$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft File: 3FFB3838E6BD431731306308CFEC299A86723365.mft (raw, json) Hash identifier: b5M1y7uKjKsRKAwOjEKflifGCFrPyYCi+hJDGpCQVYA= Subject key identifier: B5:4F:8F:61:F8:32:87:F2:EB:31:04:2B:61:95:D3:E7:33:3F:89:DA Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365 Certificate serial: 1CB684871B4F32BCFCD428466AC505B1C0A08FA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft Manifest number: 01EE Signing time: Wed 25 Mar 2026 12:01:43 +0000 Manifest this update: Wed 25 Mar 2026 11:56:43 +0000 Manifest next update: Sat 28 Mar 2026 14:32:43 +0000 Files and hashes: 1: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: CV24SqbvkbSixkw/z0Fm5hevRc2j9on8+yOAVNVWp6c=) 2: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: gDJkwQ9gyZKkFYwdRFTy7wrHGMBa5YbgBo4hYHB8PGU=) 3: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: 89uLp70du3ndPcZNl1H5Nk2O6ZHn9JMvGjuVHTSWLsE=) 4: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: Fqn9pPcHWwZKysUIYt5AzoYTYKUkmk/oFAlI41zCFg0=) 5: 3FFB3838E6BD431731306308CFEC299A86723365.crl (hash: NtYSBReVx6I44YvTSSJbLB3kYRJlAXaTxV28krsUexc=) 6: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: V1qL9KpXi+aM0YLlOgcpxWGtKpt9u3OXh+uh8SzOfxo=) 7: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: In7/y6k0tKU1onXjk4QJUAhlh710hxTg1r3tOp5IDjs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b6:84:87:1b:4f:32:bc:fc:d4:28:46:6a:c5:05:b1:c0:a0:8f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365 Validity Not Before: Mar 25 11:56:43 2026 GMT Not After : Mar 28 14:32:43 2026 GMT Subject: CN=B54F8F61F83287F2EB31042B6195D3E7333F89DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:69:09:88:6b:d2:17:ca:b2:02:74:2e:f0: 74:2f:33:fb:ac:86:87:21:46:0f:74:2c:33:34:e2: d9:10:fe:d9:75:bc:c0:fd:94:f6:3b:59:b9:f3:32: 03:bd:7f:d8:52:ce:db:b4:d7:8d:1b:5f:69:3d:39: 12:f4:ec:62:30:df:d6:9c:76:ec:b0:b1:f2:a6:ef: a3:2e:72:aa:37:1e:f8:9f:85:51:a9:3e:bf:b2:5a: 5d:d9:2d:3b:fd:b5:ee:d0:99:15:8d:f9:2b:d2:ce: ee:15:94:d8:a8:c4:23:1f:24:53:07:fc:c9:b7:74: c0:f6:9d:d5:68:69:5e:d1:00:dc:6e:18:38:26:7d: 7e:40:d9:a2:54:2e:28:2c:5c:5a:99:1d:77:39:9e: 72:fc:24:ad:31:c6:2f:fc:a7:a1:a3:9d:db:45:c4: a4:14:46:12:7e:de:81:d7:af:e8:2d:40:e2:52:06: d3:ea:08:a6:19:0e:cc:ef:03:22:11:17:1d:75:75: 88:12:87:40:cf:3e:d0:cc:f5:09:98:d8:f3:22:9b: 56:07:45:00:36:b3:d6:ac:7c:50:60:f5:63:50:6f: 1c:24:0d:41:9a:20:dd:be:0d:70:fa:30:9f:c3:e2: 58:0a:52:74:78:e8:e7:cd:40:88:9e:34:99:0b:f0: a7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4F:8F:61:F8:32:87:F2:EB:31:04:2B:61:95:D3:E7:33:3F:89:DA X509v3 Authority Key Identifier: keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:5c:60:3a:ae:20:1e:af:1c:02:30:e8:c8:ec:1e:a9:9a:ac: ba:c6:71:f8:2b:da:9a:c9:7a:e5:93:85:e4:82:fe:e0:32:1d: 4c:9a:9b:0e:5d:02:8c:13:22:a8:54:88:d8:b3:ad:64:7c:02: 4b:b2:e3:f5:f3:6f:49:57:63:ca:47:53:01:7d:6b:2f:22:6b: 55:59:57:49:34:10:80:27:77:1f:9a:b8:74:d1:ff:6f:14:38: 6d:44:c6:d0:bf:84:0c:de:62:bf:2f:2f:b4:26:4a:88:a4:a9: 70:39:26:a9:6d:2e:fe:b1:f2:47:45:7f:85:35:de:a9:63:52: 5a:04:fd:fa:1f:02:83:35:a7:27:5e:b8:ac:95:00:1e:60:d0: 25:4c:f6:f4:d5:b7:d6:5c:a0:bf:1d:82:38:4f:60:96:33:5e: 43:63:a7:fc:41:e6:ef:d8:23:23:51:62:38:cc:b8:a1:3d:71: 14:88:b6:0c:a9:c5:2b:39:42:76:59:9b:f8:5e:27:e4:c2:c1: 52:6c:9e:a5:9c:df:72:44:2e:45:8c:5d:a4:76:9e:c8:81:c3: c3:4c:1a:22:af:fa:12:bc:1a:aa:cf:d7:cd:83:80:80:63:d3: a4:2f:62:9b:2d:60:1d:00:ea:5e:45:27:95:8b:df:d7:2c:c3: 2a:e4:af:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHLaEhxtPMrz81ChGasUFscCgj6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4 NjcyMzM2NTAeFw0yNjAzMjUxMTU2NDNaFw0yNjAzMjgxNDMyNDNaMDMxMTAvBgNV BAMTKEI1NEY4RjYxRjgzMjg3RjJFQjMxMDQyQjYxOTVEM0U3MzMzRjg5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsNGkJiGvSF8qyAnQu8HQvM/us hochRg90LDM04tkQ/tl1vMD9lPY7WbnzMgO9f9hSztu0140bX2k9ORL07GIw39ac duywsfKm76Mucqo3HvifhVGpPr+yWl3ZLTv9te7QmRWN+SvSzu4VlNioxCMfJFMH /Mm3dMD2ndVoaV7RANxuGDgmfX5A2aJULigsXFqZHXc5nnL8JK0xxi/8p6GjndtF xKQURhJ+3oHXr+gtQOJSBtPqCKYZDszvAyIRFx11dYgSh0DPPtDM9QmY2PMim1YH RQA2s9asfFBg9WNQbxwkDUGaIN2+DXD6MJ/D4lgKUnR46OfNQIieNJkL8KcjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtU+PYfgyh/LrMQQrYZXT5zM/idowHwYDVR0j BBgwFoAUP/s4OOa9QxcxMGMIz+wpmoZyM2UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMC8zRkZCMzgzOEU2 QkQ0MzE3MzEzMDYzMDhDRkVDMjk5QTg2NzIzMzY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4Njcy MzM2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyNjFjMzctNTlhNS00MzY5LTkx ZTUtNGIxMzY2MDEwYzZkLzAvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5 OUE4NjcyMzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdcYDquIB6vHAIw6MjsHqmarLrGcfgr2prJ euWTheSC/uAyHUyamw5dAowTIqhUiNizrWR8Akuy4/Xzb0lXY8pHUwF9ay8ia1VZ V0k0EIAndx+auHTR/28UOG1ExtC/hAzeYr8vL7QmSoikqXA5JqltLv6x8kdFf4U1 3qljUloE/fofAoM1pydeuKyVAB5g0CVM9vTVt9ZcoL8dgjhPYJYzXkNjp/xB5u/Y IyNRYjjMuKE9cRSItgypxSs5QnZZm/heJ+TCwVJsnqWc33JELkWMXaR2nsiBw8NM GiKv+hK8GqrP182DgIBj06QvYpstYB0A6l5FJ5WL39cswyrkr8Q= -----END CERTIFICATE-----Generated at Thu Mar 26 21:21:55 2026 by rpki-client