$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft File: C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft (raw, json) Hash identifier: JCnZ4t45W05qQulmUEayqIKJ9MEKp95q1hmsWrfSIok= Subject key identifier: E5:37:12:1E:B4:A3:61:83:2C:12:74:3D:17:AE:7B:41:E5:1C:3D:5D Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E Certificate issuer: /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Certificate serial: 4C45CB18672C8CB3DA7B6B6A4E46809D7A0D04C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft Manifest number: 0564 Signing time: Wed 25 Mar 2026 07:42:15 +0000 Manifest this update: Wed 25 Mar 2026 07:37:15 +0000 Manifest next update: Sat 28 Mar 2026 18:24:15 +0000 Files and hashes: 1: 3230332e38392e32342e302f32312d3234203d3e203234353231.roa (hash: 25bjKMZwqQbYi5jKvGEGUrT2NIQ4GwrYcOU6Y3FnIcI=) 2: 3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa (hash: 6LyyJJeV4MUKQUmSmy0p8Z51yI1Vj4eAExDWuf2DxM8=) 3: 3137352e3138342e3233362e302f32342d3234203d3e20313532343430.roa (hash: 6ydyDgUt3ZY0YnrLuFwNCWDzxfmHy7oR4fvhY53u9z0=) 4: 3137352e3138342e3232342e302f32312d3234203d3e203234353231.roa (hash: trFC+pX4oMn7rw9va8+zapompho+fZFvfIyOd+ou6p0=) 5: 323430333a626130303a3630303a3a2f34302d3438203d3e203234353231.roa (hash: 3d/V5R3s99pTSM8/puBLUbnmOCHIHkwIjm/VO8zQunM=) 6: 3131392e38322e3234302e302f32312d3234203d3e203234353231.roa (hash: UQj5o2r9jrF7gwD6zEDeivAaIC1EoryECU1Z4pufDeg=) 7: 3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa (hash: /NJYIz5c5OxCtCzAI9eMSZnnK2DRsoEPFpGekXPN3/Y=) 8: C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl (hash: ciloX7n+jnjs4lfEwoy8k/VlB4k4vHnN1Q+zDymCWp0=) 9: 323430333a626130303a3730303a3a2f34302d3438203d3e203234353231.roa (hash: zubx4XjBq87KwKwie4SbJb3Fj1Zuzvqgr/H/hHvCf/0=) 10: 3137352e3138342e3233382e302f32332d3234203d3e20313334363534.roa (hash: MG/J/pE598W0dSws8CxeYL22B2yFb4db9pJ8veM+SQU=) 11: 323430333a626130303a3a2f33322d3438203d3e203234353231.roa (hash: B9qLkdqrOWwVF5tA2jsrqX21V3LrtEAcPvXr3jC/ETM=) 12: 3131322e3130392e31362e302f32312d3234203d3e203234353231.roa (hash: okeDaf7d0Xuvp8xnTxJzUWPegOkeMCYHPs8G9yAmQ6Y=) 13: 3130332e3231352e32342e302f32322d3234203d3e2039333431.roa (hash: XTblwJ4OpupQKVM3L+0VPdo1vzAlW+UZ6yrctqElG0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:45:cb:18:67:2c:8c:b3:da:7b:6b:6a:4e:46:80:9d:7a:0d:04:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Validity Not Before: Mar 25 07:37:15 2026 GMT Not After : Mar 28 18:24:15 2026 GMT Subject: CN=E537121EB4A361832C12743D17AE7B41E51C3D5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:79:99:e0:9e:25:9d:36:f0:22:cf:5e:50: 6d:f0:d3:24:e4:c5:16:28:13:84:07:bb:7c:a0:d9: 7d:10:d5:09:40:0c:b1:cb:c6:a8:2f:35:65:51:2c: 6f:4a:94:e1:de:98:6f:b7:91:81:72:4a:af:0c:e3: 41:6f:4b:dd:0a:9b:f8:36:1b:96:7c:08:46:95:3e: 4d:77:be:0a:5b:06:4d:44:4c:5f:85:f6:ef:35:d5: 89:2c:ca:c8:20:85:cf:9d:a9:f0:21:a3:c5:9b:1a: aa:37:87:98:8c:bb:86:84:c1:bd:37:23:49:18:87: 7a:81:45:59:c7:c2:89:87:09:cd:f8:4b:ac:2b:e0: 9a:23:f3:82:78:96:63:d4:f7:5d:c2:6c:52:19:88: 78:ef:58:c8:03:48:cb:14:12:91:6c:04:0c:6b:c1: 06:b1:52:f7:da:57:9d:fa:90:9b:42:91:97:78:a3: c8:50:4d:3e:94:43:85:12:c2:00:68:53:1d:31:cc: 9c:25:78:0d:77:09:3c:10:1e:4a:2a:cc:b4:30:aa: 2b:fb:82:19:29:42:aa:3f:c0:d0:64:39:4b:8d:e2: bb:d5:ed:50:05:07:b0:7f:93:36:24:45:90:0b:cd: c0:f8:04:63:0e:d2:2a:c8:9d:ad:39:1c:a3:52:74: cc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:37:12:1E:B4:A3:61:83:2C:12:74:3D:17:AE:7B:41:E5:1C:3D:5D X509v3 Authority Key Identifier: keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:7a:ee:ef:26:36:91:fe:f5:89:49:67:13:65:1b:dd:7b:c5: af:93:c3:df:c4:f4:db:77:f7:27:13:60:0d:60:d9:45:fb:92: 84:f9:78:f3:f9:14:fd:e5:74:f6:24:58:d7:c9:94:99:6c:61: 6b:cc:cc:cf:5c:46:29:28:a8:e7:85:34:75:03:2c:78:b8:46: 17:bb:51:b6:36:6b:93:b1:e6:d5:09:c9:fe:64:a8:a0:5b:0f: 1a:f5:1f:6a:e0:18:6a:5d:b5:40:bc:e9:86:f4:46:93:c8:e7: 81:11:57:7c:03:ae:38:17:72:1c:17:49:b8:58:5e:8f:95:95: 1a:c5:c3:8f:11:0e:0f:83:39:8a:78:b4:6f:b9:c7:53:26:ea: f8:0a:67:5c:ec:5c:53:a3:4a:64:52:a0:e5:73:e6:7f:72:c9: cd:62:2d:d8:a3:e7:98:63:39:39:51:89:9c:1a:d5:ef:0f:31: 4f:85:92:5e:75:ff:41:16:55:83:a8:8e:c8:6e:28:24:f1:4d: 77:70:9a:d2:59:30:af:81:84:1d:7b:80:e5:36:ef:fc:1f:5c: 34:73:e2:6c:a4:d1:54:7c:77:15:d8:65:17:a5:29:9d:ef:cb: 44:51:ec:a3:dc:f2:99:55:e8:4b:91:a3:78:8e:03:2a:3e:d4: d2:e8:c1:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTEXLGGcsjLPae2tqTkaAnXoNBMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgz QjI3MUUzRTAeFw0yNjAzMjUwNzM3MTVaFw0yNjAzMjgxODI0MTVaMDMxMTAvBgNV BAMTKEU1MzcxMjFFQjRBMzYxODMyQzEyNzQzRDE3QUU3QjQxRTUxQzNENUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtSnmZ4J4lnTbwIs9eUG3w0yTk xRYoE4QHu3yg2X0Q1QlADLHLxqgvNWVRLG9KlOHemG+3kYFySq8M40FvS90Km/g2 G5Z8CEaVPk13vgpbBk1ETF+F9u811Yksysgghc+dqfAho8WbGqo3h5iMu4aEwb03 I0kYh3qBRVnHwomHCc34S6wr4Joj84J4lmPU913CbFIZiHjvWMgDSMsUEpFsBAxr wQaxUvfaV536kJtCkZd4o8hQTT6UQ4USwgBoUx0xzJwleA13CTwQHkoqzLQwqiv7 ghkpQqo/wNBkOUuN4rvV7VAFB7B/kzYkRZALzcD4BGMO0irIna05HKNSdMyFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5TcSHrSjYYMsEnQ9F657QeUcPV0wHwYDVR0j BBgwFoAUw/dF7ef0wNjlZ0lltSCACDsnHj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDljMjJiMS0xYjdiLTQ2NzEtYWI5NC01YzVlNzQ4ODI1NDcvMC9DM0Y3NDVFREU3 RjRDMEQ4RTU2NzQ5NjVCNTIwODAwODNCMjcxRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgzQjI3 MUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA5YzIyYjEtMWI3Yi00NjcxLWFi OTQtNWM1ZTc0ODgyNTQ3LzAvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgw MDgzQjI3MUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEl67u8mNpH+9YlJZxNlG917xa+Tw9/E9Nt3 9ycTYA1g2UX7koT5ePP5FP3ldPYkWNfJlJlsYWvMzM9cRikoqOeFNHUDLHi4Rhe7 UbY2a5Ox5tUJyf5kqKBbDxr1H2rgGGpdtUC86Yb0RpPI54ERV3wDrjgXchwXSbhY Xo+VlRrFw48RDg+DOYp4tG+5x1Mm6vgKZ1zsXFOjSmRSoOVz5n9yyc1iLdij55hj OTlRiZwa1e8PMU+Fkl51/0EWVYOojshuKCTxTXdwmtJZMK+BhB17gOU27/wfXDRz 4myk0VR8dxXYZRelKZ3vy0RR7KPc8plV6EuRo3iOAyo+1NLoweo= -----END CERTIFICATE-----Generated at Thu Mar 26 20:43:47 2026 by rpki-client