$ rpki-client -vvf repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft File: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft (raw, json) Hash identifier: wMpxwlg6u6xwEITnnY6YEmYcHjDXPvwZUxUpjW3GLxw= Subject key identifier: 17:B8:CC:E1:2F:64:C7:8F:D8:B5:8E:15:26:41:EA:22:33:DC:F6:FF Authority key identifier: 3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 Certificate issuer: /CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Certificate serial: 0119D7A5E340CFB0432AF9ACE7405C6CF989F99F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft Manifest number: 0219 Signing time: Wed 25 Mar 2026 13:11:31 +0000 Manifest this update: Wed 25 Mar 2026 13:06:31 +0000 Manifest next update: Sat 28 Mar 2026 21:06:31 +0000 Files and hashes: 1: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl (hash: sQQqejWJCJxQ8iUp2Pu9sirg1MKMId/T+TICQHJ0JtQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:19:d7:a5:e3:40:cf:b0:43:2a:f9:ac:e7:40:5c:6c:f9:89:f9:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Validity Not Before: Mar 25 13:06:31 2026 GMT Not After : Mar 28 21:06:31 2026 GMT Subject: CN=17B8CCE12F64C78FD8B58E152641EA2233DCF6FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1b:41:f5:81:5e:9e:e8:80:64:64:cc:e2:41: ed:ab:69:f0:d4:7c:72:97:95:49:86:e1:6b:35:50: 4e:9b:96:3c:e8:de:36:a8:cf:1e:5b:07:a4:a8:55: e3:62:af:21:df:80:7d:25:fd:df:92:88:ce:a9:44: 79:75:a9:13:db:92:83:e2:c7:12:19:ab:a9:9d:01: aa:99:ed:67:0f:90:78:52:1e:32:a7:69:a6:14:31: 2e:69:72:97:61:08:d4:ee:0e:0f:f8:a6:d5:77:f8: e7:fe:49:3a:fd:70:9c:1a:7c:f4:4a:f6:98:32:ad: 4b:9a:de:25:eb:d3:74:0b:e0:10:06:a8:a8:0f:53: 32:03:32:e4:6b:eb:57:48:5b:b0:30:22:bf:5d:89: e8:3e:6d:5c:f0:43:0e:fa:f6:e4:b7:08:d9:76:6f: d3:68:4a:31:17:29:b8:73:15:0c:f6:84:e7:d1:ef: 42:4d:94:6a:e3:f3:59:43:9e:93:bd:82:aa:cd:e2: 25:b4:07:61:58:a5:a5:a8:16:2f:79:aa:e5:06:d1: fb:79:7c:b4:9e:ee:be:f6:e7:10:c0:bd:8f:31:dc: 63:69:43:2b:ea:a7:ca:3d:f2:e7:ab:2f:db:49:36: 97:bc:b1:e6:66:fe:1a:26:da:49:a7:6c:f8:fb:f4: 3c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B8:CC:E1:2F:64:C7:8F:D8:B5:8E:15:26:41:EA:22:33:DC:F6:FF X509v3 Authority Key Identifier: keyid:3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:09:9e:81:d5:c0:db:6a:3a:e0:d2:23:47:90:dd:6e:01:b7: 0b:97:b4:1e:e1:5f:08:9f:f0:7c:48:72:84:3e:cf:07:c5:9d: 4f:34:0c:da:2c:d2:aa:43:f6:11:15:9a:17:65:a5:71:94:d2: 9f:3a:58:0d:2e:ba:65:3c:2d:a8:4b:65:ba:0e:b1:b3:4d:76: bd:b9:74:5a:1d:3d:a6:f4:4b:79:0f:ad:8a:f8:e9:50:65:1f: 28:f6:e8:c8:0a:83:5c:98:58:d9:c0:7d:54:f6:a9:82:8e:dc: ef:ad:be:f0:dd:3c:cf:14:a1:7e:63:bb:b6:20:f2:00:ea:a2: 0d:26:31:c1:33:b9:36:c8:55:45:61:6e:60:b2:0a:a6:c7:6b: d3:e7:bb:97:65:cf:4a:a4:68:03:59:02:b8:c1:54:9f:8f:e6: 06:93:e5:68:d5:de:62:11:1e:41:cc:12:f8:eb:05:00:0e:09: 08:58:ea:8f:97:31:02:5a:5e:22:bd:3a:93:d0:a3:7e:3a:e7: 08:58:85:07:f9:ac:a4:01:2b:34:31:f0:8a:ae:25:42:fe:c7: 11:9b:82:7d:ec:e7:d9:48:99:51:16:b9:fe:38:1f:40:81:c3: 0e:8c:83:bd:30:02:c8:bf:fa:2f:41:a4:a9:52:be:29:ad:2c: 27:d9:74:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUARnXpeNAz7BDKvms50BcbPmJ+Z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJF RDM0OUFFMDAeFw0yNjAzMjUxMzA2MzFaFw0yNjAzMjgyMTA2MzFaMDMxMTAvBgNV BAMTKDE3QjhDQ0UxMkY2NEM3OEZEOEI1OEUxNTI2NDFFQTIyMzNEQ0Y2RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkG0H1gV6e6IBkZMziQe2rafDU fHKXlUmG4Ws1UE6bljzo3jaozx5bB6SoVeNiryHfgH0l/d+SiM6pRHl1qRPbkoPi xxIZq6mdAaqZ7WcPkHhSHjKnaaYUMS5pcpdhCNTuDg/4ptV3+Of+STr9cJwafPRK 9pgyrUua3iXr03QL4BAGqKgPUzIDMuRr61dIW7AwIr9dieg+bVzwQw769uS3CNl2 b9NoSjEXKbhzFQz2hOfR70JNlGrj81lDnpO9gqrN4iW0B2FYpaWoFi95quUG0ft5 fLSe7r725xDAvY8x3GNpQyvqp8o98uerL9tJNpe8seZm/hom2kmnbPj79DxRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF7jM4S9kx4/YtY4VJkHqIjPc9v8wHwYDVR0j BBgwFoAUO3ZOzj2zDeV8YDbcy66Vi+00muAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDAyOWMyMi0yMjE1LTQ4YzEtOWFiNi1iYjEzYzAxYjQzYjEvMC8zQjc2NEVDRTNE QjMwREU1N0M2MDM2RENDQkFFOTU4QkVEMzQ5QUUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJFRDM0 OUFFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1 OEJFRDM0OUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkJnoHVwNtqOuDSI0eQ3W4BtwuXtB7hXwif 8HxIcoQ+zwfFnU80DNos0qpD9hEVmhdlpXGU0p86WA0uumU8LahLZboOsbNNdr25 dFodPab0S3kPrYr46VBlHyj26MgKg1yYWNnAfVT2qYKO3O+tvvDdPM8UoX5ju7Yg 8gDqog0mMcEzuTbIVUVhbmCyCqbHa9Pnu5dlz0qkaANZArjBVJ+P5gaT5WjV3mIR HkHMEvjrBQAOCQhY6o+XMQJaXiK9OpPQo3465whYhQf5rKQBKzQx8IquJUL+xxGb gn3s59lImVEWuf44H0CBww6Mg70wAsi/+i9BpKlSvimtLCfZdOE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:31 2026 by rpki-client