$ rpki-client -vvf repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft File: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft (raw, json) Hash identifier: ourRr29Q+YyjoTyOYnwOa3eUeGvDXM0S8RXq1K3jV9c= Subject key identifier: BA:D4:2F:E6:D4:F6:1A:DA:89:4C:01:06:5A:7F:AD:D8:21:A4:B6:4A Authority key identifier: 3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A Certificate issuer: /CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Certificate serial: 1AF566B4DE57E7A19032DB86BFCA50FE5E3F3192 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft Manifest number: 0112 Signing time: Thu 26 Mar 2026 04:04:23 +0000 Manifest this update: Thu 26 Mar 2026 03:59:23 +0000 Manifest next update: Sun 29 Mar 2026 07:30:23 +0000 Files and hashes: 1: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl (hash: jPZlLIA8yLi7nH8J4iyNkHqRasu1HvU37k7lvkWg4Po=) 2: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (hash: NaC6OjHEbkMsjBRQmR8Tqmru4zPhSmsJN/hiJNkC18Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f5:66:b4:de:57:e7:a1:90:32:db:86:bf:ca:50:fe:5e:3f:31:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Validity Not Before: Mar 26 03:59:23 2026 GMT Not After : Mar 29 07:30:23 2026 GMT Subject: CN=BAD42FE6D4F61ADA894C01065A7FADD821A4B64A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:82:a0:68:9f:fb:7b:68:2a:2e:3c:6b:2c: e6:ec:2d:b7:f6:74:79:fa:04:a9:e1:45:1b:f4:c5: 4f:54:5f:d7:0a:6d:85:c2:e5:5f:15:d9:f9:72:19: f6:8b:fe:52:4b:84:51:0e:d5:59:07:b3:55:d3:5a: 16:dc:69:57:14:30:80:b6:ba:b1:b0:a9:df:ea:ae: f4:bc:8a:52:c9:01:80:97:cc:d7:12:ae:79:ad:36: f0:2c:fe:cc:14:07:37:c4:8d:39:a1:f4:8b:b0:5c: 86:1f:c6:97:0a:96:d3:10:e2:18:cc:d8:18:40:3d: 6d:1b:3f:6c:24:b3:23:04:dd:31:c0:14:61:6f:9e: 64:19:1e:54:d5:4d:07:db:e8:a0:2f:ef:ed:a0:dd: 6c:9e:5d:c8:b4:a4:c8:f8:98:24:28:51:e5:6e:fb: 28:fc:88:e9:eb:60:f5:60:6b:fb:5c:c6:8c:71:5e: 07:3a:c3:64:02:7e:95:82:a5:78:45:0d:e9:d8:ed: f8:0d:f9:a1:e9:50:c9:32:f2:47:3c:8e:86:87:1f: fb:69:36:5a:e1:48:f1:31:7a:81:a8:7c:bb:4f:41: eb:d6:75:e1:37:e0:3a:8d:d7:b7:c4:be:5e:f9:76: ff:da:1b:1b:08:a5:be:c5:b7:87:1e:7f:63:2e:2d: f0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D4:2F:E6:D4:F6:1A:DA:89:4C:01:06:5A:7F:AD:D8:21:A4:B6:4A X509v3 Authority Key Identifier: keyid:3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:d7:6c:76:9e:32:02:a8:ef:d5:d1:32:44:d2:29:8a:44:52: dd:db:08:6e:74:fa:56:2e:8e:07:0f:1e:69:ad:d6:ef:59:28: 19:95:b9:28:66:1c:36:a8:1b:26:c9:4f:1d:a0:01:9c:04:7e: a8:44:84:ab:1e:77:0b:f8:63:25:ef:f0:4a:f9:02:8d:fd:a2: 29:2d:bf:29:d1:d6:8a:40:c5:ee:81:a6:df:fc:5b:35:23:f9: c1:9a:d8:a7:03:02:44:c4:56:03:bb:f0:b4:87:f4:28:9a:a2: 6f:5c:91:af:81:a7:4e:b5:0f:a1:89:ae:3b:23:a8:bc:54:a6: b9:e9:0d:7f:2d:a5:7d:47:7f:05:02:f2:e7:ca:ed:99:6e:d3: a1:41:85:30:f9:a3:4e:72:6b:29:2e:14:ef:e6:cc:de:7a:18: 11:81:f8:15:7b:59:cf:80:a7:b4:f3:61:d8:42:63:ac:dc:67: e4:f8:07:92:8b:03:1b:0e:ab:69:6b:dc:80:c1:a4:6c:ec:d3: 27:93:46:6d:c9:12:9d:2e:ea:85:17:92:d6:47:5e:8e:dc:66: 07:db:c8:18:ba:d2:2b:b7:a8:d9:c3:c2:40:cb:f6:ef:c7:f5: 5a:9d:a8:aa:21:b4:09:d3:7c:39:d6:f8:a5:10:8f:2b:e1:df: ae:9d:b8:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGvVmtN5X56GQMtuGv8pQ/l4/MZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVG ODlCQUI5QTAeFw0yNjAzMjYwMzU5MjNaFw0yNjAzMjkwNzMwMjNaMDMxMTAvBgNV BAMTKEJBRDQyRkU2RDRGNjFBREE4OTRDMDEwNjVBN0ZBREQ4MjFBNEI2NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8w4KgaJ/7e2gqLjxrLObsLbf2 dHn6BKnhRRv0xU9UX9cKbYXC5V8V2flyGfaL/lJLhFEO1VkHs1XTWhbcaVcUMIC2 urGwqd/qrvS8ilLJAYCXzNcSrnmtNvAs/swUBzfEjTmh9IuwXIYfxpcKltMQ4hjM 2BhAPW0bP2wksyME3THAFGFvnmQZHlTVTQfb6KAv7+2g3WyeXci0pMj4mCQoUeVu +yj8iOnrYPVga/tcxoxxXgc6w2QCfpWCpXhFDenY7fgN+aHpUMky8kc8joaHH/tp NlrhSPExeoGofLtPQevWdeE34DqN17fEvl75dv/aGxsIpb7Ft4cef2MuLfCvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUutQv5tT2GtqJTAEGWn+t2CGktkowHwYDVR0j BBgwFoAUPdzEykO0kvQMjLBuSZNOxfibq5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWI1MzQyMC04YzU5LTQ5Y2YtYjNiMi1mNTVlOTg5MGRkY2QvMC8zRERDQzRDQTQz QjQ5MkY0MEM4Q0IwNkU0OTkzNEVDNUY4OUJBQjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVGODlC QUI5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliNTM0MjAtOGM1OS00OWNmLWIz YjItZjU1ZTk4OTBkZGNkLzAvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRF QzVGODlCQUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnXbHaeMgKo79XRMkTSKYpEUt3bCG50+lYu jgcPHmmt1u9ZKBmVuShmHDaoGybJTx2gAZwEfqhEhKsedwv4YyXv8Er5Ao39oikt vynR1opAxe6Bpt/8WzUj+cGa2KcDAkTEVgO78LSH9Ciaom9cka+Bp061D6GJrjsj qLxUprnpDX8tpX1HfwUC8ufK7Zlu06FBhTD5o05yaykuFO/mzN56GBGB+BV7Wc+A p7TzYdhCY6zcZ+T4B5KLAxsOq2lr3IDBpGzs0yeTRm3JEp0u6oUXktZHXo7cZgfb yBi60iu3qNnDwkDL9u/H9VqdqKohtAnTfDnW+KUQjyvh366duFk= -----END CERTIFICATE-----Generated at Thu Mar 26 20:37:54 2026 by rpki-client