$ rpki-client -vvf repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft File: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft (raw, json) Hash identifier: 5QRybRZkCgBVrNiiVuEbj16anKryXLaAyuupeIWqo7k= Subject key identifier: 1F:8F:4C:6F:D2:83:F4:3A:74:96:0C:24:6C:81:CB:BE:DB:EC:01:E5 Authority key identifier: 3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 Certificate issuer: /CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Certificate serial: 0E5608D0018BE541BD93C570483CA70B5C2294F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft Manifest number: 0530 Signing time: Wed 25 Mar 2026 14:30:56 +0000 Manifest this update: Wed 25 Mar 2026 14:25:56 +0000 Manifest next update: Sat 28 Mar 2026 15:37:56 +0000 Files and hashes: 1: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl (hash: KoqxwdalHy/7LcvPV6Cd/K7Jtct6bMCoIsPHcEllSyU=) 2: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: IK+u+i97z9eMvyQxyRqv23SPg6t3j5oWeOL0K/ItAE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:56:08:d0:01:8b:e5:41:bd:93:c5:70:48:3c:a7:0b:5c:22:94:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Validity Not Before: Mar 25 14:25:56 2026 GMT Not After : Mar 28 15:37:56 2026 GMT Subject: CN=1F8F4C6FD283F43A74960C246C81CBBEDBEC01E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:79:aa:79:5c:97:4c:b8:a7:8e:03:f2:16:5a: f9:1f:d0:90:1a:31:62:dc:74:93:15:00:ff:b3:89: 77:8f:c8:06:57:28:c0:bb:f8:32:aa:09:7d:8a:65: bf:f7:b4:d3:ab:7e:12:dd:12:20:cf:50:3c:35:b8: b8:0a:64:df:df:15:17:60:d8:5a:9a:f7:44:39:95: bd:b1:f6:a8:ca:b4:a7:7e:0f:62:29:dc:62:5e:d8: 5f:0e:b2:8b:9b:98:c8:d3:7d:ef:d8:f1:7d:ca:31: 95:86:42:66:f9:81:23:9a:04:ce:e9:47:d8:0a:be: 3c:1e:30:41:e3:0e:95:84:88:40:00:d9:81:e7:b6: 5b:ad:19:5d:80:cb:8e:e4:b5:71:89:37:f8:b5:67: f9:e9:c7:52:be:a4:bb:94:c4:ff:99:9b:83:b1:8a: 96:58:4e:d3:a4:47:49:72:34:46:30:c9:87:1f:80: cf:b8:e6:d4:cc:fc:3c:5a:7d:98:00:8f:83:e1:15: 5c:42:d2:9d:4f:7c:4f:3c:dd:65:ea:3d:f7:8f:af: e2:a7:f0:24:39:bb:ce:a2:36:08:09:6d:10:3e:76: 14:a0:4c:f7:c7:ea:7f:de:4f:a7:43:69:e8:24:e5: 71:6d:11:b1:f6:09:a5:73:62:2a:22:0d:86:6f:cb: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8F:4C:6F:D2:83:F4:3A:74:96:0C:24:6C:81:CB:BE:DB:EC:01:E5 X509v3 Authority Key Identifier: keyid:3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:79:71:e4:7f:1c:06:a2:61:74:cf:b8:f5:73:76:a3:52:0c: 2c:72:6f:06:a8:4e:56:53:f8:4f:2e:c8:02:63:b3:34:21:c0: 0c:f0:41:08:12:23:d8:a3:d0:26:58:c2:22:73:a1:d1:f6:1f: 11:97:86:3c:b9:d0:80:83:b5:fe:e0:14:23:6d:db:d2:65:64: 87:6b:36:3b:4b:95:31:98:c2:5b:47:ff:ec:c3:71:2f:46:99: 99:08:57:b0:50:d5:62:ba:26:00:63:0c:c5:32:3e:82:ef:74: 6f:15:47:30:f8:b2:1a:bd:f2:11:dc:2f:66:a4:cf:cd:4a:a2: be:a3:7a:dd:cc:e9:55:b8:56:65:c8:4b:57:25:08:70:67:29: 1e:49:f8:36:dd:c1:9b:39:4d:5b:05:0d:cd:fd:5c:50:81:e5: 30:0b:a4:d0:20:09:74:71:e1:66:3d:4a:f1:22:ef:27:87:7e: da:88:4e:5a:3b:e6:52:e4:70:35:f8:92:f8:01:39:63:ee:92: 83:79:18:88:8c:0f:ab:54:72:2e:1c:f0:34:fe:bf:f4:bc:22: fc:97:88:20:c3:eb:30:97:86:dc:cf:a2:68:07:09:ec:7c:fc: fd:a9:db:8d:20:b8:0f:9e:e3:3f:07:d2:a3:f4:6a:95:60:a4: 88:3a:68:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDlYI0AGL5UG9k8VwSDynC1wilPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEy QzlBRDRBMjAeFw0yNjAzMjUxNDI1NTZaFw0yNjAzMjgxNTM3NTZaMDMxMTAvBgNV BAMTKDFGOEY0QzZGRDI4M0Y0M0E3NDk2MEMyNDZDODFDQkJFREJFQzAxRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfeap5XJdMuKeOA/IWWvkf0JAa MWLcdJMVAP+ziXePyAZXKMC7+DKqCX2KZb/3tNOrfhLdEiDPUDw1uLgKZN/fFRdg 2Fqa90Q5lb2x9qjKtKd+D2Ip3GJe2F8OsoubmMjTfe/Y8X3KMZWGQmb5gSOaBM7p R9gKvjweMEHjDpWEiEAA2YHntlutGV2Ay47ktXGJN/i1Z/npx1K+pLuUxP+Zm4Ox ipZYTtOkR0lyNEYwyYcfgM+45tTM/DxafZgAj4PhFVxC0p1PfE883WXqPfePr+Kn 8CQ5u86iNggJbRA+dhSgTPfH6n/eT6dDaegk5XFtEbH2CaVzYioiDYZvy8CVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH49Mb9KD9Dp0lgwkbIHLvtvsAeUwHwYDVR0j BBgwFoAUOg6iohzkI6JNTQitwQhp8Sya1KIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjYxZmFiYi1kNDZmLTRmOGMtODEwMC03MTRjMjBlN2IzY2EvMC8zQTBFQTJBMjFD RTQyM0EyNEQ0RDA4QURDMTA4NjlGMTJDOUFENEEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEyQzlB RDRBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5 RjEyQzlBRDRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACN5ceR/HAaiYXTPuPVzdqNSDCxybwaoTlZT +E8uyAJjszQhwAzwQQgSI9ij0CZYwiJzodH2HxGXhjy50ICDtf7gFCNt29JlZIdr NjtLlTGYwltH/+zDcS9GmZkIV7BQ1WK6JgBjDMUyPoLvdG8VRzD4shq98hHcL2ak z81Kor6jet3M6VW4VmXIS1clCHBnKR5J+DbdwZs5TVsFDc39XFCB5TALpNAgCXRx 4WY9SvEi7yeHftqITlo75lLkcDX4kvgBOWPukoN5GIiMD6tUci4c8DT+v/S8IvyX iCDD6zCXhtzPomgHCex8/P2p240guA+e4z8H0qP0apVgpIg6aP8= -----END CERTIFICATE-----Generated at Thu Mar 26 12:16:13 2026 by rpki-client