$ rpki-client -vvf repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft File: 2985976A4B3081770748882703E16497964D05A6.mft (raw, json) Hash identifier: vqVehZKT+8cJYHDhyqbV4Zo+bbHsAILCO3cjEnfACLA= Subject key identifier: C4:4B:4E:8E:CD:CB:A7:22:23:60:0D:C1:EA:F8:1B:EA:B6:81:B6:D0 Authority key identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 Certificate issuer: /CN=2985976A4B3081770748882703E16497964D05A6 Certificate serial: 2E34F0A609A12AED331ADCCAD23E20AEF14F740F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft Manifest number: 024B Signing time: Wed 25 Mar 2026 06:40:44 +0000 Manifest this update: Wed 25 Mar 2026 06:35:44 +0000 Manifest next update: Sat 28 Mar 2026 11:06:44 +0000 Files and hashes: 1: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: s3jB5rGy3ygjsQ7KSNEtfVl4k8P8QCufhhtVBzaX2IQ=) 2: 2985976A4B3081770748882703E16497964D05A6.crl (hash: q+7Q8IsCR1YKSKN97BQcOFBgzkFNxsH2OMndhZEgKj0=) 3: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: 6DmXkqMFBwmOgmu7GrU8MAR3khWhl6gAoERCQcW2kCE=) 4: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: fbMC3foKpfnHAAX7CqNwv+8CUIBKmVdM4iWFdYY2w+c=) 5: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: RrW5I2lzLuA+7ZMS1LEMZMinrm7Ftg4PYDdGcwSGY08=) 6: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: h0i6o1md9zXeZ9ZcSa+PGKss268qYszF+iOxTtMdu4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 11:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:34:f0:a6:09:a1:2a:ed:33:1a:dc:ca:d2:3e:20:ae:f1:4f:74:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2985976A4B3081770748882703E16497964D05A6 Validity Not Before: Mar 25 06:35:44 2026 GMT Not After : Mar 28 11:06:44 2026 GMT Subject: CN=C44B4E8ECDCBA72223600DC1EAF81BEAB681B6D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:b8:a5:94:ae:89:b8:6f:c9:75:59:7e:af: 8f:db:ee:30:64:f3:66:b5:f5:60:16:f1:25:ad:00: 92:a5:b1:4e:32:59:96:77:95:88:57:8b:3f:19:97: f7:f4:f7:2a:93:c6:a0:92:e0:55:e9:06:be:81:20: 23:e7:2a:87:45:36:b6:1f:14:aa:1c:64:31:59:86: b9:d3:9e:84:6d:72:c8:30:aa:56:73:2e:25:dd:61: e2:e2:10:e1:ee:13:f6:fd:7a:e0:b8:59:4a:b8:aa: 59:a5:11:6b:80:f2:14:df:6f:42:6e:a5:bd:de:99: cd:0f:98:5a:f4:71:41:15:fa:1e:b1:0b:5c:b0:03: 21:a0:53:86:fa:97:21:05:68:b6:87:78:b4:8e:31: d8:67:e5:17:c9:16:1b:41:47:08:53:2b:15:10:5f: ee:0b:f6:2e:ef:10:df:2b:8b:b1:4b:c7:17:51:3b: 4f:01:8f:18:5f:8b:cf:1d:6a:6e:30:ec:ce:ed:8a: 6a:9e:04:58:5a:72:e5:a0:7f:3c:84:d5:2b:67:31: 50:7e:cd:82:53:73:9c:0a:e4:34:99:ef:05:94:5f: c6:a4:02:11:c7:86:a7:6f:7d:17:85:1a:06:e2:31: 33:3c:cd:03:3a:0f:83:28:14:db:be:d4:e1:34:e4: 10:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4B:4E:8E:CD:CB:A7:22:23:60:0D:C1:EA:F8:1B:EA:B6:81:B6:D0 X509v3 Authority Key Identifier: keyid:29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:30:b7:1a:89:fd:f1:a7:b8:8c:19:5e:1e:be:db:75:86:75: 15:a5:3c:08:e5:cb:41:e7:81:b5:d7:49:16:92:ad:04:80:b8: 81:e2:da:4c:09:3e:25:1a:9d:f8:90:fd:bc:e4:fb:f8:d3:1c: 28:4a:54:fc:07:9a:0b:91:cb:0a:ff:24:45:91:83:e4:a8:0e: 15:97:ce:32:12:57:17:60:48:20:02:52:a4:dc:83:dd:47:38: 0f:b3:3a:c2:cd:78:4b:6e:69:2c:a8:87:a6:17:41:d3:8f:df: 52:a1:8e:7b:3a:6d:df:12:72:be:ad:f8:b6:af:9a:fb:7d:f4: 3c:2a:75:6f:cd:5b:58:3f:ee:11:b1:23:1e:75:24:53:a1:f8: 49:90:be:82:44:dc:b6:90:b5:ac:95:32:12:48:dc:2e:4e:9e: c3:be:2f:58:62:f3:d2:3b:7e:26:98:15:13:f7:43:46:51:e3: f9:d4:5a:c7:7a:8c:ca:e9:9c:a3:3f:c9:45:64:8b:af:76:c9: bb:3f:4c:fa:cf:1a:bc:82:53:0c:40:2a:9d:15:7f:78:ba:00: 56:08:8b:2b:02:72:6e:c2:01:1d:c1:e3:e8:6a:00:c0:03:d0: 25:16:1c:f3:81:4a:43:00:28:34:0e:6b:85:fc:ad:37:98:0a: e5:0a:df:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULjTwpgmhKu0zGtzK0j4grvFPdA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5 NjREMDVBNjAeFw0yNjAzMjUwNjM1NDRaFw0yNjAzMjgxMTA2NDRaMDMxMTAvBgNV BAMTKEM0NEI0RThFQ0RDQkE3MjIyMzYwMERDMUVBRjgxQkVBQjY4MUI2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3UrillK6JuG/JdVl+r4/b7jBk 82a19WAW8SWtAJKlsU4yWZZ3lYhXiz8Zl/f09yqTxqCS4FXpBr6BICPnKodFNrYf FKocZDFZhrnTnoRtcsgwqlZzLiXdYeLiEOHuE/b9euC4WUq4qlmlEWuA8hTfb0Ju pb3emc0PmFr0cUEV+h6xC1ywAyGgU4b6lyEFaLaHeLSOMdhn5RfJFhtBRwhTKxUQ X+4L9i7vEN8ri7FLxxdRO08Bjxhfi88dam4w7M7timqeBFhacuWgfzyE1StnMVB+ zYJTc5wK5DSZ7wWUX8akAhHHhqdvfReFGgbiMTM8zQM6D4MoFNu+1OE05BCHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxEtOjs3LpyIjYA3B6vgb6raBttAwHwYDVR0j BBgwFoAUKYWXakswgXcHSIgnA+Fkl5ZNBaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZWQxMDBkZi0wNDQxLTQzODEtYTNmYS01ODdkYjllOWMyZjAvMC8yOTg1OTc2QTRC MzA4MTc3MDc0ODg4MjcwM0UxNjQ5Nzk2NEQwNUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5NjRE MDVBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz ZmEtNTg3ZGI5ZTljMmYwLzAvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0 OTc5NjREMDVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIwtxqJ/fGnuIwZXh6+23WGdRWlPAjly0Hn gbXXSRaSrQSAuIHi2kwJPiUanfiQ/bzk+/jTHChKVPwHmguRywr/JEWRg+SoDhWX zjISVxdgSCACUqTcg91HOA+zOsLNeEtuaSyoh6YXQdOP31Khjns6bd8Scr6t+Lav mvt99DwqdW/NW1g/7hGxIx51JFOh+EmQvoJE3LaQtayVMhJI3C5OnsO+L1hi89I7 fiaYFRP3Q0ZR4/nUWsd6jMrpnKM/yUVki692ybs/TPrPGryCUwxAKp0Vf3i6AFYI iysCcm7CAR3B4+hqAMAD0CUWHPOBSkMAKDQOa4X8rTeYCuUK35Q= -----END CERTIFICATE-----Generated at Thu Mar 26 21:02:34 2026 by rpki-client