$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft File: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft (raw, json) Hash identifier: ru9/OD2daLR/1nhxazwLgiGPS9ZzSUX8MCBak49eQNM= Subject key identifier: 63:CE:53:7B:5C:87:FB:6A:F0:7C:AB:B7:81:BC:6E:BC:3E:CF:C6:1D Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Certificate serial: 5A21F66261E4C16737C19CA1D0147240554B0472 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft Manifest number: 0287 Signing time: Tue 24 Mar 2026 14:42:39 +0000 Manifest this update: Tue 24 Mar 2026 14:37:39 +0000 Manifest next update: Sat 28 Mar 2026 01:47:39 +0000 Files and hashes: 1: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: nmYMdBmJi2dLE67aggA0wkg2W+WeeYl9g1CRUjC4EIE=) 2: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: UZSj1gbIEphe1mWnvI396dxPxD/E5WStBcGb1wpBcZo=) 3: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: ftR/aIoDxynVS6qBsO4B8Q2lDsNYJt3pQB7ABoEc86s=) 4: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: P3vCG1eFCyYSS9LnEKWdiNtZlxHi5gwLg+zU1gklVa8=) 5: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: CxJ4hxnplLzbB6pwhFxT3HS+r/REisJiHUMYV4z0aDo=) 6: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: YLdmpoGwseRdvkERTvIA0a5PWJe/uQGzq/1tFv4WuUc=) 7: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: MfIpRbDFsLXG7r+gaPn+k51+pDkVoYxO4kfKQbaBZic=) 8: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: YGy0DWIan0m6cHj+i356tb49y0BOxHi+yJ0Q2w1l+a8=) 9: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl (hash: TTU95iXf7K18OPPzXRNQMmlye93bM3WKyy5YvZ44krw=) 10: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: TwtuOdFbOmuGSiYWtbwZ1uQh0l9S7wmozR9F9oj2vO4=) 11: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: kpYH6pkPfG3ly0aK9MFNOJx2Os8AcuGthnzkfl0MEeU=) 12: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: MzI0JKvb+gG5ZW7LD7zcT6Ff/HYQKP31Hdz7lrIhDQk=) 13: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: WokSKV1NyKPp5JmVhTT7RX9X4V0DteRntg1alBFixWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:21:f6:62:61:e4:c1:67:37:c1:9c:a1:d0:14:72:40:55:4b:04:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Validity Not Before: Mar 24 14:37:39 2026 GMT Not After : Mar 28 01:47:39 2026 GMT Subject: CN=63CE537B5C87FB6AF07CABB781BC6EBC3ECFC61D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ca:4d:fd:d8:f4:af:68:6a:c4:fc:2f:79:5f: 8b:54:ed:11:f7:25:90:01:4a:15:e4:ac:cf:02:17: 7f:ad:25:6f:a4:2a:3a:87:61:fe:5b:ac:de:53:60: 76:69:99:53:fb:12:d5:41:94:1a:e7:21:c6:75:83: 58:13:f0:e7:f1:d4:41:87:40:31:84:42:0a:9f:18: 1f:ba:0b:b5:40:b2:f7:8f:bd:38:b8:40:8d:50:cf: b4:b4:06:8f:b6:76:bc:ae:da:dd:76:5a:51:54:53: 02:8e:f2:bf:1d:8e:4d:48:bc:50:1d:e8:35:ef:57: fb:48:14:01:4d:da:d8:bd:8d:78:2f:07:17:10:ce: 93:73:12:14:54:93:22:61:d3:f0:68:f6:e7:50:85: 8b:1e:52:ef:1e:be:8e:ae:c9:a2:01:60:e3:5a:34: e9:a6:00:db:d2:8a:f9:2a:d6:92:ac:b8:9b:3c:86: 36:84:ac:00:f7:5a:9d:c1:65:57:5b:4f:71:a4:8b: 10:eb:e4:1f:5c:2b:7d:43:ca:ee:cb:46:84:8f:60: 5a:a0:67:2c:07:43:a6:79:b7:03:94:7b:ea:fc:27: 50:b4:f1:92:63:d2:2e:86:b7:40:88:ae:d5:5e:94: 17:45:ea:dd:8f:43:52:d2:d3:8c:d3:6f:63:2f:0a: 6b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CE:53:7B:5C:87:FB:6A:F0:7C:AB:B7:81:BC:6E:BC:3E:CF:C6:1D X509v3 Authority Key Identifier: keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ce:ac:0a:3a:c3:d8:fd:8e:03:f6:3e:84:f4:37:22:ce:78: e4:17:ac:61:1a:ef:d9:53:2b:f7:68:95:c2:10:90:1d:61:1a: db:3c:ca:f0:56:25:b4:c5:c9:8b:27:a8:ba:67:a0:24:36:7d: 38:b9:34:ba:02:ee:2e:94:0a:86:8e:23:b6:a2:ce:38:c4:50: 74:8d:11:54:44:28:0e:d6:9b:3e:d1:0a:a1:8d:8f:b5:74:fc: bf:a9:66:b3:b5:54:00:e6:4c:db:7c:29:d0:f7:0f:62:3b:14: 21:ca:fc:88:d6:8a:05:4a:0c:b5:a7:72:fe:80:e2:72:f6:7e: 65:12:95:e5:f2:7d:f5:bd:d9:89:56:3b:86:9a:4e:a5:31:60: 80:1a:8c:af:f4:2b:77:80:24:46:9b:13:9d:c6:f5:fe:a2:02: 3b:35:df:bf:93:6b:ef:bd:59:64:0d:37:c3:b7:f1:06:5e:02: ee:3d:40:c8:33:bd:ac:61:38:ed:f4:5d:5a:0f:66:8d:a1:31: 68:70:e0:d3:e4:fd:1b:52:d9:45:db:18:57:41:ff:9e:cd:24: f9:68:cb:d1:81:1d:d0:57:1d:ef:0e:17:fe:bd:e7:41:09:c8: 48:06:c4:38:bb:6e:63:52:d8:a7:27:db:be:44:d7:1c:e7:7b: 00:eb:64:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWiH2YmHkwWc3wZyh0BRyQFVLBHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3 QUM2NkE4QzAeFw0yNjAzMjQxNDM3MzlaFw0yNjAzMjgwMTQ3MzlaMDMxMTAvBgNV BAMTKDYzQ0U1MzdCNUM4N0ZCNkFGMDdDQUJCNzgxQkM2RUJDM0VDRkM2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMyk392PSvaGrE/C95X4tU7RH3 JZABShXkrM8CF3+tJW+kKjqHYf5brN5TYHZpmVP7EtVBlBrnIcZ1g1gT8Ofx1EGH QDGEQgqfGB+6C7VAsvePvTi4QI1Qz7S0Bo+2dryu2t12WlFUUwKO8r8djk1IvFAd 6DXvV/tIFAFN2ti9jXgvBxcQzpNzEhRUkyJh0/Bo9udQhYseUu8evo6uyaIBYONa NOmmANvSivkq1pKsuJs8hjaErAD3Wp3BZVdbT3GkixDr5B9cK31Dyu7LRoSPYFqg ZywHQ6Z5twOUe+r8J1C08ZJj0i6Gt0CIrtVelBdF6t2PQ1LS04zTb2MvCmvXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY85Te1yH+2rwfKu3gbxuvD7Pxh0wHwYDVR0j BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2 NkE4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU1NDAxNjQtM2Q0Ni00Nzk0LWJm NTUtYjZiMTM0ZDlhYjEzLzAvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTRE MzU3QUM2NkE4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfOrAo6w9j9jgP2PoT0NyLOeOQXrGEa79lT K/dolcIQkB1hGts8yvBWJbTFyYsnqLpnoCQ2fTi5NLoC7i6UCoaOI7aizjjEUHSN EVREKA7Wmz7RCqGNj7V0/L+pZrO1VADmTNt8KdD3D2I7FCHK/IjWigVKDLWncv6A 4nL2fmUSleXyffW92YlWO4aaTqUxYIAajK/0K3eAJEabE53G9f6iAjs137+Ta++9 WWQNN8O38QZeAu49QMgzvaxhOO30XVoPZo2hMWhw4NPk/RtS2UXbGFdB/57NJPlo y9GBHdBXHe8OF/6950EJyEgGxDi7bmNS2Kcn275E1xznewDrZHI= -----END CERTIFICATE-----Generated at Thu Mar 26 09:21:50 2026 by rpki-client