$ rpki-client -vvf repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft File: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft (raw, json) Hash identifier: HHmM8z6JXjId+geW8TyLMK/VI/bFNkUqiPDTDyew1q8= Subject key identifier: 7E:12:A9:39:A1:52:CC:11:E1:EE:F5:F5:08:51:25:16:F2:11:C8:9A Authority key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 Certificate issuer: /CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Certificate serial: 7D37CE29C2FA000D8AEA8A71F5F98492F41D822A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft Manifest number: 0281 Signing time: Wed 25 Mar 2026 13:22:17 +0000 Manifest this update: Wed 25 Mar 2026 13:17:17 +0000 Manifest next update: Sun 29 Mar 2026 00:06:17 +0000 Files and hashes: 1: 3132302e32392e3233312e302f32342d3234203d3e203139393035.roa (hash: r2yKO3KrSmkrfjQ84qnMxwLYCnCinVawrYAR52ueF/A=) 2: 3132302e32392e3232362e302f32342d3234203d3e203139393035.roa (hash: 3HF7GKrMWvA2HVJvaEA0TLWlABe/FvvXdYdd308g/bM=) 3: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl (hash: 8qefRM/9m+F/KIqlVnfjuyNq+DOoHLtN4XydXmYujjQ=) 4: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: 3exU7oFsvYUFSV8eY2HjGvJAd31licbqMiWMGxc4mP8=) 5: 3132302e32392e3232392e302f32342d3234203d3e203139393035.roa (hash: VUbT8SHEyKOKmASLTaMwWEhd8ggbwmzz2pEnc4bB2PQ=) 6: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: o/hW8qZTONTOAc20EcYPM6z7EK54AM3nJtkiYTqdmzw=) 7: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: tMWjooLi2F7KXFCZbnIlkGyY3nB0YSrhkrZ6SMkaGL0=) 8: 3132302e32392e3233302e302f32342d3234203d3e203139393035.roa (hash: eJhmyhXXadCdmI4sMr9QqAto/qcSNuimAa2ijC8e73Y=) 9: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: g7MxCuMcZcUZMViRKxMdEfGOeCRM4ZwEaqaIDOryUYY=) 10: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: MIBjJ0juyARBq3pL12kDjJxTxoFUENwyQCjEpJRY2ns=) 11: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: WD3hCT6MILwIPZ4dCDhl0fGWEEcaNJ+QbJrnwlE7Ah4=) 12: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: KmsUdHDk3KWG6ZVcZIyi7cy4EBKg+PkfE62y9MOD+Qk=) 13: 3132302e32392e3232382e302f32342d3234203d3e203139393035.roa (hash: qnWaLPQKCclL3KbhPyWf5fv4NRd/K4sQGvE8/3c+X3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:37:ce:29:c2:fa:00:0d:8a:ea:8a:71:f5:f9:84:92:f4:1d:82:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Validity Not Before: Mar 25 13:17:17 2026 GMT Not After : Mar 29 00:06:17 2026 GMT Subject: CN=7E12A939A152CC11E1EEF5F508512516F211C89A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:81:dd:fe:b8:c6:f0:5f:6d:69:cd:fe:b0:84: e3:93:6d:5f:91:d0:b8:b9:33:50:e3:8d:50:14:6e: 8d:62:81:fc:89:43:38:83:a7:32:85:23:78:d2:78: c8:d5:c9:ae:80:1b:f2:b5:a8:8b:67:33:30:3b:36: 65:fd:2e:ff:7e:9a:1b:06:01:da:4c:18:f6:dc:4f: 16:7b:75:c2:4d:7c:5a:e2:06:e3:16:6e:d5:d5:e2: 33:e1:ec:29:21:29:6e:13:49:ad:e8:e7:c2:da:be: 42:a7:09:9b:a5:25:dd:01:ba:d6:9c:4f:0d:02:cf: 60:ed:ab:52:6d:02:09:d2:53:43:27:80:8c:34:87: ec:51:6b:47:2f:f0:9d:66:37:4d:3b:c4:85:f2:6e: 16:29:4d:27:a9:01:85:8f:00:f6:e5:9f:f7:21:4a: 71:b8:b4:df:02:2b:de:ae:48:00:96:31:3f:12:73: 04:1e:db:da:c4:80:d5:bb:1b:92:4f:53:de:75:9b: b8:da:90:36:5e:f1:99:5e:4a:2c:7a:17:22:c2:3b: 65:1f:46:fd:32:e8:24:27:5a:a6:32:25:9d:59:0b: 21:a9:bd:47:b7:1a:d8:1a:ad:b8:66:56:81:2c:cb: b0:e7:49:a1:ec:23:5e:09:7a:41:92:d0:11:6e:01: af:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:12:A9:39:A1:52:CC:11:E1:EE:F5:F5:08:51:25:16:F2:11:C8:9A X509v3 Authority Key Identifier: keyid:3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:31:e2:b6:a8:d6:5b:28:e4:79:2a:c9:14:85:17:bb:54:51: 92:0b:2c:19:f0:21:db:bd:c3:0a:25:34:04:34:29:12:9a:41: 13:5d:e7:ce:0f:a4:2c:ea:29:46:ef:ea:c3:ee:17:5b:ec:ee: 79:ba:05:9a:80:38:ff:88:e3:3c:f3:2b:84:74:88:3d:ba:99: b8:8e:39:fb:77:aa:0f:9a:58:e8:62:e5:ce:65:f7:ea:80:06: 00:1a:a3:f1:b5:dd:24:84:15:42:f2:57:41:20:24:d1:3c:bd: ef:fe:07:6e:1e:c6:e9:d8:47:04:79:d5:55:47:66:fd:ed:c0: 64:25:ea:18:0a:76:fa:92:b8:7d:9a:2e:7e:7a:46:42:b7:46: 57:16:b3:c7:bf:68:f1:0f:10:48:05:23:82:78:61:e2:7d:83: e0:ea:db:e4:e5:ce:4f:57:fe:f8:3f:f6:f7:c7:1a:23:2d:6f: f0:82:b9:39:67:48:8e:d9:56:c7:b7:c8:10:dd:93:d4:6a:80: 0c:fc:fb:3c:cb:84:0a:74:80:21:0d:cc:e1:64:8d:42:4d:9b: 02:46:29:49:43:7f:71:17:92:60:5c:38:eb:fd:99:ad:9e:9f: 13:b3:35:d5:21:e2:88:63:5c:22:b2:d1:6b:1f:96:a2:19:50: e5:4c:e7:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfTfOKcL6AA2K6opx9fmEkvQdgiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdB MzVCMDI1MTAeFw0yNjAzMjUxMzE3MTdaFw0yNjAzMjkwMDA2MTdaMDMxMTAvBgNV BAMTKDdFMTJBOTM5QTE1MkNDMTFFMUVFRjVGNTA4NTEyNTE2RjIxMUM4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgd3+uMbwX21pzf6whOOTbV+R 0Li5M1DjjVAUbo1igfyJQziDpzKFI3jSeMjVya6AG/K1qItnMzA7NmX9Lv9+mhsG AdpMGPbcTxZ7dcJNfFriBuMWbtXV4jPh7CkhKW4TSa3o58LavkKnCZulJd0Butac Tw0Cz2Dtq1JtAgnSU0MngIw0h+xRa0cv8J1mN007xIXybhYpTSepAYWPAPbln/ch SnG4tN8CK96uSACWMT8ScwQe29rEgNW7G5JPU951m7jakDZe8ZleSix6FyLCO2Uf Rv0y6CQnWqYyJZ1ZCyGpvUe3GtgarbhmVoEsy7DnSaHsI14JekGS0BFuAa+ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfhKpOaFSzBHh7vX1CFElFvIRyJowHwYDVR0j BBgwFoAUPmZijAPKuMbW/N7b4HAFV6NbAlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjFjOWNhZC1jM2I5LTQ1YTAtYmViNi1iY2U0OGUyYjIyNzIvMC8zRTY2NjI4QzAz Q0FCOEM2RDZGQ0RFREJFMDcwMDU1N0EzNUIwMjUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdBMzVC MDI1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxYzljYWQtYzNiOS00NWEwLWJl YjYtYmNlNDhlMmIyMjcyLzAvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1 NTdBMzVCMDI1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkx4rao1lso5HkqyRSFF7tUUZILLBnwIdu9 wwolNAQ0KRKaQRNd584PpCzqKUbv6sPuF1vs7nm6BZqAOP+I4zzzK4R0iD26mbiO Oft3qg+aWOhi5c5l9+qABgAao/G13SSEFULyV0EgJNE8ve/+B24exunYRwR51VVH Zv3twGQl6hgKdvqSuH2aLn56RkK3RlcWs8e/aPEPEEgFI4J4YeJ9g+Dq2+Tlzk9X /vg/9vfHGiMtb/CCuTlnSI7ZVse3yBDdk9RqgAz8+zzLhAp0gCENzOFkjUJNmwJG KUlDf3EXkmBcOOv9ma2enxOzNdUh4ohjXCKy0WsflqIZUOVM560= -----END CERTIFICATE-----Generated at Thu Mar 26 18:00:54 2026 by rpki-client