$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft File: 07087494011A8BD71E0AB56E4A29820B0C265D45.mft (raw, json) Hash identifier: btsWXjpsvUreGkcv7E8i9kfE47FqsGEc8KuuKYlIvSY= Subject key identifier: 3D:D3:CF:29:5E:7F:69:49:0A:0A:55:7D:B6:31:E5:3B:F3:5A:B9:3D Authority key identifier: 07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45 Certificate issuer: /CN=07087494011A8BD71E0AB56E4A29820B0C265D45 Certificate serial: 3AD21A0FAD8E7CC8976531FDC42BFD3AEEA9484A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft Manifest number: B3 Signing time: Thu 26 Mar 2026 00:41:29 +0000 Manifest this update: Thu 26 Mar 2026 00:36:29 +0000 Manifest next update: Sun 29 Mar 2026 02:29:29 +0000 Files and hashes: 1: 323030313a6466303a633330303a3a2f34382d3438203d3e20313336303939.roa (hash: 6dckKLb4IjoNupMYzivHBSbdaon1eSuU1MGkh5Rrhkk=) 2: 07087494011A8BD71E0AB56E4A29820B0C265D45.crl (hash: FIoUgvoxHUuqddh5dXrTm254HSIBlx1mhc0+lYL/+I4=) 3: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (hash: BzG6yaz8K9d2yaZJbxZR2wDQbC5lgAeoiJLMdERwWfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d2:1a:0f:ad:8e:7c:c8:97:65:31:fd:c4:2b:fd:3a:ee:a9:48:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07087494011A8BD71E0AB56E4A29820B0C265D45 Validity Not Before: Mar 26 00:36:29 2026 GMT Not After : Mar 29 02:29:29 2026 GMT Subject: CN=3DD3CF295E7F69490A0A557DB631E53BF35AB93D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:67:2d:67:73:f0:e3:b6:99:58:fb:57:23:2e: c5:74:b8:67:7a:46:20:fd:5b:b7:e0:87:f8:67:21: e7:4f:87:7e:ae:3f:e2:58:42:da:d5:27:4a:f1:f4: 1d:6e:67:7a:c9:59:1d:21:6f:13:46:04:2b:2d:e4: aa:71:3d:d6:86:4d:91:78:9b:ae:05:4f:75:73:61: 08:31:cd:a1:91:73:61:06:b3:81:de:db:e1:61:3e: dc:bb:8d:b7:0c:95:84:da:8c:10:20:2f:86:73:5d: 61:f4:84:84:db:e5:ca:ed:70:62:77:cc:fc:36:21: 57:bc:2a:73:4d:f6:c3:6b:f3:10:8d:1a:f0:97:ea: 0a:fd:a0:13:1e:4b:4a:1e:0b:1e:49:83:b6:40:01: 7c:e1:de:83:11:ca:ce:70:e0:ab:53:61:d1:80:63: f7:c9:56:67:82:e2:5d:20:bb:ff:1d:5b:c0:34:10: 7f:03:bb:30:27:a6:75:62:67:ea:fb:9c:2e:67:27: f5:5a:74:d9:21:b5:a8:85:c8:67:ff:94:e5:00:4b: 40:78:ef:0b:46:f6:8e:2f:d1:27:7a:9a:8e:8d:cd: 45:ef:9d:f6:ee:1b:91:ad:2d:15:fe:27:49:9e:1b: 0d:65:00:1d:3d:95:29:cd:a3:3a:f5:47:1a:70:5c: b1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D3:CF:29:5E:7F:69:49:0A:0A:55:7D:B6:31:E5:3B:F3:5A:B9:3D X509v3 Authority Key Identifier: keyid:07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:02:23:cf:10:5d:94:77:45:2d:00:2d:2a:2a:19:2a:a4:df: af:93:59:6b:4c:c6:6c:d2:4d:ca:23:43:27:43:ea:11:db:7d: 43:8e:03:0d:c8:65:04:18:fd:e4:7a:20:19:01:73:68:bc:27: c1:08:bd:fd:0d:76:02:aa:69:cc:69:e8:b1:67:3c:2f:bf:3a: 35:ce:ab:6a:88:e6:22:31:3e:bf:cc:40:44:7d:20:0c:ea:9a: a1:ba:1e:e2:d7:4e:ec:8f:34:dd:ca:90:28:1f:29:17:b5:fe: 1a:0a:e2:25:f2:54:35:f5:19:94:48:47:0c:8f:1c:9b:0e:c1: fb:f9:d9:37:22:b0:fb:a2:40:6a:e0:0c:7e:4d:00:ae:f3:98: 0d:a5:fd:4a:67:12:d9:65:5d:8f:3b:97:02:22:f3:ab:f6:00: a9:97:66:e9:8a:d9:1f:95:a3:6b:3b:44:e9:f7:2e:b9:36:56: b0:3c:11:b0:2e:03:c1:12:2a:d7:3f:73:70:2d:64:55:ff:4a: 27:e8:87:9c:1f:92:eb:50:c3:2c:7f:74:b6:74:58:7a:09:ac: 03:22:b2:c4:18:de:64:b3:00:1c:dd:77:e9:e9:0b:2c:99:77: 94:eb:33:84:b3:fc:af:37:d5:8e:6a:f5:45:3c:a6:3a:f6:34: f3:c2:09:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtIaD62OfMiXZTH9xCv9Ou6pSEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIw QzI2NUQ0NTAeFw0yNjAzMjYwMDM2MjlaFw0yNjAzMjkwMjI5MjlaMDMxMTAvBgNV BAMTKDNERDNDRjI5NUU3RjY5NDkwQTBBNTU3REI2MzFFNTNCRjM1QUI5M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZy1nc/DjtplY+1cjLsV0uGd6 RiD9W7fgh/hnIedPh36uP+JYQtrVJ0rx9B1uZ3rJWR0hbxNGBCst5KpxPdaGTZF4 m64FT3VzYQgxzaGRc2EGs4He2+FhPty7jbcMlYTajBAgL4ZzXWH0hITb5crtcGJ3 zPw2IVe8KnNN9sNr8xCNGvCX6gr9oBMeS0oeCx5Jg7ZAAXzh3oMRys5w4KtTYdGA Y/fJVmeC4l0gu/8dW8A0EH8DuzAnpnViZ+r7nC5nJ/VadNkhtaiFyGf/lOUAS0B4 7wtG9o4v0Sd6mo6NzUXvnfbuG5GtLRX+J0meGw1lAB09lSnNozr1RxpwXLELAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPdPPKV5/aUkKClV9tjHlO/NauT0wHwYDVR0j BBgwFoAUBwh0lAEai9ceCrVuSimCCwwmXUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMC8wNzA4NzQ5NDAx MUE4QkQ3MUUwQUI1NkU0QTI5ODIwQjBDMjY1RDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIwQzI2 NUQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzAvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgy MEIwQzI2NUQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYCI88QXZR3RS0ALSoqGSqk36+TWWtMxmzS TcojQydD6hHbfUOOAw3IZQQY/eR6IBkBc2i8J8EIvf0NdgKqacxp6LFnPC+/OjXO q2qI5iIxPr/MQER9IAzqmqG6HuLXTuyPNN3KkCgfKRe1/hoK4iXyVDX1GZRIRwyP HJsOwfv52TcisPuiQGrgDH5NAK7zmA2l/UpnEtllXY87lwIi86v2AKmXZumK2R+V o2s7ROn3Lrk2VrA8EbAuA8ESKtc/c3AtZFX/Sifoh5wfkutQwyx/dLZ0WHoJrAMi ssQY3mSzABzdd+npCyyZd5TrM4Sz/K831Y5q9UU8pjr2NPPCCec= -----END CERTIFICATE-----Generated at Thu Mar 26 21:39:06 2026 by rpki-client