$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft File: 3E69DE558C030D2041570E32C387F764C38BBBA9.mft (raw, json) Hash identifier: WXigUWbOMrDng6PsrAlRjrwmMqbxTW4sOeWWgBo5aM0= Subject key identifier: E6:27:B5:7A:74:0D:C4:98:7C:77:91:AE:87:7C:18:9B:5E:65:31:B6 Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 Certificate issuer: /CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Certificate serial: 3D131F0A98D8C2BEAECD3D7161D9A950C81BC93E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft Manifest number: 024C Signing time: Tue 24 Mar 2026 20:52:14 +0000 Manifest this update: Tue 24 Mar 2026 20:47:14 +0000 Manifest next update: Sat 28 Mar 2026 06:20:14 +0000 Files and hashes: 1: 3E69DE558C030D2041570E32C387F764C38BBBA9.crl (hash: KMRvizepqmcaV2q2bIdOvh+yBbEt3fbkdsBm2Rm/67s=) 2: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: xCOn9NWbt0GGMLt//qaNrgk/Sb/ECXg1/Jw9T03F6gc=) 3: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: rPKEvLXWGWoztExe4HntWPPQ3bNHicZSmrS4LoU+DGA=) 4: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: +aYgV7p1X1TAw32sJQDFPZ5QXQcUqf2Pg9Wsy7Iew4g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:13:1f:0a:98:d8:c2:be:ae:cd:3d:71:61:d9:a9:50:c8:1b:c9:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Validity Not Before: Mar 24 20:47:14 2026 GMT Not After : Mar 28 06:20:14 2026 GMT Subject: CN=E627B57A740DC4987C7791AE877C189B5E6531B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a4:d8:be:64:42:aa:81:15:0c:a1:8d:df:00: 92:ea:3e:7d:32:80:20:03:71:84:ca:87:5c:81:e5: ae:38:6d:da:2c:f9:e3:13:2b:70:01:24:97:a1:08: bf:9d:1f:85:0c:35:fb:5c:df:31:fc:47:b2:ce:8b: d5:90:ab:d4:ea:17:93:a0:32:cb:ed:21:4a:49:37: 42:1a:58:1e:dd:91:83:94:5d:96:08:6b:92:e7:8f: ce:9a:36:fa:4e:b1:df:81:94:d1:af:c6:14:05:0d: d7:00:f9:f1:cc:ff:60:cb:b9:3d:d6:8b:59:8b:b2: 22:63:b2:fc:bf:96:f1:e2:8d:5a:54:01:f3:71:3f: 68:04:83:10:51:91:1f:18:2a:e5:62:06:33:74:7d: 8f:e0:4c:6f:c4:57:2d:c2:82:0c:51:bb:be:58:62: d2:bf:2c:b3:89:54:a6:3d:68:1e:3b:c3:03:0b:f0: 69:1e:c8:9a:e5:a9:c2:ac:eb:b8:e3:a7:6b:cd:e7: 69:a9:76:0f:7b:6c:19:22:42:44:4a:15:7b:b2:84: bc:90:e7:18:1f:67:29:73:88:50:85:ac:6d:e2:86: 6e:30:1e:8f:ae:b9:a1:df:4e:78:ae:e5:41:7a:33: d2:65:2f:6b:24:a5:d1:8b:33:5f:42:9b:98:c9:55: ea:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:27:B5:7A:74:0D:C4:98:7C:77:91:AE:87:7C:18:9B:5E:65:31:B6 X509v3 Authority Key Identifier: keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:36:ba:3c:bb:c8:e5:f8:da:bd:e0:10:04:ba:d8:e5:7d:05: ee:5b:68:d7:67:7a:c0:4f:04:ae:50:7d:4b:9e:fe:a5:f7:f6: ee:af:2e:e9:a6:be:ec:c9:45:62:97:b3:ca:5a:3d:5e:19:36: f0:b8:67:aa:f8:25:a3:6b:45:c4:32:6f:59:ab:f2:99:1d:47: 95:eb:b3:36:fb:f6:95:6e:f6:9c:19:4a:0b:47:e5:da:5c:1c: 4a:ca:18:14:b3:8f:b6:ca:e6:91:42:10:a5:29:20:19:57:8f: 6f:82:27:94:80:3e:68:d9:a4:95:39:a2:7e:05:0d:c0:5b:9a: ae:3f:1a:f1:2b:23:53:e1:a6:cb:df:bd:29:cc:5d:b0:e0:52: da:bc:56:3d:a5:b2:a5:ed:3d:75:80:35:1d:66:c4:80:18:24: 29:db:3f:53:64:ed:a9:d3:6f:22:29:35:53:c5:d2:fd:b0:f9: b2:c6:c3:f6:6f:d5:3f:b7:48:cd:7d:13:74:1a:26:57:5b:06: 74:50:2f:64:a4:ef:44:2e:3a:3c:e1:11:29:5f:a4:58:e2:2f: 9e:25:00:46:62:36:9d:f0:7c:c2:5c:76:b4:b8:f8:56:90:b4: 41:eb:b8:e2:3b:6b:06:17:b9:42:1b:d0:a8:99:48:3b:7e:8f: 01:bf:2e:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPRMfCpjYwr6uzT1xYdmpUMgbyT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRD MzhCQkJBOTAeFw0yNjAzMjQyMDQ3MTRaFw0yNjAzMjgwNjIwMTRaMDMxMTAvBgNV BAMTKEU2MjdCNTdBNzQwREM0OTg3Qzc3OTFBRTg3N0MxODlCNUU2NTMxQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgpNi+ZEKqgRUMoY3fAJLqPn0y gCADcYTKh1yB5a44bdos+eMTK3ABJJehCL+dH4UMNftc3zH8R7LOi9WQq9TqF5Og MsvtIUpJN0IaWB7dkYOUXZYIa5Lnj86aNvpOsd+BlNGvxhQFDdcA+fHM/2DLuT3W i1mLsiJjsvy/lvHijVpUAfNxP2gEgxBRkR8YKuViBjN0fY/gTG/EVy3CggxRu75Y YtK/LLOJVKY9aB47wwML8GkeyJrlqcKs67jjp2vN52mpdg97bBkiQkRKFXuyhLyQ 5xgfZylziFCFrG3ihm4wHo+uuaHfTniu5UF6M9JlL2skpdGLM19Cm5jJVeqBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ie1enQNxJh8d5Guh3wYm15lMbYwHwYDVR0j BBgwFoAUPmneVYwDDSBBVw4yw4f3ZMOLu6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIzYmIzNC0xNWUyLTQ0ODctYjUyNy02ZTc1MTI4NmNlN2QvMC8zRTY5REU1NThD MDMwRDIwNDE1NzBFMzJDMzg3Rjc2NEMzOEJCQkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRDMzhC QkJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3 NjRDMzhCQkJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMw2ujy7yOX42r3gEAS62OV9Be5baNdnesBP BK5QfUue/qX39u6vLummvuzJRWKXs8paPV4ZNvC4Z6r4JaNrRcQyb1mr8pkdR5Xr szb79pVu9pwZSgtH5dpcHErKGBSzj7bK5pFCEKUpIBlXj2+CJ5SAPmjZpJU5on4F DcBbmq4/GvErI1PhpsvfvSnMXbDgUtq8Vj2lsqXtPXWANR1mxIAYJCnbP1Nk7anT byIpNVPF0v2w+bLGw/Zv1T+3SM19E3QaJldbBnRQL2Sk70QuOjzhESlfpFjiL54l AEZiNp3wfMJcdrS4+FaQtEHruOI7awYXuUIb0KiZSDt+jwG/LoA= -----END CERTIFICATE-----Generated at Thu Mar 26 19:51:05 2026 by rpki-client