$ rpki-client -vvf repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft File: 3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft (raw, json) Hash identifier: VSGIzmNkz6KqXAgNmlSiWNsMdeSnFXVMmrsys8jPQCw= Subject key identifier: 38:6A:85:80:92:E7:24:BF:66:EA:86:E0:65:8D:0B:7E:A3:49:7D:07 Authority key identifier: 3C:71:A1:05:04:1D:9E:A0:1E:F4:C6:96:D4:5D:0D:4C:BF:69:BB:FB Certificate issuer: /CN=3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB Certificate serial: 4D7E1FB499CE7CA9EFECE951DAFA678EA258D75C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft Manifest number: 36 Signing time: Thu 26 Mar 2026 13:42:13 +0000 Manifest this update: Thu 26 Mar 2026 13:37:13 +0000 Manifest next update: Sun 29 Mar 2026 20:13:13 +0000 Files and hashes: 1: 3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.crl (hash: 7hHylLufneq/Dzrjg2X6ySYbknyq3pMaixPouNxucWQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.crl rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:7e:1f:b4:99:ce:7c:a9:ef:ec:e9:51:da:fa:67:8e:a2:58:d7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB Validity Not Before: Mar 26 13:37:13 2026 GMT Not After : Mar 29 20:13:13 2026 GMT Subject: CN=386A858092E724BF66EA86E0658D0B7EA3497D07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:8f:b8:04:a7:c8:7a:23:54:eb:f7:21:26: b5:be:12:a4:8b:dc:05:82:3a:9d:b2:74:59:ad:b4: a7:5e:74:4b:45:98:b6:cf:33:fd:9a:9e:ef:f7:c3: c1:eb:2b:d1:19:97:f2:55:1b:98:36:13:a3:5e:1d: 2c:fe:c4:ef:1d:22:92:80:fa:ed:ea:54:f5:20:1d: da:a0:31:67:f3:6d:e5:d6:02:f8:ba:fa:77:9c:26: 3a:ef:0c:b9:79:4a:89:4d:24:a6:24:b9:bb:71:06: f3:57:c0:32:60:9b:a0:d2:65:ad:59:74:9d:fe:5d: 2a:4a:81:a4:48:c4:b0:74:05:73:46:01:c0:6a:ec: ce:48:a3:e4:82:0b:67:54:30:f1:17:3e:31:03:9f: 9a:d1:c0:7e:91:6d:a5:65:46:80:7e:44:08:96:6f: ea:79:40:30:27:c0:8f:fc:b2:ce:a1:0e:61:90:88: 0a:6d:ad:38:42:c8:f5:ad:05:91:d9:87:c6:51:8b: 5c:20:86:dc:c1:ab:4d:e5:26:45:81:bb:3e:92:0e: dd:fa:a9:2e:cb:bd:36:f8:ad:d1:71:04:0a:a6:cd: 72:2d:3c:4c:6c:71:74:30:95:84:f5:1b:17:7c:1d: f9:0d:8f:d3:38:eb:e4:fa:c0:46:a0:36:33:50:33: d9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6A:85:80:92:E7:24:BF:66:EA:86:E0:65:8D:0B:7E:A3:49:7D:07 X509v3 Authority Key Identifier: keyid:3C:71:A1:05:04:1D:9E:A0:1E:F4:C6:96:D4:5D:0D:4C:BF:69:BB:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d3:fd:51:75:a7:24:cf:d1:bb:ed:9a:98:16:14:13:4b:67: 4f:b0:aa:35:3e:69:2a:bd:2d:72:e6:78:2f:55:83:97:72:7a: b2:2d:f0:1b:dc:43:51:fb:23:29:d3:ab:bf:36:80:c7:8d:ca: fe:31:26:ce:b9:f4:6f:ab:f6:7b:ad:ee:9a:c6:d5:3a:3a:60: 56:b7:b4:8d:0d:6f:3a:11:f2:01:52:9d:36:52:e6:41:1f:c6: df:08:df:c9:a9:ac:73:52:88:1f:11:85:d4:63:1b:57:25:39: 6e:d1:77:64:25:52:2c:e7:7b:41:62:bf:13:2a:a8:cb:cd:ef: 59:ea:4c:a6:1e:72:c2:0c:aa:d7:76:e2:26:87:09:df:9a:13: 97:2b:08:ce:48:7c:09:d5:3b:98:30:68:6c:63:b8:df:88:1b: 85:31:ee:20:d9:b9:4e:15:3c:7b:45:be:15:dc:73:d3:f5:59: 31:38:90:2e:9f:c1:12:8b:36:e7:5e:52:b8:fd:0c:64:39:28: b0:8e:44:d6:2c:4a:0c:f6:e7:15:d4:ad:4c:5e:3f:99:c5:90: 29:2c:ba:32:d4:fb:1a:13:15:c6:1b:7c:71:64:50:77:83:8f: 90:30:6f:ea:d1:9a:90:a1:e9:2c:1a:27:bf:ff:47:29:d4:d8: bc:9c:f0:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTX4ftJnOfKnv7OlR2vpnjqJY11wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3MUExMDUwNDFEOUVBMDFFRjRDNjk2RDQ1RDBENENC RjY5QkJGQjAeFw0yNjAzMjYxMzM3MTNaFw0yNjAzMjkyMDEzMTNaMDMxMTAvBgNV BAMTKDM4NkE4NTgwOTJFNzI0QkY2NkVBODZFMDY1OEQwQjdFQTM0OTdEMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH+o+4BKfIeiNU6/chJrW+EqSL 3AWCOp2ydFmttKdedEtFmLbPM/2anu/3w8HrK9EZl/JVG5g2E6NeHSz+xO8dIpKA +u3qVPUgHdqgMWfzbeXWAvi6+necJjrvDLl5SolNJKYkubtxBvNXwDJgm6DSZa1Z dJ3+XSpKgaRIxLB0BXNGAcBq7M5Io+SCC2dUMPEXPjEDn5rRwH6RbaVlRoB+RAiW b+p5QDAnwI/8ss6hDmGQiAptrThCyPWtBZHZh8ZRi1wghtzBq03lJkWBuz6SDt36 qS7LvTb4rdFxBAqmzXItPExscXQwlYT1Gxd8HfkNj9M46+T6wEagNjNQM9kjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOGqFgJLnJL9m6obgZY0LfqNJfQcwHwYDVR0j BBgwFoAUPHGhBQQdnqAe9MaW1F0NTL9pu/swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjUzMDllMi1mOTI5LTQyZDktOWMzYi1hOTFhMDA2OTBjZjEvMC8zQzcxQTEwNTA0 MUQ5RUEwMUVGNEM2OTZENDVEMEQ0Q0JGNjlCQkZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3MUExMDUwNDFEOUVBMDFFRjRDNjk2RDQ1RDBENENCRjY5 QkJGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY1MzA5ZTItZjkyOS00MmQ5LTlj M2ItYTkxYTAwNjkwY2YxLzAvM0M3MUExMDUwNDFEOUVBMDFFRjRDNjk2RDQ1RDBE NENCRjY5QkJGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/T/VF1pyTP0bvtmpgWFBNLZ0+wqjU+aSq9 LXLmeC9Vg5dyerIt8BvcQ1H7IynTq782gMeNyv4xJs659G+r9nut7prG1To6YFa3 tI0NbzoR8gFSnTZS5kEfxt8I38mprHNSiB8RhdRjG1clOW7Rd2QlUizne0FivxMq qMvN71nqTKYecsIMqtd24iaHCd+aE5crCM5IfAnVO5gwaGxjuN+IG4Ux7iDZuU4V PHtFvhXcc9P1WTE4kC6fwRKLNudeUrj9DGQ5KLCORNYsSgz25xXUrUxeP5nFkCks ujLU+xoTFcYbfHFkUHeDj5Awb+rRmpCh6SwaJ7//RynU2Lyc8NA= -----END CERTIFICATE-----Generated at Thu Mar 26 22:15:07 2026 by rpki-client