$ rpki-client -vvf repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft File: 361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft (raw, json) Hash identifier: CfR8P3EeRABdWi2gU7VbYvdlp7xgL9pn4+drw2USwRU= Subject key identifier: C5:44:17:9E:47:53:28:B9:48:95:8C:2A:85:48:98:DC:E5:32:97:8B Authority key identifier: 36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B Certificate issuer: /CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Certificate serial: 03A13075AEC5FDD46A3DFD5219878FC5C901A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft Manifest number: 01FC Signing time: Thu 26 Mar 2026 12:20:02 +0000 Manifest this update: Thu 26 Mar 2026 12:15:02 +0000 Manifest next update: Sun 29 Mar 2026 14:35:02 +0000 Files and hashes: 1: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (hash: Ip+EaY4SHdyARw/IWLE1IYmmOdcG4qcOGk9dRwPX5R8=) 2: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (hash: 1vmoTi/OQlBjTj5r4qfl1ZJAdqshu23eK0zIaK9DnNY=) 3: 361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl (hash: qA6Zu6vwKbxB0Z3EHHaL+l29JRXJngbTIrCrNBjMOK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a1:30:75:ae:c5:fd:d4:6a:3d:fd:52:19:87:8f:c5:c9:01:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Validity Not Before: Mar 26 12:15:02 2026 GMT Not After : Mar 29 14:35:02 2026 GMT Subject: CN=C544179E475328B948958C2A854898DCE532978B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:24:cc:84:7b:91:82:dd:37:c2:9b:99:1f:75: 67:5f:13:06:a6:fb:b2:e3:bf:9d:f9:82:b5:15:60: 5b:48:1e:38:d8:cd:95:0b:42:be:1b:d5:87:ab:08: fc:78:ff:6d:ab:01:cf:2f:bc:a6:57:56:65:b6:b7: f1:0f:af:77:0d:d4:b2:aa:b6:d3:b6:e8:ff:73:7a: 49:ad:cd:bc:89:ec:6e:f7:69:f9:49:ec:35:a3:eb: 70:78:cb:e4:db:43:f5:cc:5d:97:5b:59:49:a9:ad: 38:a8:bc:05:cc:b1:4d:d9:40:08:f3:cb:e9:7d:08: a8:68:ef:42:d9:d4:29:ee:dc:ce:4f:da:67:e3:2d: c7:2d:97:88:fb:b5:1a:0b:9c:2f:84:23:26:3b:e1: 1e:f2:e3:79:de:09:89:0f:05:19:87:1a:b9:b3:af: 70:77:38:e0:63:13:c5:38:d1:1c:e9:3c:37:c1:5d: 2f:a3:d9:04:e7:f0:41:a9:71:e7:dd:c8:a8:90:c3: 05:43:8e:1a:be:af:f1:7b:b9:6d:7b:5b:f8:c9:24: 9e:e6:7a:d9:71:fe:94:5a:b1:fd:07:18:c0:17:38: f4:73:01:b7:b2:81:b6:13:97:92:1c:5f:7a:64:8a: 99:22:e7:03:e4:79:a8:f3:65:c1:5b:f0:d7:13:a5: b6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:44:17:9E:47:53:28:B9:48:95:8C:2A:85:48:98:DC:E5:32:97:8B X509v3 Authority Key Identifier: keyid:36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:79:21:1c:4e:19:ff:78:71:84:ba:b9:f4:3e:d3:fa:f4:51: c1:ba:62:fa:c5:02:d8:a0:f0:50:d0:72:ab:26:4e:70:c8:d9: b4:67:08:a6:a2:19:85:36:b9:d3:ec:95:8c:5c:65:68:29:00: 0e:91:b7:da:7f:57:94:1b:08:ca:a3:a4:29:fa:9f:43:63:2d: a5:8d:b0:de:0f:6b:68:2a:9c:bf:9b:d0:32:59:ef:79:b6:ad: 2d:75:c7:c5:b4:62:3e:c0:0c:79:43:48:55:6a:b4:1c:c7:ac: ce:86:d8:cf:26:0e:c5:3a:29:a3:d7:03:09:77:e0:57:71:56: ad:4b:cf:76:bc:b7:bd:0d:1a:41:40:7f:26:d5:e5:ef:4c:2d: f3:c5:f5:88:51:b9:0f:e9:76:ef:d5:83:e0:68:3b:2a:f8:f9: 58:f8:22:d5:c7:d4:66:a8:f1:70:85:cf:a3:63:fd:a4:f8:b4: 72:69:fa:5f:09:7b:cf:dc:3a:6c:34:b4:85:2d:f3:86:3c:4c: df:b6:f9:8c:5b:f8:74:32:b9:e2:3b:3b:86:4c:8c:ee:a6:2a: d9:60:5c:8a:ef:91:4b:e5:43:ae:fb:2c:36:7b:19:1c:6e:68: 74:97:44:57:7b:c1:25:c9:d5:52:bd:e2:26:4b:0a:bb:66:91: 6d:08:63:ea -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITA6Ewda7F/dRqPf1SGYePxckBojANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygzNjFCNkQ3RTE2QTAyQjczMTZCNkY5MUVEMzRCMjJBOTA3 RUU4NjZCMB4XDTI2MDMyNjEyMTUwMloXDTI2MDMyOTE0MzUwMlowMzExMC8GA1UE AxMoQzU0NDE3OUU0NzUzMjhCOTQ4OTU4QzJBODU0ODk4RENFNTMyOTc4QjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALckzIR7kYLdN8KbmR91Z18TBqb7 suO/nfmCtRVgW0geONjNlQtCvhvVh6sI/Hj/basBzy+8pldWZba38Q+vdw3Usqq2 07bo/3N6Sa3NvInsbvdp+UnsNaPrcHjL5NtD9cxdl1tZSamtOKi8BcyxTdlACPPL 6X0IqGjvQtnUKe7czk/aZ+Mtxy2XiPu1GgucL4QjJjvhHvLjed4JiQ8FGYcaubOv cHc44GMTxTjRHOk8N8FdL6PZBOfwQalx593IqJDDBUOOGr6v8Xu5bXtb+MkknuZ6 2XH+lFqx/QcYwBc49HMBt7KBthOXkhxfemSKmSLnA+R5qPNlwVvw1xOltjUCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTFRBeeR1MouUiVjCqFSJjc5TKXizAfBgNVHSME GDAWgBQ2G21+FqArcxa2+R7TSyKpB+6GazAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdh YzRkNzVlLTNkYTgtNDk5MC04MDQyLTdlMGVjZjU5ZjEzYi8wLzM2MUI2RDdFMTZB MDJCNzMxNkI2RjkxRUQzNEIyMkE5MDdFRTg2NkIuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi8zNjFCNkQ3RTE2QTAyQjczMTZCNkY5MUVEMzRCMjJBOTA3RUU4 NjZCLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83YWM0ZDc1ZS0zZGE4LTQ5OTAtODA0 Mi03ZTBlY2Y1OWYxM2IvMC8zNjFCNkQ3RTE2QTAyQjczMTZCNkY5MUVEMzRCMjJB OTA3RUU4NjZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAankhHE4Z/3hxhLq59D7T+vRRwbpi+sUC2KDw UNByqyZOcMjZtGcIpqIZhTa50+yVjFxlaCkADpG32n9XlBsIyqOkKfqfQ2MtpY2w 3g9raCqcv5vQMlnvebatLXXHxbRiPsAMeUNIVWq0HMeszobYzyYOxTopo9cDCXfg V3FWrUvPdry3vQ0aQUB/JtXl70wt88X1iFG5D+l279WD4Gg7Kvj5WPgi1cfUZqjx cIXPo2P9pPi0cmn6Xwl7z9w6bDS0hS3zhjxM37b5jFv4dDK54js7hkyM7qYq2WBc iu+RS+VDrvssNnsZHG5odJdEV3vBJcnVUr3iJksKu2aRbQhj6g== -----END CERTIFICATE-----Generated at Thu Mar 26 15:24:15 2026 by rpki-client