: J4NiRzqR7OJJpZcBvTEqABRnGVn4+G6RK0nifMHQkIc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:9d:ba:05:c5:53:05:97:c9:4a:c1:47:3c:00:69:f1:4c:24:84:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Validity Not Before: Mar 1 22:55:58 2026 GMT Not After : Mar 5 06:17:58 2026 GMT Subject: CN=FA32AB1E71910C3C913F547A4F3261E95CC27E3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cf:a8:c5:1e:05:6b:5e:f3:63:3e:40:de:50: 70:f4:fc:b1:f2:52:9e:7c:9c:b0:8c:ac:57:bd:e5: 95:e7:9b:ff:13:80:8a:13:bb:a5:f1:4f:3b:e7:19: ff:c2:06:58:5e:11:6b:1d:b9:fc:d0:5d:58:3d:d1: 46:b1:02:9a:71:06:22:7d:44:92:4d:50:f6:9e:f8: 81:69:91:81:d4:fd:3a:d6:bc:73:72:36:0c:89:e7: fc:99:56:77:28:15:b2:b0:39:e7:0f:22:f5:49:9d: cd:30:39:ed:b1:ec:19:de:67:b3:74:6b:c1:d9:23: af:4d:5e:b5:99:4b:10:86:f2:03:8e:3c:48:2c:c6: 12:d5:3c:48:f5:ba:79:33:3a:0a:84:48:19:89:56: b1:82:dd:6b:da:81:8c:bc:73:16:03:8a:4a:1c:c8: 03:b8:d3:08:a1:8c:40:f6:a3:5d:cd:23:53:75:93: d1:19:04:45:d6:71:2f:c9:2c:b8:7a:f1:d0:fd:50: bc:d6:a3:05:d4:ec:38:83:54:16:e1:83:9e:6d:8b: 71:ca:96:a0:33:f7:8c:14:7c:c9:20:cb:0c:62:23: 6d:be:0f:e4:c9:91:90:60:ad:24:2f:d9:ce:55:d2: 3a:ea:0b:a1:8e:db:22:1b:c2:3f:c0:e3:b6:15:1c: b0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:32:AB:1E:71:91:0C:3C:91:3F:54:7A:4F:32:61:E9:5C:C2:7E:3E X509v3 Authority Key Identifier: keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a7:a8:45:3c:b0:57:1c:3f:b4:30:f3:76:3f:9f:6a:09:f9: 4d:36:d4:46:2b:82:20:bf:23:be:a2:76:d7:c8:9a:28:9f:94: 8e:7d:ad:96:27:66:74:d7:b9:7b:92:ca:b0:82:ce:6a:2b:63: 45:11:ab:7d:f6:a6:74:89:90:68:11:81:ab:18:53:78:89:ed: ac:4e:4a:36:28:ff:db:ee:09:17:0e:75:5b:08:f1:0e:17:1d: 61:26:a1:87:94:53:b1:d2:19:06:25:96:aa:e8:43:1a:84:ce: fd:dc:28:b8:34:53:53:09:50:3c:8a:92:03:c6:8d:97:45:8c: 9c:d4:52:39:01:34:61:e2:ca:88:0c:c0:3f:39:15:22:fc:98: 6f:aa:dd:fb:0e:d0:db:dc:32:78:aa:d0:8b:fd:49:ef:c2:b3: 5f:30:6e:c5:b6:49:d9:b9:fe:9d:6e:af:54:1a:56:2a:07:a2: 61:54:41:52:80:36:3c:2f:f4:a9:c4:76:89:35:d7:96:f5:61: ce:4f:84:db:b4:c5:d1:29:36:97:8f:b6:d8:fb:af:71:46:b0: 39:a7:72:97:81:9a:ac:43:a2:f4:e7:db:95:fc:b1:e5:a9:65: 5d:3b:60:3a:6b:03:b5:e0:75:17:a2:69:59:f7:25:e1:f0:97: cf:8f:79:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNZ26BcVTBZfJSsFHPABp8UwkhNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1 NTA1RUQzMDAeFw0yNjAzMDEyMjU1NThaFw0yNjAzMDUwNjE3NThaMDMxMTAvBgNV BAMTKEZBMzJBQjFFNzE5MTBDM0M5MTNGNTQ3QTRGMzI2MUU5NUNDMjdFM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSz6jFHgVrXvNjPkDeUHD0/LHy Up58nLCMrFe95ZXnm/8TgIoTu6XxTzvnGf/CBlheEWsdufzQXVg90UaxAppxBiJ9 RJJNUPae+IFpkYHU/TrWvHNyNgyJ5/yZVncoFbKwOecPIvVJnc0wOe2x7BneZ7N0 a8HZI69NXrWZSxCG8gOOPEgsxhLVPEj1unkzOgqESBmJVrGC3WvagYy8cxYDikoc yAO40wihjED2o13NI1N1k9EZBEXWcS/JLLh68dD9ULzWowXU7DiDVBbhg55ti3HK lqAz94wUfMkgywxiI22+D+TJkZBgrSQv2c5V0jrqC6GO2yIbwj/A47YVHLBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+jKrHnGRDDyRP1R6TzJh6VzCfj4wHwYDVR0j BBgwFoAUOZ+EEY7e+q1d2TZzv9Ybn1UF7TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmMxMjcwMy1mMWY3LTQzYzktYTIyMC05MmVkZDg2ZWZlNWUvMC8zOTlGODQxMThF REVGQUFENUREOTM2NzNCRkQ2MUI5RjU1MDVFRDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1NTA1 RUQzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFC OUY1NTA1RUQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKnqEU8sFccP7Qw83Y/n2oJ+U021EYrgiC/ I76idtfImiiflI59rZYnZnTXuXuSyrCCzmorY0URq332pnSJkGgRgasYU3iJ7axO SjYo/9vuCRcOdVsI8Q4XHWEmoYeUU7HSGQYllqroQxqEzv3cKLg0U1MJUDyKkgPG jZdFjJzUUjkBNGHiyogMwD85FSL8mG+q3fsO0NvcMniq0Iv9Se/Cs18wbsW2Sdm5 /p1ur1QaVioHomFUQVKANjwv9KnEdok115b1Yc5PhNu0xdEpNpePttj7r3FGsDmn cpeBmqxDovTn25X8seWpZV07YDprA7XgdReiaVn3JeHwl8+PeWo= -----END CERTIFICATE-----Generated at Mon Mar 2 14:28:25 2026 by rpki-client