$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft File: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft (raw, json) Hash identifier: 1d6payi1DpoCeBYi3h7ydwEn2BhBaJ75JBqUbldi3Dc= Subject key identifier: 26:73:38:B3:40:A1:D4:4A:D7:2E:09:0A:51:38:6C:8D:9B:0E:E5:E3 Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 Certificate issuer: /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Certificate serial: 3C0A9C9F950B75C6C2B422B5FF30A0AA118271A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft Manifest number: 0181 Signing time: Thu 26 Mar 2026 09:41:34 +0000 Manifest this update: Thu 26 Mar 2026 09:36:34 +0000 Manifest next update: Sun 29 Mar 2026 19:05:34 +0000 Files and hashes: 1: 3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (hash: uTRK4cfs6kU0tRewOXGg2ZHMhMcLjNRyQucE48/K6O4=) 2: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: YkSgIj60/WrfXjkzTsvNmSBHnWYo3l/r2aakVLlTHlI=) 3: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: OYS8ELzbytajd0ilVDQZgP9NBUy3Oh9sGjo4E0+GTlo=) 4: 3130332e3134372e38302e302f32342d3234203d3e20313534343130.roa (hash: uRfUQhVw2ch7VqXxR20eCaHEC59WymM8VUU6S8pSv3Q=) 5: 3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa (hash: xUzQPT7Y48BY1f3qkuwnRycvuFaKrS+6XVzcFNbQt5U=) 6: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl (hash: GmlwxioB8o1qhQjFtJgEzbWzS3fhd3QS7HPBPV8uLwU=) 7: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: kN+ITRJB9Y4U/xn0VPZsd1TVeghOlD4cfCGOQ2XBRrQ=) 8: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: cossnBP1XdG0zEY8nTnjaUaCSRdcepAuP+Hq1t+V00c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 19:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:0a:9c:9f:95:0b:75:c6:c2:b4:22:b5:ff:30:a0:aa:11:82:71:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Validity Not Before: Mar 26 09:36:34 2026 GMT Not After : Mar 29 19:05:34 2026 GMT Subject: CN=267338B340A1D44AD72E090A51386C8D9B0EE5E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:01:c7:00:84:cb:03:fc:fa:03:48:83:20:18: e8:1a:bb:1f:e1:ea:a3:59:79:0f:f3:a4:b2:5f:5d: fb:35:7d:7e:e6:7e:f5:c0:41:dc:16:c0:d5:05:03: 2c:33:4c:01:e9:a3:e0:96:b6:f8:d3:92:8d:d2:7f: 1b:86:10:9d:e2:23:35:b0:b0:9a:60:45:42:d2:b5: 1c:3d:32:74:13:f3:70:f0:da:5d:bb:6e:18:61:c2: be:24:68:e8:92:00:20:f8:93:26:c9:7f:b6:61:c1: 22:ae:49:02:79:fc:f2:eb:b0:e1:ce:ae:f6:74:16: 85:61:ea:38:bb:32:00:24:52:25:e1:fb:5f:f6:c3: ee:35:e9:70:44:a4:48:63:88:52:c0:7d:95:10:31: 54:1a:6e:b2:04:19:19:7e:62:73:d1:7e:cd:08:1b: b4:c1:85:39:c5:3a:ff:07:de:4d:1e:be:21:da:63: 95:d2:02:5f:32:67:58:9d:6f:82:f7:91:d7:5a:dc: 8f:29:c2:7a:b3:94:a4:8f:41:03:1c:e9:f8:ae:ff: c5:fa:c7:cc:3c:e0:50:4e:ba:9f:66:c9:7b:94:fe: 7e:db:a3:07:23:42:fa:e8:6d:62:e7:2a:ef:7d:ca: df:73:56:bc:cc:8f:b7:48:53:f4:16:17:d6:3c:92: 84:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:73:38:B3:40:A1:D4:4A:D7:2E:09:0A:51:38:6C:8D:9B:0E:E5:E3 X509v3 Authority Key Identifier: keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:6a:fb:fc:60:32:70:85:38:0f:a5:f0:d3:ea:67:71:33:7d: b7:80:7f:bb:5d:98:57:95:b2:a6:3c:79:6e:33:93:c3:76:60: e5:77:25:d4:53:c5:58:73:16:89:6c:ae:c6:a3:61:13:00:18: 2a:49:10:74:f3:d7:b2:91:78:64:c1:c1:03:0b:30:ff:2c:6c: 64:fe:eb:b1:a9:d6:51:53:73:ef:23:cd:96:ba:a4:09:f2:49: 74:b5:83:bf:be:d0:4e:84:db:79:76:07:e0:ac:74:94:33:5f: 74:c4:82:ba:5e:39:52:36:81:4c:77:f9:48:f5:29:a4:a3:6f: 99:24:27:82:9a:6f:34:00:ad:ca:64:4f:b5:75:3f:ee:e3:60: da:b7:8e:74:4a:76:3c:58:22:84:e8:c0:5f:2c:1e:04:a8:f3: a0:b8:c6:69:e5:c5:54:90:55:b5:41:04:f5:7a:a0:da:85:68: 41:6b:46:9c:cf:67:86:17:34:a7:3a:1b:d3:a3:0c:bb:dc:ce: ad:47:b8:79:ee:ff:d8:0d:c1:ce:77:97:e3:ae:1e:dc:eb:1a: 37:b7:b4:df:7a:6a:5c:e5:95:93:1d:3d:a7:c4:e5:23:61:bf: 2b:96:ea:62:ac:94:74:db:cc:df:b2:6e:24:63:7c:28:ae:d9: e0:4a:4c:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPAqcn5ULdcbCtCK1/zCgqhGCcakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdC QjVCMTI0NjAeFw0yNjAzMjYwOTM2MzRaFw0yNjAzMjkxOTA1MzRaMDMxMTAvBgNV BAMTKDI2NzMzOEIzNDBBMUQ0NEFENzJFMDkwQTUxMzg2QzhEOUIwRUU1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdAccAhMsD/PoDSIMgGOgaux/h 6qNZeQ/zpLJfXfs1fX7mfvXAQdwWwNUFAywzTAHpo+CWtvjTko3SfxuGEJ3iIzWw sJpgRULStRw9MnQT83Dw2l27bhhhwr4kaOiSACD4kybJf7ZhwSKuSQJ5/PLrsOHO rvZ0FoVh6ji7MgAkUiXh+1/2w+416XBEpEhjiFLAfZUQMVQabrIEGRl+YnPRfs0I G7TBhTnFOv8H3k0eviHaY5XSAl8yZ1idb4L3kdda3I8pwnqzlKSPQQMc6fiu/8X6 x8w84FBOup9myXuU/n7bowcjQvrobWLnKu99yt9zVrzMj7dIU/QWF9Y8koTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJnM4s0Ch1ErXLgkKUThsjZsO5eMwHwYDVR0j BBgwFoAUo+/d2tUm76Pygh6ebsbnR7tbEkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmM1NzBlZi02ZWZkLTRmOTctYmYzMS05NjgxMjZhYjU3YzAvMC9BM0VGREREQUQ1 MjZFRkEzRjI4MjFFOUU2RUM2RTc0N0JCNUIxMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdCQjVC MTI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3 NDdCQjVCMTI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRq+/xgMnCFOA+l8NPqZ3EzfbeAf7tdmFeV sqY8eW4zk8N2YOV3JdRTxVhzFolsrsajYRMAGCpJEHTz17KReGTBwQMLMP8sbGT+ 67Gp1lFTc+8jzZa6pAnySXS1g7++0E6E23l2B+CsdJQzX3TEgrpeOVI2gUx3+Uj1 KaSjb5kkJ4KabzQArcpkT7V1P+7jYNq3jnRKdjxYIoTowF8sHgSo86C4xmnlxVSQ VbVBBPV6oNqFaEFrRpzPZ4YXNKc6G9OjDLvczq1HuHnu/9gNwc53l+OuHtzrGje3 tN96alzllZMdPafE5SNhvyuW6mKslHTbzN+ybiRjfCiu2eBKTDY= -----END CERTIFICATE-----Generated at Thu Mar 26 21:36:49 2026 by rpki-client