$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: Cwki+ivGoMm1Ek1ttI+jaFWCoNW+R4Oy/RHFqBPEQHs= Subject key identifier: 11:86:73:86:40:90:19:EA:89:A8:4F:13:F1:AF:DF:DD:A5:00:E3:D8 Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 0AA0ADB6D2CED4F2DD6FB26B9615E1A0737AF0E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 030B Signing time: Thu 26 Mar 2026 02:11:29 +0000 Manifest this update: Thu 26 Mar 2026 02:06:29 +0000 Manifest next update: Sun 29 Mar 2026 12:27:29 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: CJkOUNGPBDyRG5RvldlavLiCh3Zmr4gMyh1Fd3r5428=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a0:ad:b6:d2:ce:d4:f2:dd:6f:b2:6b:96:15:e1:a0:73:7a:f0:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Mar 26 02:06:29 2026 GMT Not After : Mar 29 12:27:29 2026 GMT Subject: CN=11867386409019EA89A84F13F1AFDFDDA500E3D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:01:fb:25:7d:32:01:e4:71:24:0b:ae:5e:06: 4f:4b:46:f1:9a:ea:25:fb:a8:14:ab:a0:ab:1d:d4: f5:8c:0f:f6:74:ec:93:73:c2:1f:3a:05:77:9a:b0: f0:dd:6e:b0:a5:cc:fb:57:ad:23:4d:21:02:6b:d4: d6:a9:ef:c6:4a:42:7a:0f:8e:1d:70:2d:53:6e:dd: 02:cc:5d:92:2c:a2:9d:d2:38:a2:70:8a:86:f0:18: fe:1f:ce:dc:74:c1:62:40:04:2b:fe:8c:94:b4:84: c6:80:fe:db:80:f7:57:1a:41:55:63:e6:1a:0b:57: 4d:e7:7b:b1:d7:5d:63:c5:dd:b1:c9:47:4e:71:10: e5:50:d2:d5:34:1b:37:fb:7c:5d:16:43:24:a7:76: 47:18:f4:99:c0:3d:ab:75:b3:12:68:ab:f9:d6:35: c9:f7:a0:1f:b8:00:d9:4a:16:0b:5b:6b:b2:65:d2: 94:6a:cd:c5:88:52:6b:ad:5d:fc:8f:dc:bf:82:8d: e3:d8:93:8c:bc:cf:06:2e:bd:af:09:48:19:0b:6d: 70:83:61:22:32:9f:b5:53:1f:8f:d7:f7:a7:b8:13: 62:90:50:6f:de:85:50:2f:14:3b:90:c3:98:09:05: 7d:98:10:ab:d0:2f:b8:68:2d:16:43:20:31:f3:33: 63:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:86:73:86:40:90:19:EA:89:A8:4F:13:F1:AF:DF:DD:A5:00:E3:D8 X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:66:29:ee:49:eb:cf:a9:c4:9e:70:ae:26:93:14:e5:d3:ad: c8:b3:d2:0f:d8:1b:9e:9d:fa:a2:2e:34:69:36:30:f1:36:46: 81:80:fb:05:73:94:06:13:91:8c:d1:20:93:4b:03:74:b8:94: 35:45:d5:df:16:af:84:5d:fc:82:5e:61:0e:57:be:c3:f7:6e: c1:ec:3a:7d:8c:a5:7a:cf:de:11:1d:b9:a7:4e:23:58:f9:1b: aa:8f:ef:05:fa:87:d3:28:c9:6a:ae:44:dd:1f:89:39:af:e4: 2e:42:9d:be:66:69:7a:31:b5:89:91:70:8e:cf:28:b6:f5:55: af:c5:06:db:af:18:2b:e0:6b:d3:83:ad:b7:09:1d:4b:42:a6: e2:1b:e8:4f:ed:d1:05:6c:65:c6:93:73:db:d7:45:95:5c:31: e8:b1:74:6c:18:43:b4:96:e9:eb:fe:f6:e5:5f:d5:7b:7a:fe: ee:7a:56:8a:32:9a:b0:41:68:5e:44:4f:ac:bc:b5:f2:4d:58: 5f:47:da:ea:80:b7:63:71:92:0b:f6:a2:8e:20:59:c5:fe:80: c6:31:8b:2a:f3:eb:6f:a8:fd:d5:b3:ab:bc:3c:bd:5c:81:f4: 26:13:df:92:06:ae:dd:43:83:43:00:33:7b:45:9e:9e:c7:8b: 56:ce:00:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqCtttLO1PLdb7JrlhXhoHN68OYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNjAzMjYwMjA2MjlaFw0yNjAzMjkxMjI3MjlaMDMxMTAvBgNV BAMTKDExODY3Mzg2NDA5MDE5RUE4OUE4NEYxM0YxQUZERkREQTUwMEUzRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlAfslfTIB5HEkC65eBk9LRvGa 6iX7qBSroKsd1PWMD/Z07JNzwh86BXeasPDdbrClzPtXrSNNIQJr1Nap78ZKQnoP jh1wLVNu3QLMXZIsop3SOKJwiobwGP4fztx0wWJABCv+jJS0hMaA/tuA91caQVVj 5hoLV03ne7HXXWPF3bHJR05xEOVQ0tU0Gzf7fF0WQySndkcY9JnAPat1sxJoq/nW Ncn3oB+4ANlKFgtba7Jl0pRqzcWIUmutXfyP3L+CjePYk4y8zwYuva8JSBkLbXCD YSIyn7VTH4/X96e4E2KQUG/ehVAvFDuQw5gJBX2YEKvQL7hoLRZDIDHzM2P5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEYZzhkCQGeqJqE8T8a/f3aUA49gwHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxmKe5J68+pxJ5wriaTFOXTrciz0g/YG56d +qIuNGk2MPE2RoGA+wVzlAYTkYzRIJNLA3S4lDVF1d8Wr4Rd/IJeYQ5XvsP3bsHs On2MpXrP3hEduadOI1j5G6qP7wX6h9MoyWquRN0fiTmv5C5Cnb5maXoxtYmRcI7P KLb1Va/FBtuvGCvga9ODrbcJHUtCpuIb6E/t0QVsZcaTc9vXRZVcMeixdGwYQ7SW 6ev+9uVf1Xt6/u56VooymrBBaF5ET6y8tfJNWF9H2uqAt2Nxkgv2oo4gWcX+gMYx iyrz62+o/dWzq7w8vVyB9CYT35IGrt1Dg0MAM3tFnp7Hi1bOAHo= -----END CERTIFICATE-----Generated at Thu Mar 26 14:45:33 2026 by rpki-client