$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json) Hash identifier: mBwgazhJds446mYvJxQq5XRilqek/JR2GTmZzCdjnrI= Subject key identifier: EF:3A:F0:EC:7E:D4:12:E7:C9:7D:AF:8E:1B:6F:93:60:74:D5:F1:9A Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Certificate serial: 0B82D6D92DC7A50EE6F31969513444723C812BBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft Manifest number: 016B Signing time: Thu 26 Mar 2026 07:31:21 +0000 Manifest this update: Thu 26 Mar 2026 07:26:21 +0000 Manifest next update: Sun 29 Mar 2026 12:19:21 +0000 Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: luaPJWuc0wCfPSDKzjDkioHunUYpk0rIl19g6jJuq2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:82:d6:d9:2d:c7:a5:0e:e6:f3:19:69:51:34:44:72:3c:81:2b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Validity Not Before: Mar 26 07:26:21 2026 GMT Not After : Mar 29 12:19:21 2026 GMT Subject: CN=EF3AF0EC7ED412E7C97DAF8E1B6F936074D5F19A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:bd:8d:35:b1:82:9e:d7:12:b1:e7:aa:69: 76:cc:49:a7:d1:e9:54:39:8a:df:72:d9:38:d2:b3: c9:4a:d8:8c:8a:38:fa:21:6a:60:5e:6a:a6:57:e9: 4c:14:d1:8c:20:8a:e4:a2:c1:b3:72:b5:cd:60:c1: 8b:d5:d0:ef:90:00:ec:37:fc:51:b4:59:b2:c7:e7: 67:62:d8:76:1f:a9:81:45:c3:45:98:20:57:68:82: ea:80:e1:5e:79:79:5e:89:88:48:25:9b:fd:68:6f: 7f:26:09:ae:84:f8:19:a1:29:66:5c:ac:c3:bf:68: 64:5b:11:81:cb:da:55:6e:f2:8d:a6:c7:86:8d:f1: 35:5e:c4:0c:79:70:56:ea:cd:97:e1:44:8b:60:67: 1d:e4:3b:77:75:e9:14:bd:7f:99:2e:27:69:a9:58: f0:83:55:20:ac:0b:28:e6:14:d6:7b:f3:0a:70:0a: 1b:43:9c:4e:06:c6:c1:b1:d5:0d:63:fc:58:82:7c: ee:c4:09:27:ac:55:83:4b:c6:b9:5a:d7:7c:34:47: c5:a8:5d:0b:69:30:ac:9d:5a:8e:7c:5d:b7:e3:3f: 27:0f:ad:79:62:aa:eb:1e:0f:f5:f7:bb:66:0d:3e: 43:37:b7:ae:97:dc:67:87:8c:ac:d5:7d:c9:c3:53: 60:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3A:F0:EC:7E:D4:12:E7:C9:7D:AF:8E:1B:6F:93:60:74:D5:F1:9A X509v3 Authority Key Identifier: keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:71:8c:85:40:fa:15:79:e1:a7:90:a2:db:8a:e3:d2:ca:a8: 80:22:3f:b8:62:75:df:84:55:a0:4a:4b:51:36:84:1a:3e:27: 39:06:30:46:0e:14:11:7d:cd:13:25:aa:b4:13:bd:8a:d8:83: eb:fa:ca:3c:3a:92:94:6a:6a:69:ad:78:47:42:16:96:07:2c: de:f9:8d:cf:b0:ca:0d:45:37:69:15:bb:ce:d8:1e:71:36:90: a4:b0:4b:d2:3c:bf:36:1b:dc:55:fb:b3:31:50:57:d8:89:99: 62:0e:7f:b7:54:40:9d:5b:4e:b3:83:ab:67:ee:a9:41:97:1d: 5a:5c:09:6c:38:8a:3e:85:25:54:57:7a:07:ef:f4:fa:ac:7f: 52:8b:52:a8:2e:17:64:43:a5:7f:9b:a0:ec:3c:a2:9e:0d:ad: 7a:5b:53:e7:6e:5f:5c:9a:6b:12:e9:71:82:a8:b7:ca:62:50: 6c:db:2a:aa:c7:1e:fd:f8:87:18:a8:d8:af:66:ad:36:30:90: b7:40:df:7a:a7:bf:2f:6e:30:06:9e:80:f2:8c:a4:9f:3d:ec: ca:fb:e2:c4:dc:f0:3a:d6:9e:d4:a3:8d:e6:1b:3e:4e:c7:5b: 12:49:95:33:86:00:3b:b9:d2:68:6d:58:98:af:ea:ca:81:78: 6f:b7:3b:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4LW2S3HpQ7m8xlpUTREcjyBK7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My Rjc4REU4NTAeFw0yNjAzMjYwNzI2MjFaFw0yNjAzMjkxMjE5MjFaMDMxMTAvBgNV BAMTKEVGM0FGMEVDN0VENDEyRTdDOTdEQUY4RTFCNkY5MzYwNzRENUYxOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3c72NNbGCntcSseeqaXbMSafR 6VQ5it9y2TjSs8lK2IyKOPohamBeaqZX6UwU0YwgiuSiwbNytc1gwYvV0O+QAOw3 /FG0WbLH52di2HYfqYFFw0WYIFdoguqA4V55eV6JiEglm/1ob38mCa6E+BmhKWZc rMO/aGRbEYHL2lVu8o2mx4aN8TVexAx5cFbqzZfhRItgZx3kO3d16RS9f5kuJ2mp WPCDVSCsCyjmFNZ78wpwChtDnE4GxsGx1Q1j/FiCfO7ECSesVYNLxrla13w0R8Wo XQtpMKydWo58XbfjPycPrXliquseD/X3u2YNPkM3t66X3GeHjKzVfcnDU2CjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7zrw7H7UEufJfa+OG2+TYHTV8ZowHwYDVR0j BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4 REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChxjIVA+hV54aeQotuK49LKqIAiP7hidd+E VaBKS1E2hBo+JzkGMEYOFBF9zRMlqrQTvYrYg+v6yjw6kpRqammteEdCFpYHLN75 jc+wyg1FN2kVu87YHnE2kKSwS9I8vzYb3FX7szFQV9iJmWIOf7dUQJ1bTrODq2fu qUGXHVpcCWw4ij6FJVRXegfv9Pqsf1KLUqguF2RDpX+boOw8op4NrXpbU+duX1ya axLpcYKot8piUGzbKqrHHv34hxio2K9mrTYwkLdA33qnvy9uMAaegPKMpJ897Mr7 4sTc8DrWntSjjeYbPk7HWxJJlTOGADu50mhtWJiv6sqBeG+3O5Y= -----END CERTIFICATE-----Generated at Thu Mar 26 18:20:41 2026 by rpki-client