$ rpki-client -vvf repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft File: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft (raw, json) Hash identifier: 32W194161dPMoF2NhJIvb5jcpSmUZ4Ti+horLIEFq5U= Subject key identifier: AE:56:8A:CD:D3:5B:4D:07:57:04:EB:04:E9:00:57:2F:0E:FD:6D:24 Authority key identifier: 3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 Certificate issuer: /CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Certificate serial: 5585C35076E78DD450B8962BD0FD7B2DC99D2F9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft Manifest number: 022F Signing time: Wed 25 Mar 2026 08:20:05 +0000 Manifest this update: Wed 25 Mar 2026 08:15:05 +0000 Manifest next update: Sat 28 Mar 2026 13:44:05 +0000 Files and hashes: 1: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (hash: 2pmnEjpV6xKfD9pUClZgIAGRZy9Yz1iTckvB+l+9+U4=) 2: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl (hash: 0QmES3LCalL2d7+c8m1n1pvzTt7dz95fOprDC5UfqHY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:85:c3:50:76:e7:8d:d4:50:b8:96:2b:d0:fd:7b:2d:c9:9d:2f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Validity Not Before: Mar 25 08:15:05 2026 GMT Not After : Mar 28 13:44:05 2026 GMT Subject: CN=AE568ACDD35B4D075704EB04E900572F0EFD6D24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d4:57:50:cf:5c:06:60:24:8e:a1:d2:d3:17: 22:79:4c:88:46:f0:27:6c:c3:28:bc:29:80:11:a0: 68:6b:fb:14:cc:ed:52:c7:98:03:f1:96:a6:5a:95: 2c:1b:a9:aa:f2:3f:ec:8f:c8:2b:20:f6:db:24:8c: bd:7c:0b:d3:9b:1c:87:cd:16:11:2b:35:4d:24:0d: 45:2f:47:26:19:da:9e:4f:b9:82:76:14:0c:d2:b8: 2f:b3:12:96:66:47:9f:a3:5d:a1:11:77:ce:1d:58: 85:7c:53:1c:ff:8f:d3:99:98:4d:66:9a:39:32:65: b9:94:d4:35:6d:52:89:ba:f2:72:fb:32:59:c6:31: 8a:b9:f0:f2:4c:9f:33:c4:1d:33:a7:1b:a9:b0:af: bb:cb:c6:7c:9d:60:d6:c1:7f:90:9a:aa:29:1c:2b: da:5f:66:49:e4:82:60:28:89:81:b0:5a:70:a2:5e: 53:c5:79:30:4e:95:63:98:2e:c3:7d:58:16:e8:87: 52:30:7a:1f:88:d3:10:8b:14:d3:01:d4:35:01:32: 16:85:1a:bd:0c:68:35:95:7f:15:14:1b:eb:ac:67: 9b:a7:14:62:bc:83:6b:ac:ce:db:78:6b:07:75:5f: 56:b3:0f:46:25:b1:5b:cf:b1:b3:81:44:14:1b:b1: 44:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:56:8A:CD:D3:5B:4D:07:57:04:EB:04:E9:00:57:2F:0E:FD:6D:24 X509v3 Authority Key Identifier: keyid:3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:9e:90:0a:83:73:b7:77:b1:b6:50:4e:ea:79:f2:5d:ea:45: b7:17:f5:81:f7:22:ce:d9:ca:a0:1f:29:b2:c2:ee:95:be:d7: 7a:36:52:0d:40:88:7b:8c:27:15:ee:f0:7e:4b:5a:d4:18:a8: 36:3d:35:8d:e1:71:84:62:98:28:41:97:cf:6f:20:1d:e4:92: cd:c1:bb:e0:70:51:d6:3a:a0:56:d7:2c:42:f0:09:73:58:d3: b2:f1:83:72:ef:22:b1:14:8a:5a:37:65:f3:d9:05:4d:8e:13: 51:64:0c:dd:33:99:84:b7:43:3b:70:e0:d0:62:0a:36:d5:55: aa:12:4f:75:19:9f:f0:77:5e:55:2e:bf:3f:1a:51:18:48:ed: 0c:21:e6:56:df:31:f3:02:31:8a:6f:b5:2d:0d:68:23:39:b5: 34:ad:ee:75:0f:45:ac:80:1b:d6:94:00:19:82:6e:d7:ac:bb: 92:7b:cf:f4:94:dd:03:5e:33:a8:c7:aa:c4:dc:29:f6:b2:99: 6b:f1:28:99:d2:47:e7:3b:6f:ec:74:25:86:fb:7d:39:68:56: 85:e0:39:b2:15:6b:39:5a:4a:0a:bf:4d:90:a1:50:81:06:b8: d1:22:d6:fa:d1:1e:5e:7e:cb:90:a8:73:77:4e:c6:1f:8e:50: 1a:2b:df:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVYXDUHbnjdRQuJYr0P17LcmdL5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4 QjQzRjcyNzAeFw0yNjAzMjUwODE1MDVaFw0yNjAzMjgxMzQ0MDVaMDMxMTAvBgNV BAMTKEFFNTY4QUNERDM1QjREMDc1NzA0RUIwNEU5MDA1NzJGMEVGRDZEMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN1FdQz1wGYCSOodLTFyJ5TIhG 8Cdswyi8KYARoGhr+xTM7VLHmAPxlqZalSwbqaryP+yPyCsg9tskjL18C9ObHIfN FhErNU0kDUUvRyYZ2p5PuYJ2FAzSuC+zEpZmR5+jXaERd84dWIV8Uxz/j9OZmE1m mjkyZbmU1DVtUom68nL7MlnGMYq58PJMnzPEHTOnG6mwr7vLxnydYNbBf5Caqikc K9pfZknkgmAoiYGwWnCiXlPFeTBOlWOYLsN9WBboh1Iweh+I0xCLFNMB1DUBMhaF Gr0MaDWVfxUUG+usZ5unFGK8g2usztt4awd1X1azD0YlsVvPsbOBRBQbsURtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrlaKzdNbTQdXBOsE6QBXLw79bSQwHwYDVR0j BBgwFoAUPt3KQMPwz5ErADuxn5wD5ItD9ycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2RlOGVjZS05N2EyLTRiMGQtYTA2NC0xN2NlYTYxZjQ1Y2MvMC8zRUREQ0E0MEMz RjBDRjkxMkIwMDNCQjE5RjlDMDNFNDhCNDNGNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4QjQz RjcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNkZThlY2UtOTdhMi00YjBkLWEw NjQtMTdjZWE2MWY0NWNjLzAvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAz RTQ4QjQzRjcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKekAqDc7d3sbZQTup58l3qRbcX9YH3Is7Z yqAfKbLC7pW+13o2Ug1AiHuMJxXu8H5LWtQYqDY9NY3hcYRimChBl89vIB3kks3B u+BwUdY6oFbXLELwCXNY07Lxg3LvIrEUilo3ZfPZBU2OE1FkDN0zmYS3Qztw4NBi CjbVVaoST3UZn/B3XlUuvz8aURhI7Qwh5lbfMfMCMYpvtS0NaCM5tTSt7nUPRayA G9aUABmCbtesu5J7z/SU3QNeM6jHqsTcKfaymWvxKJnSR+c7b+x0JYb7fTloVoXg ObIVazlaSgq/TZChUIEGuNEi1vrRHl5+y5Coc3dOxh+OUBor31o= -----END CERTIFICATE-----Generated at Thu Mar 26 11:59:48 2026 by rpki-client