$ rpki-client -vvf repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft File: 3A594744F1BEA2F04C7437AD77133DD4423F2302.mft (raw, json) Hash identifier: kIfgmfIa9G4MqQFv5VB4gpLb8nJn2Zpf0m15F6HZKb4= Subject key identifier: 4E:00:7B:DC:C2:A7:58:78:6A:3B:2D:0A:5E:F6:27:2C:78:BF:46:25 Authority key identifier: 3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 Certificate issuer: /CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Certificate serial: 4B94E244DF065A2D959296564F9DA328A136D0B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft Manifest number: 01D3 Signing time: Wed 25 Mar 2026 23:02:10 +0000 Manifest this update: Wed 25 Mar 2026 22:57:10 +0000 Manifest next update: Sun 29 Mar 2026 02:13:10 +0000 Files and hashes: 1: 3A594744F1BEA2F04C7437AD77133DD4423F2302.crl (hash: JjMuLHonlRtHFtx5npLmeH+McVxWfegVTPuy2xO8KG0=) 2: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: V7xwcl0k/wohTR9W8bA+ryS5bQrHzSDEtp81r7CMd0o=) 3: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: NewfUB+lgmscpjQ8d8uHTPa+ibrc/cZ+CDOKTYvxIBA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:94:e2:44:df:06:5a:2d:95:92:96:56:4f:9d:a3:28:a1:36:d0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Validity Not Before: Mar 25 22:57:10 2026 GMT Not After : Mar 29 02:13:10 2026 GMT Subject: CN=4E007BDCC2A758786A3B2D0A5EF6272C78BF4625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:6c:01:19:61:c3:0a:a3:15:6c:c8:07:6c: 7c:10:65:2f:52:58:ae:70:19:7c:4b:fb:69:81:10: c1:fe:4a:6b:2c:ed:4d:fb:f1:04:d1:98:10:dc:16: c5:d5:af:b2:30:33:41:58:57:3a:f6:f9:c8:a6:b7: bd:06:46:98:ce:f2:2c:76:90:f2:78:01:e3:ea:19: 3c:21:9e:2f:bf:6c:8e:81:d7:eb:44:f9:26:5d:55: 4f:bf:59:64:bf:79:87:1c:14:99:8e:78:b8:dd:e5: e3:c4:76:fb:ab:97:7d:ae:de:cc:4f:7f:ac:4e:30: c5:f8:bd:99:a4:f3:4f:47:28:e8:38:ee:58:f6:d3: c5:24:ad:f8:24:fd:3b:75:13:a7:19:c4:7d:46:64: d4:18:6d:8e:c8:22:8e:64:8f:d0:40:38:69:91:c3: 1d:7d:48:b8:2f:78:d4:90:4b:d9:dc:df:10:f7:ca: f7:6d:64:ec:18:62:9e:63:33:ce:c7:44:a2:ee:16: 8b:42:85:9f:54:1f:8f:e1:31:66:0f:59:bb:90:b1: be:21:8d:39:4a:e2:8a:f4:14:0d:e5:ee:c5:d0:71: e5:c4:dc:0a:78:fd:07:d9:61:54:de:39:02:08:a4: 51:4f:43:61:c5:a0:35:11:b2:39:4b:a4:ca:8a:5c: 12:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:00:7B:DC:C2:A7:58:78:6A:3B:2D:0A:5E:F6:27:2C:78:BF:46:25 X509v3 Authority Key Identifier: keyid:3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:cc:6b:6a:b4:90:af:83:8b:d2:b3:19:67:c4:ff:3c:17:28: ff:f2:83:70:26:c1:e9:28:eb:4f:21:58:d8:92:66:5e:56:93: 39:df:a0:19:80:28:7f:e1:41:f6:b4:b6:e9:fb:97:86:0c:e3: a9:81:3b:a9:4a:d2:cf:82:ea:fe:dc:57:3b:1d:c9:9b:f5:5b: 07:d0:28:f9:1f:9b:b3:51:45:33:60:59:39:78:83:fa:0b:25: a4:54:69:91:c3:22:cb:9d:00:09:f9:c8:61:8a:63:35:a8:b4: 8d:a8:87:2e:f6:58:e7:fa:7b:5d:68:2c:3f:41:fe:9b:6f:0b: 8a:9e:04:51:25:71:62:2c:95:65:eb:26:f5:34:d9:98:a4:72: 60:61:36:38:13:3c:30:93:83:25:6c:40:96:d9:bb:06:df:90: f8:98:86:56:33:a7:a4:8a:a5:e3:d2:96:ff:e4:c6:71:6c:94: c5:fd:74:08:91:e2:8d:e2:9a:2b:4a:91:96:fc:22:7e:8f:a7: 21:40:99:4e:d0:53:cb:12:f5:66:29:19:0d:be:ae:2c:81:40: 56:fe:49:ae:e0:b0:2d:c4:40:73:6c:3a:26:f7:66:98:c2:c6: 48:aa:97:e3:67:9c:b9:20:be:b1:9c:b9:12:2a:72:51:6e:1e: 5e:65:7e:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5TiRN8GWi2VkpZWT52jKKE20LAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0 MjNGMjMwMjAeFw0yNjAzMjUyMjU3MTBaFw0yNjAzMjkwMjEzMTBaMDMxMTAvBgNV BAMTKDRFMDA3QkRDQzJBNzU4Nzg2QTNCMkQwQTVFRjYyNzJDNzhCRjQ2MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJGwBGWHDCqMVbMgHbHwQZS9S WK5wGXxL+2mBEMH+Smss7U378QTRmBDcFsXVr7IwM0FYVzr2+cimt70GRpjO8ix2 kPJ4AePqGTwhni+/bI6B1+tE+SZdVU+/WWS/eYccFJmOeLjd5ePEdvurl32u3sxP f6xOMMX4vZmk809HKOg47lj208Ukrfgk/Tt1E6cZxH1GZNQYbY7IIo5kj9BAOGmR wx19SLgveNSQS9nc3xD3yvdtZOwYYp5jM87HRKLuFotChZ9UH4/hMWYPWbuQsb4h jTlK4or0FA3l7sXQceXE3Ap4/QfZYVTeOQIIpFFPQ2HFoDURsjlLpMqKXBJ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTgB73MKnWHhqOy0KXvYnLHi/RiUwHwYDVR0j BBgwFoAUOllHRPG+ovBMdDetdxM91EI/IwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDYxNDE2My00Y2E0LTQ5MzYtYmY4Yi04NGQ4YzJkMWYwMmQvMC8zQTU5NDc0NEYx QkVBMkYwNEM3NDM3QUQ3NzEzM0RENDQyM0YyMzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0MjNG MjMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNE RDQ0MjNGMjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDMa2q0kK+Di9KzGWfE/zwXKP/yg3Amweko 608hWNiSZl5WkznfoBmAKH/hQfa0tun7l4YM46mBO6lK0s+C6v7cVzsdyZv1WwfQ KPkfm7NRRTNgWTl4g/oLJaRUaZHDIsudAAn5yGGKYzWotI2ohy72WOf6e11oLD9B /ptvC4qeBFElcWIslWXrJvU02ZikcmBhNjgTPDCTgyVsQJbZuwbfkPiYhlYzp6SK pePSlv/kxnFslMX9dAiR4o3imitKkZb8In6PpyFAmU7QU8sS9WYpGQ2+riyBQFb+ Sa7gsC3EQHNsOib3ZpjCxkiql+NnnLkgvrGcuRIqclFuHl5lfj0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:48:18 2026 by rpki-client