$ rpki-client -vvf repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft File: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft (raw, json) Hash identifier: c8fcL3m0g7noV+sb5YTy89xO4n/JnYEXtlriQG3YNWk= Subject key identifier: 1E:DD:2F:5F:78:EC:7E:10:7C:A1:B9:D5:9F:69:68:9A:15:7E:45:87 Authority key identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 Certificate issuer: /CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Certificate serial: 58C1BFA20907105FDD81C15E1F3D7A49A627ADE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft Manifest number: 0260 Signing time: Tue 17 Mar 2026 18:00:53 +0000 Manifest this update: Tue 17 Mar 2026 17:55:53 +0000 Manifest next update: Sat 21 Mar 2026 05:32:53 +0000 Files and hashes: 1: 3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa (hash: TU/lPlfDzJtw35bEd20WHsVMGmXj/m5tHMEpU4CBLtI=) 2: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl (hash: VTEBQ3tiJo2NZYOJBchDVEteVo6+FLdpSkI6bwtZAk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 05:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:c1:bf:a2:09:07:10:5f:dd:81:c1:5e:1f:3d:7a:49:a6:27:ad:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Validity Not Before: Mar 17 17:55:53 2026 GMT Not After : Mar 21 05:32:53 2026 GMT Subject: CN=1EDD2F5F78EC7E107CA1B9D59F69689A157E4587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:d7:d8:1e:30:d1:88:3c:04:10:3e:d3:d6: 89:55:bc:ff:d8:9b:f4:34:8f:7f:02:7a:da:ad:0d: c7:fd:e4:e4:6c:16:3a:e6:a7:06:42:1e:07:f3:ac: aa:7b:12:46:a9:6c:a7:bc:d6:51:c8:84:3a:8c:4d: 9b:00:fd:12:24:0a:13:cb:77:1b:25:7b:84:17:9b: 50:68:e9:8f:7d:c3:7a:83:11:c6:c9:35:d3:44:fc: dc:f5:e2:e4:c8:6f:6f:c1:39:8d:5b:45:3f:2b:17: 8d:b5:79:76:94:aa:66:8d:59:4b:8a:ee:e9:dd:0c: e0:aa:4b:e8:80:65:6a:cb:ef:d4:b4:88:a1:20:63: 7e:b6:a1:e9:06:1a:e9:d4:91:64:5d:3a:2a:bc:8d: f0:80:84:1c:c0:25:a3:55:93:7f:48:af:b9:7c:2c: 72:1a:b1:e2:44:93:d4:32:b9:ec:61:7e:92:37:b3: bf:79:b6:44:24:ec:17:1c:56:1f:55:00:66:20:17: 9c:25:61:c6:0b:b7:ee:97:2a:49:7a:06:f2:b0:3c: 0e:84:e8:d6:62:98:43:5a:aa:d3:72:32:ec:db:50: 2f:25:25:c7:02:65:ac:7e:41:92:92:a2:57:b4:51: 1e:ac:d7:90:a7:a9:9b:81:99:14:60:84:ac:b4:47: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DD:2F:5F:78:EC:7E:10:7C:A1:B9:D5:9F:69:68:9A:15:7E:45:87 X509v3 Authority Key Identifier: keyid:43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:fd:8e:26:2d:6a:ad:7c:5b:83:f9:93:05:7b:4e:ce:da:b7: 27:50:41:6d:44:38:41:5b:c3:b6:77:0e:16:7d:1e:aa:ff:c0: b8:fa:31:b1:69:66:c1:ac:1a:51:52:de:e1:4d:8a:24:fb:75: b2:39:fe:d8:87:84:40:9a:6f:bf:bb:db:c7:09:42:9d:84:d1: fb:e3:cf:a4:5d:23:0f:5a:1b:75:8f:ab:d1:4d:3e:cb:a8:2e: f3:e3:90:6d:53:50:38:d9:dc:d4:bd:19:1d:ff:05:c0:b0:7f: bb:c9:20:1f:eb:65:f5:c7:da:64:77:18:52:eb:c4:77:fe:86: bf:16:94:e5:70:6b:a2:4b:98:96:e9:13:27:9b:92:7a:11:29: 13:e1:3c:ec:01:64:9a:64:bd:c2:28:23:c8:83:82:91:f8:10: 92:50:ae:04:fc:b8:0a:e5:ae:ba:cb:3c:20:aa:03:4d:0f:a7: 55:1b:34:7c:5d:79:dd:6d:20:f3:44:9d:6b:4c:f8:2c:7e:ff: b8:77:4e:6c:0c:8c:61:c4:e2:ec:40:2c:06:e2:30:47:90:3f: 46:e1:d5:df:93:cb:23:25:c5:49:4a:bc:19:64:ea:64:c7:67: a3:3d:96:7e:95:cf:a5:10:8b:e5:3b:ec:7a:39:8e:d0:36:8f: 6e:2e:c9:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWMG/ogkHEF/dgcFeHz16SaYnreUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIz MDEwNTA1NzAeFw0yNjAzMTcxNzU1NTNaFw0yNjAzMjEwNTMyNTNaMDMxMTAvBgNV BAMTKDFFREQyRjVGNzhFQzdFMTA3Q0ExQjlENTlGNjk2ODlBMTU3RTQ1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyG9fYHjDRiDwEED7T1olVvP/Y m/Q0j38CetqtDcf95ORsFjrmpwZCHgfzrKp7EkapbKe81lHIhDqMTZsA/RIkChPL dxsle4QXm1Bo6Y99w3qDEcbJNdNE/Nz14uTIb2/BOY1bRT8rF421eXaUqmaNWUuK 7undDOCqS+iAZWrL79S0iKEgY362oekGGunUkWRdOiq8jfCAhBzAJaNVk39Ir7l8 LHIaseJEk9QyuexhfpI3s795tkQk7BccVh9VAGYgF5wlYcYLt+6XKkl6BvKwPA6E 6NZimENaqtNyMuzbUC8lJccCZax+QZKSole0UR6s15CnqZuBmRRghKy0RxtjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHt0vX3jsfhB8obnVn2lomhV+RYcwHwYDVR0j BBgwFoAUQ50W4D0F1c7KK38TXSu7GzAQUFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGYzYjM3ZC1mZTRkLTQzNmQtYTkzYi1lMWY2ZmNjOWZjNGQvMC80MzlEMTZFMDNE MDVENUNFQ0EyQjdGMTM1RDJCQkIxQjMwMTA1MDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIzMDEw NTA1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThmM2IzN2QtZmU0ZC00MzZkLWE5 M2ItZTFmNmZjYzlmYzRkLzAvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJC MUIzMDEwNTA1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGn9jiYtaq18W4P5kwV7Ts7atydQQW1EOEFb w7Z3DhZ9Hqr/wLj6MbFpZsGsGlFS3uFNiiT7dbI5/tiHhECab7+728cJQp2E0fvj z6RdIw9aG3WPq9FNPsuoLvPjkG1TUDjZ3NS9GR3/BcCwf7vJIB/rZfXH2mR3GFLr xHf+hr8WlOVwa6JLmJbpEyebknoRKRPhPOwBZJpkvcIoI8iDgpH4EJJQrgT8uArl rrrLPCCqA00Pp1UbNHxded1tIPNEnWtM+Cx+/7h3TmwMjGHE4uxALAbiMEeQP0bh 1d+TyyMlxUlKvBlk6mTHZ6M9ln6Vz6UQi+U77Ho5jtA2j24uyQI= -----END CERTIFICATE-----Generated at Thu Mar 19 09:38:56 2026 by rpki-client