$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft File: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft (raw, json) Hash identifier: f/zpg8o1jkar6sIY54qZPFfWS0L24hyMTSwW8wcznlY= Subject key identifier: C9:81:CE:64:95:18:E8:5C:3E:22:54:9D:A9:46:0C:C3:6C:55:77:E3 Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Certificate serial: 438CB2A3EF27390AC7336E54255346C2965E2296 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft Manifest number: 025D Signing time: Tue 24 Mar 2026 21:21:45 +0000 Manifest this update: Tue 24 Mar 2026 21:16:45 +0000 Manifest next update: Sat 28 Mar 2026 03:56:45 +0000 Files and hashes: 1: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: Zm0hpNa3KzjUY5ugGNSToALOnFgESrmbArm+FZK1Qzs=) 2: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl (hash: bu2DS8J4qVJufXDETbGCSISTsA8h+/434wtuy0ybjYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8c:b2:a3:ef:27:39:0a:c7:33:6e:54:25:53:46:c2:96:5e:22:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Validity Not Before: Mar 24 21:16:45 2026 GMT Not After : Mar 28 03:56:45 2026 GMT Subject: CN=C981CE649518E85C3E22549DA9460CC36C5577E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3e:15:1c:42:3e:01:34:58:17:e9:45:70:83: 4a:de:0f:f3:19:9c:33:e0:7f:ef:d2:64:5a:41:25: 3d:97:6d:44:27:69:fd:b5:40:ac:90:0a:61:8d:17: be:80:cd:62:76:dd:4a:40:3e:50:89:83:66:e6:db: aa:a8:6f:ae:fa:dd:33:84:a8:fb:be:5d:53:37:c6: e3:9b:62:ef:e6:3d:17:ee:8a:0e:fa:61:bc:cc:c3: a2:7a:c1:a9:c4:51:54:39:00:75:28:2b:7d:a5:c7: 76:23:c7:e8:b4:70:57:71:fe:64:ca:46:5e:b3:a0: 05:3b:ae:be:cf:51:90:1a:e9:db:bf:e2:94:11:80: 18:ab:90:1f:a6:d2:a4:b6:76:5c:93:69:0e:75:40: 42:58:27:1d:2c:f4:fb:43:f9:3a:42:ca:22:86:02: 0d:b9:7d:3f:1a:85:c3:82:e1:7e:20:27:b8:f0:4a: 85:38:bf:9f:9d:98:5e:9f:6e:3f:07:20:fa:ea:2e: cf:20:13:27:ed:aa:f0:89:1e:62:46:f5:0c:6b:b1: 6f:86:2f:27:be:f2:d5:f2:c0:7b:f3:a1:e4:af:6a: 7f:d6:23:ec:2a:85:5c:c3:d0:b7:90:28:1e:05:7b: f9:1a:31:48:7f:c0:23:3f:98:34:df:d2:22:71:4a: 84:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:81:CE:64:95:18:E8:5C:3E:22:54:9D:A9:46:0C:C3:6C:55:77:E3 X509v3 Authority Key Identifier: keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:c8:c9:67:ac:c5:a4:0f:d2:7f:6b:a6:03:a1:b6:17:9f:01: 55:6a:27:f0:87:a1:0a:b8:c9:98:5b:fd:e1:6b:0a:8f:58:b6: 5c:f8:00:de:06:a9:72:52:dd:b7:28:45:c1:0d:eb:4d:6f:83: 0e:3c:a3:24:be:02:b0:4a:9b:5f:b9:60:c8:ea:c1:e5:57:4a: 65:fb:3b:4c:d0:58:a1:0c:0d:7a:55:c7:00:85:20:ee:83:2c: 3b:68:4a:5f:fa:d6:d4:97:9b:25:1a:0e:ae:80:23:17:3d:d2: 56:05:d6:23:d2:17:4d:69:8c:56:9f:e0:91:f5:60:53:ec:aa: fc:ab:19:99:d4:9b:d4:ad:eb:21:95:84:c6:25:78:5c:61:fc: 95:7f:0b:80:e9:35:a0:2b:8c:9b:bf:e2:17:b1:b9:5e:02:9c: 74:ee:7d:7e:41:61:f4:77:95:55:ad:ca:c0:e5:b4:4b:66:0d: 8c:46:ed:7d:ab:61:ec:34:18:76:9a:39:68:d8:6b:92:1f:c9: 42:41:5c:44:8c:08:85:7f:72:86:94:70:5b:f9:98:fe:d7:aa: fe:4d:2b:c6:6b:f5:9f:14:3b:bc:60:5c:ac:a4:4a:e0:ab:ac: f8:9d:25:00:22:a7:fd:5f:75:9b:50:8f:b0:42:5d:54:98:dd: 92:e6:8c:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4yyo+8nOQrHM25UJVNGwpZeIpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0 N0IwMzRDMjAeFw0yNjAzMjQyMTE2NDVaFw0yNjAzMjgwMzU2NDVaMDMxMTAvBgNV BAMTKEM5ODFDRTY0OTUxOEU4NUMzRTIyNTQ5REE5NDYwQ0MzNkM1NTc3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPhUcQj4BNFgX6UVwg0reD/MZ nDPgf+/SZFpBJT2XbUQnaf21QKyQCmGNF76AzWJ23UpAPlCJg2bm26qob6763TOE qPu+XVM3xuObYu/mPRfuig76YbzMw6J6wanEUVQ5AHUoK32lx3Yjx+i0cFdx/mTK Rl6zoAU7rr7PUZAa6du/4pQRgBirkB+m0qS2dlyTaQ51QEJYJx0s9PtD+TpCyiKG Ag25fT8ahcOC4X4gJ7jwSoU4v5+dmF6fbj8HIPrqLs8gEyftqvCJHmJG9QxrsW+G Lye+8tXywHvzoeSvan/WI+wqhVzD0LeQKB4Fe/kaMUh/wCM/mDTf0iJxSoRTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyYHOZJUY6Fw+IlSdqUYMw2xVd+MwHwYDVR0j BBgwFoAUPX6neI4CXhLe/RjusnivbUewNMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzcwZmVlYi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC8zRDdFQTc3ODhF MDI1RTEyREVGRDE4RUVCMjc4QUY2RDQ3QjAzNEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0N0Iw MzRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi NDMtZjY1MmExMWZkMDhjLzAvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFG NkQ0N0IwMzRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLIyWesxaQP0n9rpgOhthefAVVqJ/CHoQq4 yZhb/eFrCo9Ytlz4AN4GqXJS3bcoRcEN601vgw48oyS+ArBKm1+5YMjqweVXSmX7 O0zQWKEMDXpVxwCFIO6DLDtoSl/61tSXmyUaDq6AIxc90lYF1iPSF01pjFaf4JH1 YFPsqvyrGZnUm9St6yGVhMYleFxh/JV/C4DpNaArjJu/4hexuV4CnHTufX5BYfR3 lVWtysDltEtmDYxG7X2rYew0GHaaOWjYa5IfyUJBXESMCIV/coaUcFv5mP7Xqv5N K8Zr9Z8UO7xgXKykSuCrrPidJQAip/1fdZtQj7BCXVSY3ZLmjME= -----END CERTIFICATE-----Generated at Thu Mar 26 19:27:45 2026 by rpki-client