$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft (raw, json) Hash identifier: jDWuy+ea5nwKaSxrn3TPiJU0gUb8z/17hnVw7Jijm5Y= Subject key identifier: E5:FA:22:A3:68:8F:FC:07:A0:68:13:BF:DC:09:6D:7E:08:8B:31:75 Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 315AF9469DD21ACFC1A30B5C05339C76292AC5AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft Manifest number: 012D Signing time: Tue 24 Mar 2026 12:32:35 +0000 Manifest this update: Tue 24 Mar 2026 12:27:35 +0000 Manifest next update: Fri 27 Mar 2026 19:56:35 +0000 Files and hashes: 1: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl (hash: NHRpdxO9VeH5s608kXobEAEga8dR7Rw0/paj/I4iF3Q=) 2: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: aD8d9MEtPA6KCQQfGq4r1uZ3wsc7mkQ1NJevQSM4M3Q=) 3: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: K/IR3tQ/B2ym6+3pMgc6lpdo/zlib36G9pC4/9bpSkY=) 4: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 5RUEcjZWV4Zm8Cu7Ldj94h1BNUsKLWrbbvXJVqSNnAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:5a:f9:46:9d:d2:1a:cf:c1:a3:0b:5c:05:33:9c:76:29:2a:c5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Mar 24 12:27:35 2026 GMT Not After : Mar 27 19:56:35 2026 GMT Subject: CN=E5FA22A3688FFC07A06813BFDC096D7E088B3175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:08:ff:bb:26:53:06:c5:f1:42:5d:b2:54:ae: 13:e4:65:75:55:bb:22:1d:3d:0c:2c:98:92:b2:15: fa:50:7e:89:e7:38:6e:18:43:05:f5:49:2c:d1:00: 0a:da:3d:f4:af:ea:0c:32:fc:c4:c7:e8:b7:e2:d5: 1e:47:75:78:17:9b:8b:7a:95:da:66:da:46:88:a0: 09:42:47:c3:d0:77:be:68:b3:85:c9:39:7f:fe:66: 87:60:4a:8b:ae:7a:b0:65:b8:6e:b7:c5:b0:b8:cf: d7:09:dc:a8:9d:a0:cb:44:21:c2:c2:a1:ff:c5:86: b7:c9:b0:6f:fe:81:c4:62:60:74:44:1c:b7:d0:b4: 15:bf:75:c1:f5:3b:bd:1d:f6:9f:c9:56:24:2d:d1: e7:bd:4a:9a:ea:77:a4:46:0e:00:9f:33:21:d4:d7: 8c:1d:13:f4:68:5a:02:0b:60:26:29:3c:00:86:f2: e8:b0:0b:a5:07:ff:ef:c7:a6:eb:75:0e:51:85:3f: 0a:41:27:24:83:8d:9d:76:fd:ba:aa:63:95:6b:19: 33:63:e0:97:53:03:aa:56:26:91:4b:b9:aa:3d:e8: e5:9e:16:59:a5:cc:f9:d8:87:3e:8d:5f:6a:50:e0: c5:19:4b:92:53:55:15:2f:10:de:a2:8e:3c:76:8b: cc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FA:22:A3:68:8F:FC:07:A0:68:13:BF:DC:09:6D:7E:08:8B:31:75 X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f3:c4:a6:6e:95:9e:23:94:9f:f0:6e:2f:35:8c:03:60:27: 3b:98:6f:43:fa:cb:2e:12:21:05:f2:84:a5:64:f5:92:55:75: 7e:a5:98:90:02:95:d2:32:34:71:c7:ba:ae:4d:78:0b:26:60: bf:0f:ab:f9:b2:4b:ec:29:53:79:57:96:c7:90:ad:c9:7d:d4: f0:51:74:55:00:33:8d:c5:a8:d0:81:fb:8b:28:b5:8d:15:ad: 81:ec:96:ce:2a:ab:9c:63:bc:77:6b:ab:ec:26:f7:2a:f4:d2: b6:f9:54:f2:ed:e6:41:27:1f:68:c2:4a:70:9c:ff:2b:d0:10: 52:a0:1b:ff:75:ff:f9:c9:bf:5d:81:1a:7e:55:56:bd:38:be: f0:ed:51:52:0b:45:b5:bd:b6:7e:2d:9c:82:ca:26:4e:5b:6d: 51:af:70:5f:4a:6d:dd:2c:3f:9c:5b:d7:91:ef:75:7b:4d:9d: db:a1:84:4e:55:67:f5:62:56:61:f9:fe:79:dd:21:d1:a7:37: 8c:c0:80:3e:ce:27:a9:c1:7c:f7:de:29:01:62:7c:18:58:1c: f2:cb:b7:e4:27:76:d5:1e:10:ab:73:0c:21:44:d4:5b:a6:b1: d8:f2:4b:ae:00:80:f1:58:30:9a:3c:2f:71:63:24:ad:f4:4c: 4b:08:68:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMVr5Rp3SGs/BowtcBTOcdikqxa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNjAzMjQxMjI3MzVaFw0yNjAzMjcxOTU2MzVaMDMxMTAvBgNV BAMTKEU1RkEyMkEzNjg4RkZDMDdBMDY4MTNCRkRDMDk2RDdFMDg4QjMxNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjCP+7JlMGxfFCXbJUrhPkZXVV uyIdPQwsmJKyFfpQfonnOG4YQwX1SSzRAAraPfSv6gwy/MTH6Lfi1R5HdXgXm4t6 ldpm2kaIoAlCR8PQd75os4XJOX/+ZodgSouuerBluG63xbC4z9cJ3KidoMtEIcLC of/FhrfJsG/+gcRiYHREHLfQtBW/dcH1O70d9p/JViQt0ee9Sprqd6RGDgCfMyHU 14wdE/RoWgILYCYpPACG8uiwC6UH/+/Hput1DlGFPwpBJySDjZ12/bqqY5VrGTNj 4JdTA6pWJpFLuao96OWeFlmlzPnYhz6NX2pQ4MUZS5JTVRUvEN6ijjx2i8wfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5foio2iP/AegaBO/3AltfgiLMXUwHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3 RjRCMDgyRDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjzxKZulZ4jlJ/wbi81jANgJzuYb0P6yy4S IQXyhKVk9ZJVdX6lmJACldIyNHHHuq5NeAsmYL8Pq/myS+wpU3lXlseQrcl91PBR dFUAM43FqNCB+4sotY0VrYHsls4qq5xjvHdrq+wm9yr00rb5VPLt5kEnH2jCSnCc /yvQEFKgG/91//nJv12BGn5VVr04vvDtUVILRbW9tn4tnILKJk5bbVGvcF9Kbd0s P5xb15HvdXtNnduhhE5VZ/ViVmH5/nndIdGnN4zAgD7OJ6nBfPfeKQFifBhYHPLL t+QndtUeEKtzDCFE1FumsdjyS64AgPFYMJo8L3FjJK30TEsIaCA= -----END CERTIFICATE-----Generated at Thu Mar 26 15:45:37 2026 by rpki-client