$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft File: 3B1029D44B93CA0397DA506FE1E2147503641EC6.mft (raw, json) Hash identifier: PYwlsZ9tbaX3xRUqMA2AtaaWZjfcj2bgRD/L4EGOF5A= Subject key identifier: CA:2F:FB:19:E3:6B:BB:76:4A:84:06:E3:67:CB:0F:D0:1B:31:75:9E Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 Certificate issuer: /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Certificate serial: 0D04F605A5CEAB678E4E0EDA692603ECF92EA651 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft Manifest number: 01FA Signing time: Tue 24 Mar 2026 12:20:50 +0000 Manifest this update: Tue 24 Mar 2026 12:15:50 +0000 Manifest next update: Fri 27 Mar 2026 20:54:50 +0000 Files and hashes: 1: 3B1029D44B93CA0397DA506FE1E2147503641EC6.crl (hash: Bl60LpymfUupYiqGf+J2GvYsRfLrs3QiOcbSKCv5z2k=) 2: 3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa (hash: qj7cnLHXdzh3RQf7tTOLzRFTMV5gpaSe50w+x59MCNQ=) 3: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (hash: /Fhxy2YkZ3i/kGpUap0g80MdqacR/7CVzqXxyBvq/j8=) 4: 3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa (hash: qKimyHaQNdX3m0DVQDydLkKY11suW3jDJ+qURPZrcJA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:04:f6:05:a5:ce:ab:67:8e:4e:0e:da:69:26:03:ec:f9:2e:a6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Validity Not Before: Mar 24 12:15:50 2026 GMT Not After : Mar 27 20:54:50 2026 GMT Subject: CN=CA2FFB19E36BBB764A8406E367CB0FD01B31759E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:33:49:8d:e6:bf:65:c8:fb:fe:49:70:f7:7d: b1:ca:1b:d3:ef:8b:62:54:2c:22:aa:3d:dc:57:9c: 3c:86:b7:da:81:b7:c9:9f:74:08:c5:5e:11:77:98: 55:df:bf:ac:54:e5:72:d8:92:b1:4f:37:df:7a:fd: ac:cc:9d:73:05:fb:46:3b:3f:31:db:fd:27:10:e7: d0:46:cf:cc:63:45:13:c6:3d:65:c2:f8:f9:da:bb: 42:24:d9:4b:9b:5f:a4:79:f3:85:eb:09:62:48:fe: 80:c6:5b:49:e8:c8:2a:05:b3:a3:a3:23:df:78:45: 0c:67:c3:19:b2:54:dd:6c:b4:41:c1:82:63:a5:50: 0d:8c:59:78:3a:bc:92:23:b0:dc:6f:ff:ee:06:56: b6:14:c6:97:ee:e4:dc:2a:d8:3b:48:a3:a6:44:8d: 62:57:9b:cf:a6:28:0c:8e:e3:f0:b8:4b:d2:f9:77: 08:41:97:02:da:83:08:ef:11:dc:2a:6a:be:97:2e: cd:0f:fe:a9:f8:12:07:39:cd:ff:44:04:49:1d:1e: 99:a5:7a:c3:72:21:90:72:cc:94:8c:f2:a3:00:35: e6:62:85:0e:2c:07:e6:45:98:4d:02:a5:51:da:65: 28:de:08:a8:ae:05:19:88:63:d0:1e:57:3f:80:ce: e3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2F:FB:19:E3:6B:BB:76:4A:84:06:E3:67:CB:0F:D0:1B:31:75:9E X509v3 Authority Key Identifier: keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e0:dc:62:9d:95:2a:14:da:ee:70:c9:29:db:eb:34:d3:9c: 62:b3:49:01:f2:93:44:92:5e:9e:f0:4e:62:d1:d7:4c:0a:a6: 40:19:1b:e0:e3:64:5a:35:8a:55:13:cd:7b:ff:08:a7:03:91: 70:be:03:44:c8:22:73:ea:0a:c6:4d:49:af:ca:84:03:58:5a: 35:96:87:a2:b9:6a:6e:84:2c:f8:ef:7b:11:6f:03:c9:da:ff: a3:01:1b:8f:7b:dc:58:bd:82:ab:c9:b6:57:60:e9:7c:6e:fb: 63:14:78:38:5f:76:4f:61:ca:d8:c5:bf:98:d8:84:04:74:bc: 44:b3:dc:50:28:ac:00:27:00:80:1b:9a:e9:d4:db:51:95:c0: f6:e6:dc:30:49:13:e1:47:69:6d:54:27:ac:0e:73:52:0e:17: a8:78:9a:c8:b3:83:57:c0:86:0f:85:3f:84:18:35:cb:e4:07: 8d:a8:d3:8b:23:2a:cc:26:d1:75:a7:4d:80:26:42:d1:3c:bd: 8a:1f:bd:87:02:5d:b8:99:8d:25:54:12:89:3f:a8:92:c5:c9: af:d0:b7:dc:09:41:65:12:ca:53:9e:28:6d:84:20:83:96:a4: 84:9b:a8:68:74:7c:b3:69:12:4e:92:06:25:1c:a2:83:bf:c1: ed:e9:99:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQT2BaXOq2eOTg7aaSYD7PkuplEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUw MzY0MUVDNjAeFw0yNjAzMjQxMjE1NTBaFw0yNjAzMjcyMDU0NTBaMDMxMTAvBgNV BAMTKENBMkZGQjE5RTM2QkJCNzY0QTg0MDZFMzY3Q0IwRkQwMUIzMTc1OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2M0mN5r9lyPv+SXD3fbHKG9Pv i2JULCKqPdxXnDyGt9qBt8mfdAjFXhF3mFXfv6xU5XLYkrFPN996/azMnXMF+0Y7 PzHb/ScQ59BGz8xjRRPGPWXC+Pnau0Ik2UubX6R584XrCWJI/oDGW0noyCoFs6Oj I994RQxnwxmyVN1stEHBgmOlUA2MWXg6vJIjsNxv/+4GVrYUxpfu5Nwq2DtIo6ZE jWJXm8+mKAyO4/C4S9L5dwhBlwLagwjvEdwqar6XLs0P/qn4Egc5zf9EBEkdHpml esNyIZByzJSM8qMANeZihQ4sB+ZFmE0CpVHaZSjeCKiuBRmIY9AeVz+AzuOnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyi/7GeNru3ZKhAbjZ8sP0BsxdZ4wHwYDVR0j BBgwFoAUOxAp1EuTygOX2lBv4eIUdQNkHsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzBkNDBiYy05M2M4LTQxNWItYjZhOC1hZWYwODhkN2Y0ZDQvMC8zQjEwMjlENDRC OTNDQTAzOTdEQTUwNkZFMUUyMTQ3NTAzNjQxRUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUwMzY0 MUVDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwZDQwYmMtOTNjOC00MTViLWI2 YTgtYWVmMDg4ZDdmNGQ0LzAvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0 NzUwMzY0MUVDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfg3GKdlSoU2u5wySnb6zTTnGKzSQHyk0SS Xp7wTmLR10wKpkAZG+DjZFo1ilUTzXv/CKcDkXC+A0TIInPqCsZNSa/KhANYWjWW h6K5am6ELPjvexFvA8na/6MBG4973Fi9gqvJtldg6Xxu+2MUeDhfdk9hytjFv5jY hAR0vESz3FAorAAnAIAbmunU21GVwPbm3DBJE+FHaW1UJ6wOc1IOF6h4msizg1fA hg+FP4QYNcvkB42o04sjKswm0XWnTYAmQtE8vYofvYcCXbiZjSVUEok/qJLFya/Q t9wJQWUSylOeKG2EIIOWpISbqGh0fLNpEk6SBiUcooO/we3pmZA= -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:14 2026 by rpki-client