$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft File: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft (raw, json) Hash identifier: VXDXi6ty5aDfeKYf3KbsCwRqlr4WGtdx/fFKBRXDgbE= Subject key identifier: CE:87:45:A6:32:6A:C7:13:9A:D9:2C:AA:CE:DF:04:D0:D1:8E:43:F8 Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 Certificate issuer: /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Certificate serial: 33DBCB5D96BA2848D2B8C6432549FB7B3A3E405F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft Manifest number: 0245 Signing time: Fri 20 Mar 2026 04:10:59 +0000 Manifest this update: Fri 20 Mar 2026 04:05:59 +0000 Manifest next update: Mon 23 Mar 2026 11:25:59 +0000 Files and hashes: 1: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: J4NiRzqR7OJJpZcBvTEqABRnGVn4+G6RK0nifMHQkIc=) 2: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: Ef88gL2i03irobp5ZP/X9ru7ObHhZljwJfbQzBpUyHw=) 3: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: exnV2in0lMY4Abx7/bcqLUFJk6DG/znMQfleVx5p9FM=) 4: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl (hash: D5A9NEswC8JjN0zsUuBkkElBOeZ1aRhdA0ODzn4LzrM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 10:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:db:cb:5d:96:ba:28:48:d2:b8:c6:43:25:49:fb:7b:3a:3e:40:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Validity Not Before: Mar 20 04:05:59 2026 GMT Not After : Mar 23 11:25:59 2026 GMT Subject: CN=CE8745A6326AC7139AD92CAACEDF04D0D18E43F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:de:47:9c:8d:10:6a:25:cf:48:57:85:6e: 91:04:af:a8:36:2d:08:bb:88:63:4b:b9:b5:8b:ec: 12:1f:c5:d1:d3:92:55:93:d2:cf:a8:50:3e:61:9c: 30:5f:54:90:23:73:c0:c9:db:97:9d:5e:2b:b3:aa: 61:13:98:3e:61:bd:4b:aa:6d:02:94:f5:a2:f6:bb: 10:20:54:86:d8:0f:eb:50:12:31:ac:e1:08:62:ee: f9:4a:62:ee:ec:d8:9c:df:16:b7:d8:c3:91:3d:d4: 71:6d:91:71:07:f9:a0:84:e6:a2:de:54:54:b0:d0: 74:0a:4b:58:4e:0a:57:92:67:a0:46:6b:02:1a:24: 15:e2:eb:db:52:4f:28:14:06:47:94:e0:65:d0:04: ad:df:61:94:d3:09:28:9d:e9:65:e6:65:dc:70:4d: ac:86:14:a2:d5:c3:e3:2e:99:66:fa:af:05:35:1d: 35:80:fb:4a:3f:19:4a:82:4b:45:3b:b0:34:56:84: 80:6f:dc:cf:09:64:9d:df:86:d9:67:09:b3:2e:1b: 1e:f9:57:9e:81:07:10:48:c8:a1:74:a6:65:ca:36: 73:8b:ea:66:0c:f1:8c:f7:52:6d:54:5e:cf:f6:50: 83:ab:e8:b0:3a:b2:3a:62:03:8e:4a:10:dd:33:13: d1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:87:45:A6:32:6A:C7:13:9A:D9:2C:AA:CE:DF:04:D0:D1:8E:43:F8 X509v3 Authority Key Identifier: keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:71:f5:b8:d1:dd:5f:6d:cc:8e:c7:77:a1:af:c4:40:1d:dd: b2:26:0c:f3:cc:ef:67:7a:e4:45:44:d8:fb:5f:82:e5:6c:8c: 4b:c7:6c:6d:00:06:54:09:55:63:bd:a7:ee:08:7f:71:9b:0b: 1f:ea:72:63:64:19:64:52:27:c0:e4:11:d8:be:e7:fd:67:a2: d5:d5:6a:52:31:92:cd:81:0b:5b:da:1a:d3:66:bf:93:ce:3b: f1:6f:b2:ad:60:50:76:1a:dc:31:46:59:6e:03:45:a9:3b:c7: 9b:13:43:89:48:3b:de:65:da:de:e0:db:89:ca:51:2e:38:b0: c6:7c:d1:76:f4:5c:5c:18:c9:7a:5b:f3:d8:b1:0f:31:b7:21: 7a:53:16:eb:27:21:4d:73:d0:a4:ff:1d:b4:76:09:de:88:fc: 4f:62:87:05:59:f2:74:61:d6:79:c3:03:18:5d:ba:53:31:84: 9b:f9:cf:bb:31:5d:77:80:89:59:9c:1c:f8:26:7e:3b:d1:3c: 37:46:bb:16:92:9b:a8:52:4e:9d:7d:7c:90:4c:d3:d0:79:ac: 09:1b:b9:33:c0:9f:1b:bb:0d:6e:d7:43:45:0f:7e:cb:5f:fd: e4:16:b5:b5:0e:3f:86:51:11:0d:12:ec:80:4c:b9:8e:5e:28: 7a:6e:db:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM9vLXZa6KEjSuMZDJUn7ezo+QF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1 NTA1RUQzMDAeFw0yNjAzMjAwNDA1NTlaFw0yNjAzMjMxMTI1NTlaMDMxMTAvBgNV BAMTKENFODc0NUE2MzI2QUM3MTM5QUQ5MkNBQUNFREYwNEQwRDE4RTQzRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54t5HnI0QaiXPSFeFbpEEr6g2 LQi7iGNLubWL7BIfxdHTklWT0s+oUD5hnDBfVJAjc8DJ25edXiuzqmETmD5hvUuq bQKU9aL2uxAgVIbYD+tQEjGs4Qhi7vlKYu7s2JzfFrfYw5E91HFtkXEH+aCE5qLe VFSw0HQKS1hOCleSZ6BGawIaJBXi69tSTygUBkeU4GXQBK3fYZTTCSid6WXmZdxw TayGFKLVw+MumWb6rwU1HTWA+0o/GUqCS0U7sDRWhIBv3M8JZJ3fhtlnCbMuGx75 V56BBxBIyKF0pmXKNnOL6mYM8Yz3Um1UXs/2UIOr6LA6sjpiA45KEN0zE9E9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzodFpjJqxxOa2Syqzt8E0NGOQ/gwHwYDVR0j BBgwFoAUOZ+EEY7e+q1d2TZzv9Ybn1UF7TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmMxMjcwMy1mMWY3LTQzYzktYTIyMC05MmVkZDg2ZWZlNWUvMC8zOTlGODQxMThF REVGQUFENUREOTM2NzNCRkQ2MUI5RjU1MDVFRDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1NTA1 RUQzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFC OUY1NTA1RUQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM9x9bjR3V9tzI7Hd6GvxEAd3bImDPPM72d6 5EVE2PtfguVsjEvHbG0ABlQJVWO9p+4If3GbCx/qcmNkGWRSJ8DkEdi+5/1notXV alIxks2BC1vaGtNmv5POO/Fvsq1gUHYa3DFGWW4DRak7x5sTQ4lIO95l2t7g24nK US44sMZ80Xb0XFwYyXpb89ixDzG3IXpTFusnIU1z0KT/HbR2Cd6I/E9ihwVZ8nRh 1nnDAxhdulMxhJv5z7sxXXeAiVmcHPgmfjvRPDdGuxaSm6hSTp19fJBM09B5rAkb uTPAnxu7DW7XQ0UPfstf/eQWtbUOP4ZREQ0S7IBMuY5eKHpu2xI= -----END CERTIFICATE-----Generated at Fri Mar 20 14:30:31 2026 by rpki-client