$ rpki-client -vvf repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft File: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft (raw, json) Hash identifier: jFRN0BZQN3rabHoGXdoQybncy9Vjg4jhMgvy7y/eWSk= Subject key identifier: C1:80:2E:7A:33:25:69:2B:44:1E:B3:D6:9A:2F:08:BE:88:B5:89:24 Authority key identifier: 3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 Certificate issuer: /CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Certificate serial: 612A97AD29A198131352E967DDE32A830AEB54D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft Manifest number: 01BE Signing time: Tue 24 Mar 2026 13:41:08 +0000 Manifest this update: Tue 24 Mar 2026 13:36:08 +0000 Manifest next update: Fri 27 Mar 2026 22:58:08 +0000 Files and hashes: 1: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: vmw9bcS7HYiEIqjVICRaVcatSeJQ8ZNuTTgtgTfawew=) 2: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: D5hukbaY+N3AjWmkuBGFFTwqc+CzamYmFL0amMEyMMM=) 3: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl (hash: zK9m0/C+mtjjuAlSYhk+OR+xXiO7SxpnJPK+gP81pvM=) 4: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: Ew2OSWEohUTuvmIQMM4jLPYBjKqzXCpLNwLiyPu5TfM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:2a:97:ad:29:a1:98:13:13:52:e9:67:dd:e3:2a:83:0a:eb:54:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Validity Not Before: Mar 24 13:36:08 2026 GMT Not After : Mar 27 22:58:08 2026 GMT Subject: CN=C1802E7A3325692B441EB3D69A2F08BE88B58924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:25:87:ac:14:a0:55:16:54:11:4c:f0:62:06: 44:8a:2c:f7:32:d7:25:91:c7:3c:96:a7:59:e1:95: be:8b:62:23:13:c8:3a:2e:d2:dc:02:7f:d9:29:6e: 0d:e4:23:2b:12:ef:cd:f1:94:cd:58:8e:60:04:c6: af:b4:7e:27:0c:c8:11:c5:e0:1e:da:95:ac:4c:e2: 93:d9:f1:f1:d6:f9:9e:b6:c2:22:2b:3e:cd:39:64: 4b:e8:05:42:f8:cf:b4:f2:84:ea:36:d5:d6:04:97: 13:db:40:7b:90:9d:bb:cb:8d:95:e2:16:be:d7:a7: 8d:08:c1:cf:46:84:22:f9:e4:42:3f:63:b8:a2:7f: 3b:8f:df:3f:b6:70:36:08:1d:9d:ce:14:10:b3:88: b2:0f:98:f9:c5:01:e9:ea:9d:c7:2f:df:a2:39:a1: e6:d7:e0:48:27:3d:3e:02:38:86:48:85:18:f9:10: 5a:02:51:2c:ca:a6:0c:20:90:4b:60:68:97:90:9d: 4b:13:90:40:33:28:14:f7:68:c1:b2:c2:2d:0b:0f: b4:50:4d:46:38:c6:48:d6:38:21:a4:d5:15:84:4f: a5:d4:b6:62:08:d5:85:f0:3e:09:1d:25:e1:55:c7: a4:8a:3e:21:09:67:c5:d6:c1:b1:7b:4a:5e:5e:aa: 32:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:80:2E:7A:33:25:69:2B:44:1E:B3:D6:9A:2F:08:BE:88:B5:89:24 X509v3 Authority Key Identifier: keyid:3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ee:39:b1:c5:64:9a:94:42:cd:38:84:35:38:1e:6b:cd:5d: 5d:ef:9a:94:70:5c:c1:9e:b2:16:8f:4c:7a:eb:56:a5:9f:a7: 4d:ef:ec:55:1a:fe:f7:aa:18:16:af:1f:da:8c:aa:98:10:11: 90:e5:0f:1d:25:f4:77:04:85:e1:09:33:bb:d1:ca:6f:73:92: cc:6f:a4:c9:10:71:67:3a:e4:25:e5:df:10:ec:df:73:38:32: f0:b0:dd:86:dd:ef:10:34:e2:7d:6b:43:9a:27:3b:d5:ac:d2: 7f:cf:a4:9c:31:c3:6e:3d:92:fa:52:e0:e4:62:a6:28:56:d5: 85:01:8d:58:6c:17:06:14:ef:78:9d:b4:8d:61:f6:27:5e:6d: 63:cc:59:08:e5:38:d7:e0:87:3d:98:cd:01:ce:9e:51:79:a0: 68:75:40:69:f9:64:80:62:19:7d:d7:21:2e:31:0e:fc:d0:78: 80:10:53:8b:96:96:86:75:bc:cb:4a:90:fe:c7:6c:24:2f:c9: 6c:44:de:f1:85:e2:f5:ba:69:08:de:ff:ff:ec:af:df:c1:80: 52:dc:19:e6:b1:9f:4f:af:52:fc:d5:54:9a:b9:af:da:4f:eb: 7d:68:b6:de:0c:96:8d:8c:1a:33:32:42:b8:ab:3e:9d:27:61: ac:a6:c1:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYSqXrSmhmBMTUuln3eMqgwrrVNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1 MDg1MkE2NzAeFw0yNjAzMjQxMzM2MDhaFw0yNjAzMjcyMjU4MDhaMDMxMTAvBgNV BAMTKEMxODAyRTdBMzMyNTY5MkI0NDFFQjNENjlBMkYwOEJFODhCNTg5MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtJYesFKBVFlQRTPBiBkSKLPcy 1yWRxzyWp1nhlb6LYiMTyDou0twCf9kpbg3kIysS783xlM1YjmAExq+0ficMyBHF 4B7alaxM4pPZ8fHW+Z62wiIrPs05ZEvoBUL4z7TyhOo21dYElxPbQHuQnbvLjZXi Fr7Xp40Iwc9GhCL55EI/Y7iifzuP3z+2cDYIHZ3OFBCziLIPmPnFAenqnccv36I5 oebX4EgnPT4COIZIhRj5EFoCUSzKpgwgkEtgaJeQnUsTkEAzKBT3aMGywi0LD7RQ TUY4xkjWOCGk1RWET6XUtmII1YXwPgkdJeFVx6SKPiEJZ8XWwbF7Sl5eqjINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwYAuejMlaStEHrPWmi8Ivoi1iSQwHwYDVR0j BBgwFoAUOl7azGG9fQXr1CS72/UdTFCFKmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjM4OGY2ZS05OTc0LTQ0NTctYWY0Yi01YzljODJmNTBlOTcvMC8zQTVFREFDQzYx QkQ3RDA1RUJENDI0QkJEQkY1MUQ0QzUwODUyQTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1MDg1 MkE2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIzODhmNmUtOTk3NC00NDU3LWFm NGItNWM5YzgyZjUwZTk3LzAvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFE NEM1MDg1MkE2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfuObHFZJqUQs04hDU4HmvNXV3vmpRwXMGe shaPTHrrVqWfp03v7FUa/veqGBavH9qMqpgQEZDlDx0l9HcEheEJM7vRym9zksxv pMkQcWc65CXl3xDs33M4MvCw3Ybd7xA04n1rQ5onO9Ws0n/PpJwxw249kvpS4ORi pihW1YUBjVhsFwYU73idtI1h9idebWPMWQjlONfghz2YzQHOnlF5oGh1QGn5ZIBi GX3XIS4xDvzQeIAQU4uWloZ1vMtKkP7HbCQvyWxE3vGF4vW6aQje///sr9/BgFLc Geaxn0+vUvzVVJq5r9pP631ott4Mlo2MGjMyQrirPp0nYaymwaE= -----END CERTIFICATE-----Generated at Thu Mar 26 18:57:35 2026 by rpki-client