$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft File: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft (raw, json) Hash identifier: sozZhvUcHvZAQNvoQ/9Hw+md9Ux3Rw3fvDwxnFofgK8= Subject key identifier: D0:83:F9:59:8F:9D:D0:2F:4E:40:5B:47:09:6E:79:6F:A5:5B:64:7E Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 Certificate issuer: /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Certificate serial: 55AFF0B3D6240BA43B31DFFBDC0C5798A35F34F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft Manifest number: 0250 Signing time: Tue 24 Mar 2026 13:30:02 +0000 Manifest this update: Tue 24 Mar 2026 13:25:02 +0000 Manifest next update: Sat 28 Mar 2026 00:02:02 +0000 Files and hashes: 1: 3130332e39382e3131362e302f32332d3233203d3e20313336383230.roa (hash: 5WMxfKjZT65hcUd7WB/JBj/IGlOrVSKyagiTEPB+Bbc=) 2: 3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa (hash: EGqCere+OuMmi+yewJcL8GzC3eQu4ZQkb/8gD6T4+6E=) 3: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: D6xVrarR741Tat/B/aD4Gr/765oFGk3PkG8sC2eJZzQ=) 4: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: hK06HKoqFlnupfPGbH4fj+kvbHmFb9y+Qhw58DcH1q0=) 5: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: fKyStuZP+cGYGL12Gl7DPoMVPGekA2LHOpNgfBK7K54=) 6: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl (hash: 5CO+k0xFAie51LbzrsZw+TMoF6+6TCAwjizh1S+HW2E=) 7: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: u4NoFqVyyFqHI8VrRJJU5o8UKOJMJykYNFUtpxCJD/Y=) 8: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: VpjDP2oZ/B1yei8Hfwo7pH5vGmOKYQBwxJOGVD0RFQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:af:f0:b3:d6:24:0b:a4:3b:31:df:fb:dc:0c:57:98:a3:5f:34:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Validity Not Before: Mar 24 13:25:02 2026 GMT Not After : Mar 28 00:02:02 2026 GMT Subject: CN=D083F9598F9DD02F4E405B47096E796FA55B647E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d4:41:59:ef:d0:6d:9b:87:2a:2b:5e:d6:63: 04:c3:1e:6c:11:1d:d6:25:08:32:35:45:2b:86:d4: 21:0a:68:07:9b:2a:11:b3:14:d5:76:82:46:68:8c: ad:78:21:fc:6f:77:aa:5a:de:02:15:27:ce:62:2f: f8:c6:e4:74:80:93:b8:02:47:1d:10:b3:09:2a:a3: 60:0a:6a:d2:78:87:c8:20:87:16:ad:0e:b9:99:22: 80:b0:aa:57:d4:10:90:15:1e:db:22:a0:f8:68:59: 2c:e8:a2:28:cf:bb:f4:59:23:a1:de:ea:bf:bc:3b: cd:cf:84:d0:bd:bc:9b:ee:cd:9a:3b:9d:f2:e0:b7: b7:6f:c3:23:c5:19:2a:f2:ef:fe:a1:2b:5a:e8:c5: 1c:c5:dd:3d:5a:4d:53:a9:9f:28:86:4a:d7:cf:7d: f4:af:b8:c1:26:0e:b7:65:79:07:3e:1d:b3:a0:a8: 15:98:ba:70:78:ed:0a:68:8e:3f:22:36:99:fd:85: ab:5c:82:ac:63:bf:a2:4a:90:3c:0d:68:0c:70:0b: 34:a8:6a:ec:88:5b:d0:a6:a9:4b:29:89:92:68:a4: c3:7a:4f:92:dd:2b:35:c2:ff:57:b5:b8:7c:85:a4: 6f:2a:4e:e6:a0:46:b5:bf:22:b0:2b:f2:02:0e:b8: a1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:83:F9:59:8F:9D:D0:2F:4E:40:5B:47:09:6E:79:6F:A5:5B:64:7E X509v3 Authority Key Identifier: keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:60:a9:99:3e:22:d4:61:f8:c3:2d:f2:d0:7f:ed:ae:8e:8c: 2f:01:0f:e2:72:06:ff:59:f9:f6:92:44:f5:2b:25:6a:0c:da: 38:2a:d9:6d:c0:ca:93:c5:d7:b1:d3:2b:3f:8c:d7:22:71:f4: c6:cb:05:a1:da:94:34:56:4c:90:2a:00:f5:79:6a:42:17:88: 6e:f7:c9:7f:0f:d3:60:6f:3b:66:a3:05:6c:59:bf:83:39:b7: 8a:91:53:8a:28:aa:a8:82:58:26:86:86:1b:a3:ea:bf:f2:b8: d7:37:68:8e:5f:b0:a0:db:1c:8a:48:ae:dd:2b:dc:f7:75:0e: a1:c6:70:ab:dd:c4:13:b5:3a:46:a1:8a:ee:c8:f5:3d:6f:3a: d5:a3:3a:9a:06:a1:c9:d5:f8:7f:be:e6:86:81:e7:57:a9:62: b4:55:c4:12:3d:4b:40:1e:1b:92:1d:28:ec:63:34:7d:a5:30: 76:2c:01:a5:29:c9:3d:d7:e5:a0:f1:44:69:40:2a:b4:ef:30: 04:d4:44:55:db:43:52:c3:e0:8d:db:24:13:2f:79:03:3c:53: 20:52:6b:21:3c:f4:d1:13:a7:02:0c:ba:9d:cd:26:d6:08:48: 11:bc:e8:0d:6d:52:c7:31:d6:fb:9d:6d:f0:26:9a:9f:89:28: c6:c6:0b:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVa/ws9YkC6Q7Md/73AxXmKNfNPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcy N0Q2RTA4ODAeFw0yNjAzMjQxMzI1MDJaFw0yNjAzMjgwMDAyMDJaMDMxMTAvBgNV BAMTKEQwODNGOTU5OEY5REQwMkY0RTQwNUI0NzA5NkU3OTZGQTU1QjY0N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1EFZ79Btm4cqK17WYwTDHmwR HdYlCDI1RSuG1CEKaAebKhGzFNV2gkZojK14Ifxvd6pa3gIVJ85iL/jG5HSAk7gC Rx0Qswkqo2AKatJ4h8gghxatDrmZIoCwqlfUEJAVHtsioPhoWSzooijPu/RZI6He 6r+8O83PhNC9vJvuzZo7nfLgt7dvwyPFGSry7/6hK1roxRzF3T1aTVOpnyiGStfP ffSvuMEmDrdleQc+HbOgqBWYunB47Qpojj8iNpn9hatcgqxjv6JKkDwNaAxwCzSo auyIW9CmqUspiZJopMN6T5LdKzXC/1e1uHyFpG8qTuagRrW/IrAr8gIOuKF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0IP5WY+d0C9OQFtHCW55b6VbZH4wHwYDVR0j BBgwFoAUPiFzzOZ/ddKfHKqnOebMZyfW4IgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Q1Mzk0OC1kZGYzLTQ0OWEtYmYyYi1jZjNmN2FlMTc2ZDMvMC8zRTIxNzNDQ0U2 N0Y3NUQyOUYxQ0FBQTczOUU2Q0M2NzI3RDZFMDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcyN0Q2 RTA4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NkNTM5NDgtZGRmMy00NDlhLWJm MmItY2YzZjdhZTE3NmQzLzAvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkND NjcyN0Q2RTA4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJgqZk+ItRh+MMt8tB/7a6OjC8BD+JyBv9Z +faSRPUrJWoM2jgq2W3AypPF17HTKz+M1yJx9MbLBaHalDRWTJAqAPV5akIXiG73 yX8P02BvO2ajBWxZv4M5t4qRU4ooqqiCWCaGhhuj6r/yuNc3aI5fsKDbHIpIrt0r 3Pd1DqHGcKvdxBO1Okahiu7I9T1vOtWjOpoGocnV+H++5oaB51epYrRVxBI9S0Ae G5IdKOxjNH2lMHYsAaUpyT3X5aDxRGlAKrTvMATURFXbQ1LD4I3bJBMveQM8UyBS ayE89NETpwIMup3NJtYISBG86A1tUscx1vudbfAmmp+JKMbGCw0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:39 2026 by rpki-client