$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft File: A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft (raw, json) Hash identifier: 3e6IZOn3xEQyIhdIRYEPLV2yqZqKLL5nQ7eeXKvgXIs= Subject key identifier: E5:14:A3:FB:F7:86:0D:F9:1B:F4:8A:9C:FF:77:3D:74:1E:9F:45:B0 Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 Certificate issuer: /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Certificate serial: 33B922D66D39484FB3AE7FF154B5CDE6E35BD94D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft Manifest number: 03C9 Signing time: Sun 22 Mar 2026 18:00:01 +0000 Manifest this update: Sun 22 Mar 2026 17:55:01 +0000 Manifest next update: Thu 26 Mar 2026 00:53:01 +0000 Files and hashes: 1: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: C2QFcfs/YhAogD6WV5sZt+GhgdgTDt0K+flb9n7TxLw=) 2: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: NxcYlLW+ZkGtzpqXd2yoeS5VdB40v+IZaaf0YTRRXYQ=) 3: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: VC593Cs/cLK37Y65raPKe4El4PGI0Yr3mzjDSbZO0QM=) 4: A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl (hash: qIJaniDpZ/QNi9a9EtZxO+OdtnGzJCCujM7I64KCpnk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 00:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b9:22:d6:6d:39:48:4f:b3:ae:7f:f1:54:b5:cd:e6:e3:5b:d9:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Validity Not Before: Mar 22 17:55:01 2026 GMT Not After : Mar 26 00:53:01 2026 GMT Subject: CN=E514A3FBF7860DF91BF48A9CFF773D741E9F45B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:94:52:ef:d3:8f:cd:63:8f:b3:3d:e9:a1:f1: 2c:42:70:b2:a1:f5:5b:5e:b3:c3:fa:26:96:1d:21: 2d:6c:e9:46:e1:25:c9:73:99:79:b9:31:4e:39:ba: 2c:e5:35:b4:84:a5:9c:cb:8b:5d:5e:88:5e:3a:f6: 87:f5:a6:30:be:99:24:10:d9:64:88:af:49:13:39: 7e:46:84:73:34:e6:af:1f:0b:15:1a:f1:a6:e0:00: 18:72:81:e7:59:cf:09:3f:db:89:7d:e6:dd:92:ee: aa:47:51:04:ec:4d:e1:77:8a:7f:11:ca:e0:4f:bc: 87:d8:28:ff:8f:7e:c8:5e:04:3b:0d:37:fd:77:a6: 2e:f9:d6:de:86:82:c1:58:25:03:67:cc:96:b5:83: 95:25:32:68:45:92:31:bc:9b:59:1c:10:6e:58:20: 0e:f3:05:5d:30:76:2e:4f:b7:bd:16:53:3d:c7:fe: ec:0e:41:f2:c3:9d:d1:4f:a1:75:ef:4c:d9:4c:d3: 82:4c:14:0e:81:85:dd:af:5b:04:cb:56:82:f1:c7: 31:f5:69:7a:a2:6e:d1:c3:1e:3d:ac:5e:0e:33:a8: cc:96:d3:1b:41:3b:b5:b9:89:c3:71:fd:4f:a3:4e: ba:f1:63:1f:b4:c9:1d:2c:c1:50:02:36:79:bd:b2: 22:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:14:A3:FB:F7:86:0D:F9:1B:F4:8A:9C:FF:77:3D:74:1E:9F:45:B0 X509v3 Authority Key Identifier: keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:65:17:77:bb:93:3a:20:61:41:3a:24:14:10:43:48:28:3f: fc:ac:07:20:a0:6a:e0:c1:5c:df:b5:c0:83:bd:71:ac:13:d9: 96:d2:75:93:56:08:4a:ea:a2:ca:45:97:f6:7d:7f:09:78:65: 87:eb:fd:de:b6:d9:72:9d:b4:a8:d6:ef:68:55:07:3b:a8:95: c3:b2:14:39:f4:31:a3:27:be:a8:2e:3d:b6:72:16:54:cf:30: a7:d7:ac:1f:ad:3a:45:05:7d:27:84:6d:44:d5:15:c6:91:f8: 12:0b:01:8b:92:f6:23:a6:09:5a:c5:4c:52:66:e4:33:ec:15: ef:66:93:7b:5d:ee:bf:19:0d:57:a7:0e:72:a0:74:40:a1:ee: 0d:1f:c5:55:67:02:0e:6f:7d:0e:6b:4e:88:97:57:c1:43:38: 2d:db:df:6f:60:c4:0a:c7:7b:b6:39:e3:d4:af:9d:0d:46:74: a6:33:3f:fd:a2:b9:51:8d:eb:7b:9d:c1:d2:e1:ea:bd:97:2d: cf:c3:07:eb:1c:d5:fb:3e:8b:08:cd:82:d9:8d:89:94:a7:0d: 7e:71:79:47:e4:7b:e7:3e:4f:88:df:cd:51:7b:2d:ff:4c:07: d2:00:17:0a:4c:e7:3d:f3:93:0e:59:2c:0d:a4:e3:f8:2b:bf: af:2c:6b:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM7ki1m05SE+zrn/xVLXN5uNb2U0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2 MTc1NThBNjAeFw0yNjAzMjIxNzU1MDFaFw0yNjAzMjYwMDUzMDFaMDMxMTAvBgNV BAMTKEU1MTRBM0ZCRjc4NjBERjkxQkY0OEE5Q0ZGNzczRDc0MUU5RjQ1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNlFLv04/NY4+zPemh8SxCcLKh 9Vtes8P6JpYdIS1s6UbhJclzmXm5MU45uizlNbSEpZzLi11eiF469of1pjC+mSQQ 2WSIr0kTOX5GhHM05q8fCxUa8abgABhygedZzwk/24l95t2S7qpHUQTsTeF3in8R yuBPvIfYKP+PfsheBDsNN/13pi751t6GgsFYJQNnzJa1g5UlMmhFkjG8m1kcEG5Y IA7zBV0wdi5Pt70WUz3H/uwOQfLDndFPoXXvTNlM04JMFA6Bhd2vWwTLVoLxxzH1 aXqibtHDHj2sXg4zqMyW0xtBO7W5icNx/U+jTrrxYx+0yR0swVACNnm9siJpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5RSj+/eGDfkb9Iqc/3c9dB6fRbAwHwYDVR0j BBgwFoAUo5j73zV3kMfcZ8bZKhWj1GF1WKYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMxYzUyOS02MjQ0LTQ1MDMtYWY1Ni02OTQ1OWU0YTc2MGYvMC9BMzk4RkJERjM1 Nzc5MEM3REM2N0M2RDkyQTE1QTNENDYxNzU1OEE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2MTc1 NThBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMWM1MjktNjI0NC00NTAzLWFm NTYtNjk0NTllNGE3NjBmLzAvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEz RDQ2MTc1NThBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJlF3e7kzogYUE6JBQQQ0goP/ysByCgauDB XN+1wIO9cawT2ZbSdZNWCErqospFl/Z9fwl4ZYfr/d622XKdtKjW72hVBzuolcOy FDn0MaMnvqguPbZyFlTPMKfXrB+tOkUFfSeEbUTVFcaR+BILAYuS9iOmCVrFTFJm 5DPsFe9mk3td7r8ZDVenDnKgdECh7g0fxVVnAg5vfQ5rToiXV8FDOC3b329gxArH e7Y549SvnQ1GdKYzP/2iuVGN63udwdLh6r2XLc/DB+sc1fs+iwjNgtmNiZSnDX5x eUfke+c+T4jfzVF7Lf9MB9IAFwpM5z3zkw5ZLA2k4/grv68sa8o= -----END CERTIFICATE-----Generated at Tue Mar 24 01:52:43 2026 by rpki-client