$ rpki-client -vvf repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft File: 03832B38693F0F23EF49480775A2493B9E3F7FA0.mft (raw, json) Hash identifier: GXpKcWos6zkSd2x2IlVLGQRTgdnja7zk7/ZlulGypSw= Subject key identifier: F7:76:18:F3:3F:91:4F:3E:55:3D:4B:C9:57:DE:DD:59:A5:BF:1E:80 Authority key identifier: 03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 Certificate issuer: /CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Certificate serial: 64D3E03D8CBDB7C664D0FD53BC17B1E8E6BE71C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft Manifest number: 0389 Signing time: Wed 15 Apr 2026 21:10:58 +0000 Manifest this update: Wed 15 Apr 2026 21:05:58 +0000 Manifest next update: Sun 19 Apr 2026 06:26:58 +0000 Files and hashes: 1: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: C109hu1BJkl1pWWKKoRbk9sf7Lmm7AwONWDQ76EwY1Q=) 2: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: pmzgckCGAS5Ljr2SgdcTD9JmH8nize0p1NnNdSRs+P0=) 3: 03832B38693F0F23EF49480775A2493B9E3F7FA0.crl (hash: tlakx20cOKCf8v++SFmJ6b7zaXVT8SUbIT69qHkDp0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 06:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d3:e0:3d:8c:bd:b7:c6:64:d0:fd:53:bc:17:b1:e8:e6:be:71:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Validity Not Before: Apr 15 21:05:58 2026 GMT Not After : Apr 19 06:26:58 2026 GMT Subject: CN=F77618F33F914F3E553D4BC957DEDD59A5BF1E80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:27:2a:2d:7f:72:b8:76:2b:d5:04:9c:b5:ba: fe:df:ef:3c:1c:39:16:14:44:fa:9f:2b:4f:5c:b2: 61:b7:fc:6e:c0:f1:cc:2d:b8:e8:37:87:84:c7:65: e5:51:44:81:48:cc:27:02:a0:c2:88:dd:e5:11:1d: 8a:38:7c:cb:b6:b3:43:b2:fa:b2:13:19:9c:4f:4c: 0e:f9:32:88:de:2c:87:18:90:b3:09:27:f5:ea:da: 57:de:c2:bc:bc:23:fc:fb:29:24:02:d0:03:79:0d: 5b:eb:b6:05:3e:75:59:de:82:b9:fc:55:39:74:4b: 06:31:1b:2e:9b:9e:b0:67:94:29:72:2a:48:79:c1: c1:c8:24:77:12:8f:d2:06:be:44:0d:ce:12:3f:47: d1:52:6a:fd:68:77:11:7d:6e:44:24:77:05:71:62: 74:f8:99:ba:b0:c1:2b:69:2b:25:a7:f2:62:9a:97: d9:90:c7:ea:91:dc:0a:74:59:1a:48:08:e6:7a:d7: 56:0f:05:7a:4a:fe:6e:13:3e:68:8d:ed:7d:b7:25: 2f:47:0e:74:75:db:4c:c2:90:a5:f0:62:5a:b9:14: 2f:71:08:ec:fc:c0:75:e5:bb:23:56:d8:96:34:b7: 25:0c:9c:eb:29:1f:23:52:4b:04:cd:0c:e3:6c:41: a8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:76:18:F3:3F:91:4F:3E:55:3D:4B:C9:57:DE:DD:59:A5:BF:1E:80 X509v3 Authority Key Identifier: keyid:03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:8a:3e:59:50:00:e5:33:5e:af:1a:19:7e:27:ec:7d:35:58: 68:99:87:e1:47:9a:69:47:73:2b:d5:d2:7b:03:a0:54:e4:09: 99:b3:12:3d:c5:4c:d7:e1:4d:1b:2f:14:6f:2c:94:c1:9e:66: b1:8a:7b:f9:b6:7a:c0:7b:fa:f5:46:0f:11:83:02:43:62:26: 69:25:1a:c7:cb:f3:4c:81:63:b1:32:2e:1d:f9:df:a3:6b:9c: b4:ee:56:3d:b2:11:be:e6:c1:d7:da:b3:6c:ef:12:c1:ad:45: 5d:26:cf:db:80:b1:2e:b7:0d:5c:d5:ea:fe:d2:0d:54:b6:7b: 72:89:6a:3a:5c:12:48:57:09:7a:8d:64:a5:0b:fd:a4:49:09: f7:ae:96:c2:01:51:05:6c:3d:c1:0a:2e:48:e8:e5:51:eb:b3: 5a:dc:84:27:6f:1f:ea:c8:97:4e:83:6b:e5:97:04:26:13:93: 26:c5:83:48:08:c5:f4:e4:c9:a7:a8:31:15:f9:ea:36:74:e5: 04:ef:26:58:92:bb:27:a2:dc:42:24:b4:2b:2e:14:dd:23:31: 7f:28:c5:03:a1:fb:2d:20:11:00:51:f8:55:5d:c9:f7:0c:78: 91:f2:ec:89:1c:8e:f9:c2:cd:bf:c4:45:f9:fb:0c:27:02:c2: 84:0f:42:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZNPgPYy9t8Zk0P1TvBex6Oa+ccMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5 RTNGN0ZBMDAeFw0yNjA0MTUyMTA1NThaFw0yNjA0MTkwNjI2NThaMDMxMTAvBgNV BAMTKEY3NzYxOEYzM0Y5MTRGM0U1NTNENEJDOTU3REVERDU5QTVCRjFFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Jyotf3K4divVBJy1uv7f7zwc ORYURPqfK09csmG3/G7A8cwtuOg3h4THZeVRRIFIzCcCoMKI3eURHYo4fMu2s0Oy +rITGZxPTA75MojeLIcYkLMJJ/Xq2lfewry8I/z7KSQC0AN5DVvrtgU+dVnegrn8 VTl0SwYxGy6bnrBnlClyKkh5wcHIJHcSj9IGvkQNzhI/R9FSav1odxF9bkQkdwVx YnT4mbqwwStpKyWn8mKal9mQx+qR3Ap0WRpICOZ611YPBXpK/m4TPmiN7X23JS9H DnR120zCkKXwYlq5FC9xCOz8wHXluyNW2JY0tyUMnOspHyNSSwTNDONsQai7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU93YY8z+RTz5VPUvJV97dWaW/HoAwHwYDVR0j BBgwFoAUA4MrOGk/DyPvSUgHdaJJO54/f6AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmVkMDU4NC1hYzJkLTQ2NjQtYmMxMS1kMDI2ZGRiZmFmN2MvMC8wMzgzMkIzODY5 M0YwRjIzRUY0OTQ4MDc3NUEyNDkzQjlFM0Y3RkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5RTNG N0ZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlZDA1ODQtYWMyZC00NjY0LWJj MTEtZDAyNmRkYmZhZjdjLzAvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5 M0I5RTNGN0ZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqKPllQAOUzXq8aGX4n7H01WGiZh+FHmmlH cyvV0nsDoFTkCZmzEj3FTNfhTRsvFG8slMGeZrGKe/m2esB7+vVGDxGDAkNiJmkl GsfL80yBY7EyLh3536NrnLTuVj2yEb7mwdfas2zvEsGtRV0mz9uAsS63DVzV6v7S DVS2e3KJajpcEkhXCXqNZKUL/aRJCfeulsIBUQVsPcEKLkjo5VHrs1rchCdvH+rI l06Da+WXBCYTkybFg0gIxfTkyaeoMRX56jZ05QTvJliSuyei3EIktCsuFN0jMX8o xQOh+y0gEQBR+FVdyfcMeJHy7IkcjvnCzb/ERfn7DCcCwoQPQuw= -----END CERTIFICATE-----Generated at Fri Apr 17 17:22:03 2026 by rpki-client