$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft File: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json) Hash identifier: 98faTgGEgRtXtyxCr0MR9d8y7ZQm272xsM1tz2vjSfI= Subject key identifier: 32:FF:D0:A8:45:32:10:DC:FB:66:C0:57:74:57:6F:C4:C2:EF:5D:71 Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Certificate serial: 4E9F9441BBD75732EF5B3D2AEAF7891B22596D74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft Manifest number: 025F Signing time: Fri 20 Mar 2026 03:40:46 +0000 Manifest this update: Fri 20 Mar 2026 03:35:46 +0000 Manifest next update: Mon 23 Mar 2026 09:47:46 +0000 Files and hashes: 1: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: Alr3MmF3FComiYShgHs/7REcddrGc/AGrj1Fejo7KUI=) 2: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: b9POD8lIGTkSBPPG5UCEDWwytPa4KOI/X1gSRB0o140=) 3: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: pIxViXZoycBV8A7CIi1fmiiQDu+3Ugcswhk6WPEdvN8=) 4: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: PnAmYmq3CTBM3KSOnS7XUTWU1j1zTHrhd/22XaMTeqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 09:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9f:94:41:bb:d7:57:32:ef:5b:3d:2a:ea:f7:89:1b:22:59:6d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Validity Not Before: Mar 20 03:35:46 2026 GMT Not After : Mar 23 09:47:46 2026 GMT Subject: CN=32FFD0A8453210DCFB66C05774576FC4C2EF5D71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1d:57:1c:01:bd:85:b0:4a:1c:24:09:02:0f: 5a:43:a2:6d:8c:df:79:e6:2c:a1:7d:08:2a:72:e1: c2:b3:f0:28:fc:9b:82:b4:aa:3a:e3:88:86:39:88: 63:e2:6d:d4:2d:8b:02:4e:21:54:fb:53:a2:f2:88: fa:8c:76:96:c6:b7:4d:6d:e3:41:28:11:5a:9f:48: 39:15:1d:a2:42:c3:df:35:07:9c:64:1b:cd:25:ea: 76:e0:49:5f:d7:16:69:d1:98:21:7d:e6:62:82:e7: d1:c7:b1:d8:a2:a9:50:e3:ed:54:f0:63:c9:0d:f2: 90:13:d2:4c:bc:10:87:a5:84:23:d9:69:b0:3b:d1: 6a:be:c9:43:69:26:3d:b1:e7:0f:74:fb:e5:d1:fa: 0e:ca:73:15:d7:b4:23:f1:b6:5c:72:0f:b3:4c:80: 14:72:90:4d:be:7b:ef:98:b3:41:03:c8:71:63:72: 8e:a1:d7:ef:45:6c:96:42:ed:e6:c8:76:c7:82:77: 31:be:3a:ad:2c:37:89:64:8b:96:f1:5e:4c:75:e5: 15:60:6e:89:a4:72:8d:e2:74:5f:95:98:9c:6f:ed: c8:7d:0c:e7:f5:23:de:69:62:a3:65:4e:59:1d:e3: 38:4e:9e:25:79:9e:aa:ea:ab:52:1b:5b:65:65:c4: 28:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FF:D0:A8:45:32:10:DC:FB:66:C0:57:74:57:6F:C4:C2:EF:5D:71 X509v3 Authority Key Identifier: keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:7a:f6:5c:0b:ad:f0:c2:f2:9e:1d:53:4e:89:2d:3d:42:36: 2c:53:17:2d:b4:04:ef:1a:07:42:71:3a:95:48:ec:8e:93:05: a6:f0:78:35:f7:0b:01:10:c7:fc:34:98:ec:4e:45:92:cf:42: 86:28:f1:65:66:00:20:e1:a9:8a:15:28:05:3f:9a:e4:23:f1: ab:60:ce:a1:06:0f:c5:69:b6:d5:04:33:c3:c3:ce:a2:5c:1e: d6:3f:60:f2:ec:98:19:83:f0:0a:36:28:0d:7a:de:cb:1a:cb: a2:44:8f:64:1c:19:94:b3:5b:85:3f:87:fe:11:2d:d5:33:c3: 48:81:ca:bf:7e:0b:b4:0c:51:48:6f:bf:9f:1e:7a:00:2b:18: b1:e7:aa:28:96:37:6a:08:bc:60:12:19:9e:8c:80:53:ac:c4: 22:5b:02:47:3e:48:5e:cf:b1:2c:7c:50:b2:a3:5c:91:0e:7a: a2:b9:6a:1a:dd:85:64:31:1b:9a:de:de:53:c8:af:2d:1f:f7: b6:e9:9c:f3:33:97:e6:53:83:9c:1f:60:07:1b:3f:98:f0:37: 86:57:68:d6:56:53:53:27:7e:fa:62:01:13:41:2b:51:eb:2b: 23:ab:60:28:7d:d2:b6:4b:3e:7d:58:b9:e7:49:03:4d:1d:db: d0:7a:91:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTp+UQbvXVzLvWz0q6veJGyJZbXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVB NkY0OENFNzAeFw0yNjAzMjAwMzM1NDZaFw0yNjAzMjMwOTQ3NDZaMDMxMTAvBgNV BAMTKDMyRkZEMEE4NDUzMjEwRENGQjY2QzA1Nzc0NTc2RkM0QzJFRjVENzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiHVccAb2FsEocJAkCD1pDom2M 33nmLKF9CCpy4cKz8Cj8m4K0qjrjiIY5iGPibdQtiwJOIVT7U6LyiPqMdpbGt01t 40EoEVqfSDkVHaJCw981B5xkG80l6nbgSV/XFmnRmCF95mKC59HHsdiiqVDj7VTw Y8kN8pAT0ky8EIelhCPZabA70Wq+yUNpJj2x5w90++XR+g7KcxXXtCPxtlxyD7NM gBRykE2+e++Ys0EDyHFjco6h1+9FbJZC7ebIdseCdzG+Oq0sN4lki5bxXkx15RVg bomkco3idF+VmJxv7ch9DOf1I95pYqNlTlkd4zhOniV5nqrqq1IbW2VlxCgpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMv/QqEUyENz7ZsBXdFdvxMLvXXEwHwYDVR0j BBgwFoAUGZ09aE7O7/uxfdWYomiINab0jOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTgzODNlMi0yMDZjLTRiNzQtYmE0YS1jZDhhNGQ3Y2Q4NjEvMC8xOTlEM0Q2ODRF Q0VFRkZCQjE3REQ1OThBMjY4ODgzNUE2RjQ4Q0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVBNkY0 OENFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4 MzVBNkY0OENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJF69lwLrfDC8p4dU06JLT1CNixTFy20BO8a B0JxOpVI7I6TBabweDX3CwEQx/w0mOxORZLPQoYo8WVmACDhqYoVKAU/muQj8atg zqEGD8VpttUEM8PDzqJcHtY/YPLsmBmD8Ao2KA163ssay6JEj2QcGZSzW4U/h/4R LdUzw0iByr9+C7QMUUhvv58eegArGLHnqiiWN2oIvGASGZ6MgFOsxCJbAkc+SF7P sSx8ULKjXJEOeqK5ahrdhWQxG5re3lPIry0f97bpnPMzl+ZTg5wfYAcbP5jwN4ZX aNZWU1MnfvpiARNBK1HrKyOrYCh90rZLPn1YuedJA00d29B6kUI= -----END CERTIFICATE-----Generated at Fri Mar 20 12:42:44 2026 by rpki-client