$ rpki-client -vvf repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft File: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft (raw, json) Hash identifier: q5uQrGCJy776Sf4B8pTaKVQIWEMxvam1nn+DLFdVK7I= Subject key identifier: 06:C4:FE:BB:5D:1F:E2:B9:53:74:9E:1C:6B:48:9E:B0:A5:A8:C4:2C Authority key identifier: 3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 Certificate issuer: /CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Certificate serial: 51B6029FE4028218DD7A6E2D2FB2B55E023B48AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft Manifest number: 055B Signing time: Wed 25 Mar 2026 07:51:27 +0000 Manifest this update: Wed 25 Mar 2026 07:46:27 +0000 Manifest next update: Sat 28 Mar 2026 13:00:27 +0000 Files and hashes: 1: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: LtScTHZoxOHSbHhuqbZIrkhW+lipK1u0xCr0E9aMFWE=) 2: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl (hash: 4Fq3G8+rCeLAijjRPUYXZXF1tKJGdyrMp+BpTzUNTkI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b6:02:9f:e4:02:82:18:dd:7a:6e:2d:2f:b2:b5:5e:02:3b:48:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Validity Not Before: Mar 25 07:46:27 2026 GMT Not After : Mar 28 13:00:27 2026 GMT Subject: CN=06C4FEBB5D1FE2B953749E1C6B489EB0A5A8C42C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:1d:92:30:8d:2e:f9:82:4c:2a:0d:1e:6a: 64:d6:99:f6:bd:8b:a6:5c:1e:69:6e:b7:8a:c0:ac: 38:00:ed:3c:0b:a9:84:a5:f4:f2:f1:25:89:0a:1d: 04:86:9e:a6:c7:45:c4:dc:57:17:c0:fc:a0:66:56: 9b:1e:ec:fb:b8:5f:af:7b:30:90:04:23:04:a4:ea: dc:91:94:96:e1:89:14:3d:03:12:03:cd:17:ec:09: fd:be:ed:5e:cd:82:86:c7:9a:97:92:da:f3:40:1e: 06:49:1a:d4:60:88:89:a3:b8:e6:cf:95:22:92:55: 1d:30:00:e4:d1:cf:de:0a:0d:ca:2e:e6:72:c9:ff: 19:20:62:83:f7:22:53:d6:7c:a2:ab:3e:35:68:2b: a0:23:e6:b3:27:a3:8f:55:1e:a2:33:27:87:f2:22: c8:63:54:d0:b7:ec:da:6d:19:c3:02:af:6b:6c:01: f9:9c:dc:ae:3b:75:6c:7b:57:06:c2:b5:2f:27:73: b9:3e:f4:09:f4:60:b0:c9:3f:27:29:b2:0c:32:9a: 74:51:01:75:df:2d:4d:4e:05:55:d5:94:ab:95:69: 61:4c:30:97:c1:1b:fe:4f:f1:6c:3c:74:3b:a8:39: 6f:36:15:7b:be:b9:cd:b0:24:02:c3:ba:f2:29:92: 14:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C4:FE:BB:5D:1F:E2:B9:53:74:9E:1C:6B:48:9E:B0:A5:A8:C4:2C X509v3 Authority Key Identifier: keyid:3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:6d:34:35:a8:9b:b3:ea:37:b9:cb:b2:4c:56:7a:c0:37:a5: 46:af:f9:9a:24:96:73:33:f5:12:f3:d1:80:a6:6f:8c:07:a6: 15:93:18:c9:80:a1:7d:a0:7d:e7:6d:d7:68:7a:fd:03:40:2c: 8e:c0:e0:b1:f2:39:01:18:c2:de:fc:17:28:fd:d4:97:37:9a: b4:e7:d2:c4:26:b0:29:8b:0b:6e:bf:48:8f:ab:31:83:09:87: 87:a7:82:50:e3:a1:a3:cc:40:f1:d8:cd:0f:d5:fd:2a:4c:e3: 63:4b:52:40:08:44:0a:85:9c:38:f0:04:dd:f9:d9:17:d8:67: fb:d2:7b:3d:49:15:89:33:46:75:45:9d:0b:92:a9:65:fe:b9: cd:3b:70:be:26:4f:62:f7:85:cf:b6:d8:36:61:85:cd:25:93: 47:fc:fb:23:86:cb:b7:c8:68:37:6c:c9:0a:25:c4:37:19:10: e2:46:6f:cc:a0:fc:0a:a8:ce:ed:f5:46:27:60:7e:74:12:6c: f3:ea:ee:3c:62:32:a2:3f:d5:61:71:33:fe:fe:1f:02:f3:9a: 16:77:5e:57:35:2a:56:5b:79:53:47:2e:92:fc:0b:67:62:cb: 35:32:06:85:af:91:42:59:f7:d4:d2:fd:ca:f4:0f:68:8f:0b: 9f:cb:f1:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUbYCn+QCghjdem4tL7K1XgI7SK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhF RkNFMENBMDAeFw0yNjAzMjUwNzQ2MjdaFw0yNjAzMjgxMzAwMjdaMDMxMTAvBgNV BAMTKDA2QzRGRUJCNUQxRkUyQjk1Mzc0OUUxQzZCNDg5RUIwQTVBOEM0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6aR2SMI0u+YJMKg0eamTWmfa9 i6ZcHmlut4rArDgA7TwLqYSl9PLxJYkKHQSGnqbHRcTcVxfA/KBmVpse7Pu4X697 MJAEIwSk6tyRlJbhiRQ9AxIDzRfsCf2+7V7NgobHmpeS2vNAHgZJGtRgiImjuObP lSKSVR0wAOTRz94KDcou5nLJ/xkgYoP3IlPWfKKrPjVoK6Aj5rMno49VHqIzJ4fy IshjVNC37NptGcMCr2tsAfmc3K47dWx7VwbCtS8nc7k+9An0YLDJPycpsgwymnRR AXXfLU1OBVXVlKuVaWFMMJfBG/5P8Ww8dDuoOW82FXu+uc2wJALDuvIpkhTxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBsT+u10f4rlTdJ4ca0iesKWoxCwwHwYDVR0j BBgwFoAUPR1ElzFVb44UUd5luy4PiO/ODKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM3Mzk2Yy00YmJlLTRjNmUtOGY1MC00NDJjMjA1ZTA3MGMvMC8zRDFENDQ5NzMx NTU2RjhFMTQ1MURFNjVCQjJFMEY4OEVGQ0UwQ0EwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhFRkNF MENBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjNzM5NmMtNGJiZS00YzZlLThm NTAtNDQyYzIwNWUwNzBjLzAvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBG ODhFRkNFMENBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFltNDWom7PqN7nLskxWesA3pUav+ZoklnMz 9RLz0YCmb4wHphWTGMmAoX2gfedt12h6/QNALI7A4LHyOQEYwt78Fyj91Jc3mrTn 0sQmsCmLC26/SI+rMYMJh4englDjoaPMQPHYzQ/V/SpM42NLUkAIRAqFnDjwBN35 2RfYZ/vSez1JFYkzRnVFnQuSqWX+uc07cL4mT2L3hc+22DZhhc0lk0f8+yOGy7fI aDdsyQolxDcZEOJGb8yg/Aqozu31RidgfnQSbPPq7jxiMqI/1WFxM/7+HwLzmhZ3 Xlc1KlZbeVNHLpL8C2diyzUyBoWvkUJZ99TS/cr0D2iPC5/L8Vs= -----END CERTIFICATE-----Generated at Thu Mar 26 23:26:17 2026 by rpki-client