$ rpki-client -vvf repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft File: 3703AC4154F05B1E642F31DEF71A238407E82D59.mft (raw, json) Hash identifier: CkXH5g4alQmepvp16bueAof8oKF+mXXlOh0dTBNZOwo= Subject key identifier: B6:E3:A7:79:4F:71:67:9F:9C:96:C4:2F:AA:4E:F9:1D:7F:53:5A:B2 Authority key identifier: 37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59 Certificate issuer: /CN=3703AC4154F05B1E642F31DEF71A238407E82D59 Certificate serial: 1506C3BF1ACE5FEADC2E286EE765BAB2F4FDED04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft Manifest number: 0501 Signing time: Tue 17 Mar 2026 11:50:58 +0000 Manifest this update: Tue 17 Mar 2026 11:45:58 +0000 Manifest next update: Fri 20 Mar 2026 17:51:58 +0000 Files and hashes: 1: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: hTOnvJY78aaZJU0V/ewFlrDahpGLWlt1kXeTr26Q6jE=) 2: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: /26G7paj90BYpA/7obbRkQ0e5IpXJm+V8bRm2IMmu/M=) 3: 3703AC4154F05B1E642F31DEF71A238407E82D59.crl (hash: +6Uu9nmn8BnIC9vnBy24OL/8YlSuvnpCOLbzr7oF1hg=) 4: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: RNQYxKN0Nubn/ygqO8rH37j/P4lI+9FQ1kXn5iYtC0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 17:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:06:c3:bf:1a:ce:5f:ea:dc:2e:28:6e:e7:65:ba:b2:f4:fd:ed:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3703AC4154F05B1E642F31DEF71A238407E82D59 Validity Not Before: Mar 17 11:45:58 2026 GMT Not After : Mar 20 17:51:58 2026 GMT Subject: CN=B6E3A7794F71679F9C96C42FAA4EF91D7F535AB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:dd:30:0e:00:61:43:51:05:65:c7:b4:e0: ef:4c:2c:bf:63:41:01:b0:6e:5e:20:23:b2:a3:e6: 20:ac:ee:fc:81:7a:5e:37:bb:7f:0b:5f:99:90:a4: c5:a7:fa:14:a7:e5:90:c1:39:2b:5f:75:a4:4d:c5: 17:76:fa:b9:98:cc:67:89:21:a4:39:1c:46:e7:50: 21:00:a9:8d:dc:6a:41:26:61:c8:e8:a4:68:95:13: 8d:20:56:0c:8b:df:a1:b5:f1:36:f5:20:75:26:bc: 89:97:07:6b:0c:8c:52:32:dd:a4:22:54:9c:aa:a7: ef:7b:bf:fb:09:cb:e8:39:7c:28:c2:16:ad:48:ce: 11:cf:b5:52:24:3f:c1:f5:05:6b:85:7a:50:6f:dd: c9:10:ea:99:e9:c6:73:4b:fe:56:d6:29:4b:09:8e: 7a:4b:4f:02:c5:bd:4e:f1:89:aa:0a:3a:e6:25:e8: 78:60:99:8c:21:17:03:17:33:f2:ec:da:84:e9:9a: e4:86:49:50:f6:13:4c:f8:02:b7:90:df:b3:87:e5: 24:7b:ea:42:03:09:22:f7:4d:33:e3:0f:1d:74:a6: 47:23:99:d1:8a:2f:d3:56:5d:ef:1b:3e:45:f0:a6: ad:be:19:68:9e:f0:6b:9f:9d:c8:37:05:d0:ec:45: c8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E3:A7:79:4F:71:67:9F:9C:96:C4:2F:AA:4E:F9:1D:7F:53:5A:B2 X509v3 Authority Key Identifier: keyid:37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e4:b3:d4:7a:4a:85:8f:86:d9:c4:d0:07:39:40:77:60:f5: 2d:9e:09:c8:91:5a:70:b8:d2:e5:e0:c2:c5:47:ef:f7:61:7b: a7:c6:44:14:04:de:6f:9c:24:9c:03:30:cc:31:dd:8f:a5:a3: 44:12:84:a1:4a:2b:8b:ad:66:ac:49:9e:1d:52:44:76:45:1f: 06:1e:c7:41:15:16:ad:39:97:44:2a:8d:53:ea:f5:3b:80:b5: ec:2a:2c:7d:cb:a3:c8:53:1e:69:0e:2f:81:b5:0d:30:87:13: c5:a1:55:b8:5a:23:0f:49:18:35:3e:1c:f8:78:15:82:d5:ab: b1:c3:81:a7:8f:9f:84:56:69:d1:16:1d:6d:43:ab:3b:06:4d: 51:b0:e8:60:fc:5f:c7:a4:5f:47:2c:a4:1e:ab:4a:23:b1:2f: 28:bb:89:01:18:10:52:12:d6:2c:41:b5:04:a8:99:ae:f6:b5: 24:9b:d6:20:c5:74:9e:83:49:2f:48:96:77:e9:a3:d1:76:57: e8:1c:64:e1:aa:f6:1b:e3:15:d4:e9:f7:db:ce:e1:d4:2d:4d: a1:c3:ae:c0:68:40:ee:70:ee:cf:f5:fe:d7:e7:7d:c4:d5:2a: a6:6d:63:07:41:17:e9:ab:58:4d:34:12:d4:12:7a:d1:65:93: 3c:33:4a:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFQbDvxrOX+rcLihu52W6svT97QQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQw N0U4MkQ1OTAeFw0yNjAzMTcxMTQ1NThaFw0yNjAzMjAxNzUxNThaMDMxMTAvBgNV BAMTKEI2RTNBNzc5NEY3MTY3OUY5Qzk2QzQyRkFBNEVGOTFEN0Y1MzVBQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwOd0wDgBhQ1EFZce04O9MLL9j QQGwbl4gI7Kj5iCs7vyBel43u38LX5mQpMWn+hSn5ZDBOStfdaRNxRd2+rmYzGeJ IaQ5HEbnUCEAqY3cakEmYcjopGiVE40gVgyL36G18Tb1IHUmvImXB2sMjFIy3aQi VJyqp+97v/sJy+g5fCjCFq1IzhHPtVIkP8H1BWuFelBv3ckQ6pnpxnNL/lbWKUsJ jnpLTwLFvU7xiaoKOuYl6HhgmYwhFwMXM/Ls2oTpmuSGSVD2E0z4AreQ37OH5SR7 6kIDCSL3TTPjDx10pkcjmdGKL9NWXe8bPkXwpq2+GWie8Gufncg3BdDsRcgxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtuOneU9xZ5+clsQvqk75HX9TWrIwHwYDVR0j BBgwFoAUNwOsQVTwWx5kLzHe9xojhAfoLVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTA5OWFkZi03ZTEyLTRlODMtOTVjMi1kZDdmNzc0OTQ3ODgvMC8zNzAzQUM0MTU0 RjA1QjFFNjQyRjMxREVGNzFBMjM4NDA3RTgyRDU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQwN0U4 MkQ1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEwOTlhZGYtN2UxMi00ZTgzLTk1 YzItZGQ3Zjc3NDk0Nzg4LzAvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIz ODQwN0U4MkQ1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvks9R6SoWPhtnE0Ac5QHdg9S2eCciRWnC4 0uXgwsVH7/dhe6fGRBQE3m+cJJwDMMwx3Y+lo0QShKFKK4utZqxJnh1SRHZFHwYe x0EVFq05l0QqjVPq9TuAtewqLH3Lo8hTHmkOL4G1DTCHE8WhVbhaIw9JGDU+HPh4 FYLVq7HDgaePn4RWadEWHW1DqzsGTVGw6GD8X8ekX0cspB6rSiOxLyi7iQEYEFIS 1ixBtQSoma72tSSb1iDFdJ6DSS9Ilnfpo9F2V+gcZOGq9hvjFdTp99vO4dQtTaHD rsBoQO5w7s/1/tfnfcTVKqZtYwdBF+mrWE00EtQSetFlkzwzShI= -----END CERTIFICATE-----Generated at Thu Mar 19 11:58:36 2026 by rpki-client