$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: iHVg0XI2hv/qfZeas1J0jEiBZNm9sV5DotpPxceVc8Q= Subject key identifier: 36:95:E8:22:8A:B3:BA:63:40:58:4F:0D:9D:EC:2D:A7:40:79:19:19 Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 017FE8BEB8D1D247B723AD250DF66A781F803089 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: 0153 Signing time: Wed 25 Mar 2026 17:32:13 +0000 Manifest this update: Wed 25 Mar 2026 17:27:13 +0000 Manifest next update: Sun 29 Mar 2026 02:18:13 +0000 Files and hashes: 1: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: dcR6S/Yytd5AJpZPpX06oP84+gKAs9/gMVZjkeakiig=) 2: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: vBd/o6+RGsJU4ZF5dz1yRiYJvku7rSkDAbo5yX1o1lY=) 3: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: 82ZZd9ZKqDtwhlONQ96AcoNzTHzQmEXlz9QIND1/UOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:7f:e8:be:b8:d1:d2:47:b7:23:ad:25:0d:f6:6a:78:1f:80:30:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: Mar 25 17:27:13 2026 GMT Not After : Mar 29 02:18:13 2026 GMT Subject: CN=3695E8228AB3BA6340584F0D9DEC2DA740791919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:d5:34:15:74:06:ff:19:f1:f3:1e:ad:3d: 25:14:ee:2d:b6:69:0f:bd:0a:9d:4b:ce:b7:91:7f: ef:be:30:ba:d0:bf:04:79:d1:e1:f6:66:03:70:b2: aa:48:2c:12:02:a8:dc:9f:7c:eb:50:b7:47:2d:55: 1e:de:72:59:47:cd:d8:09:6c:52:f0:98:e9:8e:2e: 93:e8:76:29:37:7a:f8:b6:4f:9f:6f:76:95:ec:5d: ab:47:b7:f5:ba:41:41:c3:d3:38:84:08:dc:1b:d7: 1c:ba:e4:47:e8:88:91:ea:8a:91:fb:ea:29:9e:46: 54:04:e3:da:3b:0f:5c:98:f2:a7:05:c0:73:c5:84: db:c8:41:9a:84:80:42:54:84:f3:05:e5:a6:46:f4: dd:f9:95:d6:85:6a:5c:a3:a0:e5:eb:69:66:15:d5: 08:30:98:03:62:5b:4d:a8:77:87:19:4b:02:df:9e: 0c:fc:e3:7b:08:c6:00:70:65:33:0c:ea:8e:ba:0e: 11:80:1b:66:09:64:03:31:2a:e4:c1:c9:35:c2:62: a5:2c:e9:35:e7:d2:b9:08:64:fb:2d:9d:d9:eb:eb: 72:ea:14:6b:29:1f:f5:b5:19:7d:8c:c0:f5:07:28: 5f:b3:4c:d1:08:d9:1b:12:51:ab:44:42:de:b6:47: ca:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:95:E8:22:8A:B3:BA:63:40:58:4F:0D:9D:EC:2D:A7:40:79:19:19 X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:83:12:7f:b2:ed:a0:3b:db:95:05:e5:82:c8:a5:ff:93:7f: 40:8c:92:b1:45:73:ad:dc:db:af:b2:fc:26:da:af:37:e3:6c: 1b:a3:09:3f:82:c8:3d:f2:d4:a7:21:23:74:4e:e8:53:41:bb: 4e:44:e3:9c:cc:5d:40:9e:3d:1f:5c:55:31:a3:8a:95:54:07: 24:14:18:19:6b:8a:d3:56:f6:f8:11:b7:94:e2:5d:4c:e4:ea: 08:cf:19:bd:fb:f8:35:4f:4c:e1:7a:cb:70:ae:e4:b9:16:84: 2f:41:0c:23:41:07:38:e9:db:21:e0:86:1c:01:d8:cd:85:33: 58:b7:6c:0b:62:5a:98:66:34:93:74:94:cc:34:8a:85:52:d3: fa:d2:e9:fe:26:d6:35:8d:00:3d:57:d1:5b:82:77:e3:a9:b0: f0:e7:a2:c4:41:dd:8e:6a:22:f4:7d:67:15:4b:30:64:49:ce: 93:1f:47:6f:53:e2:71:0f:81:d8:fa:dc:59:77:24:57:54:a1: 1a:74:6d:ad:f3:89:66:d5:1a:76:a6:36:0d:56:08:51:5b:26: 1f:b6:7b:2f:3e:13:5e:6c:b0:bc:26:58:35:99:88:e3:54:e3: 64:1a:e6:29:b1:54:08:7b:0f:67:59:4e:89:3c:f3:c6:3b:34: f2:db:7b:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAX/ovrjR0ke3I60lDfZqeB+AMIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNjAzMjUxNzI3MTNaFw0yNjAzMjkwMjE4MTNaMDMxMTAvBgNV BAMTKDM2OTVFODIyOEFCM0JBNjM0MDU4NEYwRDlERUMyREE3NDA3OTE5MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/9U0FXQG/xnx8x6tPSUU7i22 aQ+9Cp1LzreRf+++MLrQvwR50eH2ZgNwsqpILBICqNyffOtQt0ctVR7ecllHzdgJ bFLwmOmOLpPodik3evi2T59vdpXsXatHt/W6QUHD0ziECNwb1xy65EfoiJHqipH7 6imeRlQE49o7D1yY8qcFwHPFhNvIQZqEgEJUhPMF5aZG9N35ldaFalyjoOXraWYV 1QgwmANiW02od4cZSwLfngz843sIxgBwZTMM6o66DhGAG2YJZAMxKuTByTXCYqUs 6TXn0rkIZPstndnr63LqFGspH/W1GX2MwPUHKF+zTNEI2RsSUatEQt62R8rRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNpXoIoqzumNAWE8Nnewtp0B5GRkwHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiDEn+y7aA725UF5YLIpf+Tf0CMkrFFc63c 26+y/CbarzfjbBujCT+CyD3y1KchI3RO6FNBu05E45zMXUCePR9cVTGjipVUByQU GBlritNW9vgRt5TiXUzk6gjPGb37+DVPTOF6y3Cu5LkWhC9BDCNBBzjp2yHghhwB 2M2FM1i3bAtiWphmNJN0lMw0ioVS0/rS6f4m1jWNAD1X0VuCd+OpsPDnosRB3Y5q IvR9ZxVLMGRJzpMfR29T4nEPgdj63Fl3JFdUoRp0ba3ziWbVGnamNg1WCFFbJh+2 ey8+E15ssLwmWDWZiONU42Qa5imxVAh7D2dZTok888Y7NPLbe3k= -----END CERTIFICATE-----Generated at Thu Mar 26 13:52:47 2026 by rpki-client