$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft File: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft (raw, json) Hash identifier: ePLfgCE5SL04a7wz5QT64PM56LRfYz2mKQRgjpyhJ1E= Subject key identifier: BB:4C:63:C1:7C:F9:82:FA:B7:43:B1:25:4F:89:0D:C7:10:3D:76:41 Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE Certificate issuer: /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Certificate serial: 2673DDB9699C7E0F35C2255448E660E7D5E36E5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft Manifest number: 055E Signing time: Tue 24 Mar 2026 20:30:44 +0000 Manifest this update: Tue 24 Mar 2026 20:25:44 +0000 Manifest next update: Sat 28 Mar 2026 07:35:44 +0000 Files and hashes: 1: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: zsg0MYUUul8ZWAz6HoeSnMP9CkNtx4CP6l+n2iyt5ns=) 2: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: CAAPflKpErYbCedoGMTZLOsCI6lepdBfa5oWuKRRZqA=) 3: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl (hash: QW/kObF2X+C3EF4QYMFMBQexqbdohZIw03eQBXDLcg4=) 4: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: /Wu0u/CMc+T4gs0PJO0n7WC2osLR58ve83c3OfRxI5E=) 5: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: VPDdfzNp/Tnip1mpiin5tv4VXeLj0MdK1eiLLlQll+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:73:dd:b9:69:9c:7e:0f:35:c2:25:54:48:e6:60:e7:d5:e3:6e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Validity Not Before: Mar 24 20:25:44 2026 GMT Not After : Mar 28 07:35:44 2026 GMT Subject: CN=BB4C63C17CF982FAB743B1254F890DC7103D7641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:21:2f:fe:2d:36:13:9b:86:19:87:c2:60:f6: 8b:f6:77:cf:0e:d2:13:6c:8e:16:69:be:c5:07:27: 37:65:ec:91:ff:53:54:7b:62:cf:86:68:a2:6c:24: cf:e0:10:90:c2:57:03:e5:04:39:22:73:4e:28:fd: 41:b4:6d:8d:c7:3c:46:f0:d8:e8:38:a8:b2:ca:2f: b3:17:64:b5:58:24:a4:76:34:f1:89:d0:18:dd:71: 2e:4e:cf:d8:04:d6:e4:4b:c5:b6:3e:a3:c8:1e:0f: 7d:2a:58:75:8a:ab:f0:ed:0a:af:72:c8:9c:8b:2b: 45:77:9c:6e:f7:cd:96:17:a4:b6:ce:1f:5c:45:cb: ea:55:98:b3:dd:5e:88:26:67:96:cc:2a:59:d8:5c: 2e:29:62:4b:bc:7c:f2:e5:8c:43:99:4e:9e:ba:04: 06:7b:46:ec:ec:d9:47:3c:c5:67:bd:09:57:64:35: f2:7f:63:da:79:b8:d6:d4:d5:9e:e1:ed:03:4e:a7: ee:d7:07:99:33:33:b4:63:ee:69:cf:74:5c:18:2c: 9e:f1:64:82:e2:71:e8:e3:5c:8c:bd:e9:d6:f5:8a: 44:db:69:fe:af:3b:b4:e1:00:4f:ec:fe:e4:a2:66: 29:31:61:04:0c:b2:e8:1b:8d:5d:49:04:1c:d8:0a: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4C:63:C1:7C:F9:82:FA:B7:43:B1:25:4F:89:0D:C7:10:3D:76:41 X509v3 Authority Key Identifier: keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:90:9e:fe:53:bd:22:32:4b:3e:ae:00:5f:fb:55:d9:e2:35: d9:4f:d4:2a:f8:43:e0:80:fc:f8:e8:83:e8:bb:a7:46:9a:a3: e1:1a:87:c5:e1:4a:68:de:19:c3:9a:46:84:76:23:53:a9:68: 71:40:37:1c:f6:cc:e7:67:bd:67:34:f9:4c:00:eb:17:b4:f3: 24:23:24:1b:ec:6d:2c:e0:d7:2d:37:df:85:fe:db:2a:e8:4b: 43:63:b1:a4:55:e1:42:92:73:2a:be:cb:fe:02:d2:dc:ca:28: 22:c8:16:05:67:97:7e:9a:08:04:07:65:0d:74:29:32:11:f1: 2d:cd:fc:80:fc:96:36:23:1d:fb:d5:cd:01:5d:a2:14:cb:b0: b4:11:c5:49:be:13:25:52:a1:ab:f3:17:d1:ee:f5:2f:50:ba: 18:15:a6:21:5b:d5:7b:e6:0e:bc:38:54:ab:33:bf:68:27:dc: e9:1b:38:a3:d2:66:17:da:32:f9:9b:e2:2c:07:cc:85:d7:ef: a8:3a:2c:57:8a:bd:4c:b1:49:95:a1:f8:2b:0d:a4:0d:51:8d: 84:d6:18:03:da:9c:06:ea:f6:af:6d:5a:65:5c:f4:83:3a:2c: fc:04:96:24:8d:1a:0c:b0:5a:ec:ab:00:f5:92:06:4b:96:c3: a3:ef:29:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJnPduWmcfg81wiVUSOZg59XjblowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0 RUZCNDVFRTAeFw0yNjAzMjQyMDI1NDRaFw0yNjAzMjgwNzM1NDRaMDMxMTAvBgNV BAMTKEJCNEM2M0MxN0NGOTgyRkFCNzQzQjEyNTRGODkwREM3MTAzRDc2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvIS/+LTYTm4YZh8Jg9ov2d88O 0hNsjhZpvsUHJzdl7JH/U1R7Ys+GaKJsJM/gEJDCVwPlBDkic04o/UG0bY3HPEbw 2Og4qLLKL7MXZLVYJKR2NPGJ0BjdcS5Oz9gE1uRLxbY+o8geD30qWHWKq/DtCq9y yJyLK0V3nG73zZYXpLbOH1xFy+pVmLPdXogmZ5bMKlnYXC4pYku8fPLljEOZTp66 BAZ7Ruzs2Uc8xWe9CVdkNfJ/Y9p5uNbU1Z7h7QNOp+7XB5kzM7Rj7mnPdFwYLJ7x ZILicejjXIy96db1ikTbaf6vO7ThAE/s/uSiZikxYQQMsugbjV1JBBzYCn0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu0xjwXz5gvq3Q7ElT4kNxxA9dkEwHwYDVR0j BBgwFoAUPtu3hEcUxUXO1yQSDtDlo077Re4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWQ5NTVjOC1lNmQzLTQ5YzItYWJkOC1lMGY5MmMwODEyNDcvMC8zRURCQjc4NDQ3 MTRDNTQ1Q0VENzI0MTIwRUQwRTVBMzRFRkI0NUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0RUZC NDVFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1 QTM0RUZCNDVFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCQnv5TvSIySz6uAF/7VdniNdlP1Cr4Q+CA /Pjog+i7p0aao+Eah8XhSmjeGcOaRoR2I1OpaHFANxz2zOdnvWc0+UwA6xe08yQj JBvsbSzg1y0334X+2yroS0NjsaRV4UKScyq+y/4C0tzKKCLIFgVnl36aCAQHZQ10 KTIR8S3N/ID8ljYjHfvVzQFdohTLsLQRxUm+EyVSoavzF9Hu9S9QuhgVpiFb1Xvm Drw4VKszv2gn3OkbOKPSZhfaMvmb4iwHzIXX76g6LFeKvUyxSZWh+CsNpA1RjYTW GAPanAbq9q9tWmVc9IM6LPwEliSNGgywWuyrAPWSBkuWw6PvKRE= -----END CERTIFICATE-----Generated at Thu Mar 26 12:55:12 2026 by rpki-client