$ rpki-client -vvf repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft File: F03C1838587677BF6505C46715F42F8B8416F949.mft (raw, json) Hash identifier: PN5j+pKgW6IcDlqoiU0hX8iJdJaIpZs4MLTpRng6Aew= Subject key identifier: 0F:E5:3C:80:0B:B2:8C:EB:37:45:71:07:A1:E7:52:A9:33:94:93:37 Authority key identifier: F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 Certificate issuer: /CN=F03C1838587677BF6505C46715F42F8B8416F949 Certificate serial: 1CBD94083F1EEB2B025A1B4972CC95DC2E2A5FB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft Manifest number: 022A Signing time: Tue 17 Mar 2026 06:32:01 +0000 Manifest this update: Tue 17 Mar 2026 06:27:01 +0000 Manifest next update: Fri 20 Mar 2026 14:48:01 +0000 Files and hashes: 1: F03C1838587677BF6505C46715F42F8B8416F949.crl (hash: LDp9nbIv/yW8ejbIwzCSWjx/2o7NdQzYM/YuObA6RyI=) 2: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: o1axn6FylL5HDL/+cmxNZgdh+qBhrW0MUa5ofe3vKgY=) 3: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: 5d7eyl15yI3SPHjS9CWQbB/B/JL+7bbkCavXXd21rTk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 14:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:bd:94:08:3f:1e:eb:2b:02:5a:1b:49:72:cc:95:dc:2e:2a:5f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03C1838587677BF6505C46715F42F8B8416F949 Validity Not Before: Mar 17 06:27:01 2026 GMT Not After : Mar 20 14:48:01 2026 GMT Subject: CN=0FE53C800BB28CEB37457107A1E752A933949337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ef:a7:2c:a5:6e:38:ce:0e:fb:0a:49:cb:02: 94:0f:03:bc:25:fd:d3:31:33:43:40:66:f1:22:46: b5:8d:63:c4:52:4b:95:d2:8a:75:00:3e:2d:e8:71: 53:f6:fa:6b:a0:b5:d7:e0:44:c1:4a:44:85:e9:b8: e3:9e:ca:40:47:c4:23:ff:ca:b0:ce:a7:b0:e8:5f: 34:c6:97:c5:0f:2d:b3:58:d0:0d:79:d6:c4:fe:40: b0:bd:c8:2f:56:37:37:7c:a0:55:e5:4a:67:58:38: 4b:69:64:93:dd:93:f9:3b:09:1f:a8:66:6c:07:86: 03:89:17:15:15:0d:9e:4f:60:7e:02:5e:e3:3a:15: c6:0b:43:a9:44:62:07:f2:f9:fa:b6:42:4c:f0:4d: 37:7e:71:f8:1b:22:81:55:a4:9f:76:81:67:74:b9: 4b:2d:a8:f2:e1:5b:5c:49:73:df:43:19:2d:47:98: 08:88:f8:57:7c:bc:03:cf:fb:f8:be:d3:75:5d:57: 17:d0:31:8d:64:6f:9b:46:6f:d3:00:96:71:7b:9a: a6:43:ba:dc:09:ad:bd:8c:68:2d:d3:32:ed:11:37: 66:50:b4:f7:fa:85:84:99:bc:8a:0a:6d:17:5b:23: fb:41:29:73:c7:33:53:a4:a7:7b:37:2a:58:21:82: f6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E5:3C:80:0B:B2:8C:EB:37:45:71:07:A1:E7:52:A9:33:94:93:37 X509v3 Authority Key Identifier: keyid:F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c9:eb:13:32:b2:87:ab:a5:d7:98:bd:fa:09:51:59:b3:fd: 62:52:a6:8e:d6:49:0d:db:73:78:36:97:25:81:af:e0:b3:d2: 88:6c:30:e1:4f:a4:61:78:0b:9d:2a:01:91:d0:ad:e0:23:ac: 30:12:ab:aa:71:aa:52:9f:a1:2c:a1:5b:fb:c5:7e:99:f3:22: 92:41:e3:68:8a:ad:a7:93:db:c6:2a:54:bd:08:6b:9b:27:87: 82:7d:14:a0:1d:65:4b:51:46:66:1b:a7:2b:82:79:ff:9c:23: fc:a5:4a:fa:19:f3:b4:55:55:33:c6:e5:7e:a1:c2:eb:83:79: 06:11:b9:4c:40:3d:ee:92:40:c8:85:b6:9f:b5:c4:53:69:5f: c3:dd:9b:38:49:84:7c:43:ce:36:66:95:84:63:b4:ef:db:d0: 02:36:2a:35:86:01:b5:d3:2a:76:87:78:74:ee:89:6a:9f:69: 9a:69:55:83:dd:cb:93:22:22:a7:41:cd:d3:9a:0e:cb:7f:07: 01:96:3e:c1:96:b8:93:96:6e:6c:04:2f:48:31:ad:74:96:5a: 36:93:a9:53:52:5d:fd:50:f0:41:03:c4:7a:ba:97:14:d5:46: e6:23:fa:4c:c3:8b:2f:0c:af:0c:67:3e:46:aa:81:e5:aa:4d: dc:a3:62:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHL2UCD8e6ysCWhtJcsyV3C4qX7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4 NDE2Rjk0OTAeFw0yNjAzMTcwNjI3MDFaFw0yNjAzMjAxNDQ4MDFaMDMxMTAvBgNV BAMTKDBGRTUzQzgwMEJCMjhDRUIzNzQ1NzEwN0ExRTc1MkE5MzM5NDkzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh76cspW44zg77CknLApQPA7wl /dMxM0NAZvEiRrWNY8RSS5XSinUAPi3ocVP2+mugtdfgRMFKRIXpuOOeykBHxCP/ yrDOp7DoXzTGl8UPLbNY0A151sT+QLC9yC9WNzd8oFXlSmdYOEtpZJPdk/k7CR+o ZmwHhgOJFxUVDZ5PYH4CXuM6FcYLQ6lEYgfy+fq2QkzwTTd+cfgbIoFVpJ92gWd0 uUstqPLhW1xJc99DGS1HmAiI+Fd8vAPP+/i+03VdVxfQMY1kb5tGb9MAlnF7mqZD utwJrb2MaC3TMu0RN2ZQtPf6hYSZvIoKbRdbI/tBKXPHM1Okp3s3KlghgvZPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD+U8gAuyjOs3RXEHoedSqTOUkzcwHwYDVR0j BBgwFoAU8DwYOFh2d79lBcRnFfQvi4QW+UkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmQzZGQ3OS04NjM1LTQ4NTctOGEzYy05ODU5NTQ1MTZmOWUvMC9GMDNDMTgzODU4 NzY3N0JGNjUwNUM0NjcxNUY0MkY4Qjg0MTZGOTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4NDE2 Rjk0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJG OEI4NDE2Rjk0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjJ6xMysoerpdeYvfoJUVmz/WJSpo7WSQ3b c3g2lyWBr+Cz0ohsMOFPpGF4C50qAZHQreAjrDASq6pxqlKfoSyhW/vFfpnzIpJB 42iKraeT28YqVL0Ia5snh4J9FKAdZUtRRmYbpyuCef+cI/ylSvoZ87RVVTPG5X6h wuuDeQYRuUxAPe6SQMiFtp+1xFNpX8PdmzhJhHxDzjZmlYRjtO/b0AI2KjWGAbXT KnaHeHTuiWqfaZppVYPdy5MiIqdBzdOaDst/BwGWPsGWuJOWbmwEL0gxrXSWWjaT qVNSXf1Q8EEDxHq6lxTVRuYj+kzDiy8MrwxnPkaqgeWqTdyjYuA= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:27 2026 by rpki-client