$ rpki-client -vvf repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft File: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft (raw, json) Hash identifier: PTFgm4NlyA3ENCvRh+pzWvY8tP26hzvd8hW5HDlYAPs= Subject key identifier: D7:B7:91:D7:8B:BC:23:D8:A2:EE:78:67:75:6B:CF:60:8B:19:08:AB Authority key identifier: 33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 Certificate issuer: /CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Certificate serial: 192D3144D9F4C48431FA82BD235AC345924087FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft Manifest number: 0254 Signing time: Thu 26 Mar 2026 04:10:06 +0000 Manifest this update: Thu 26 Mar 2026 04:05:06 +0000 Manifest next update: Sun 29 Mar 2026 07:38:06 +0000 Files and hashes: 1: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: wUN0Izu+1jvS2QJEMcI/REBlf+WT4oRYhW3TrlPnH1I=) 2: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl (hash: 5Eng4ayMZjAYphZ7aLDdx0FypzYW1Loc3P7Mw8mi6vg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:2d:31:44:d9:f4:c4:84:31:fa:82:bd:23:5a:c3:45:92:40:87:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Validity Not Before: Mar 26 04:05:06 2026 GMT Not After : Mar 29 07:38:06 2026 GMT Subject: CN=D7B791D78BBC23D8A2EE7867756BCF608B1908AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:70:ff:69:bd:18:f1:92:c8:5e:7b:ca:35: 2a:99:b6:e9:d4:e3:3a:5f:d8:88:31:40:86:57:d1: d7:71:23:e1:15:07:bf:a7:8b:b8:b0:d8:f0:18:70: 34:fe:62:8d:cd:50:a2:38:f9:fb:ee:5f:a8:f3:45: 62:bd:80:2f:6e:80:53:db:7b:b0:66:94:d6:74:ac: a6:d8:24:e6:d5:f0:ec:3d:12:04:78:db:7e:34:e9: 55:fa:92:8c:db:46:f1:b3:8a:3a:d2:aa:52:ee:1f: 03:3f:00:03:22:da:a6:57:8c:e9:d2:b2:40:80:48: fb:f4:7f:96:31:76:a9:3f:86:e5:d7:39:8d:01:f5: e6:ce:1c:a5:6d:27:d4:9b:83:73:88:b0:5b:11:de: c5:1c:77:a2:0b:9a:58:67:c0:eb:54:75:1d:ed:f9: 8c:32:50:59:f5:2c:81:74:19:7f:ee:07:d8:1d:de: 19:e1:1d:0b:e3:69:6f:78:d9:09:25:6d:0a:33:33: ba:6b:27:13:a3:bb:17:d1:86:8d:97:b1:73:db:6b: be:2d:26:87:e3:7d:26:95:95:7a:a2:61:9d:39:c6: 4b:65:d7:92:d8:89:3d:0f:11:48:44:fa:e7:76:ab: 32:4a:19:5b:5b:5d:fc:f6:12:f7:19:c1:21:19:26: fe:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B7:91:D7:8B:BC:23:D8:A2:EE:78:67:75:6B:CF:60:8B:19:08:AB X509v3 Authority Key Identifier: keyid:33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:70:83:96:0d:d5:0e:38:d4:be:93:bc:18:b4:47:ba:78:a1: 41:95:fa:05:00:2a:2f:4d:a3:8c:f1:79:f5:dd:f4:98:48:9b: 03:7c:e2:3b:35:d1:f5:38:29:71:a9:ca:e4:12:1c:10:f6:1d: 6c:98:73:f5:c5:d5:c2:03:dd:d8:ec:83:9d:eb:4a:33:62:1b: 9f:85:52:b5:87:1a:59:ff:ef:40:20:80:57:ce:72:d2:be:3c: 85:75:d3:33:0d:26:2b:2e:ef:c6:20:d4:e0:a2:e6:0f:2f:65: 92:74:55:fc:32:30:0c:6b:8a:9a:1a:ad:8e:13:3a:9f:d9:79: f3:a9:e2:b2:ff:52:30:ad:a9:85:d3:ea:4e:2a:6a:ba:cb:8e: 31:11:48:c8:76:ea:14:a9:76:31:bb:5b:ed:8d:5e:d8:c8:0b: b8:3e:ab:75:d2:00:01:a1:73:75:b6:06:3c:00:82:89:a0:a7: 51:1c:04:12:26:2e:7c:0e:9e:b8:17:c7:f5:15:cb:b4:20:14: 89:fd:88:00:07:cc:d6:8c:44:99:e2:18:f8:4e:4a:49:19:20: 76:85:d5:6d:cd:4e:a9:9f:08:c6:9a:21:f5:1c:43:a1:2b:a6: 0d:4e:ce:cc:4c:c2:76:6c:8e:09:fa:bd:81:f5:e5:50:b5:66: 8d:4d:c9:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGS0xRNn0xIQx+oK9I1rDRZJAh/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJC NDZCRkQ1MTAeFw0yNjAzMjYwNDA1MDZaFw0yNjAzMjkwNzM4MDZaMDMxMTAvBgNV BAMTKEQ3Qjc5MUQ3OEJCQzIzRDhBMkVFNzg2Nzc1NkJDRjYwOEIxOTA4QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg9HD/ab0Y8ZLIXnvKNSqZtunU 4zpf2IgxQIZX0ddxI+EVB7+ni7iw2PAYcDT+Yo3NUKI4+fvuX6jzRWK9gC9ugFPb e7BmlNZ0rKbYJObV8Ow9EgR423406VX6kozbRvGzijrSqlLuHwM/AAMi2qZXjOnS skCASPv0f5Yxdqk/huXXOY0B9ebOHKVtJ9Sbg3OIsFsR3sUcd6ILmlhnwOtUdR3t +YwyUFn1LIF0GX/uB9gd3hnhHQvjaW942QklbQozM7prJxOjuxfRho2XsXPba74t JofjfSaVlXqiYZ05xktl15LYiT0PEUhE+ud2qzJKGVtbXfz2EvcZwSEZJv7TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU17eR14u8I9ii7nhndWvPYIsZCKswHwYDVR0j BBgwFoAUM2bNVXO7SxFpTbzw8VAs4rRr/VEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2EyNmJmYi02NzVmLTQ0NGYtOTBjOS01ZDNhOWIxOGMzNGMvMC8zMzY2Q0Q1NTcz QkI0QjExNjk0REJDRjBGMTUwMkNFMkI0NkJGRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJCNDZC RkQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNhMjZiZmItNjc1Zi00NDRmLTkw YzktNWQzYTliMThjMzRjLzAvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJD RTJCNDZCRkQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhwg5YN1Q441L6TvBi0R7p4oUGV+gUAKi9N o4zxefXd9JhImwN84js10fU4KXGpyuQSHBD2HWyYc/XF1cID3djsg53rSjNiG5+F UrWHGln/70AggFfOctK+PIV10zMNJisu78Yg1OCi5g8vZZJ0VfwyMAxripoarY4T Op/ZefOp4rL/UjCtqYXT6k4qarrLjjERSMh26hSpdjG7W+2NXtjIC7g+q3XSAAGh c3W2BjwAgomgp1EcBBImLnwOnrgXx/UVy7QgFIn9iAAHzNaMRJniGPhOSkkZIHaF 1W3NTqmfCMaaIfUcQ6Erpg1OzsxMwnZsjgn6vYH15VC1Zo1Nyd0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:53:49 2026 by rpki-client