$ rpki-client -vvf repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft File: 3BA10823C279932D7573B930625CD2884433C744.mft (raw, json) Hash identifier: 2jUaQA1ee5neTtfSeZAo/sccHVrCwxTYOjK116bE8kM= Subject key identifier: 87:A2:0A:84:73:3E:54:D8:92:0B:61:C4:C3:4D:EE:3E:62:59:5A:4D Authority key identifier: 3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 Certificate issuer: /CN=3BA10823C279932D7573B930625CD2884433C744 Certificate serial: 1D003220DA204A5603F57F1395BB5E1C8312CB67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft Manifest number: 01E0 Signing time: Tue 24 Mar 2026 10:12:00 +0000 Manifest this update: Tue 24 Mar 2026 10:07:00 +0000 Manifest next update: Fri 27 Mar 2026 13:47:00 +0000 Files and hashes: 1: 3BA10823C279932D7573B930625CD2884433C744.crl (hash: /HZblhoDLM7oDuxz2Rx9EtkxpW9prrmqK0ogAeqYcZ0=) 2: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (hash: qmdGYePJd+wN/ivsAkmPcsWhCMrqFbcUBgTD/u1jg9I=) 3: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (hash: L/T+m/yJ1Buc0w1osVIInT5sZ71zV7/a+aiKjsgJiso=) 4: 3130332e3137302e39362e302f32342d3234203d3e20313432333638.roa (hash: Q7l9088g74cyAOX6H9IF5efU/M/VWIjoHRjpfnhFTJw=) 5: 3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (hash: SKukxQ79pDKG9sTP8P7RFVTK2iNUABU8DA3sUqU7E6U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:00:32:20:da:20:4a:56:03:f5:7f:13:95:bb:5e:1c:83:12:cb:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA10823C279932D7573B930625CD2884433C744 Validity Not Before: Mar 24 10:07:00 2026 GMT Not After : Mar 27 13:47:00 2026 GMT Subject: CN=87A20A84733E54D8920B61C4C34DEE3E62595A4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1a:56:35:02:bc:7c:ae:51:d0:e4:5a:e4:c7: 17:77:15:0c:55:43:3b:1a:32:b8:49:3a:cd:76:46: db:1c:09:56:f4:59:9b:78:d9:e0:7d:c7:29:30:79: ca:74:5c:53:1c:7d:1b:c5:ca:ba:8d:75:da:cf:a6: fe:2a:a5:e3:cd:7f:fb:61:51:72:7d:01:d7:6b:a4: 9e:49:9c:06:fd:c4:a6:03:c6:5e:e6:ff:31:d5:4b: db:ad:4e:b8:5b:df:97:78:ba:ad:41:c9:e8:2d:ba: 5d:8f:34:1c:d7:73:fc:57:e1:86:5e:62:79:5a:c8: f9:74:90:0d:bb:55:3c:40:c5:2e:ff:15:43:ec:b2: 1d:35:d6:31:a2:0b:38:32:28:49:4e:13:70:e1:71: 51:45:8a:19:c5:76:12:5c:fa:ea:5f:26:97:ae:c5: 4d:c0:56:92:de:7a:72:d1:ef:ad:76:0b:7f:95:ad: be:21:c4:bf:f1:8d:8e:09:af:20:a9:8e:6d:4b:0b: 18:53:f9:e3:7f:23:8d:80:29:e3:8b:e6:72:7c:f6: 3d:54:17:b0:b5:c7:1e:a8:4f:6a:fb:66:15:f8:30: cf:a2:84:70:9e:29:cd:aa:14:82:92:4e:32:35:7f: 6c:ac:e0:18:e4:76:b0:da:38:a9:ee:4d:3d:12:8a: bd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A2:0A:84:73:3E:54:D8:92:0B:61:C4:C3:4D:EE:3E:62:59:5A:4D X509v3 Authority Key Identifier: keyid:3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:9b:9f:34:fd:37:db:4b:56:b7:f4:2b:4b:50:72:fa:d8:b4: f8:ce:c0:88:6a:48:8f:bb:2d:da:51:ce:72:e7:67:75:09:c0: 8e:68:8a:3a:98:0e:d4:2c:ec:62:c3:ff:91:eb:a4:f7:7e:e9: 6a:83:14:5e:58:b5:be:bd:8e:e8:18:64:01:af:fb:ee:e5:5c: 11:d5:ac:6c:b3:23:79:ae:53:fd:31:da:69:10:d8:bb:ed:77: cf:3f:a3:56:09:ae:ab:5e:06:db:77:5e:bb:eb:78:09:aa:9b: 68:43:6b:0c:55:ed:73:94:81:20:b5:80:8c:de:aa:77:00:10: 06:e7:ee:94:73:a0:48:f2:97:34:6c:19:29:cf:a9:c9:42:39: ba:a3:40:79:a4:3b:a1:6a:d4:85:00:d5:bc:80:1c:48:2c:33: 8a:5c:cd:44:ea:f2:89:1d:3e:70:be:a6:bf:7a:1e:db:0a:a5: 80:8d:e8:29:b2:2e:bb:73:74:55:e9:3d:66:9c:b1:be:a3:7a: b6:1b:28:8f:fc:20:6f:89:a5:c1:d3:dc:b0:cd:4f:ce:f2:02: f5:3f:27:2f:2a:52:5f:11:2c:f6:e8:2e:99:29:85:ad:0c:ef: c7:9e:1b:ce:77:ca:1e:6c:e2:81:3e:c7:c6:ce:78:4b:4f:5f: 19:2c:09:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQAyINogSlYD9X8TlbteHIMSy2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0 NDMzQzc0NDAeFw0yNjAzMjQxMDA3MDBaFw0yNjAzMjcxMzQ3MDBaMDMxMTAvBgNV BAMTKDg3QTIwQTg0NzMzRTU0RDg5MjBCNjFDNEMzNERFRTNFNjI1OTVBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqGlY1Arx8rlHQ5Frkxxd3FQxV QzsaMrhJOs12RtscCVb0WZt42eB9xykwecp0XFMcfRvFyrqNddrPpv4qpePNf/th UXJ9AddrpJ5JnAb9xKYDxl7m/zHVS9utTrhb35d4uq1Byegtul2PNBzXc/xX4YZe YnlayPl0kA27VTxAxS7/FUPssh011jGiCzgyKElOE3DhcVFFihnFdhJc+upfJpeu xU3AVpLeenLR7612C3+Vrb4hxL/xjY4JryCpjm1LCxhT+eN/I42AKeOL5nJ89j1U F7C1xx6oT2r7ZhX4MM+ihHCeKc2qFIKSTjI1f2ys4BjkdrDaOKnuTT0Sir2LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh6IKhHM+VNiSC2HEw03uPmJZWk0wHwYDVR0j BBgwFoAUO6EII8J5ky11c7kwYlzSiEQzx0QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmQ0OTE3OS00ZDhiLTRkMmQtYWJmNC00MzIzMWRlYjViMDEvMC8zQkExMDgyM0My Nzk5MzJENzU3M0I5MzA2MjVDRDI4ODQ0MzNDNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0NDMz Qzc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJkNDkxNzktNGQ4Yi00ZDJkLWFi ZjQtNDMyMzFkZWI1YjAxLzAvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0Qy ODg0NDMzQzc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFabnzT9N9tLVrf0K0tQcvrYtPjOwIhqSI+7 LdpRznLnZ3UJwI5oijqYDtQs7GLD/5HrpPd+6WqDFF5Ytb69jugYZAGv++7lXBHV rGyzI3muU/0x2mkQ2Lvtd88/o1YJrqteBtt3XrvreAmqm2hDawxV7XOUgSC1gIze qncAEAbn7pRzoEjylzRsGSnPqclCObqjQHmkO6Fq1IUA1byAHEgsM4pczUTq8okd PnC+pr96HtsKpYCN6CmyLrtzdFXpPWacsb6jerYbKI/8IG+JpcHT3LDNT87yAvU/ Jy8qUl8RLPboLpkpha0M78eeG853yh5s4oE+x8bOeEtPXxksCbE= -----END CERTIFICATE-----Generated at Thu Mar 26 07:35:28 2026 by rpki-client