$ rpki-client -vvf repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft File: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft (raw, json) Hash identifier: 7naYWuN75ox+ETN1z7urNxpCCFRKYpl28Ptmfh1iK5U= Subject key identifier: EE:85:12:4F:D0:06:ED:50:A7:1D:5B:C9:FA:DC:1B:9B:CD:64:84:CE Authority key identifier: 31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 Certificate issuer: /CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Certificate serial: 3C2543D35F164510E4C68B6264AA51E239B20434 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft Manifest number: C8 Signing time: Tue 24 Mar 2026 02:50:58 +0000 Manifest this update: Tue 24 Mar 2026 02:45:58 +0000 Manifest next update: Fri 27 Mar 2026 09:52:58 +0000 Files and hashes: 1: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: I28r4i4lWDSRmz98gxENOln+97MGeec1Z1eAP51TwjI=) 2: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl (hash: F0p6z4AsogzEH2rwDuVbaYqBnZubp65LSF2xEqP/W3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:25:43:d3:5f:16:45:10:e4:c6:8b:62:64:aa:51:e2:39:b2:04:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Validity Not Before: Mar 24 02:45:58 2026 GMT Not After : Mar 27 09:52:58 2026 GMT Subject: CN=EE85124FD006ED50A71D5BC9FADC1B9BCD6484CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8b:52:3a:1d:3c:59:30:10:63:26:9f:3d:dc: e5:a2:63:52:27:61:83:a8:85:8b:73:b7:f3:5a:e5: e6:38:23:e2:c2:1c:28:5e:9b:b5:fe:98:eb:50:e7: d2:de:30:a9:b6:6c:78:87:d3:36:36:f0:b6:68:7f: a3:5f:f2:09:b3:f7:89:43:2f:a9:53:67:06:55:c6: 81:1e:67:05:9f:4d:e0:ad:cb:52:4b:64:f3:f9:76: 82:1c:d9:a3:de:ba:15:6f:b1:84:7d:be:4d:ae:be: b2:dd:d5:19:55:1c:48:3c:c5:8e:ef:71:2f:4e:d0: 71:bf:5c:e8:0e:3e:1d:fc:b7:44:e4:3c:dc:e4:9e: be:72:29:15:c2:02:1a:3f:6f:5e:e8:30:50:0b:0b: 38:fd:22:be:63:b4:0a:b2:73:4e:41:52:3c:93:0d: d1:34:5c:ca:39:3d:8f:21:4f:bf:99:85:3b:ac:c6: 5a:c1:6f:89:b8:cd:2f:d2:1a:7d:d2:9f:27:87:05: 62:8c:94:c6:3d:74:d0:62:dd:cd:79:24:6d:03:10: 2b:94:69:74:3a:7e:36:d6:92:27:8a:dd:b2:b0:94: f3:01:86:b7:26:51:b2:4a:60:d9:cc:06:3d:bc:60: 01:ea:4f:1f:db:57:69:f5:f9:02:40:a2:ff:42:dc: 15:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:85:12:4F:D0:06:ED:50:A7:1D:5B:C9:FA:DC:1B:9B:CD:64:84:CE X509v3 Authority Key Identifier: keyid:31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:43:7d:a3:cb:46:45:0d:ce:12:5f:c5:4b:a5:c9:7c:c8:9e: a8:6c:b6:11:7d:22:20:85:12:6b:a8:ff:d5:01:1c:cb:28:a8: d9:d3:84:a2:b7:71:76:a0:6b:58:23:89:24:e1:ee:8d:54:77: 9b:d3:78:99:2d:be:36:7c:05:be:20:e4:85:e8:7c:f3:52:33: 8a:e2:14:f9:80:77:b7:02:2e:4b:24:a8:45:9e:e3:47:1b:eb: b3:c9:a3:06:fc:9d:ae:ac:0a:3a:f2:5c:d6:0b:b8:f7:22:6f: 21:1e:10:b9:9a:3e:c2:15:13:7c:ce:34:75:92:50:72:0c:bb: 19:a7:d5:a3:d5:35:61:45:6c:00:6c:80:d8:fe:ea:24:c9:08: 54:ca:7a:9b:b7:6f:9a:db:b6:13:bd:75:11:b2:5b:89:83:1b: dc:db:e1:0f:83:0c:5d:b4:63:65:7c:cb:12:e5:77:7a:59:9c: 96:ef:d6:de:f8:89:4d:5f:dd:01:2c:a0:05:96:c9:c1:a9:13: 98:5d:76:c2:a7:c9:76:32:93:4c:0b:43:48:3a:46:b2:27:e6: be:07:1b:47:1a:42:d5:7f:c9:66:d4:bd:e6:9a:2a:b6:b8:cf: 68:ac:31:cc:fb:a1:c2:b6:fc:02:6f:30:fb:b6:9d:aa:45:80: d0:98:cc:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCVD018WRRDkxotiZKpR4jmyBDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURF RjEzMjlCNTAeFw0yNjAzMjQwMjQ1NThaFw0yNjAzMjcwOTUyNThaMDMxMTAvBgNV BAMTKEVFODUxMjRGRDAwNkVENTBBNzFENUJDOUZBREMxQjlCQ0Q2NDg0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxi1I6HTxZMBBjJp893OWiY1In YYOohYtzt/Na5eY4I+LCHChem7X+mOtQ59LeMKm2bHiH0zY28LZof6Nf8gmz94lD L6lTZwZVxoEeZwWfTeCty1JLZPP5doIc2aPeuhVvsYR9vk2uvrLd1RlVHEg8xY7v cS9O0HG/XOgOPh38t0TkPNzknr5yKRXCAho/b17oMFALCzj9Ir5jtAqyc05BUjyT DdE0XMo5PY8hT7+ZhTusxlrBb4m4zS/SGn3SnyeHBWKMlMY9dNBi3c15JG0DECuU aXQ6fjbWkieK3bKwlPMBhrcmUbJKYNnMBj28YAHqTx/bV2n1+QJAov9C3BVXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7oUST9AG7VCnHVvJ+twbm81khM4wHwYDVR0j BBgwFoAUMZTf1mRXNZr3vzvwnqdmre8TKbUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y M2JhMDI0Yi04N2YyLTRlZGQtODlmZi1hNGZjYTcwMDhjMzYvMC8zMTk0REZENjY0 NTczNTlBRjdCRjNCRjA5RUE3NjZBREVGMTMyOUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURFRjEz MjlCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5 ZmYtYTRmY2E3MDA4YzM2LzAvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2 QURFRjEzMjlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALhDfaPLRkUNzhJfxUulyXzInqhsthF9IiCF Emuo/9UBHMsoqNnThKK3cXaga1gjiSTh7o1Ud5vTeJktvjZ8Bb4g5IXofPNSM4ri FPmAd7cCLkskqEWe40cb67PJowb8na6sCjryXNYLuPcibyEeELmaPsIVE3zONHWS UHIMuxmn1aPVNWFFbABsgNj+6iTJCFTKepu3b5rbthO9dRGyW4mDG9zb4Q+DDF20 Y2V8yxLld3pZnJbv1t74iU1f3QEsoAWWycGpE5hddsKnyXYyk0wLQ0g6RrIn5r4H G0caQtV/yWbUveaaKra4z2isMcz7ocK2/AJvMPu2napFgNCYzDA= -----END CERTIFICATE-----Generated at Thu Mar 26 07:19:53 2026 by rpki-client