$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft File: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft (raw, json) Hash identifier: NIFJJcGTP1hmZhx/kfuBByAXHdPgE6DZM1K8tJpIQ/w= Subject key identifier: 39:A6:26:3D:80:57:78:C0:AD:E7:9A:30:FF:FE:82:2E:CE:73:7B:F9 Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 Certificate issuer: /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Certificate serial: 061B32388FAAB9D48A8D42C2BEB3A6EA0D56CF61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft Manifest number: 056D Signing time: Wed 25 Mar 2026 05:22:23 +0000 Manifest this update: Wed 25 Mar 2026 05:17:23 +0000 Manifest next update: Sat 28 Mar 2026 09:13:23 +0000 Files and hashes: 1: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: hXWJa8fVoj0vzNayNv76Qv76zEys5r5KfZWHwpWNqSA=) 2: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl (hash: ts1GbO7kxBBYWwgtVRj5VnmnrFzygBYw79eCzG/B108=) 3: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: 1FGJd6AqSTK9oY+Kf0u0bGP0qcgnLzetRfPl9A2Bh4w=) 4: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: M4zMEE4gM9B2z9mzotuldgSgaCKFtNvfP7tGSiFjQks=) 5: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: fEqrWk5yzRrIfC/NwZzR4O5o8YjE++0relBMS0Qsam4=) 6: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: amdqV6lzMAC4zxO9RwYxm18VuzSqbFKiq2hPtX/elIw=) 7: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: /uE3RoNjstpZuWvkeLBYaDpbs3/pa2JGUNOwerwb9Qk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:1b:32:38:8f:aa:b9:d4:8a:8d:42:c2:be:b3:a6:ea:0d:56:cf:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Validity Not Before: Mar 25 05:17:23 2026 GMT Not After : Mar 28 09:13:23 2026 GMT Subject: CN=39A6263D805778C0ADE79A30FFFE822ECE737BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f7:e6:d8:eb:40:ef:19:4f:bd:0b:3d:0a:7a: 86:be:22:e4:95:71:37:ca:b0:c7:78:5d:4b:4f:55: 4f:6f:0c:eb:b1:14:07:3b:21:b9:ed:48:3f:36:8a: ba:95:92:bd:78:52:ee:83:3f:21:77:0c:d8:93:86: 4c:1e:1e:38:5b:4f:47:46:a5:a2:d6:05:de:7f:65: 44:f2:56:4c:24:2e:47:54:f5:69:51:81:13:3d:4c: 97:fb:1b:13:2b:9a:aa:48:80:82:d9:40:0e:e0:c7: e8:82:78:c3:bd:ab:d9:5f:fe:cb:bd:a2:eb:79:55: ea:ea:ef:a5:c5:f7:7d:1f:9b:a3:a9:31:8d:da:3e: d1:40:2a:f7:7b:12:25:bb:d7:af:ee:c4:d3:c1:db: 3c:1c:0b:db:db:b0:89:9c:ae:5c:87:66:a9:f0:64: b7:8a:ab:11:19:20:26:81:6a:33:5a:d9:14:bb:a4: 62:ca:cd:6b:df:f9:c2:c9:81:8f:37:1c:36:26:2f: ff:18:4e:4c:e3:4a:f0:c7:47:89:cb:ab:0f:18:02: 0e:a7:08:bb:5c:4d:07:33:f4:2f:1f:ef:12:87:74: cc:24:cd:cf:4c:d5:f2:82:be:f2:22:96:b0:24:10: 37:ae:54:4a:04:4d:e6:f9:08:b5:71:fb:49:02:bd: d3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A6:26:3D:80:57:78:C0:AD:E7:9A:30:FF:FE:82:2E:CE:73:7B:F9 X509v3 Authority Key Identifier: keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:62:d0:a6:cc:0d:d8:c2:67:5b:6f:cb:a8:63:f5:bc:9c:b3: 0e:5f:32:43:ce:1f:85:e8:85:d5:1e:06:fb:00:be:8c:48:4f: 28:da:bd:2d:8a:b4:0e:38:54:fd:ec:aa:8d:c3:aa:5d:43:b3: 51:94:b0:81:db:cc:d3:72:c8:60:db:1b:d4:02:f9:f3:4b:80: 87:8e:60:b2:7f:cc:5c:1a:d5:99:ad:ed:b2:fc:c1:d3:79:8c: 92:27:da:f9:ca:a5:d8:19:a2:a2:79:05:18:e3:d4:c5:3f:3e: 5c:53:df:12:16:7c:5e:7c:57:1f:a6:65:7a:06:77:06:d9:d7: 08:67:e3:9b:8f:a4:86:05:93:37:ff:a7:85:4b:a5:48:a6:8c: b0:64:9c:45:ca:80:cc:cd:23:00:21:c9:cb:c9:08:46:d6:c3: 2e:dc:f0:fd:8e:9c:a3:06:fb:c5:ad:3d:58:ca:23:86:73:80: ce:34:b9:63:55:a4:21:be:18:f4:3d:2b:7c:25:78:67:2f:cc: f4:0f:36:36:94:ac:62:cf:ed:26:61:73:e8:70:0a:88:f6:a0: 1c:19:0c:23:a8:fe:db:ba:67:b9:6b:b8:8d:c3:d9:88:da:bf: da:33:44:3c:0b:d5:92:9e:e3:7e:52:19:fe:ff:32:3f:65:87: 5e:b0:7e:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBhsyOI+qudSKjULCvrOm6g1Wz2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZC RkNEREJCMDAeFw0yNjAzMjUwNTE3MjNaFw0yNjAzMjgwOTEzMjNaMDMxMTAvBgNV BAMTKDM5QTYyNjNEODA1Nzc4QzBBREU3OUEzMEZGRkU4MjJFQ0U3MzdCRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi9+bY60DvGU+9Cz0Keoa+IuSV cTfKsMd4XUtPVU9vDOuxFAc7IbntSD82irqVkr14Uu6DPyF3DNiThkweHjhbT0dG paLWBd5/ZUTyVkwkLkdU9WlRgRM9TJf7GxMrmqpIgILZQA7gx+iCeMO9q9lf/su9 out5Verq76XF930fm6OpMY3aPtFAKvd7EiW716/uxNPB2zwcC9vbsImcrlyHZqnw ZLeKqxEZICaBajNa2RS7pGLKzWvf+cLJgY83HDYmL/8YTkzjSvDHR4nLqw8YAg6n CLtcTQcz9C8f7xKHdMwkzc9M1fKCvvIilrAkEDeuVEoETeb5CLVx+0kCvdMpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOaYmPYBXeMCt55ow//6CLs5ze/kwHwYDVR0j BBgwFoAUw/gKNcHGh3u+SXGbkI0Cn7/N27AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Y2OGFiYS05NTE1LTRkMTItYWFjMi04Y2VlNWRiMmE0OGYvMC9DM0Y4MEEzNUMx QzY4NzdCQkU0OTcxOUI5MDhEMDI5RkJGQ0REQkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZCRkNE REJCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmNjhhYmEtOTUxNS00ZDEyLWFh YzItOGNlZTVkYjJhNDhmLzAvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAy OUZCRkNEREJCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFi0KbMDdjCZ1tvy6hj9bycsw5fMkPOH4Xo hdUeBvsAvoxITyjavS2KtA44VP3sqo3Dql1Ds1GUsIHbzNNyyGDbG9QC+fNLgIeO YLJ/zFwa1Zmt7bL8wdN5jJIn2vnKpdgZoqJ5BRjj1MU/PlxT3xIWfF58Vx+mZXoG dwbZ1whn45uPpIYFkzf/p4VLpUimjLBknEXKgMzNIwAhycvJCEbWwy7c8P2OnKMG +8WtPVjKI4ZzgM40uWNVpCG+GPQ9K3wleGcvzPQPNjaUrGLP7SZhc+hwCoj2oBwZ DCOo/tu6Z7lruI3D2Yjav9ozRDwL1ZKe435SGf7/Mj9lh16wfqU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:04:21 2026 by rpki-client