$ rpki-client -vvf repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft File: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft (raw, json) Hash identifier: 2EGIFQ/6UfuqiMmStP23VX6YYmBEUpXhyFQJXSb/1Aw= Subject key identifier: EB:C3:33:D0:09:1D:69:BC:1B:56:50:61:3D:D0:B5:FD:0C:40:E3:2A Authority key identifier: B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 Certificate issuer: /CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Certificate serial: 3C3406839F6DA819C475446097BB5B21DBFBE869 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft Manifest number: 021D Signing time: Tue 24 Mar 2026 09:10:46 +0000 Manifest this update: Tue 24 Mar 2026 09:05:46 +0000 Manifest next update: Fri 27 Mar 2026 12:50:46 +0000 Files and hashes: 1: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl (hash: eDTXtWWa4gvwdUOh6QwPG7GYxrlzZQfenIu99yPBMP8=) 2: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: cVFaX5vsSnlCiBXiYi7VFBsU8ifDtbmqTWAW0Jfdf/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:34:06:83:9f:6d:a8:19:c4:75:44:60:97:bb:5b:21:db:fb:e8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Validity Not Before: Mar 24 09:05:46 2026 GMT Not After : Mar 27 12:50:46 2026 GMT Subject: CN=EBC333D0091D69BC1B5650613DD0B5FD0C40E32A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1a:a9:c1:35:d0:bf:e2:24:11:b0:ea:bd:b0: d9:d8:0f:86:e1:c7:87:e9:de:c0:a0:1f:69:98:11: 42:be:79:c1:c4:82:e5:c3:ec:2c:39:8b:a7:a0:9c: 4e:8f:f2:01:4b:2b:64:88:9b:9d:f9:35:7b:7c:75: 3b:61:99:45:6e:8c:e4:cb:5c:d1:99:ec:16:4a:c9: 97:dd:34:75:f0:65:e8:0e:d2:a5:0e:3c:a6:d3:48: b7:46:93:3b:2b:b9:2c:4f:1f:15:22:d2:b5:3e:c3: 5d:f9:8a:ce:08:86:23:f1:59:a5:e5:79:43:c6:1a: 1f:7e:3e:4b:22:56:3a:ce:31:34:bc:1f:ad:3a:23: e2:72:d8:30:ed:ae:3a:10:9e:58:70:24:8f:65:12: 62:06:ac:62:6a:72:b8:72:27:cf:6b:2d:4b:b7:e4: a1:f3:26:36:a6:86:31:7b:df:cb:87:78:68:00:9c: 1f:5c:be:5b:97:f7:4f:55:46:19:9a:bb:51:89:e4: a1:89:10:11:3f:82:62:36:e5:bf:f4:00:e1:57:ca: 89:84:21:6a:80:7a:8c:d5:22:61:c4:20:fa:a9:fa: 1d:64:52:a9:94:c8:a0:32:a5:6a:c8:b5:9a:c3:34: f6:27:c3:e9:4b:10:6f:36:04:4c:d3:4f:e3:91:ee: 74:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C3:33:D0:09:1D:69:BC:1B:56:50:61:3D:D0:B5:FD:0C:40:E3:2A X509v3 Authority Key Identifier: keyid:B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:90:f9:da:73:34:36:1a:34:da:92:b4:65:f4:7c:cf:8c:a0: e2:15:de:88:a5:84:fb:0a:73:f2:83:60:8b:3e:58:1a:39:7e: d8:02:94:cc:d8:b2:b9:2c:9a:f9:11:2c:00:43:fb:8c:17:8a: 61:5b:f9:ff:e4:01:c4:b3:d2:a0:51:d5:ca:3f:16:16:be:cb: a8:68:d8:f0:02:5b:8e:82:40:a0:b1:ee:95:ad:5b:d1:a5:9a: cd:09:91:1a:2c:78:48:cb:d3:a4:5a:0e:44:bc:b3:40:5a:1a: ae:d6:5b:2c:1c:fd:ac:49:04:c8:cd:bf:aa:0a:28:d0:6b:c7: 24:c2:c6:02:e8:62:77:7f:e8:6f:8b:59:a8:1e:4a:bc:02:92: 27:c6:6a:dc:0b:cc:2b:24:16:71:f1:53:30:61:83:00:85:ff: a7:f1:d8:fa:0e:08:9e:bf:5b:a0:88:f1:02:c5:4d:07:d4:43: 2e:d2:a8:f3:6b:f2:86:21:b3:31:0a:5a:45:f0:13:2b:6d:16: 4d:cd:14:04:72:3e:b7:de:95:e8:a4:16:f0:cf:24:aa:9e:ef: 18:17:83:d5:d9:e9:8f:18:18:53:57:a7:31:36:64:57:b4:89: b3:7a:db:36:cf:76:b3:9b:e5:d2:17:0b:b2:2e:7a:f9:8a:db: 02:ab:55:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPDQGg59tqBnEdURgl7tbIdv76GkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0 MUM3QkE0MjAeFw0yNjAzMjQwOTA1NDZaFw0yNjAzMjcxMjUwNDZaMDMxMTAvBgNV BAMTKEVCQzMzM0QwMDkxRDY5QkMxQjU2NTA2MTNERDBCNUZEMEM0MEUzMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0GqnBNdC/4iQRsOq9sNnYD4bh x4fp3sCgH2mYEUK+ecHEguXD7Cw5i6egnE6P8gFLK2SIm535NXt8dTthmUVujOTL XNGZ7BZKyZfdNHXwZegO0qUOPKbTSLdGkzsruSxPHxUi0rU+w135is4IhiPxWaXl eUPGGh9+PksiVjrOMTS8H606I+Jy2DDtrjoQnlhwJI9lEmIGrGJqcrhyJ89rLUu3 5KHzJjamhjF738uHeGgAnB9cvluX909VRhmau1GJ5KGJEBE/gmI25b/0AOFXyomE IWqAeozVImHEIPqp+h1kUqmUyKAypWrItZrDNPYnw+lLEG82BEzTT+OR7nTfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU68Mz0AkdabwbVlBhPdC1/QxA4yowHwYDVR0j BBgwFoAUs7Oh3uCeQHvGzgjvx80rr0HHukIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTRjNjFhYy03YjVjLTRkOTQtYTM2NS1jNDAyMWMxNzA5YzcvMC9CM0IzQTFERUUw OUU0MDdCQzZDRTA4RUZDN0NEMkJBRjQxQzdCQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0MUM3 QkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU0YzYxYWMtN2I1Yy00ZDk0LWEz NjUtYzQwMjFjMTcwOWM3LzAvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJC QUY0MUM3QkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImQ+dpzNDYaNNqStGX0fM+MoOIV3oilhPsK c/KDYIs+WBo5ftgClMzYsrksmvkRLABD+4wXimFb+f/kAcSz0qBR1co/Fha+y6ho 2PACW46CQKCx7pWtW9Glms0JkRoseEjL06RaDkS8s0BaGq7WWywc/axJBMjNv6oK KNBrxyTCxgLoYnd/6G+LWageSrwCkifGatwLzCskFnHxUzBhgwCF/6fx2PoOCJ6/ W6CI8QLFTQfUQy7SqPNr8oYhszEKWkXwEyttFk3NFARyPrfeleikFvDPJKqe7xgX g9XZ6Y8YGFNXpzE2ZFe0ibN62zbPdrOb5dIXC7IuevmK2wKrVYE= -----END CERTIFICATE-----Generated at Thu Mar 26 08:53:50 2026 by rpki-client