$ rpki-client -vvf repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft File: 3E08DEC2AE0EB41653597023376671331769A43E.mft (raw, json) Hash identifier: V+7D1J3F/FEFI66BOvSWpopR40Y6jfgRH53NU9cwZQ0= Subject key identifier: 04:97:A0:34:56:23:00:86:3E:34:32:67:6C:F0:2A:EE:37:63:F4:6B Authority key identifier: 3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E Certificate issuer: /CN=3E08DEC2AE0EB41653597023376671331769A43E Certificate serial: 728CD112441F8A14DA7ECAA4A02D0085762AAB80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft Manifest number: D7 Signing time: Wed 25 Mar 2026 20:31:44 +0000 Manifest this update: Wed 25 Mar 2026 20:26:44 +0000 Manifest next update: Sun 29 Mar 2026 06:13:44 +0000 Files and hashes: 1: 3136302e32322e39312e302f32342d3234203d3e20313533303635.roa (hash: 3hoDD7ig6gcP/Yzm1bfTsMAVOt7p/pOGosEJ4Wxm3M0=) 2: 3E08DEC2AE0EB41653597023376671331769A43E.crl (hash: VXl3kRy9u3NsqjG9bu0gJZqxdZKLUGlLbezIp5tsQAI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:8c:d1:12:44:1f:8a:14:da:7e:ca:a4:a0:2d:00:85:76:2a:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E08DEC2AE0EB41653597023376671331769A43E Validity Not Before: Mar 25 20:26:44 2026 GMT Not After : Mar 29 06:13:44 2026 GMT Subject: CN=0497A034562300863E3432676CF02AEE3763F46B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d0:2a:d0:06:07:42:00:0f:94:a7:a9:1c:7e: ec:8d:6c:0b:4f:2a:9a:c9:b7:8d:60:33:31:02:bf: cf:38:56:14:20:b4:7d:11:60:46:b7:6b:44:4e:a7: e9:01:92:7a:39:16:9b:40:b3:04:81:84:9b:4c:fd: e7:d7:43:e4:b0:82:fc:a2:98:d3:eb:ab:5f:33:26: 5a:38:7c:27:6b:39:b5:54:8c:d1:9f:2e:a3:08:cb: 9a:75:63:48:8c:9e:7f:51:6a:63:27:06:31:fc:76: f2:b0:d2:5e:55:ca:1f:37:9a:fc:10:f6:49:71:c7: 88:09:47:c9:74:05:85:77:21:4f:a7:15:f9:55:5b: be:d9:4a:f1:fa:20:eb:c5:3e:95:75:ab:5e:48:16: 55:7f:a1:87:19:91:05:92:0f:6c:25:16:df:fe:2d: 01:66:a0:ad:10:e8:58:e4:f0:83:b8:52:5b:ed:8f: eb:2f:69:f8:c7:3d:d0:e6:df:3d:9c:20:cd:94:b8: e1:3c:48:98:5d:c0:b8:32:e6:b8:f8:5e:2e:75:f7: 30:3f:d8:fb:f8:5f:77:16:4a:4c:2e:ab:f2:bc:62: e4:e0:5c:c0:08:65:55:04:b5:6e:05:ed:a3:1a:a7: 52:93:3c:db:8b:61:c5:05:af:13:2b:b0:6f:0d:8a: ef:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:97:A0:34:56:23:00:86:3E:34:32:67:6C:F0:2A:EE:37:63:F4:6B X509v3 Authority Key Identifier: keyid:3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:48:b6:e9:f3:40:c5:75:cc:7b:f3:3a:19:b5:49:07:c1:6b: 50:cb:d7:4e:27:8e:b7:16:2f:9a:d6:87:33:02:29:73:d0:1a: 41:c5:c2:0a:b7:b0:f4:f9:4c:bc:e0:10:56:a9:d9:ba:03:26: a2:56:98:7a:e3:a2:f7:b9:31:8d:91:14:6d:2a:6d:ef:b4:5d: 2d:9a:8c:2a:6b:e6:84:7b:2f:6a:29:dc:47:b8:3c:99:3f:fd: 0e:cb:91:a0:bc:4b:eb:4e:1a:12:e1:81:11:98:fa:94:84:07: a7:02:29:bb:33:94:ba:d8:59:75:5a:a2:04:6d:b4:bc:2c:b7: ab:2d:87:34:55:d2:a8:68:e9:ad:fe:72:c2:20:0e:41:4f:88: 44:19:e8:45:bb:0e:c0:9d:38:15:f2:b4:75:a9:8a:f7:39:71: ca:ab:44:13:52:1c:ee:c4:32:15:07:19:9d:7e:65:a0:72:d6: 5c:96:06:2c:de:4d:40:7f:5d:e9:77:d8:ce:08:1d:40:d6:0d: 09:2c:34:65:f8:56:4c:be:31:9a:ed:9b:ed:75:69:0c:65:7e: de:24:81:9e:7c:ef:43:43:2e:92:3d:0f:bd:83:68:fd:8e:70: e9:42:1b:59:03:7e:51:9e:60:4a:82:3d:33:e1:d4:06:66:a0: a9:4c:38:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcozREkQfihTafsqkoC0AhXYqq4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwOERFQzJBRTBFQjQxNjUzNTk3MDIzMzc2NjcxMzMx NzY5QTQzRTAeFw0yNjAzMjUyMDI2NDRaFw0yNjAzMjkwNjEzNDRaMDMxMTAvBgNV BAMTKDA0OTdBMDM0NTYyMzAwODYzRTM0MzI2NzZDRjAyQUVFMzc2M0Y0NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC60CrQBgdCAA+Up6kcfuyNbAtP KprJt41gMzECv884VhQgtH0RYEa3a0ROp+kBkno5FptAswSBhJtM/efXQ+Swgvyi mNPrq18zJlo4fCdrObVUjNGfLqMIy5p1Y0iMnn9RamMnBjH8dvKw0l5Vyh83mvwQ 9klxx4gJR8l0BYV3IU+nFflVW77ZSvH6IOvFPpV1q15IFlV/oYcZkQWSD2wlFt/+ LQFmoK0Q6Fjk8IO4Ulvtj+svafjHPdDm3z2cIM2UuOE8SJhdwLgy5rj4Xi519zA/ 2Pv4X3cWSkwuq/K8YuTgXMAIZVUEtW4F7aMap1KTPNuLYcUFrxMrsG8Niu+jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBJegNFYjAIY+NDJnbPAq7jdj9GswHwYDVR0j BBgwFoAUPgjewq4OtBZTWXAjN2ZxMxdppD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjgxOWJhOS01ZjQ0LTQxMjUtOGI4Yy1mYzE2NGI1NGQ3M2EvMC8zRTA4REVDMkFF MEVCNDE2NTM1OTcwMjMzNzY2NzEzMzE3NjlBNDNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0UwOERFQzJBRTBFQjQxNjUzNTk3MDIzMzc2NjcxMzMxNzY5 QTQzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTI4MTliYTktNWY0NC00MTI1LThi OGMtZmMxNjRiNTRkNzNhLzAvM0UwOERFQzJBRTBFQjQxNjUzNTk3MDIzMzc2Njcx MzMxNzY5QTQzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhItunzQMV1zHvzOhm1SQfBa1DL104njrcW L5rWhzMCKXPQGkHFwgq3sPT5TLzgEFap2boDJqJWmHrjove5MY2RFG0qbe+0XS2a jCpr5oR7L2op3Ee4PJk//Q7LkaC8S+tOGhLhgRGY+pSEB6cCKbszlLrYWXVaogRt tLwst6sthzRV0qho6a3+csIgDkFPiEQZ6EW7DsCdOBXytHWpivc5ccqrRBNSHO7E MhUHGZ1+ZaBy1lyWBizeTUB/Xel32M4IHUDWDQksNGX4Vky+MZrtm+11aQxlft4k gZ5870NDLpI9D72DaP2OcOlCG1kDflGeYEqCPTPh1AZmoKlMOFU= -----END CERTIFICATE-----Generated at Thu Mar 26 19:54:09 2026 by rpki-client