$ rpki-client -vvf repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft File: 03832B38693F0F23EF49480775A2493B9E3F7FA0.mft (raw, json) Hash identifier: VtNG8Bb/xZofhYpihOpGc4EIktGrEp9dhxtBkXpfGZE= Subject key identifier: 8A:97:59:B3:29:34:98:27:2D:E8:40:31:94:62:C0:87:7E:BA:C5:FB Authority key identifier: 03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 Certificate issuer: /CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Certificate serial: 14FE39E5DBF2B80E60272746FF916A7D7B626F6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft Manifest number: 0375 Signing time: Mon 02 Mar 2026 12:21:03 +0000 Manifest this update: Mon 02 Mar 2026 12:16:03 +0000 Manifest next update: Thu 05 Mar 2026 14:05:03 +0000 Files and hashes: 1: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: C109hu1BJkl1pWWKKoRbk9sf7Lmm7AwONWDQ76EwY1Q=) 2: 03832B38693F0F23EF49480775A2493B9E3F7FA0.crl (hash: GyAg/aFBc01b7K82K0puUT/1d1Ut5DcIdGLN+/rW79o=) 3: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: pmzgckCGAS5Ljr2SgdcTD9JmH8nize0p1NnNdSRs+P0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:fe:39:e5:db:f2:b8:0e:60:27:27:46:ff:91:6a:7d:7b:62:6f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Validity Not Before: Mar 2 12:16:03 2026 GMT Not After : Mar 5 14:05:03 2026 GMT Subject: CN=8A9759B3293498272DE840319462C0877EBAC5FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e4:33:ae:25:cd:ac:20:c1:bc:ce:ce:6c:4e: 7c:11:13:85:f0:f2:b5:85:22:fc:74:1c:d9:d7:10: c7:d0:e2:f5:7b:32:da:9d:f6:81:41:98:d2:e1:e5: 2a:a4:49:42:5f:1e:6a:06:f5:00:88:20:27:78:d7: ac:d2:e9:90:de:a1:2b:0b:5e:f7:0a:8e:fb:02:8d: 7e:1e:cd:16:c2:ac:fc:2a:48:87:fb:03:95:45:85: 23:56:de:29:5e:7d:e3:2c:84:10:e3:56:75:7e:4c: 44:f1:35:c4:4a:d1:35:47:bd:4d:3a:be:d6:1d:d0: ec:20:80:f4:39:a0:14:f0:39:97:e8:7e:50:8e:8c: 62:af:2a:1f:68:f0:55:37:8a:19:4e:2e:b9:ad:5c: 78:d4:66:90:ba:21:c3:97:49:31:36:63:3f:79:de: d7:c0:de:d8:cd:55:87:9a:29:cf:34:ca:39:da:b0: de:c6:e7:5e:cc:98:35:d2:49:1d:95:a9:a6:c9:fc: f7:90:70:27:16:b4:90:00:e2:7a:28:45:fd:42:6c: 75:28:9a:96:89:c5:c3:72:25:e9:98:29:38:b9:d1: 0d:c7:17:fb:65:fc:db:ea:fa:50:df:10:8f:4a:86: dd:5d:bd:0d:74:92:8e:83:4a:c2:f5:c3:c2:d6:bd: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:97:59:B3:29:34:98:27:2D:E8:40:31:94:62:C0:87:7E:BA:C5:FB X509v3 Authority Key Identifier: keyid:03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:d7:a1:10:08:db:e0:2d:fa:a2:42:63:e4:7a:f3:53:e0:33: 27:a4:c5:8f:67:3f:a0:de:66:96:95:7c:b2:cd:a3:f0:1b:ba: 4c:f3:e0:79:7b:4c:1a:a8:92:60:73:78:62:31:a2:aa:8a:89: 85:30:88:53:8d:9b:03:46:70:61:51:02:7b:83:1c:e5:99:84: 09:05:38:06:c4:c6:1b:07:36:ac:4f:7f:86:55:3e:0b:8a:36: 8f:4b:6c:5c:c2:fb:06:05:81:01:33:3e:b3:a5:aa:b6:de:2c: 57:d2:a1:4b:8a:19:26:66:93:d8:fa:01:34:13:d9:aa:93:35: be:48:c8:8b:04:e4:4e:64:0a:23:35:98:86:6d:e1:93:e5:81: 21:e5:83:8a:8a:62:a3:c9:5c:a7:9f:d6:57:d3:14:68:89:69: e9:1b:83:86:e8:4e:3e:9d:ae:b2:74:3f:04:4e:7c:fd:59:ab: 70:19:bc:e5:a7:12:d8:2a:9a:51:71:af:40:68:32:8e:55:a0: a9:58:62:03:6f:a2:59:e4:5f:d3:1a:69:fb:00:57:4b:9c:dc: 06:5c:f7:77:c9:73:79:2f:42:ae:9e:f1:be:14:fe:6a:6e:7c: eb:fd:f5:5b:15:11:69:4d:e1:9c:48:43:50:1c:3a:64:92:b7: 92:23:01:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFP455dvyuA5gJydG/5FqfXtib20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5 RTNGN0ZBMDAeFw0yNjAzMDIxMjE2MDNaFw0yNjAzMDUxNDA1MDNaMDMxMTAvBgNV BAMTKDhBOTc1OUIzMjkzNDk4MjcyREU4NDAzMTk0NjJDMDg3N0VCQUM1RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb5DOuJc2sIMG8zs5sTnwRE4Xw 8rWFIvx0HNnXEMfQ4vV7Mtqd9oFBmNLh5SqkSUJfHmoG9QCIICd416zS6ZDeoSsL XvcKjvsCjX4ezRbCrPwqSIf7A5VFhSNW3ilefeMshBDjVnV+TETxNcRK0TVHvU06 vtYd0OwggPQ5oBTwOZfoflCOjGKvKh9o8FU3ihlOLrmtXHjUZpC6IcOXSTE2Yz95 3tfA3tjNVYeaKc80yjnasN7G517MmDXSSR2VqabJ/PeQcCcWtJAA4nooRf1CbHUo mpaJxcNyJemYKTi50Q3HF/tl/Nvq+lDfEI9Kht1dvQ10ko6DSsL1w8LWvbibAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUipdZsyk0mCct6EAxlGLAh366xfswHwYDVR0j BBgwFoAUA4MrOGk/DyPvSUgHdaJJO54/f6AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmVkMDU4NC1hYzJkLTQ2NjQtYmMxMS1kMDI2ZGRiZmFmN2MvMC8wMzgzMkIzODY5 M0YwRjIzRUY0OTQ4MDc3NUEyNDkzQjlFM0Y3RkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5RTNG N0ZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlZDA1ODQtYWMyZC00NjY0LWJj MTEtZDAyNmRkYmZhZjdjLzAvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5 M0I5RTNGN0ZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANzXoRAI2+At+qJCY+R681PgMyekxY9nP6De ZpaVfLLNo/Abukzz4Hl7TBqokmBzeGIxoqqKiYUwiFONmwNGcGFRAnuDHOWZhAkF OAbExhsHNqxPf4ZVPguKNo9LbFzC+wYFgQEzPrOlqrbeLFfSoUuKGSZmk9j6ATQT 2aqTNb5IyIsE5E5kCiM1mIZt4ZPlgSHlg4qKYqPJXKef1lfTFGiJaekbg4boTj6d rrJ0PwROfP1Zq3AZvOWnEtgqmlFxr0BoMo5VoKlYYgNvolnkX9MaafsAV0uc3AZc 93fJc3kvQq6e8b4U/mpufOv99VsVEWlN4ZxIQ1AcOmSSt5IjAVw= -----END CERTIFICATE-----Generated at Mon Mar 2 21:13:24 2026 by rpki-client