$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft File: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft (raw, json) Hash identifier: rlz32kTmaSEQRY0VlwPK5x1mBGDR3h+TDt52f9z1gO8= Subject key identifier: 13:25:A1:6A:69:D9:09:16:62:95:72:62:59:48:47:23:53:99:50:52 Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Certificate serial: 1BE3150E5F9CD9A0AD0CD8DBC195AF7F91A1DA62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft Manifest number: 025E Signing time: Fri 27 Mar 2026 04:01:46 +0000 Manifest this update: Fri 27 Mar 2026 03:56:46 +0000 Manifest next update: Mon 30 Mar 2026 12:29:46 +0000 Files and hashes: 1: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: Zm0hpNa3KzjUY5ugGNSToALOnFgESrmbArm+FZK1Qzs=) 2: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl (hash: sDTmDl8MFKBmdDSzObvgyF5r4GFsJK/p6PCOX7YoUgA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 08:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e3:15:0e:5f:9c:d9:a0:ad:0c:d8:db:c1:95:af:7f:91:a1:da:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Validity Not Before: Mar 27 03:56:46 2026 GMT Not After : Mar 30 12:29:46 2026 GMT Subject: CN=1325A16A69D90916629572625948472353995052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1d:3d:1b:23:23:39:9e:af:d1:e8:1a:ec:63: 24:d5:c2:af:97:d2:84:a2:52:0f:41:95:7c:b1:66: 3d:29:e0:02:07:61:72:58:fb:ac:d2:f8:15:a3:40: e9:e7:de:ce:7d:ac:41:75:fb:1d:9a:f6:a2:2b:ab: 80:f2:66:c1:28:a9:10:0d:70:d7:c6:8c:79:3f:69: 92:2c:f2:10:ac:60:d4:99:75:c5:34:a5:88:d2:f9: a4:a8:b1:42:d9:48:27:b8:ad:c7:9e:15:92:63:fa: 52:b0:40:3d:36:3f:f5:4a:af:af:6f:06:c1:87:a8: 5c:3c:54:ac:e6:df:da:e0:0a:58:1f:09:40:3a:44: de:71:b4:89:88:4c:54:68:97:d2:a0:33:a4:58:89: 5f:34:d2:18:a0:6a:01:bf:74:d7:7d:13:db:b6:84: d7:54:b3:42:4e:c7:db:dd:6f:29:8e:ae:dc:0e:34: d4:58:3e:15:c1:20:9f:8f:ab:c6:9a:40:4f:c3:43: 4d:af:f6:bb:75:06:47:28:d6:46:ff:34:43:a6:e6: 6e:92:38:83:0d:6e:79:21:5d:6a:ee:9d:60:79:4f: 16:9b:2a:c7:70:c3:c9:1b:f9:40:f3:8f:a9:10:6c: 26:c5:9c:eb:cd:9f:b1:4f:24:0b:3f:a6:76:8f:07: a7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:25:A1:6A:69:D9:09:16:62:95:72:62:59:48:47:23:53:99:50:52 X509v3 Authority Key Identifier: keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c1:a3:2d:d8:a5:f1:4b:6a:25:83:82:f7:a0:91:34:10:5f: 6e:aa:8a:db:19:39:f8:35:3b:a7:ac:65:ab:46:89:47:d0:f1: c6:02:14:ad:b0:a7:33:a4:39:c4:f5:05:0d:b5:08:a2:c0:fe: 68:77:19:51:ef:7d:66:2f:f3:1e:13:54:a6:0c:ba:1d:89:ce: 63:f9:91:59:bf:69:67:12:f3:ff:1c:64:68:48:d6:37:12:5d: f7:fc:24:9d:d5:2a:da:ca:94:5e:1a:74:72:d3:88:5a:99:6b: 06:8d:8d:b1:ee:f0:58:c2:7a:f7:cd:50:92:fa:bb:dc:a5:0d: 70:21:7e:c3:37:01:30:8c:dd:43:08:c7:a8:c8:04:4a:31:09: 69:11:6f:7f:11:a0:f0:78:1a:8c:d4:58:fd:40:57:26:f2:c9: 84:35:f8:f6:f6:42:d3:36:e0:56:33:2e:c8:e9:a5:d4:a7:84: 13:1f:7a:ac:4b:2e:bf:a6:d2:39:09:a5:99:65:a9:cb:f4:fa: 1c:e8:8f:d7:51:e5:a8:da:8f:20:b8:cb:3b:1f:d1:f4:e1:d3: c1:c7:55:49:9e:a9:a3:b3:0a:37:b1:b4:8b:26:d5:90:07:eb: 07:53:d4:2d:3a:85:67:57:38:e5:b7:3f:c5:aa:47:5f:70:b8: 95:6d:cc:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG+MVDl+c2aCtDNjbwZWvf5Gh2mIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0 N0IwMzRDMjAeFw0yNjAzMjcwMzU2NDZaFw0yNjAzMzAxMjI5NDZaMDMxMTAvBgNV BAMTKDEzMjVBMTZBNjlEOTA5MTY2Mjk1NzI2MjU5NDg0NzIzNTM5OTUwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuHT0bIyM5nq/R6BrsYyTVwq+X 0oSiUg9BlXyxZj0p4AIHYXJY+6zS+BWjQOnn3s59rEF1+x2a9qIrq4DyZsEoqRAN cNfGjHk/aZIs8hCsYNSZdcU0pYjS+aSosULZSCe4rceeFZJj+lKwQD02P/VKr69v BsGHqFw8VKzm39rgClgfCUA6RN5xtImITFRol9KgM6RYiV800higagG/dNd9E9u2 hNdUs0JOx9vdbymOrtwONNRYPhXBIJ+Pq8aaQE/DQ02v9rt1Bkco1kb/NEOm5m6S OIMNbnkhXWrunWB5TxabKsdww8kb+UDzj6kQbCbFnOvNn7FPJAs/pnaPB6dJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEyWhamnZCRZilXJiWUhHI1OZUFIwHwYDVR0j BBgwFoAUPX6neI4CXhLe/RjusnivbUewNMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzcwZmVlYi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC8zRDdFQTc3ODhF MDI1RTEyREVGRDE4RUVCMjc4QUY2RDQ3QjAzNEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0N0Iw MzRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi NDMtZjY1MmExMWZkMDhjLzAvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFG NkQ0N0IwMzRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPBoy3YpfFLaiWDgvegkTQQX26qitsZOfg1 O6esZatGiUfQ8cYCFK2wpzOkOcT1BQ21CKLA/mh3GVHvfWYv8x4TVKYMuh2JzmP5 kVm/aWcS8/8cZGhI1jcSXff8JJ3VKtrKlF4adHLTiFqZawaNjbHu8FjCevfNUJL6 u9ylDXAhfsM3ATCM3UMIx6jIBEoxCWkRb38RoPB4GozUWP1AVybyyYQ1+Pb2QtM2 4FYzLsjppdSnhBMfeqxLLr+m0jkJpZllqcv0+hzoj9dR5ajajyC4yzsf0fTh08HH VUmeqaOzCjextIsm1ZAH6wdT1C06hWdXOOW3P8WqR19wuJVtzNY= -----END CERTIFICATE-----Generated at Fri Mar 27 06:41:48 2026 by rpki-client