$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: O+q0ibbp+w0SlirVcv6KQmZpTBboNQm/2+583g61Z+c= Subject key identifier: 92:B4:F4:D7:61:A5:EB:96:32:58:55:B6:64:75:5C:E4:5D:D7:2A:11 Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 24F2FE5579243EAD540839F99A23B3A6FCA431CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: 0153 Signing time: Thu 26 Mar 2026 06:22:21 +0000 Manifest this update: Thu 26 Mar 2026 06:17:21 +0000 Manifest next update: Sun 29 Mar 2026 12:36:21 +0000 Files and hashes: 1: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: jqfTRowotRE9toTW7s6XxuVzWTLvd0wPa0s2vyImrss=) 2: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: uS8yEmQRQCr9qMQZMpr9goqnX8Iy0F0zLNW+55v/i1g=) 3: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: /uvYv6HXm75DxIAvpZkO8f6t2HrqKvSXY9kmVPmsLBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f2:fe:55:79:24:3e:ad:54:08:39:f9:9a:23:b3:a6:fc:a4:31:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Mar 26 06:17:21 2026 GMT Not After : Mar 29 12:36:21 2026 GMT Subject: CN=92B4F4D761A5EB96325855B664755CE45DD72A11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:aa:41:94:17:ab:53:91:9f:03:07:6b:3f:4b: 2e:9a:6f:6f:7b:63:67:dc:fe:07:40:2b:92:a3:ff: 1c:3e:5f:ee:70:14:a5:e6:89:2b:f3:40:ff:eb:23: 0e:d7:55:4d:f6:0c:c2:fa:60:b2:ad:52:e9:8f:cc: f9:ee:c1:c3:89:37:6e:37:c4:3d:e1:44:48:dc:86: 30:42:a9:34:34:08:90:67:00:5c:90:66:86:ac:2d: f9:43:7e:60:99:65:3f:c5:46:34:ae:84:ce:bb:8c: cb:9b:87:4a:ea:72:21:00:82:f0:4a:7f:57:1f:6a: 84:69:5e:78:c6:ec:11:17:52:dc:80:dd:45:23:3b: 7c:55:54:e0:97:5f:03:9a:4d:61:78:b6:65:27:f8: b1:84:f7:a6:d9:7b:28:2e:2f:f8:aa:74:e7:f9:7d: 0e:1d:fc:7a:9d:19:46:54:ec:80:f8:f2:a3:2c:f3: 9f:61:e6:82:6d:1d:e7:69:1e:0e:57:da:83:ea:a5: 46:77:58:d6:6b:56:b2:4b:30:43:86:0e:5f:da:a0: 3d:b7:f9:e8:7a:50:bc:63:c1:9d:bb:7f:9a:b0:6e: 1d:c2:df:c7:d2:b4:96:cf:8a:31:96:40:18:a0:1c: e4:28:37:aa:22:2e:04:fe:9c:b6:e0:a4:09:1f:21: 07:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B4:F4:D7:61:A5:EB:96:32:58:55:B6:64:75:5C:E4:5D:D7:2A:11 X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d7:fc:6a:e6:fa:e5:a1:1f:7b:41:56:3c:b3:7a:08:da:10: 0b:f1:6b:3f:22:c4:0c:54:d4:57:ac:9a:00:50:fb:b5:23:4a: a4:2d:7a:88:fb:b0:0a:f5:b9:50:a2:a5:6c:e7:23:79:a8:ab: 9d:0e:04:f6:7a:9e:95:e5:f2:35:bf:21:3d:49:1b:22:16:e9: 00:40:d4:9c:99:62:a1:14:be:36:c7:a8:7c:04:9f:7d:30:af: ae:1a:25:4a:ed:d7:39:6f:18:1d:ec:9d:65:e6:50:00:fa:67: 93:74:0e:e4:c7:28:aa:47:4d:de:03:c4:f8:f3:77:a9:8a:c0: 5e:5d:2d:99:1a:db:cb:12:09:ca:49:39:53:ca:fb:af:89:aa: f3:5e:f3:3b:ab:78:01:32:57:4c:ce:b5:21:35:b4:30:26:7a: 6c:eb:70:36:13:9d:82:6a:a4:ab:28:b9:f8:7b:43:e3:11:30: 4b:29:98:66:3c:c8:d2:23:54:3b:83:3e:01:6b:54:c8:2c:e9: 97:81:43:21:ba:9c:68:d2:8f:1b:46:fc:a2:33:9a:9d:c0:67: d0:c8:98:25:8f:92:c2:7d:35:7e:8e:05:8e:b8:fe:33:18:ca: cc:90:09:ba:98:6e:41:10:d8:bf:2b:4c:69:3f:95:63:87:f9: 04:f9:42:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJPL+VXkkPq1UCDn5miOzpvykMc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNjAzMjYwNjE3MjFaFw0yNjAzMjkxMjM2MjFaMDMxMTAvBgNV BAMTKDkyQjRGNEQ3NjFBNUVCOTYzMjU4NTVCNjY0NzU1Q0U0NURENzJBMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvqkGUF6tTkZ8DB2s/Sy6ab297 Y2fc/gdAK5Kj/xw+X+5wFKXmiSvzQP/rIw7XVU32DML6YLKtUumPzPnuwcOJN243 xD3hREjchjBCqTQ0CJBnAFyQZoasLflDfmCZZT/FRjSuhM67jMubh0rqciEAgvBK f1cfaoRpXnjG7BEXUtyA3UUjO3xVVOCXXwOaTWF4tmUn+LGE96bZeyguL/iqdOf5 fQ4d/HqdGUZU7ID48qMs859h5oJtHedpHg5X2oPqpUZ3WNZrVrJLMEOGDl/aoD23 +eh6ULxjwZ27f5qwbh3C38fStJbPijGWQBigHOQoN6oiLgT+nLbgpAkfIQfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkrT012Gl65YyWFW2ZHVc5F3XKhEwHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDX/Grm+uWhH3tBVjyzegjaEAvxaz8ixAxU 1FesmgBQ+7UjSqQteoj7sAr1uVCipWznI3moq50OBPZ6npXl8jW/IT1JGyIW6QBA 1JyZYqEUvjbHqHwEn30wr64aJUrt1zlvGB3snWXmUAD6Z5N0DuTHKKpHTd4DxPjz d6mKwF5dLZka28sSCcpJOVPK+6+JqvNe8zureAEyV0zOtSE1tDAmemzrcDYTnYJq pKsoufh7Q+MRMEspmGY8yNIjVDuDPgFrVMgs6ZeBQyG6nGjSjxtG/KIzmp3AZ9DI mCWPksJ9NX6OBY64/jMYysyQCbqYbkEQ2L8rTGk/lWOH+QT5Qns= -----END CERTIFICATE-----Generated at Thu Mar 26 23:26:24 2026 by rpki-client