$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft File: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json) Hash identifier: 1bxnGdfr5jqvXXcF7eW7gMikTiqanDG6ffokEgV+j4o= Subject key identifier: A0:0B:17:CB:65:87:62:3A:46:51:37:E5:6E:AD:55:D5:30:D3:C2:EB Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Certificate serial: 09F2A35E36C2E36909F6C59AD21D725323784481 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft Manifest number: 0289 Signing time: Wed 25 Mar 2026 21:32:24 +0000 Manifest this update: Wed 25 Mar 2026 21:27:24 +0000 Manifest next update: Sun 29 Mar 2026 05:47:24 +0000 Files and hashes: 1: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: ddstTJPoxiOtir1AiT0YCQtVICJiSUtnjWbs+O11p0Q=) 2: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: FWaIS2C5y+tF+eXrrfhUKvMiaO2hbKHJ6PXu+XjlFjU=) 3: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: naME29BjJNXWcG5xS5OYZKvtjsmmITu0eSf0OkwWWqI=) 4: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: KM8HCAE941ny+NeclcPdlUg9VIqsSih6MjHoa5IqXb8=) 5: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: QBM9H9rd8+lS4gn1TV/zjjSpwBwL7sSfYx4yVL1I50s=) 6: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: oP5w04R+DVBIXz7VN32/pUudJby5Bdnn9OzpJHzqMrY=) 7: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: cJFNfS5UPmik4Tu/P1Y8olkkeC16bO4wOvGv71A6WXE=) 8: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: /v/t0LVvwP8ItAgvAEV4d3ird2OFydIuyNvk7Hjv9rU=) 9: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: znbfpwqo/RqJTtKokVQJprWVfIE6ZeyWhe8h0U97wlw=) 10: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: wr6UHliebQd7p9YyHhYQ444oA44R+pMzEhtNFNELTlg=) 11: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 7h+0gopoSFJ2M48QEyz8CL99eJtVxfcZjzTpUAYVTZo=) 12: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sYsKqli8EUEzTvSQXavM3oM1AVTdmnNeXY5Ib9nTkXk=) 13: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: C6l6zdsNHMzfA4VroXv38wYjaYdlZyMXfkyZpHinjgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:f2:a3:5e:36:c2:e3:69:09:f6:c5:9a:d2:1d:72:53:23:78:44:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Validity Not Before: Mar 25 21:27:24 2026 GMT Not After : Mar 29 05:47:24 2026 GMT Subject: CN=A00B17CB6587623A465137E56EAD55D530D3C2EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9c:7c:c8:d5:25:83:68:d4:89:ac:29:34:21: 3e:99:ad:f9:4a:c8:43:6b:59:63:84:5b:f8:f1:9f: 7c:52:7f:9d:c5:f7:7b:b7:45:1e:45:12:1b:7a:55: 2d:25:b9:b4:a2:e3:48:3c:12:ad:9b:ef:64:2c:98: 46:32:7d:b3:a6:34:bd:23:4d:c4:c9:a9:02:ac:1d: 65:cb:56:f7:b3:35:b7:1d:51:85:ce:fe:5b:c3:d1: 0a:85:3f:02:24:7f:d5:a3:51:08:41:74:77:8c:6b: a6:84:b5:76:b9:b1:83:0c:6a:aa:50:1f:a8:f8:34: c2:44:0d:48:ae:db:f5:23:9c:03:d6:34:51:5f:45: f8:cd:82:77:76:ae:f8:fa:20:57:dc:9b:4e:65:81: 11:80:f7:8c:7b:9e:8d:56:66:7d:cf:31:1e:86:3f: bb:3c:97:42:8c:fd:bf:85:6f:8a:0f:21:85:8b:c7: 76:47:1b:e5:32:ad:4f:ff:ac:da:5b:4c:f2:36:5d: 58:8f:60:7a:72:76:5b:51:aa:eb:30:0f:1a:48:b5: b8:b7:0b:6f:38:79:1d:99:e9:1d:46:8a:7c:85:3b: 17:c4:18:d7:9b:d5:c8:f2:29:5b:f5:d8:83:44:9e: 6a:8b:0f:0b:ad:a9:a2:d0:e9:57:9d:2c:15:25:0e: 26:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0B:17:CB:65:87:62:3A:46:51:37:E5:6E:AD:55:D5:30:D3:C2:EB X509v3 Authority Key Identifier: keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b7:f3:07:cd:c8:64:f6:ca:1a:70:a1:c9:80:a5:9b:bf:1f: 3e:e2:eb:b7:43:aa:f8:6a:8b:d4:02:f3:e0:fd:e7:b2:dc:ce: 4f:1e:16:01:74:cc:75:2c:46:e7:35:4b:1b:85:1a:38:15:c4: 4a:20:b4:ed:d0:fc:0f:ee:be:91:d2:fd:81:3f:84:cd:bf:3c: ef:4e:52:9c:36:99:80:82:a7:62:e0:ae:1f:79:82:77:0f:24: 74:a7:e9:6c:79:a2:36:2e:38:ba:c1:dc:a5:8a:61:53:93:71: b2:b8:fb:60:c9:9e:39:7a:42:a0:81:f1:04:94:d3:68:4b:79: a0:df:62:2f:6f:d3:59:f3:50:b3:d9:af:53:c9:70:0f:65:82: ca:85:5a:40:72:8f:4b:50:46:e7:46:6f:c1:46:1c:b0:70:91: 3b:06:b5:19:4b:aa:5c:ce:3f:0a:7c:c4:31:4c:74:52:54:fc: 64:f4:b9:a9:d7:30:10:1c:d9:33:dd:8a:d4:9e:7e:50:9e:ac: 99:15:ce:f9:47:79:ef:7a:75:56:ad:bf:a9:aa:1b:74:0a:63: b5:35:b6:cd:52:a6:c7:18:4e:5f:44:9e:8a:fa:0f:8e:a6:a1: bd:a4:f4:d5:24:90:28:62:6e:e0:fa:c3:53:49:b3:fb:87:03: 1e:14:dc:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCfKjXjbC42kJ9sWa0h1yUyN4RIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG QzhBN0U5NzAeFw0yNjAzMjUyMTI3MjRaFw0yNjAzMjkwNTQ3MjRaMDMxMTAvBgNV BAMTKEEwMEIxN0NCNjU4NzYyM0E0NjUxMzdFNTZFQUQ1NUQ1MzBEM0MyRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWnHzI1SWDaNSJrCk0IT6ZrflK yENrWWOEW/jxn3xSf53F93u3RR5FEht6VS0lubSi40g8Eq2b72QsmEYyfbOmNL0j TcTJqQKsHWXLVvezNbcdUYXO/lvD0QqFPwIkf9WjUQhBdHeMa6aEtXa5sYMMaqpQ H6j4NMJEDUiu2/UjnAPWNFFfRfjNgnd2rvj6IFfcm05lgRGA94x7no1WZn3PMR6G P7s8l0KM/b+Fb4oPIYWLx3ZHG+UyrU//rNpbTPI2XViPYHpydltRquswDxpItbi3 C284eR2Z6R1GinyFOxfEGNeb1cjyKVv12INEnmqLDwutqaLQ6VedLBUlDib7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoAsXy2WHYjpGUTflbq1V1TDTwuswHwYDVR0j BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB N0U5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MTlhZWItNWM1Ni00Y2IzLTk0 YTAtMGY0MDBlYTZhMzc1LzAvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUz QUFGQzhBN0U5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+38wfNyGT2yhpwocmApZu/Hz7i67dDqvhq i9QC8+D957Lczk8eFgF0zHUsRuc1SxuFGjgVxEogtO3Q/A/uvpHS/YE/hM2/PO9O Upw2mYCCp2Lgrh95gncPJHSn6Wx5ojYuOLrB3KWKYVOTcbK4+2DJnjl6QqCB8QSU 02hLeaDfYi9v01nzULPZr1PJcA9lgsqFWkByj0tQRudGb8FGHLBwkTsGtRlLqlzO Pwp8xDFMdFJU/GT0uanXMBAc2TPditSeflCerJkVzvlHee96dVatv6mqG3QKY7U1 ts1SpscYTl9Enor6D46mob2k9NUkkChibuD6w1NJs/uHAx4U3LI= -----END CERTIFICATE-----Generated at Thu Mar 26 08:05:57 2026 by rpki-client