$ rpki-client -vvf repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft File: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft (raw, json) Hash identifier: jT1pstkM3MSaK9uQeq2fftMIy8iTFjQlP83iaScOGg0= Subject key identifier: 7A:A1:FA:8D:6E:CB:BE:3C:21:09:4B:74:38:D9:76:51:FB:B0:CF:1E Authority key identifier: 80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 Certificate issuer: /CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Certificate serial: 7223B94397AEA482843136AFB323B3B25523A705 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft Manifest number: 0560 Signing time: Thu 19 Mar 2026 13:52:23 +0000 Manifest this update: Thu 19 Mar 2026 13:47:23 +0000 Manifest next update: Sun 22 Mar 2026 17:02:23 +0000 Files and hashes: 1: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: cp44WBbEQPeVS1mAfPisCHMGvuQWDdPCMl7LdQCGp3k=) 2: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl (hash: ImtyDFSOM3r/H7DQpWkX5Eh8nqg3Vu553RAQOEaFaME=) 3: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: oWtepmBqBvebT0Z+AytYxvJ+nwN7a/Aha+0+yrTyMss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 17:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:23:b9:43:97:ae:a4:82:84:31:36:af:b3:23:b3:b2:55:23:a7:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Validity Not Before: Mar 19 13:47:23 2026 GMT Not After : Mar 22 17:02:23 2026 GMT Subject: CN=7AA1FA8D6ECBBE3C21094B7438D97651FBB0CF1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b2:2c:ff:43:89:fe:4d:63:c3:27:6c:a4:71: 33:35:41:16:be:0c:7e:95:76:fb:48:15:e9:ec:37: a9:d3:93:cf:81:74:a3:a5:8e:05:43:67:c8:d8:6a: 53:01:cd:84:f6:fe:c3:89:57:18:d2:7b:5d:8e:25: 35:10:6b:79:ee:0d:4e:48:81:71:98:24:65:16:d7: c8:33:cc:02:9d:72:d9:a1:af:ae:f5:55:24:ab:cb: 73:19:5f:23:12:ae:07:08:90:71:41:93:e2:02:ac: ab:31:89:2f:7e:09:13:7e:15:9d:35:89:f8:c9:0e: 1e:d2:b4:67:bc:cb:8c:18:b4:ac:b8:30:5b:af:3d: 35:59:b3:df:b9:b3:bd:31:c8:4a:b2:39:0c:91:b3: 1f:f3:74:58:b1:1a:08:16:32:4e:8c:fa:a6:65:58: eb:11:8f:60:78:5b:67:ae:5c:b9:16:11:33:ff:ed: c4:d1:dc:f5:79:1f:88:64:7a:e2:e9:74:4d:41:bb: 3b:9d:5f:55:cb:b0:81:99:2e:ff:a7:39:04:ef:58: 1d:6d:e0:50:a0:f8:cb:97:4d:99:a8:37:39:ec:f6: 66:8a:b0:c5:fd:20:c0:b4:8c:97:0a:92:47:0b:17: d1:67:3d:10:57:93:8f:be:33:e6:00:eb:14:d0:b6: c5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A1:FA:8D:6E:CB:BE:3C:21:09:4B:74:38:D9:76:51:FB:B0:CF:1E X509v3 Authority Key Identifier: keyid:80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:91:bd:3c:c1:8c:85:f5:4a:58:09:4e:7a:ba:31:3b:8e:3f: 56:a5:de:46:39:50:ea:f1:97:2f:57:c2:36:2a:c0:09:47:40: 96:b9:af:a9:95:4d:9d:c7:56:79:95:7f:6c:a1:33:e7:3c:a8: db:f7:86:d1:5f:3e:ce:f7:f8:ba:ee:65:98:46:5a:05:d3:95: 7d:15:0a:4a:b1:de:0f:4d:2b:7d:92:49:1c:a4:b9:04:65:1a: 03:5b:44:2f:03:01:c3:ff:00:89:49:27:ed:dc:d6:09:f7:02: 21:94:68:60:cf:1c:0a:7e:25:c3:cb:ca:e9:67:88:5e:42:a5: 79:4a:a4:bf:c4:39:c0:38:ad:53:c0:6c:b9:16:77:be:ae:aa: 6a:3f:29:e2:9e:73:f9:9f:4e:ef:7f:f5:86:fb:3d:e3:2d:e4: e8:e6:2c:31:c2:8f:09:0e:82:3a:78:26:ba:bd:bb:1a:b3:8e: 73:5f:a3:e0:39:c9:a6:79:9c:a3:92:9a:f3:f3:18:49:e1:59: e4:16:0c:23:c0:fe:f9:7d:50:ba:70:c2:a2:bf:37:2e:45:b4: 59:50:9f:16:ef:74:1c:bb:83:49:df:e9:b6:30:04:5f:72:0c: af:96:14:5a:e8:41:df:d5:b3:25:dd:cb:bb:9c:a5:d1:7e:c9: ab:91:b1:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUciO5Q5eupIKEMTavsyOzslUjpwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5 MkUyNkFGMzAeFw0yNjAzMTkxMzQ3MjNaFw0yNjAzMjIxNzAyMjNaMDMxMTAvBgNV BAMTKDdBQTFGQThENkVDQkJFM0MyMTA5NEI3NDM4RDk3NjUxRkJCMENGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEsiz/Q4n+TWPDJ2ykcTM1QRa+ DH6VdvtIFensN6nTk8+BdKOljgVDZ8jYalMBzYT2/sOJVxjSe12OJTUQa3nuDU5I gXGYJGUW18gzzAKdctmhr671VSSry3MZXyMSrgcIkHFBk+ICrKsxiS9+CRN+FZ01 ifjJDh7StGe8y4wYtKy4MFuvPTVZs9+5s70xyEqyOQyRsx/zdFixGggWMk6M+qZl WOsRj2B4W2euXLkWETP/7cTR3PV5H4hkeuLpdE1BuzudX1XLsIGZLv+nOQTvWB1t 4FCg+MuXTZmoNzns9maKsMX9IMC0jJcKkkcLF9FnPRBXk4++M+YA6xTQtsUFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeqH6jW7LvjwhCUt0ONl2Ufuwzx4wHwYDVR0j BBgwFoAUgDyf8QKDbOyM7EnwH8+qDpLiavMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzcyN2MzZS05YzFhLTQ2ZGUtYTJiOC1jODhiOTAzOTlmM2QvMC84MDNDOUZGMTAy ODM2Q0VDOENFQzQ5RjAxRkNGQUEwRTkyRTI2QUYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5MkUy NkFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFB MEU5MkUyNkFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCRvTzBjIX1SlgJTnq6MTuOP1al3kY5UOrx ly9XwjYqwAlHQJa5r6mVTZ3HVnmVf2yhM+c8qNv3htFfPs73+LruZZhGWgXTlX0V Ckqx3g9NK32SSRykuQRlGgNbRC8DAcP/AIlJJ+3c1gn3AiGUaGDPHAp+JcPLyuln iF5CpXlKpL/EOcA4rVPAbLkWd76uqmo/KeKec/mfTu9/9Yb7PeMt5OjmLDHCjwkO gjp4Jrq9uxqzjnNfo+A5yaZ5nKOSmvPzGEnhWeQWDCPA/vl9ULpwwqK/Ny5FtFlQ nxbvdBy7g0nf6bYwBF9yDK+WFFroQd/VsyXdy7ucpdF+yauRsXg= -----END CERTIFICATE-----Generated at Sat Mar 21 15:30:32 2026 by rpki-client