$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft File: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft (raw, json) Hash identifier: GQjXf+hP37+inDj5FIpmIaShDS56+reCW8/PRytUwcg= Subject key identifier: EE:13:3C:5A:ED:D3:0B:36:A9:BE:65:8F:AF:44:A4:1B:4C:37:3C:B7 Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 Certificate issuer: /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Certificate serial: 30F2FD9FB67C7ED71F491788CE1E1CA7D6B07440 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft Manifest number: 0350 Signing time: Sun 01 Mar 2026 14:30:55 +0000 Manifest this update: Sun 01 Mar 2026 14:25:55 +0000 Manifest next update: Thu 05 Mar 2026 00:32:55 +0000 Files and hashes: 1: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: umMXNYB5RwjlwGFC5Wpd2rzxhTLaoa08yJ2/wNUcpx0=) 2: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: wesud4Ud3HCpFz3TbmwbzTcWOeds/1nSTc4iWrxHtOo=) 3: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: u4aBEtuM2QHTp7BELhEUw3EMWzsVzmaE71DRbevw9IE=) 4: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: tU2O/OAH1O/qSyyJqDlWC4HBTQpL06kLsKSpR1jZ5rg=) 5: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl (hash: AuhHkfl6zdNobe1xFtnyH+qlZjs46XJeXj1vGJCe6ig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f2:fd:9f:b6:7c:7e:d7:1f:49:17:88:ce:1e:1c:a7:d6:b0:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Validity Not Before: Mar 1 14:25:55 2026 GMT Not After : Mar 5 00:32:55 2026 GMT Subject: CN=EE133C5AEDD30B36A9BE658FAF44A41B4C373CB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a9:bb:61:f1:c5:18:f9:36:9b:bc:04:81:57: 5f:09:62:33:31:a4:1f:f3:78:58:be:eb:8a:77:17: 11:84:3e:8d:e5:19:42:48:2b:13:ea:73:8d:33:bc: 65:6b:8f:ba:e0:cd:e2:80:df:8e:2d:7e:a9:f2:1b: bb:45:a2:43:15:48:a9:b7:c4:ce:f6:b7:31:81:18: 04:22:d3:9b:bc:86:a1:a4:8f:a2:18:e2:22:3b:5d: d4:a0:56:7b:ef:9a:b7:e8:93:7c:08:42:7e:3e:07: 05:b9:89:97:f2:90:55:6f:19:f5:c6:0a:45:cc:de: fa:b5:3c:a2:3e:44:e2:1a:37:de:60:da:39:62:69: 19:d1:3c:27:b7:52:ae:49:81:67:70:ae:ae:35:c6: 72:6d:21:2c:0b:6c:0c:39:72:ee:6d:be:1f:cf:21: 9b:0d:6c:06:9a:4e:48:98:59:73:78:37:a0:0a:cc: a9:7a:da:22:d0:69:3e:5b:df:9b:7d:b1:23:6f:54: 4f:6f:f4:c1:9d:96:7c:9c:4f:d9:ed:8f:21:9b:e7: ef:73:27:30:9d:f7:c7:70:5c:6b:30:02:d2:49:b7: f1:86:4f:f6:a5:f2:fa:3e:f3:0c:f6:7a:ca:61:81: fd:ba:ea:a2:07:fc:e0:35:5a:ff:00:95:4f:e9:8f: 5e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:13:3C:5A:ED:D3:0B:36:A9:BE:65:8F:AF:44:A4:1B:4C:37:3C:B7 X509v3 Authority Key Identifier: keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:19:ca:ba:f6:79:a4:ce:91:e8:27:05:3f:50:15:b5:c7:ba: ff:ac:ed:a3:64:43:42:34:8a:e4:f8:b5:d2:d8:2b:d3:73:73: b5:aa:54:52:f6:ee:2c:3b:3d:92:96:df:ac:8c:d9:de:dc:27: 85:b6:ba:54:a1:29:2a:ab:67:67:e2:29:62:0b:37:9b:7f:a6: 81:49:b2:32:a7:33:d6:75:e7:4e:7f:eb:61:2a:17:c5:3d:61: 1d:d8:7f:43:51:57:d6:88:91:9d:d1:1d:c6:bb:e3:94:8b:e0: 08:20:c6:16:41:ff:6b:8b:59:27:54:d3:5f:b2:03:91:59:5a: 4b:83:85:a7:25:f6:03:4b:6a:d8:52:3f:5c:9c:9b:94:dc:00: 56:f2:5a:5b:58:68:9a:43:87:56:f6:c5:99:2d:5f:73:b6:00: 48:71:2a:f2:22:c4:87:96:80:23:78:4d:14:30:27:ab:05:3a: 57:49:6a:21:95:4c:6f:1f:2a:59:10:1f:96:0d:f9:fc:2c:b9: 8a:50:22:62:12:36:69:b6:d6:de:e2:cb:2b:f1:f0:6b:35:31: d4:5e:48:95:f7:2c:40:dc:34:c4:5f:81:56:0e:3e:ad:1e:a2: 65:24:80:38:e1:62:3e:ae:82:38:0e:4e:8f:9d:07:6b:57:1a: 8e:23:a4:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMPL9n7Z8ftcfSReIzh4cp9awdEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1 NzVBRjdEMTAeFw0yNjAzMDExNDI1NTVaFw0yNjAzMDUwMDMyNTVaMDMxMTAvBgNV BAMTKEVFMTMzQzVBRUREMzBCMzZBOUJFNjU4RkFGNDRBNDFCNEMzNzNDQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjqbth8cUY+TabvASBV18JYjMx pB/zeFi+64p3FxGEPo3lGUJIKxPqc40zvGVrj7rgzeKA344tfqnyG7tFokMVSKm3 xM72tzGBGAQi05u8hqGkj6IY4iI7XdSgVnvvmrfok3wIQn4+BwW5iZfykFVvGfXG CkXM3vq1PKI+ROIaN95g2jliaRnRPCe3Uq5JgWdwrq41xnJtISwLbAw5cu5tvh/P IZsNbAaaTkiYWXN4N6AKzKl62iLQaT5b35t9sSNvVE9v9MGdlnycT9ntjyGb5+9z JzCd98dwXGswAtJJt/GGT/al8vo+8wz2esphgf266qIH/OA1Wv8AlU/pj15ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7hM8Wu3TCzapvmWPr0SkG0w3PLcwHwYDVR0j BBgwFoAUOZMVsYun0N1mbcqMPbvgE1da99EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmYyODg3OS00ODQ0LTQyZGUtYjJkOS1hOTY2NmRlMjgyZWEvMC8zOTkzMTVCMThC QTdEMERENjY2RENBOEMzREJCRTAxMzU3NUFGN0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1NzVB RjdEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUw MTM1NzVBRjdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMZyrr2eaTOkegnBT9QFbXHuv+s7aNkQ0I0 iuT4tdLYK9Nzc7WqVFL27iw7PZKW36yM2d7cJ4W2ulShKSqrZ2fiKWILN5t/poFJ sjKnM9Z1505/62EqF8U9YR3Yf0NRV9aIkZ3RHca745SL4AggxhZB/2uLWSdU01+y A5FZWkuDhacl9gNLathSP1ycm5TcAFbyWltYaJpDh1b2xZktX3O2AEhxKvIixIeW gCN4TRQwJ6sFOldJaiGVTG8fKlkQH5YN+fwsuYpQImISNmm21t7iyyvx8Gs1MdRe SJX3LEDcNMRfgVYOPq0eomUkgDjhYj6ugjgOTo+dB2tXGo4jpNg= -----END CERTIFICATE-----Generated at Mon Mar 2 07:51:07 2026 by rpki-client