$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft File: A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json) Hash identifier: uP12uOvk1CTXUbdHcXD6934Iix0WayULJbqwdnUCAR8= Subject key identifier: 19:68:C2:A2:EA:77:39:E4:03:5C:95:37:49:AC:FB:96:C9:AC:60:47 Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Certificate serial: 35E373EB6E0744D490EFE36302B788BA4F8EE675 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft Manifest number: 026F Signing time: Tue 24 Mar 2026 22:10:03 +0000 Manifest this update: Tue 24 Mar 2026 22:05:03 +0000 Manifest next update: Sat 28 Mar 2026 09:01:03 +0000 Files and hashes: 1: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: NSGM9TUDBLgn7kcSNJpmMZxpHG9VLSqJuwmSL+bAMEQ=) 2: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: 4MEAYppP3Kf6rajqc79fnAA8c3MS4YwlbMABho8ytVM=) 3: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: apN+h9rMVlve5QQ11UHOBtDmWt+4qBPMklHSwzuoZf0=) 4: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: 4W2DjsyZJGjW+7SragJ9OlP6Y2Hfvo5Kfgnyn6MgV6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e3:73:eb:6e:07:44:d4:90:ef:e3:63:02:b7:88:ba:4f:8e:e6:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Validity Not Before: Mar 24 22:05:03 2026 GMT Not After : Mar 28 09:01:03 2026 GMT Subject: CN=1968C2A2EA7739E4035C953749ACFB96C9AC6047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:38:d6:20:86:e1:31:0e:09:7e:7f:1e:18: a8:44:ab:85:2b:f8:35:ff:3d:e8:d3:dc:51:91:44: 18:da:79:1b:7f:a1:5d:74:a9:ed:99:4b:a7:a1:1f: cf:d8:ad:7e:b8:2e:85:56:6c:a1:54:f2:23:0a:52: 3f:9e:1f:53:bb:b4:33:0d:0c:ad:5e:78:c0:c4:94: 5e:f4:2f:ad:ae:40:9f:0b:ac:fd:22:ac:5d:2c:80: 8c:dd:60:88:05:91:65:f0:06:0e:1f:b5:75:ee:77: 4c:8d:a6:fb:8f:1e:7a:17:c5:ee:65:d0:6f:74:b9: 08:74:0e:78:f5:9e:97:c3:7a:e3:50:ca:e0:20:11: 99:60:91:de:bb:06:e5:0e:b8:07:56:d5:8b:ca:90: 67:0b:0d:58:ab:d9:32:34:5e:f9:ab:ae:61:f4:9d: 99:a7:b1:45:2e:bc:f0:02:3a:10:29:63:c2:aa:1f: e9:8f:70:3d:24:63:15:29:05:f8:e1:99:94:b0:4f: 11:37:83:8b:87:9b:f1:43:c8:52:2b:33:f2:b8:f1: d0:33:a6:4b:fe:d4:45:bf:06:62:d6:53:8c:04:53: 10:4f:b5:df:85:b0:5e:c2:74:4a:51:87:d3:12:32: 9d:ab:c7:42:52:94:f7:80:15:6d:43:f3:ab:9f:a3: fb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:68:C2:A2:EA:77:39:E4:03:5C:95:37:49:AC:FB:96:C9:AC:60:47 X509v3 Authority Key Identifier: keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:bb:32:9e:33:03:54:02:27:bc:2b:b2:8d:61:a7:e7:fc:e2: 75:b7:21:01:c7:15:aa:cb:44:4a:6b:77:a0:d9:1e:7c:7b:51: 3c:2d:a8:d7:eb:6c:d8:5b:41:d5:36:a8:9e:29:60:60:39:a7: f0:b4:58:1a:2d:b4:c6:a2:e8:1a:ed:04:63:3a:b8:e7:d6:f3: 62:38:35:c5:86:ba:3e:a2:9e:cb:4a:57:3c:d5:b7:3a:48:af: 41:e9:1e:f3:89:d2:65:89:1e:9f:c2:0b:a8:ed:14:fd:09:e8: 6d:84:15:09:bb:24:44:84:0e:77:db:39:74:6a:2a:1f:da:b6: 1b:6b:d4:70:47:45:10:4a:16:39:ef:c7:f5:ba:92:47:e5:1d: 0f:7e:4c:df:b4:c3:87:43:4f:2d:27:cd:95:8f:09:e2:d6:b5: 77:e3:fa:1e:1f:ec:39:06:4c:a2:23:a4:e9:2e:af:c1:c4:85: 23:c5:83:37:1c:fd:db:af:e2:83:d2:05:7f:c8:d4:e5:f2:17: c1:6e:c2:36:83:5f:40:67:d2:2f:50:35:da:cc:af:c5:8a:b0: 42:09:8c:34:59:9b:2a:5a:86:f1:b1:46:6d:0a:fc:f1:85:c6: 67:6e:f4:b3:31:db:1c:33:4b:a9:c1:d4:22:18:ba:7b:68:8c: 0c:68:ea:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNeNz624HRNSQ7+NjAreIuk+O5nUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2 ODc3NDBFNDAeFw0yNjAzMjQyMjA1MDNaFw0yNjAzMjgwOTAxMDNaMDMxMTAvBgNV BAMTKDE5NjhDMkEyRUE3NzM5RTQwMzVDOTUzNzQ5QUNGQjk2QzlBQzYwNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4jTjWIIbhMQ4Jfn8eGKhEq4Ur +DX/PejT3FGRRBjaeRt/oV10qe2ZS6ehH8/YrX64LoVWbKFU8iMKUj+eH1O7tDMN DK1eeMDElF70L62uQJ8LrP0irF0sgIzdYIgFkWXwBg4ftXXud0yNpvuPHnoXxe5l 0G90uQh0Dnj1npfDeuNQyuAgEZlgkd67BuUOuAdW1YvKkGcLDVir2TI0XvmrrmH0 nZmnsUUuvPACOhApY8KqH+mPcD0kYxUpBfjhmZSwTxE3g4uHm/FDyFIrM/K48dAz pkv+1EW/BmLWU4wEUxBPtd+FsF7CdEpRh9MSMp2rx0JSlPeAFW1D86ufo/u1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGWjCoup3OeQDXJU3Saz7lsmsYEcwHwYDVR0j BBgwFoAUo5abJjiZM9fSHzqNdXy5xWh3QOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDMzMzZmOC1lNTQ2LTQ2MmMtODQxMC1iNzczMmI2YzgwMTUvMC9BMzk2OUIyNjM4 OTkzM0Q3RDIxRjNBOEQ3NTdDQjlDNTY4Nzc0MEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2ODc3 NDBFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5 QzU2ODc3NDBFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEe7Mp4zA1QCJ7wrso1hp+f84nW3IQHHFarL REprd6DZHnx7UTwtqNfrbNhbQdU2qJ4pYGA5p/C0WBottMai6BrtBGM6uOfW82I4 NcWGuj6instKVzzVtzpIr0HpHvOJ0mWJHp/CC6jtFP0J6G2EFQm7JESEDnfbOXRq Kh/athtr1HBHRRBKFjnvx/W6kkflHQ9+TN+0w4dDTy0nzZWPCeLWtXfj+h4f7DkG TKIjpOkur8HEhSPFgzcc/duv4oPSBX/I1OXyF8FuwjaDX0Bn0i9QNdrMr8WKsEIJ jDRZmypahvGxRm0K/PGFxmdu9LMx2xwzS6nB1CIYuntojAxo6ks= -----END CERTIFICATE-----Generated at Thu Mar 26 15:49:36 2026 by rpki-client