$ rpki-client -vvf repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft File: 3B6C011787F4528DAFAEE19B8408D9405F030E61.mft (raw, json) Hash identifier: CRaud/YfNgrRCZX5xk7Cr1FO3NCFfIVCu0olvLYrK3c= Subject key identifier: 79:98:28:BB:7C:AE:C6:BC:74:49:AB:8A:EE:6D:F3:AA:DC:72:4A:C4 Authority key identifier: 3B:6C:01:17:87:F4:52:8D:AF:AE:E1:9B:84:08:D9:40:5F:03:0E:61 Certificate issuer: /CN=3B6C011787F4528DAFAEE19B8408D9405F030E61 Certificate serial: 4C3FBECF4444D76BF5148B1F0F9F382B1FD7E447 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B6C011787F4528DAFAEE19B8408D9405F030E61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft Manifest number: 15 Signing time: Thu 26 Mar 2026 20:52:43 +0000 Manifest this update: Thu 26 Mar 2026 20:47:43 +0000 Manifest next update: Sun 29 Mar 2026 22:35:43 +0000 Files and hashes: 1: 3130332e3131352e39392e302f32342d3234203d3e20313337333536.roa (hash: qF7ZyvBLQXU0z6sQinAxqtICo9LN6FDZ9IqqCQLq5zI=) 2: 3B6C011787F4528DAFAEE19B8408D9405F030E61.crl (hash: +G4u702aDTYHoN1roJz/pEy90d8BwTlVoCwDIUmR4Js=) 3: 323030313a6466353a323530303a3a2f34382d3438203d3e20313337333536.roa (hash: rTSV+CqWgDbyB0T8+UwJX4nONp+OV7Tlp7vmg3QUH/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.crl rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B6C011787F4528DAFAEE19B8408D9405F030E61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 22:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:3f:be:cf:44:44:d7:6b:f5:14:8b:1f:0f:9f:38:2b:1f:d7:e4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B6C011787F4528DAFAEE19B8408D9405F030E61 Validity Not Before: Mar 26 20:47:43 2026 GMT Not After : Mar 29 22:35:43 2026 GMT Subject: CN=799828BB7CAEC6BC7449AB8AEE6DF3AADC724AC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e8:22:ad:1c:bd:ea:e5:95:1e:3f:70:e0:c9: 7a:0b:8f:5e:35:45:b1:fe:3c:02:75:81:c6:09:4f: 3c:ec:94:60:61:33:30:14:7a:cd:fa:ff:3e:8d:20: ee:29:f1:03:ae:05:38:27:0b:a8:0c:60:ab:e2:27: cb:a9:67:80:17:7c:c7:0c:3f:cf:8e:5d:b3:1b:5f: 15:a2:61:c4:f9:11:19:b9:9f:23:79:5a:4b:06:b0: a5:62:6a:9f:cd:f1:8c:78:c6:d9:71:a3:92:7a:11: 27:90:8f:74:c6:8b:35:00:ac:d6:ff:04:f3:5b:1b: a4:54:aa:ce:d6:79:d9:17:8a:51:fc:2c:b1:02:62: 3c:f6:7d:72:a0:30:51:df:c2:fa:2e:d3:b5:cb:c5: 5c:5c:92:76:e5:77:5a:e1:c4:ea:e4:b2:2f:55:0d: 2c:fd:84:05:9f:b8:94:fa:0a:34:cc:59:3f:f6:64: 94:72:08:7c:a6:aa:f0:72:a9:78:08:ee:04:d7:31: 94:75:94:76:59:d7:0f:45:89:d8:5d:46:1e:e9:1c: 37:b5:ca:8b:3d:13:5b:3e:7b:4c:ad:83:37:50:7d: b4:fd:24:f6:a1:df:2d:57:7d:0d:35:bb:c3:4d:a9: 4e:c3:3e:f8:8d:eb:43:e5:68:04:d6:a1:57:40:f7: 42:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:98:28:BB:7C:AE:C6:BC:74:49:AB:8A:EE:6D:F3:AA:DC:72:4A:C4 X509v3 Authority Key Identifier: keyid:3B:6C:01:17:87:F4:52:8D:AF:AE:E1:9B:84:08:D9:40:5F:03:0E:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B6C011787F4528DAFAEE19B8408D9405F030E61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:49:f9:c2:fa:52:cd:fa:17:93:49:26:bc:e1:9b:b1:06:eb: 7f:e1:ad:45:e6:69:31:a8:f5:0d:eb:bc:5d:40:79:c1:5e:25: c3:e6:18:d8:d3:b7:71:59:8f:4a:3e:d1:84:c7:81:fc:17:b0: 7a:79:81:2b:1a:60:2a:66:2a:30:28:79:87:9a:65:74:e2:31: 0e:2a:e4:72:7a:80:a4:ca:15:6c:62:09:ce:c4:e4:ad:21:33: 11:ec:dd:d7:06:77:91:e3:79:e7:e4:0b:9e:fa:07:af:07:1f: 0b:43:d5:f7:5e:28:06:87:2a:12:11:6f:1a:82:5a:e6:f2:4f: 3e:da:c0:d7:35:d2:f9:17:6d:2c:a0:c1:f2:16:2e:37:bc:f2: 61:39:7b:94:65:05:3a:c3:6a:3a:88:52:9f:ff:28:64:78:54: c3:35:6c:0d:d8:a4:6d:25:ad:21:69:ae:6f:38:86:e9:5b:69: 6d:96:3e:2b:a1:9a:f0:a7:fc:ba:68:7a:e3:69:ae:5d:8c:fe: 6a:58:1a:b1:e4:3f:39:d3:59:ea:1a:63:9e:53:00:98:ed:92: 46:90:51:d0:64:24:dd:24:9c:2d:0a:f3:c1:9b:5e:b2:63:1b: 71:ae:f9:54:cc:db:61:64:ef:94:73:f7:c1:28:c9:06:da:dd: fe:71:41:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTD++z0RE12v1FIsfD584Kx/X5EcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2QzAxMTc4N0Y0NTI4REFGQUVFMTlCODQwOEQ5NDA1 RjAzMEU2MTAeFw0yNjAzMjYyMDQ3NDNaFw0yNjAzMjkyMjM1NDNaMDMxMTAvBgNV BAMTKDc5OTgyOEJCN0NBRUM2QkM3NDQ5QUI4QUVFNkRGM0FBREM3MjRBQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6CKtHL3q5ZUeP3DgyXoLj141 RbH+PAJ1gcYJTzzslGBhMzAUes36/z6NIO4p8QOuBTgnC6gMYKviJ8upZ4AXfMcM P8+OXbMbXxWiYcT5ERm5nyN5WksGsKViap/N8Yx4xtlxo5J6ESeQj3TGizUArNb/ BPNbG6RUqs7WedkXilH8LLECYjz2fXKgMFHfwvou07XLxVxcknbld1rhxOrksi9V DSz9hAWfuJT6CjTMWT/2ZJRyCHymqvByqXgI7gTXMZR1lHZZ1w9FidhdRh7pHDe1 yos9E1s+e0ytgzdQfbT9JPah3y1XfQ01u8NNqU7DPviN60PlaATWoVdA90LhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeZgou3yuxrx0SauK7m3zqtxySsQwHwYDVR0j BBgwFoAUO2wBF4f0Uo2vruGbhAjZQF8DDmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzRjMmY2Mi1mNzM1LTRkNjAtOTIzNy05MjdlZmFkOWRhZDAvMC8zQjZDMDExNzg3 RjQ1MjhEQUZBRUUxOUI4NDA4RDk0MDVGMDMwRTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0I2QzAxMTc4N0Y0NTI4REFGQUVFMTlCODQwOEQ5NDA1RjAz MEU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM0YzJmNjItZjczNS00ZDYwLTky MzctOTI3ZWZhZDlkYWQwLzAvM0I2QzAxMTc4N0Y0NTI4REFGQUVFMTlCODQwOEQ5 NDA1RjAzMEU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBJ+cL6Us36F5NJJrzhm7EG63/hrUXmaTGo 9Q3rvF1AecFeJcPmGNjTt3FZj0o+0YTHgfwXsHp5gSsaYCpmKjAoeYeaZXTiMQ4q 5HJ6gKTKFWxiCc7E5K0hMxHs3dcGd5HjeefkC576B68HHwtD1fdeKAaHKhIRbxqC WubyTz7awNc10vkXbSygwfIWLje88mE5e5RlBTrDajqIUp//KGR4VMM1bA3YpG0l rSFprm84hulbaW2WPiuhmvCn/LpoeuNprl2M/mpYGrHkPznTWeoaY55TAJjtkkaQ UdBkJN0knC0K88GbXrJjG3Gu+VTM22Fk75Rz98EoyQba3f5xQVA= -----END CERTIFICATE-----Generated at Fri Mar 27 04:29:24 2026 by rpki-client