$ rpki-client -vvf repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft File: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft (raw, json) Hash identifier: 6RvNpqBhy8+fdSpXA6W0OwzuyBqbZ+B4P76O+ESeg6M= Subject key identifier: 1E:FE:15:DE:8F:1B:61:9F:13:DD:11:02:FC:B9:26:8B:99:07:D1:45 Authority key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB Certificate issuer: /CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Certificate serial: 47853C87D73311AC398819A5C427EAF050BD5246 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft Manifest number: 0147 Signing time: Wed 25 Mar 2026 14:11:00 +0000 Manifest this update: Wed 25 Mar 2026 14:06:00 +0000 Manifest next update: Sat 28 Mar 2026 14:53:00 +0000 Files and hashes: 1: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: +5XEFa5Q5a8ev++uImNUVz8f1Hioijw3UOVtIFPuX9A=) 2: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: jwgg8IRJIDQmnbDrJO7DlfsBE1An9lAR0nLLubI5qII=) 3: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: nSJVoG4D6/bGoLQwSAn+ZSP/PaLdUBaDt+5AYEiWLy8=) 4: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl (hash: JSBgvMPf8I9RIZumSX7p8xOGfZ10T0pN6tW+9JoAuLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:85:3c:87:d7:33:11:ac:39:88:19:a5:c4:27:ea:f0:50:bd:52:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Validity Not Before: Mar 25 14:06:00 2026 GMT Not After : Mar 28 14:53:00 2026 GMT Subject: CN=1EFE15DE8F1B619F13DD1102FCB9268B9907D145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:96:7d:4a:9f:b5:85:55:50:24:52:0e:ce:c3: cc:65:e6:bf:f2:b7:ae:18:8a:1e:9c:e0:7d:dd:7c: 43:b0:62:0b:4f:52:f0:35:0a:4e:9f:5e:cc:0d:d6: 96:f5:38:75:74:b6:e8:f7:e1:22:49:df:8a:51:3c: cc:67:d6:cc:b8:19:22:2c:fb:6b:f1:20:ad:ea:97: 3d:37:4a:bd:71:22:5e:bd:0e:0d:fa:a8:1e:2e:9c: 5b:fd:b4:d1:5d:c8:79:a3:90:2c:07:ec:c5:7e:ea: b3:e0:a5:5a:10:58:55:cd:7a:56:70:a8:f9:02:fb: fd:a5:40:ef:ab:aa:ed:db:63:37:a0:d5:86:92:b3: f5:99:5a:3c:55:97:61:a6:61:b8:9f:8a:e5:76:07: 1f:f8:4c:41:2c:11:c3:78:72:ce:45:71:1f:23:84: 23:d3:41:c7:fb:66:4c:cf:7e:84:db:dc:71:1f:08: a2:15:61:a7:fe:5b:96:03:55:66:25:6d:fe:e4:76: 45:0d:91:52:cf:00:b0:92:09:80:af:2b:91:cc:74: 5f:d4:0d:eb:74:d0:f5:4a:5e:02:99:4a:9a:e3:85: 3a:c2:79:7d:61:2f:b2:dd:b1:11:ad:35:a7:a4:60: e9:c7:3c:06:4b:04:cc:a4:41:bb:81:7e:dd:8e:6d: f7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FE:15:DE:8F:1B:61:9F:13:DD:11:02:FC:B9:26:8B:99:07:D1:45 X509v3 Authority Key Identifier: keyid:3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:c9:47:9f:f4:94:28:ed:a6:96:df:17:ea:63:11:31:df:51: e8:29:2f:c6:21:da:64:a5:a0:3e:e8:0c:86:17:e4:2b:82:44: dd:4a:b2:7f:03:1f:30:6d:7d:e9:52:c9:9e:bc:3e:d2:e9:40: 0c:38:4d:d7:8b:d7:46:db:96:41:df:ae:f1:76:9c:9a:6c:8d: 38:a8:56:5e:83:ac:53:3b:bc:41:5d:79:21:da:42:38:f9:e0: 19:57:e8:95:ac:8c:bc:54:ed:88:6a:41:0a:15:3a:0e:88:74: 9b:a5:4a:8a:28:4e:5c:bc:03:b3:ac:bc:df:99:a5:c7:46:76: b4:b3:13:65:0b:e6:3b:8f:0c:53:95:89:f3:78:e4:72:6c:38: c2:91:4b:29:13:b8:70:cb:5b:5d:01:a4:3a:e3:18:28:09:ac: 08:d3:fa:f5:56:f0:99:a9:e1:d9:be:86:45:40:4f:c2:ce:76: 34:09:ce:c4:b4:85:cb:67:68:51:01:cc:a1:2e:5f:63:ab:1b: 69:b1:f4:4b:e0:d7:03:aa:8a:7d:37:27:01:b7:ed:10:2c:cf: 1f:0b:27:96:0a:ac:b2:bd:a5:e1:1d:0b:27:83:7f:44:9d:cf: 0a:fd:60:d7:ea:1f:7b:89:40:0c:13:15:27:ea:1c:20:77:ee: c2:29:85:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR4U8h9czEaw5iBmlxCfq8FC9UkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBF MzREMjlBQjAeFw0yNjAzMjUxNDA2MDBaFw0yNjAzMjgxNDUzMDBaMDMxMTAvBgNV BAMTKDFFRkUxNURFOEYxQjYxOUYxM0REMTEwMkZDQjkyNjhCOTkwN0QxNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDln1Kn7WFVVAkUg7Ow8xl5r/y t64Yih6c4H3dfEOwYgtPUvA1Ck6fXswN1pb1OHV0tuj34SJJ34pRPMxn1sy4GSIs +2vxIK3qlz03Sr1xIl69Dg36qB4unFv9tNFdyHmjkCwH7MV+6rPgpVoQWFXNelZw qPkC+/2lQO+rqu3bYzeg1YaSs/WZWjxVl2GmYbifiuV2Bx/4TEEsEcN4cs5FcR8j hCPTQcf7ZkzPfoTb3HEfCKIVYaf+W5YDVWYlbf7kdkUNkVLPALCSCYCvK5HMdF/U Det00PVKXgKZSprjhTrCeX1hL7LdsRGtNaekYOnHPAZLBMykQbuBft2Obfd3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHv4V3o8bYZ8T3REC/Lkmi5kH0UUwHwYDVR0j BBgwFoAUPG10hdYa1UImFS5dioE9cONNKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTU5YTM2Mi05NTBjLTQ1YzItYWVjYy04MmIyMTRiY2U0NzQvMC8zQzZENzQ4NUQ2 MUFENTQyMjYxNTJFNUQ4QTgxM0Q3MEUzNEQyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBFMzRE MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNE NzBFMzREMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnJR5/0lCjtppbfF+pjETHfUegpL8Yh2mSl oD7oDIYX5CuCRN1Ksn8DHzBtfelSyZ68PtLpQAw4TdeL10bblkHfrvF2nJpsjTio Vl6DrFM7vEFdeSHaQjj54BlX6JWsjLxU7YhqQQoVOg6IdJulSoooTly8A7OsvN+Z pcdGdrSzE2UL5juPDFOVifN45HJsOMKRSykTuHDLW10BpDrjGCgJrAjT+vVW8Jmp 4dm+hkVAT8LOdjQJzsS0hctnaFEBzKEuX2OrG2mx9Evg1wOqin03JwG37RAszx8L J5YKrLK9peEdCyeDf0Sdzwr9YNfqH3uJQAwTFSfqHCB37sIphQw= -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:01 2026 by rpki-client