$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft File: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json) Hash identifier: 1jLVm43bWr/7Wpv686SdfsthDU7IX4Ut5Z346KYNuS4= Subject key identifier: 27:D8:9E:16:4E:A8:83:CF:F5:25:4C:48:F6:DA:81:BF:08:CD:E6:6F Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 Certificate issuer: /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Certificate serial: 33349C65983CAEAA490CE9F3E0E93D4228EC9779 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft Manifest number: E4 Signing time: Tue 24 Mar 2026 15:41:02 +0000 Manifest this update: Tue 24 Mar 2026 15:36:02 +0000 Manifest next update: Fri 27 Mar 2026 21:28:02 +0000 Files and hashes: 1: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: homg5w1o8Ac7RkByH0/Fbb96kiXTeJPDkxjgg7Q4x1k=) 2: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: OJZSHiEPk3M3yh3xH0EnL+EZe8MsnEHi0YSjUBevqQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:34:9c:65:98:3c:ae:aa:49:0c:e9:f3:e0:e9:3d:42:28:ec:97:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Validity Not Before: Mar 24 15:36:02 2026 GMT Not After : Mar 27 21:28:02 2026 GMT Subject: CN=27D89E164EA883CFF5254C48F6DA81BF08CDE66F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:46:0a:28:27:de:f2:45:e1:f5:18:37:35:1f: 4a:26:71:35:8c:3f:76:41:a3:59:7c:59:39:4a:cb: eb:cd:04:49:42:75:80:3f:5c:bc:ce:f5:a0:c0:73: ef:bb:b9:8e:18:db:01:b1:df:f7:9f:81:73:ef:c7: 95:ee:97:e7:ea:12:4f:db:af:52:6a:29:8b:d3:21: ff:24:65:4b:c4:66:36:56:c8:32:48:32:cf:c4:20: 1b:9c:7b:48:2e:16:5e:ce:a2:79:96:da:98:73:14: 82:b6:a4:1e:40:b3:44:54:2f:ab:a2:5a:e1:e7:d6: a3:8a:b9:e4:af:4a:fa:e9:0f:e0:84:8e:22:42:d3: f2:ff:1c:73:48:a7:75:1d:d3:a7:43:8f:49:8e:02: 82:55:aa:58:1d:13:7c:90:65:77:82:79:25:15:5c: d7:2c:92:e4:ae:fe:36:65:2a:46:e2:1d:39:cc:9e: 7e:59:70:98:50:05:3b:d2:3b:d5:9b:2a:cc:2c:2b: ff:04:79:54:ed:b3:4c:72:46:80:bd:bf:f4:e2:ea: 71:60:d1:44:1d:e8:ff:b2:01:ee:10:99:8a:51:1a: 31:cb:77:86:55:61:a6:06:e4:22:73:02:c8:69:92: 33:21:b4:66:f1:f1:0a:af:06:63:a2:8e:bd:ed:92: 46:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D8:9E:16:4E:A8:83:CF:F5:25:4C:48:F6:DA:81:BF:08:CD:E6:6F X509v3 Authority Key Identifier: keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:98:02:bd:96:22:8e:41:60:89:eb:a2:7f:62:fd:f3:4e:85: d5:75:b0:d1:bf:10:7c:07:6d:70:20:05:69:c6:0f:5b:1f:1b: 25:7e:c0:a4:34:5e:76:1e:68:b2:ca:61:f4:dc:a5:46:c6:2d: 93:ff:18:4a:6f:a0:b6:66:17:16:38:07:43:89:5b:53:b2:55: 32:b9:b3:be:d0:6a:c8:e1:80:ad:1e:68:3d:59:66:20:27:e7: 77:98:59:25:8b:4b:58:75:59:24:b6:25:a1:7c:98:b4:fc:2b: b3:7d:5b:dd:2d:71:f7:06:ac:48:06:13:6a:12:c2:ac:a6:72: 54:8e:36:27:74:a7:27:7d:22:6e:22:df:2d:ae:9f:c2:55:ab: 04:a0:aa:0d:b4:5b:bd:2d:d0:77:f7:2f:4a:af:a0:15:99:27: 5b:cd:44:1e:0f:1d:b1:36:24:6e:99:de:4f:38:6d:da:ad:fc: b7:5f:2f:66:c2:22:54:85:49:3b:45:83:c1:4c:b3:cd:6a:e2: 28:7f:e7:bb:d3:ea:0f:c0:b4:48:41:bd:09:6a:0c:b9:eb:7d: e2:b5:5b:85:cf:7c:68:fd:7f:e7:8c:50:b2:c6:f3:4b:f3:3b: ca:6c:cf:f0:bc:f5:08:6a:e5:1d:18:40:6b:a5:9c:88:2a:96: 12:bb:c5:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMzScZZg8rqpJDOnz4Ok9Qijsl3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVF OUUwN0JGNDAeFw0yNjAzMjQxNTM2MDJaFw0yNjAzMjcyMTI4MDJaMDMxMTAvBgNV BAMTKDI3RDg5RTE2NEVBODgzQ0ZGNTI1NEM0OEY2REE4MUJGMDhDREU2NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsRgooJ97yReH1GDc1H0omcTWM P3ZBo1l8WTlKy+vNBElCdYA/XLzO9aDAc++7uY4Y2wGx3/efgXPvx5Xul+fqEk/b r1JqKYvTIf8kZUvEZjZWyDJIMs/EIBuce0guFl7OonmW2phzFIK2pB5As0RUL6ui WuHn1qOKueSvSvrpD+CEjiJC0/L/HHNIp3Ud06dDj0mOAoJVqlgdE3yQZXeCeSUV XNcskuSu/jZlKkbiHTnMnn5ZcJhQBTvSO9WbKswsK/8EeVTts0xyRoC9v/Ti6nFg 0UQd6P+yAe4QmYpRGjHLd4ZVYaYG5CJzAshpkjMhtGbx8QqvBmOijr3tkkaNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ9ieFk6og8/1JUxI9tqBvwjN5m8wHwYDVR0j BBgwFoAUPOympdKxOPXgXOgV1qnZBenge/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMC8zQ0VDQTZBNUQy QjEzOEY1RTA1Q0U4MTVENkE5RDkwNUU5RTA3QkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVFOUUw N0JGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ4ZWM1ZWItMDM1NC00ZDg3LWIy YmUtMDhmZmFkNGFhMDZhLzAvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5 MDVFOUUwN0JGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIuYAr2WIo5BYInron9i/fNOhdV1sNG/EHwH bXAgBWnGD1sfGyV+wKQ0XnYeaLLKYfTcpUbGLZP/GEpvoLZmFxY4B0OJW1OyVTK5 s77QasjhgK0eaD1ZZiAn53eYWSWLS1h1WSS2JaF8mLT8K7N9W90tcfcGrEgGE2oS wqymclSONid0pyd9Im4i3y2un8JVqwSgqg20W70t0Hf3L0qvoBWZJ1vNRB4PHbE2 JG6Z3k84bdqt/LdfL2bCIlSFSTtFg8FMs81q4ih/57vT6g/AtEhBvQlqDLnrfeK1 W4XPfGj9f+eMULLG80vzO8psz/C89Qhq5R0YQGulnIgqlhK7xac= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:12 2026 by rpki-client