$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft File: 03315D0E966A85B878EA9058B8CF03EAF2881889.mft (raw, json) Hash identifier: Tq5o9qk/vNLpbDQcqKOrHhyWi0MYMBYQeqxv0EMJ7hI= Subject key identifier: B9:3D:B6:CC:AB:8B:59:BA:83:1C:C8:8F:50:9D:E9:D5:88:5B:35:D5 Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89 Certificate issuer: /CN=03315D0E966A85B878EA9058B8CF03EAF2881889 Certificate serial: 4BED1CFA2EDF12166B3C10F35329CA44E823A467 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer Subject info access: rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft Manifest number: 055F Signing time: Tue 31 Mar 2026 10:32:11 +0000 Manifest this update: Tue 31 Mar 2026 10:27:11 +0000 Manifest next update: Fri 03 Apr 2026 19:08:11 +0000 Files and hashes: 1: 34352e3132352e37322e302f32322d3234203d3e20313335343438.roa (hash: 0xR4iUHdKDDCOxdGEjjw5dfszyruo+MDrchNeNEqs2w=) 2: 3132352e36322e39322e302f32322d3234203d3e20313338383032.roa (hash: /mrf9uGudGqcY2xOJDkK2ay/Dazo8lduBDgmiiL0FaY=) 3: 34352e3132322e35322e302f32322d3234203d3e20313335343438.roa (hash: DkpLk9wjtee+olEloYKtXa5HH1pKUw3+B87062+6qXc=) 4: 3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa (hash: FQaLrXQaTAavmrBmVo9QPPvdOGdpfu5PAx/qFXOh+QY=) 5: 3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa (hash: hoLbivleHtt89cCReqbvfZYyTkoCRfwcqA081C1+9Gw=) 6: 3130332e36342e31342e302f32342d3234203d3e20313335343438.roa (hash: QC8bpRsjoPax2VeFVISF7pou7WEj+SsbxVAbvHu+cPo=) 7: 03315D0E966A85B878EA9058B8CF03EAF2881889.crl (hash: gSNebsXsD9m/Z2zLS4bf79Y8FZIW9+AR3g0zLswRzEw=) 8: 3133392e352e34302e302f32322d3234203d3e20313335343438.roa (hash: FiOfMQpB+2gj2/QXJXJKgiwN/buCJemHWYRysKfxPV0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 19:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ed:1c:fa:2e:df:12:16:6b:3c:10:f3:53:29:ca:44:e8:23:a4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889 Validity Not Before: Mar 31 10:27:11 2026 GMT Not After : Apr 3 19:08:11 2026 GMT Subject: CN=B93DB6CCAB8B59BA831CC88F509DE9D5885B35D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:d6:d0:70:2a:14:06:9c:18:28:40:6c:fe: 81:2b:56:6e:cc:1e:60:1d:18:50:71:11:25:9d:23: c5:cf:bc:a7:26:e2:f0:b5:30:76:2c:5f:70:29:71: 5f:63:fb:9d:d1:c3:cd:4d:cb:73:38:bc:f1:a2:55: d8:61:bc:56:a0:f1:e4:54:f0:69:88:2b:44:d8:2b: a8:2e:41:4c:4e:0e:bc:ab:bb:3d:ba:e5:6d:bd:af: 7b:1b:c0:39:cb:33:99:f9:60:ca:4a:04:a7:0b:81: 06:e9:f3:33:8a:a9:a3:5c:70:cb:bb:a0:b3:2d:c5: b8:be:35:7d:f8:1a:06:a6:bb:2a:b6:db:f9:87:94: 2f:fb:01:c0:cc:35:55:08:48:23:e0:f3:0a:e6:fb: 33:10:0a:79:d8:dc:73:3e:0e:65:f3:15:fd:b8:fb: 5a:6f:63:7f:0a:6f:30:89:91:b9:ac:fc:79:12:65: 8e:a2:35:9a:d2:4e:e8:da:49:c9:a9:24:c9:bf:f3: 3e:86:ce:ef:f1:98:45:1c:b7:89:81:b7:be:bd:02: b1:4e:05:8c:d0:9a:ed:8a:8c:25:fb:80:0c:34:b9: 3b:8d:32:9c:d2:06:8b:f1:5a:73:b4:02:9c:46:d6: c9:95:c2:31:fa:c3:0e:41:23:8b:f2:63:c2:99:55: e1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3D:B6:CC:AB:8B:59:BA:83:1C:C8:8F:50:9D:E9:D5:88:5B:35:D5 X509v3 Authority Key Identifier: keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:c0:c6:d6:81:bd:36:69:e0:31:40:7c:40:bc:6b:0c:0c:9a: 87:78:44:17:93:a9:a6:a3:c8:49:b6:df:27:1f:40:a1:cb:27: b4:c0:a0:21:fc:1e:4b:33:e3:14:a8:56:8c:8c:c8:3a:2b:51: 02:94:6d:19:76:54:48:cd:e5:a9:a3:04:10:98:6a:df:ee:a5: b9:9c:3d:f4:6d:3b:e6:d1:c5:34:ec:0e:e0:9f:21:02:6c:b7: b8:85:65:bb:40:1f:25:3d:95:75:51:fc:94:19:14:89:31:e9: f4:ae:ea:02:61:bb:d4:40:50:51:bc:0b:9c:06:03:2e:ec:fc: af:95:5b:6c:4a:bc:de:fe:3d:02:40:48:94:56:79:df:2e:f5: 3a:67:70:0a:e3:7b:e0:b2:ce:ba:ed:3e:88:70:ef:79:1f:ed: ad:8a:9a:f5:1d:1f:83:e7:a8:64:69:3c:55:51:8c:76:56:f7: 6c:86:02:94:91:ba:03:84:5d:02:f9:40:f6:4b:75:bf:4e:4c: 9b:db:43:c3:4e:e8:25:b3:29:85:47:74:44:45:da:81:d4:a1: ae:8e:8d:b9:b7:d9:95:a0:49:f0:c6:84:b6:7a:ec:a8:37:7e: fb:5c:0b:25:66:37:fe:01:45:c3:49:90:b1:4a:f1:28:08:dd: 9e:b7:bc:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS+0c+i7fEhZrPBDzUynKROgjpGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAzRUFG Mjg4MTg4OTAeFw0yNjAzMzExMDI3MTFaFw0yNjA0MDMxOTA4MTFaMDMxMTAvBgNV BAMTKEI5M0RCNkNDQUI4QjU5QkE4MzFDQzg4RjUwOURFOUQ1ODg1QjM1RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6kNbQcCoUBpwYKEBs/oErVm7M HmAdGFBxESWdI8XPvKcm4vC1MHYsX3ApcV9j+53Rw81Ny3M4vPGiVdhhvFag8eRU 8GmIK0TYK6guQUxODryruz265W29r3sbwDnLM5n5YMpKBKcLgQbp8zOKqaNccMu7 oLMtxbi+NX34Ggamuyq22/mHlC/7AcDMNVUISCPg8wrm+zMQCnnY3HM+DmXzFf24 +1pvY38KbzCJkbms/HkSZY6iNZrSTujaScmpJMm/8z6Gzu/xmEUct4mBt769ArFO BYzQmu2KjCX7gAw0uTuNMpzSBovxWnO0ApxG1smVwjH6ww5BI4vyY8KZVeG5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuT22zKuLWbqDHMiPUJ3p1YhbNdUwHwYDVR0j BBgwFoAUAzFdDpZqhbh46pBYuM8D6vKIGIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTlhY2I5Ny02ZTg3LTRlMzEtYTU2OS1hMjY2MGRmNGYyYjgvMC8wMzMxNUQwRTk2 NkE4NUI4NzhFQTkwNThCOENGMDNFQUYyODgxODg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAzRUFGMjg4 MTg4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU5YWNiOTctNmU4Ny00ZTMxLWE1 NjktYTI2NjBkZjRmMmI4LzAvMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAz RUFGMjg4MTg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnAxtaBvTZp4DFAfEC8awwMmod4RBeTqaaj yEm23ycfQKHLJ7TAoCH8Hksz4xSoVoyMyDorUQKUbRl2VEjN5amjBBCYat/upbmc PfRtO+bRxTTsDuCfIQJst7iFZbtAHyU9lXVR/JQZFIkx6fSu6gJhu9RAUFG8C5wG Ay7s/K+VW2xKvN7+PQJASJRWed8u9TpncArje+CyzrrtPohw73kf7a2KmvUdH4Pn qGRpPFVRjHZW92yGApSRugOEXQL5QPZLdb9OTJvbQ8NO6CWzKYVHdERF2oHUoa6O jbm32ZWgSfDGhLZ67Kg3fvtcCyVmN/4BRcNJkLFK8SgI3Z63vGI= -----END CERTIFICATE-----Generated at Thu Apr 2 07:35:35 2026 by rpki-client