$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft File: 3E788037924369AA3B8E52A5857804BE5D285FA2.mft (raw, json) Hash identifier: 3Nc7GYtXjTb+igaDLE4V9AW6rN5sJeGiH+VbGdBRuQo= Subject key identifier: AB:B9:E3:F6:65:60:FD:57:27:92:23:25:C1:84:5F:1F:A2:E1:81:4A Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Certificate serial: 50FC6B8538F2767CC75CCD4DB05B4D6112B5C500 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft Manifest number: 02CF Signing time: Tue 24 Mar 2026 13:02:07 +0000 Manifest this update: Tue 24 Mar 2026 12:57:07 +0000 Manifest next update: Fri 27 Mar 2026 20:31:07 +0000 Files and hashes: 1: 3E788037924369AA3B8E52A5857804BE5D285FA2.crl (hash: bR4gTg59weIgTABMkY+RQNmqL8JwvyjO15gkKAN4fWs=) 2: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: T+TvJ8L62bCZqFmpIphffr8c4LXSlLo4atPH9poDMJ0=) 3: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: ilhPhYMwxjxcNC74Yon3xYNd0uQUNUNF+7YCYR6VBOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:fc:6b:85:38:f2:76:7c:c7:5c:cd:4d:b0:5b:4d:61:12:b5:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Validity Not Before: Mar 24 12:57:07 2026 GMT Not After : Mar 27 20:31:07 2026 GMT Subject: CN=ABB9E3F66560FD5727922325C1845F1FA2E1814A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:b5:16:66:60:24:e3:fc:57:76:74:65:d2: 74:18:3f:da:e7:a7:8c:c1:96:1a:30:dc:28:f6:45: 4b:e6:aa:96:77:15:6f:2f:07:f6:bb:ef:e6:0e:b3: 55:d8:cf:21:a6:01:9e:d5:3b:f2:27:cf:39:9e:f0: 24:38:e2:33:b6:6e:d0:d9:c4:10:45:4c:1b:75:e4: 88:94:99:17:f2:6c:3a:7e:7d:0d:7c:55:7d:b3:e1: 5d:bc:51:ae:6a:aa:83:ba:b4:bf:89:bf:39:40:a6: 0b:35:a1:07:6e:05:d8:f2:eb:77:ae:17:d5:f8:25: 4e:18:8f:49:1b:c5:68:26:d6:a5:5a:e4:2b:7a:85: 03:a0:3f:02:ba:36:b8:61:50:f1:e6:d0:36:5c:1e: 22:6e:16:97:ef:76:9a:01:34:3d:e2:f0:29:7c:7a: 65:f6:52:84:62:fb:ae:3a:df:c3:35:47:d4:53:cd: 08:7c:12:26:d7:34:aa:bf:24:2a:88:b3:be:c5:ba: e1:ea:ff:d1:f7:43:e2:bb:57:eb:b9:5b:03:58:a5: 4f:b2:e7:65:76:0e:d6:11:1d:69:ff:78:13:d7:8a: 82:87:e3:78:aa:86:c6:92:30:86:85:5b:12:ff:59: 21:c1:cb:75:48:8b:28:86:c9:e5:d3:9f:10:7d:7c: 1f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B9:E3:F6:65:60:FD:57:27:92:23:25:C1:84:5F:1F:A2:E1:81:4A X509v3 Authority Key Identifier: keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:4f:b5:6b:dd:6b:be:ac:e1:9b:a7:65:91:f6:bf:35:c7:22: 68:a4:72:70:41:9f:95:38:1c:3d:1f:b5:55:e5:3b:f0:98:61: 16:b9:38:b2:57:33:4b:37:1a:b7:9f:60:10:6d:ce:47:cb:82: c7:74:15:9d:22:63:f8:0e:37:f8:9a:3f:3d:be:b2:29:34:76: ea:e1:87:ac:30:ed:cf:24:1e:cb:7a:6d:d3:6c:27:f8:cd:ec: 92:aa:59:87:d2:54:b4:a5:0c:9b:31:bc:35:a5:6b:09:98:80: 84:90:f9:9d:61:65:a7:1a:6c:ee:88:cb:04:13:27:a5:47:6b: 73:17:27:36:6e:35:ed:62:72:c3:cf:cf:d2:e4:7a:bf:0f:94: 58:d7:59:86:ff:cc:f1:37:f9:db:5a:e5:66:b2:b2:12:5e:c9: 5a:9a:60:f8:ec:af:a5:f4:ee:7c:30:71:38:14:03:be:dc:4f: 3f:f9:38:76:22:79:61:4d:54:e7:5a:26:f3:c7:91:c7:08:bb: a1:03:71:e7:0d:a9:2f:e2:17:36:ea:f2:5d:a6:d6:7d:33:b6: e5:52:11:6e:34:4a:35:7b:0f:bc:14:67:28:59:0c:45:55:d6: 41:2a:f0:02:9d:83:89:00:42:8d:dd:54:0b:65:b5:5d:90:09: 6d:61:28:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUPxrhTjydnzHXM1NsFtNYRK1xQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1 RDI4NUZBMjAeFw0yNjAzMjQxMjU3MDdaFw0yNjAzMjcyMDMxMDdaMDMxMTAvBgNV BAMTKEFCQjlFM0Y2NjU2MEZENTcyNzkyMjMyNUMxODQ1RjFGQTJFMTgxNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLCLUWZmAk4/xXdnRl0nQYP9rn p4zBlhow3Cj2RUvmqpZ3FW8vB/a77+YOs1XYzyGmAZ7VO/Inzzme8CQ44jO2btDZ xBBFTBt15IiUmRfybDp+fQ18VX2z4V28Ua5qqoO6tL+JvzlApgs1oQduBdjy63eu F9X4JU4Yj0kbxWgm1qVa5Ct6hQOgPwK6NrhhUPHm0DZcHiJuFpfvdpoBND3i8Cl8 emX2UoRi+64638M1R9RTzQh8EibXNKq/JCqIs77FuuHq/9H3Q+K7V+u5WwNYpU+y 52V2DtYRHWn/eBPXioKH43iqhsaSMIaFWxL/WSHBy3VIiyiGyeXTnxB9fB+FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq7nj9mVg/VcnkiMlwYRfH6LhgUowHwYDVR0j BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4 NUZBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0 QkU1RDI4NUZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlPtWvda76s4ZunZZH2vzXHImikcnBBn5U4 HD0ftVXlO/CYYRa5OLJXM0s3GrefYBBtzkfLgsd0FZ0iY/gON/iaPz2+sik0durh h6ww7c8kHst6bdNsJ/jN7JKqWYfSVLSlDJsxvDWlawmYgISQ+Z1hZacabO6IywQT J6VHa3MXJzZuNe1icsPPz9Lker8PlFjXWYb/zPE3+dta5WayshJeyVqaYPjsr6X0 7nwwcTgUA77cTz/5OHYieWFNVOdaJvPHkccIu6EDcecNqS/iFzbq8l2m1n0ztuVS EW40SjV7D7wUZyhZDEVV1kEq8AKdg4kAQo3dVAtltV2QCW1hKBA= -----END CERTIFICATE-----Generated at Thu Mar 26 18:57:07 2026 by rpki-client