$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft File: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft (raw, json) Hash identifier: VWa2gRw10yQxS4U09lG11C9mQEZrQ6XePAWXV1oJPBU= Subject key identifier: 8F:53:96:4C:C3:64:5A:96:3F:00:8B:83:51:B3:D2:0A:63:70:1E:77 Authority key identifier: 3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 Certificate issuer: /CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Certificate serial: 570ED32128AEF344E99D111C292E73D133558254 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft Manifest number: 0248 Signing time: Wed 25 Mar 2026 15:52:35 +0000 Manifest this update: Wed 25 Mar 2026 15:47:35 +0000 Manifest next update: Sat 28 Mar 2026 18:01:35 +0000 Files and hashes: 1: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: sJUN/+XYslzThounXZW+MFwCm1lc8VEvrGvUm5/WqYY=) 2: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: Htm5ahdXQHhKpRzE/h5i9KHcwL0XsZbOLaHTHLcsMN8=) 3: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl (hash: r1xBGXukNbPZt6lmx/OJEwr1hTw2XsAdrdog5NMWu2s=) 4: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: wNLC96dZ0hf5g5SQzM5GoaCW4xx90rlAQngevEb0OMg=) 5: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: mvmoi8dcnfPzFCUL4IZOH3T40kp0yAQpvbAqzxB1zYc=) 6: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: j7/0o24Y/Dntb2SDxDz2B+Eis79rWFB0ghqmTnU55LQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:0e:d3:21:28:ae:f3:44:e9:9d:11:1c:29:2e:73:d1:33:55:82:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Validity Not Before: Mar 25 15:47:35 2026 GMT Not After : Mar 28 18:01:35 2026 GMT Subject: CN=8F53964CC3645A963F008B8351B3D20A63701E77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a3:eb:25:68:5b:fc:27:d9:20:f8:a7:f1:a0: a5:5e:03:b3:9a:83:b1:c5:0c:a4:ae:ad:8e:2f:16: 22:6e:16:e4:5e:15:ec:62:a3:36:6c:08:c7:2f:2c: 44:3c:a0:11:76:74:54:30:33:99:18:14:36:53:64: ca:4a:86:b0:7c:c4:8e:c8:9b:4c:24:a6:fe:e2:6f: 01:3a:e9:ba:de:7a:a6:93:66:47:a0:e6:ab:76:24: fd:24:42:9e:8f:d1:20:01:ff:2d:54:b6:f7:9d:cb: a2:01:fb:af:2e:a5:9d:3f:12:06:e9:15:e1:1f:9c: a3:c9:f8:b7:25:13:c3:ab:37:28:83:70:3f:a8:e7: 97:3a:7a:ee:96:c0:98:24:71:22:e6:75:56:5c:4c: 2b:0f:34:cc:07:fb:fd:b8:be:44:2e:3d:f9:27:01: 5a:74:9d:f5:46:f1:5f:19:b3:ba:a8:73:b2:ae:5e: 48:51:86:f3:34:c6:1c:3e:1e:1a:db:c1:e9:ce:bb: 7b:60:97:f8:51:00:70:1f:db:74:0b:6a:23:68:8f: 80:86:0a:92:fe:ae:b8:80:a1:88:3f:ac:dc:6b:94: 63:fe:f3:c6:6b:85:d8:2c:ac:0c:89:c6:f3:28:9c: 71:8b:1a:3b:75:f8:9a:63:28:27:0e:6e:1d:70:30: 6d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:53:96:4C:C3:64:5A:96:3F:00:8B:83:51:B3:D2:0A:63:70:1E:77 X509v3 Authority Key Identifier: keyid:3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:16:bf:11:7e:48:bb:7d:1d:e2:e0:d4:67:1f:2c:af:6c:fd: a4:fb:4b:34:4b:a6:59:c0:19:73:06:fc:a7:54:60:85:70:60: 3d:bd:92:28:5f:45:58:ed:b3:36:75:91:7f:df:65:f4:35:29: ea:10:e3:be:fc:ea:9d:1c:4b:c5:8e:6e:73:fc:26:e3:61:71: 28:e6:ed:c6:66:37:5d:e3:8d:38:0f:58:c1:8c:16:d0:93:dd: 2e:0c:33:d0:d4:e8:ee:c3:f5:a9:fa:d9:c5:58:c1:39:bf:8a: ff:cc:b9:98:d5:e2:17:ed:24:98:4f:b1:7d:a7:62:aa:e3:be: 08:5a:10:39:e8:89:87:a4:2b:f5:84:e8:86:86:37:67:c1:e3: 7d:cc:26:c5:14:48:b4:80:94:d6:58:ad:86:8b:68:16:ed:56: bf:5e:e4:13:f8:65:7d:01:8c:23:51:5d:ad:93:88:d6:42:2b: 87:8a:b4:30:03:29:30:1a:b9:46:d1:35:da:9c:d1:e2:d4:e1: c9:27:b4:8d:4c:8c:51:74:79:04:8a:cc:d6:b5:74:10:ea:5a: b6:0d:1b:59:52:77:0f:f6:56:b6:1e:1b:b7:6f:e8:86:8e:44: b8:32:05:f0:34:f4:90:0b:d6:00:a8:69:73:01:c2:20:28:fd: be:c3:85:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVw7TISiu80TpnREcKS5z0TNVglQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5 RTE4MjA3NDAeFw0yNjAzMjUxNTQ3MzVaFw0yNjAzMjgxODAxMzVaMDMxMTAvBgNV BAMTKDhGNTM5NjRDQzM2NDVBOTYzRjAwOEI4MzUxQjNEMjBBNjM3MDFFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUo+slaFv8J9kg+KfxoKVeA7Oa g7HFDKSurY4vFiJuFuReFexiozZsCMcvLEQ8oBF2dFQwM5kYFDZTZMpKhrB8xI7I m0wkpv7ibwE66breeqaTZkeg5qt2JP0kQp6P0SAB/y1Utvedy6IB+68upZ0/Egbp FeEfnKPJ+LclE8OrNyiDcD+o55c6eu6WwJgkcSLmdVZcTCsPNMwH+/24vkQuPfkn AVp0nfVG8V8Zs7qoc7KuXkhRhvM0xhw+HhrbwenOu3tgl/hRAHAf23QLaiNoj4CG CpL+rriAoYg/rNxrlGP+88ZrhdgsrAyJxvMonHGLGjt1+JpjKCcObh1wMG1VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj1OWTMNkWpY/AIuDUbPSCmNwHncwHwYDVR0j BBgwFoAUOyup6NU1er13a27EyvfBxZ4YIHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YWU3ZDQ2MS0wZTMyLTRlNjUtYmI4OC1kNzI0MDViMjQ0NTEvMC8zQjJCQTlFOEQ1 MzU3QUJENzc2QjZFQzRDQUY3QzFDNTlFMTgyMDc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5RTE4 MjA3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0Mx QzU5RTE4MjA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoWvxF+SLt9HeLg1GcfLK9s/aT7SzRLplnA GXMG/KdUYIVwYD29kihfRVjtszZ1kX/fZfQ1KeoQ47786p0cS8WObnP8JuNhcSjm 7cZmN13jjTgPWMGMFtCT3S4MM9DU6O7D9an62cVYwTm/iv/MuZjV4hftJJhPsX2n YqrjvghaEDnoiYekK/WE6IaGN2fB433MJsUUSLSAlNZYrYaLaBbtVr9e5BP4ZX0B jCNRXa2TiNZCK4eKtDADKTAauUbRNdqc0eLU4ckntI1MjFF0eQSKzNa1dBDqWrYN G1lSdw/2VrYeG7dv6IaORLgyBfA09JAL1gCoaXMBwiAo/b7Dheg= -----END CERTIFICATE-----Generated at Thu Mar 26 07:17:11 2026 by rpki-client