$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft File: 3CA825E93FE8830376EF386786BF847CB239BE70.mft (raw, json) Hash identifier: 7M4cNqds3KnhZIeAnA9/KJJMz08rcGTJC3SODorynTw= Subject key identifier: 83:2E:82:78:6A:67:11:1A:6E:FD:AD:B3:18:8D:2B:78:2C:9A:80:46 Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 Certificate issuer: /CN=3CA825E93FE8830376EF386786BF847CB239BE70 Certificate serial: 1734818057F648F1E7B573CE28D2F80F069701D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft Manifest number: 055E Signing time: Wed 25 Mar 2026 21:41:59 +0000 Manifest this update: Wed 25 Mar 2026 21:36:59 +0000 Manifest next update: Sun 29 Mar 2026 00:08:59 +0000 Files and hashes: 1: 3CA825E93FE8830376EF386786BF847CB239BE70.crl (hash: cWFKL3VL2cNfHbMQjB1rS+6XHDpCeeF+cNK0blc/+YU=) 2: 3230322e3138322e35362e302f32312d3234203d3e203234323133.roa (hash: DlnKcd87VD3rZuVTk+tNhtDr4vaeUIcVlv5lIcH6uws=) 3: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (hash: rMCMSl1s+WWM7uToBUHib02Gf8GW78oaPsE3tZQeKpc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:34:81:80:57:f6:48:f1:e7:b5:73:ce:28:d2:f8:0f:06:97:01:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70 Validity Not Before: Mar 25 21:36:59 2026 GMT Not After : Mar 29 00:08:59 2026 GMT Subject: CN=832E82786A67111A6EFDADB3188D2B782C9A8046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:92:97:b5:3f:95:b5:e6:d6:b0:fa:33:7f:3e: 89:e7:45:f2:33:7f:09:99:79:ec:b4:68:28:b5:99: 4a:11:15:a7:f3:db:72:27:1a:47:20:b8:83:ba:2d: 42:a2:ec:47:ab:31:9b:2d:f4:aa:c1:c1:b2:9d:27: a7:c6:f0:76:c4:47:24:75:ae:3e:ea:59:3b:c8:04: 4e:0b:32:74:95:dc:60:6c:0c:24:df:ec:78:1b:f8: 8d:05:54:6e:06:64:5b:09:88:34:c4:5a:99:0d:9d: 56:10:77:57:cf:03:a7:51:69:af:54:89:e9:10:09: db:d4:50:82:99:16:1b:0f:ed:8f:70:5e:67:a4:85: b1:03:42:d2:a2:3f:48:d0:8b:5d:11:f9:30:1c:fc: d4:d3:c7:f2:ed:2f:be:51:c5:9c:5b:61:63:43:29: 49:6e:1e:9a:8e:72:be:a0:c2:2e:26:f4:06:b5:01: c5:26:d0:35:50:e2:a7:07:95:77:ce:87:c4:25:ca: 94:cf:1a:2c:33:a2:00:2d:85:a0:3d:7a:f4:40:c4: 90:d8:74:39:6a:68:13:dc:68:2b:b7:53:f8:9f:bc: 33:2a:08:46:63:b9:dc:22:84:0b:31:c2:89:c7:2d: 94:0d:70:d6:f1:66:49:dc:92:f7:5b:8f:6e:13:19: 47:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2E:82:78:6A:67:11:1A:6E:FD:AD:B3:18:8D:2B:78:2C:9A:80:46 X509v3 Authority Key Identifier: keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1b:c8:55:ff:c3:e0:a0:67:32:32:b0:4f:68:95:5e:cc:9d: d3:ca:18:72:a1:75:e0:5a:60:9d:bf:7a:63:ae:4d:00:eb:17: f5:71:d9:54:18:82:82:9b:38:8b:d7:4e:54:e0:34:51:33:47: 0d:70:d0:7c:82:26:e6:60:65:79:7b:bf:94:83:cb:d4:ef:dd: 19:6c:7d:56:4d:f0:5e:be:fa:e7:c9:6c:26:c0:c5:4d:13:2c: f8:fc:58:e4:c9:26:82:2a:45:6f:97:8a:a1:4e:85:a0:2c:7a: d7:8a:9e:1d:cb:01:4d:de:19:dd:d7:1e:fd:26:87:99:07:48: 51:6b:d8:9f:23:fc:23:95:74:21:32:c1:2f:75:0d:7a:bb:8f: 2d:17:92:da:69:b1:6f:6e:a8:36:44:17:aa:e7:07:85:4a:d2: c8:a9:50:30:fa:9c:27:3e:f3:f4:2d:8f:7f:1b:23:ac:30:cf: 92:f8:1c:d8:4d:b0:d4:cf:29:96:17:30:f7:38:3f:7c:c0:7a: a9:3e:f1:31:db:22:49:62:bc:d4:29:4b:61:19:20:e9:d0:34: 54:cd:84:05:13:60:44:8a:2f:20:07:35:2f:36:f0:92:88:78: a2:20:3c:8e:5a:ab:bf:f1:12:3f:98:08:cc:a5:88:3f:98:1e: c9:12:8f:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFzSBgFf2SPHntXPOKNL4DwaXAdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NC MjM5QkU3MDAeFw0yNjAzMjUyMTM2NTlaFw0yNjAzMjkwMDA4NTlaMDMxMTAvBgNV BAMTKDgzMkU4Mjc4NkE2NzExMUE2RUZEQURCMzE4OEQyQjc4MkM5QTgwNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kpe1P5W15taw+jN/PonnRfIz fwmZeey0aCi1mUoRFafz23InGkcguIO6LUKi7EerMZst9KrBwbKdJ6fG8HbERyR1 rj7qWTvIBE4LMnSV3GBsDCTf7Hgb+I0FVG4GZFsJiDTEWpkNnVYQd1fPA6dRaa9U iekQCdvUUIKZFhsP7Y9wXmekhbEDQtKiP0jQi10R+TAc/NTTx/LtL75RxZxbYWND KUluHpqOcr6gwi4m9Aa1AcUm0DVQ4qcHlXfOh8QlypTPGiwzogAthaA9evRAxJDY dDlqaBPcaCu3U/ifvDMqCEZjudwihAsxwonHLZQNcNbxZknckvdbj24TGUevAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgy6CeGpnERpu/a2zGI0reCyagEYwHwYDVR0j BBgwFoAUPKgl6T/ogwN27zhnhr+EfLI5vnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OGI4YzFiNS0zYmU4LTRhYTctYTRjNi0yMWJjYzhmM2ZhNDAvMC8zQ0E4MjVFOTNG RTg4MzAzNzZFRjM4Njc4NkJGODQ3Q0IyMzlCRTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NCMjM5 QkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0 N0NCMjM5QkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIbyFX/w+CgZzIysE9olV7MndPKGHKhdeBa YJ2/emOuTQDrF/Vx2VQYgoKbOIvXTlTgNFEzRw1w0HyCJuZgZXl7v5SDy9Tv3Rls fVZN8F6++ufJbCbAxU0TLPj8WOTJJoIqRW+XiqFOhaAseteKnh3LAU3eGd3XHv0m h5kHSFFr2J8j/COVdCEywS91DXq7jy0XktppsW9uqDZEF6rnB4VK0sipUDD6nCc+ 8/Qtj38bI6wwz5L4HNhNsNTPKZYXMPc4P3zAeqk+8THbIklivNQpS2EZIOnQNFTN hAUTYESKLyAHNS828JKIeKIgPI5aq7/xEj+YCMyliD+YHskSj1A= -----END CERTIFICATE-----Generated at Thu Mar 26 19:08:42 2026 by rpki-client