$ rpki-client -vvf repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft File: 3BB7346C991B689223BADC6F82DD19BE3B017704.mft (raw, json) Hash identifier: jsQ1rNOeNDO6/9Wd3w7u5oS6kw/95CEW6haQutFHuFQ= Subject key identifier: 67:38:B1:5F:EB:31:C9:D3:E3:FF:51:61:7F:F9:57:5A:42:D3:D2:B3 Authority key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 Certificate issuer: /CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Certificate serial: 71500C7F9E8A0A01C7CC9FBAA4620D48B5378A0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft Manifest number: 0438 Signing time: Tue 24 Mar 2026 07:30:48 +0000 Manifest this update: Tue 24 Mar 2026 07:25:48 +0000 Manifest next update: Fri 27 Mar 2026 15:55:48 +0000 Files and hashes: 1: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: 9IhGsQ54tY2/cR1q0Xs6zMzTt5FF9c1oVfoMV5wVdC8=) 2: 3BB7346C991B689223BADC6F82DD19BE3B017704.crl (hash: Sh1lrwZcuSIlnNMcVRPh6Yh4Q/x9LI3ARxksH599vtY=) 3: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: LlPhblyPcezHXhcFqA+CZXrxHEMGvdt9TGaJB5yD+gY=) 4: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: lHTn8z38a4raxygkZHiK5olLO1hmwWy67YSOaXSHPY8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:50:0c:7f:9e:8a:0a:01:c7:cc:9f:ba:a4:62:0d:48:b5:37:8a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Validity Not Before: Mar 24 07:25:48 2026 GMT Not After : Mar 27 15:55:48 2026 GMT Subject: CN=6738B15FEB31C9D3E3FF51617FF9575A42D3D2B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fe:3b:cd:85:bb:0a:97:2a:45:8a:50:5d:b6: 99:b5:2a:c5:db:3b:9c:7c:4a:97:4b:f4:af:d7:3f: 79:56:43:46:e3:f1:3d:b0:dc:c0:da:c9:9e:79:35: a6:dd:6c:59:ae:e1:d5:23:da:95:46:a2:2c:32:72: 9e:90:45:e0:3c:12:cc:c9:94:0e:87:dd:8f:8b:32: 15:55:63:dc:f7:da:cf:be:08:6c:91:30:20:c2:a7: 72:05:c0:fe:63:b8:4d:76:75:07:05:b4:90:b7:46: 58:2b:82:33:1d:5a:b7:77:b1:7c:36:72:b2:7e:72: b0:24:41:d3:31:e3:32:e0:24:3f:d8:fc:68:aa:70: 63:ff:dd:d2:d3:31:e3:63:0c:93:6a:07:16:54:02: 88:97:5d:83:f0:53:68:4f:b2:9b:b0:79:94:cb:86: d6:09:81:42:cd:30:b2:60:aa:ba:bf:83:5c:cb:d5: 6b:65:6b:ff:c4:a9:f7:a3:c4:3e:07:56:21:b5:bd: 3f:37:78:98:ca:56:2c:88:1b:e7:01:b8:95:fa:1b: d0:95:e9:02:3f:06:da:52:c3:79:2a:42:c5:40:8b: 0c:59:72:2e:6b:97:84:cd:cf:23:39:ff:4c:ec:24: 9c:07:ad:68:09:93:da:f4:f8:ab:89:01:08:2b:17: 9b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:38:B1:5F:EB:31:C9:D3:E3:FF:51:61:7F:F9:57:5A:42:D3:D2:B3 X509v3 Authority Key Identifier: keyid:3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:92:11:9d:c0:78:7b:44:9b:cb:d4:4f:f7:22:8f:74:b4:e3: fe:cc:b5:21:72:ed:91:6d:7d:89:5d:b9:b3:b1:14:3c:70:47: d2:09:f8:8b:6c:93:c1:55:2c:d8:6e:83:d3:e2:55:e3:f2:96: 13:00:3e:92:5f:59:57:58:49:b1:9d:39:ed:ca:1c:3e:94:6c: e1:94:ad:0d:b8:c5:44:f8:3c:f5:79:6b:3c:e6:b7:a4:c2:4a: 19:92:54:d1:c0:86:67:67:28:84:cc:93:88:21:9a:8e:a9:5d: fe:67:51:09:f5:0b:b5:f1:58:db:85:79:5c:ba:4f:0d:f4:b4: 9a:57:dd:f5:16:ef:1b:84:a0:b1:e9:ca:a1:e9:c2:dc:8e:10: e2:c0:01:32:30:36:79:47:10:21:bd:60:a4:43:20:b7:35:a8: 11:30:c4:64:1b:e2:93:5e:5d:e9:db:1c:6a:8c:84:d1:e1:09: ae:f1:92:8c:ec:35:5a:ad:53:7c:02:dc:46:fb:53:25:2c:c4: 8d:ad:91:eb:4d:6c:9b:62:51:de:a1:f8:24:ee:4c:89:c9:d6: 3e:8d:5e:cb:9f:4f:38:e8:7c:b6:06:5d:8c:ab:44:1f:7d:8c: 2b:fe:67:20:42:72:88:35:12:5a:b8:64:42:74:23:bb:7b:1a: 32:4c:3f:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcVAMf56KCgHHzJ+6pGINSLU3igswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUz QjAxNzcwNDAeFw0yNjAzMjQwNzI1NDhaFw0yNjAzMjcxNTU1NDhaMDMxMTAvBgNV BAMTKDY3MzhCMTVGRUIzMUM5RDNFM0ZGNTE2MTdGRjk1NzVBNDJEM0QyQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd/jvNhbsKlypFilBdtpm1KsXb O5x8SpdL9K/XP3lWQ0bj8T2w3MDayZ55NabdbFmu4dUj2pVGoiwycp6QReA8EszJ lA6H3Y+LMhVVY9z32s++CGyRMCDCp3IFwP5juE12dQcFtJC3RlgrgjMdWrd3sXw2 crJ+crAkQdMx4zLgJD/Y/GiqcGP/3dLTMeNjDJNqBxZUAoiXXYPwU2hPspuweZTL htYJgULNMLJgqrq/g1zL1Wtla//EqfejxD4HViG1vT83eJjKViyIG+cBuJX6G9CV 6QI/BtpSw3kqQsVAiwxZci5rl4TNzyM5/0zsJJwHrWgJk9r0+KuJAQgrF5vBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZzixX+sxydPj/1Fhf/lXWkLT0rMwHwYDVR0j BBgwFoAUO7c0bJkbaJIjutxvgt0ZvjsBdwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMC8zQkI3MzQ2Qzk5 MUI2ODkyMjNCQURDNkY4MkREMTlCRTNCMDE3NzA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUzQjAx NzcwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI2ZTQ1NjQtNDhmMi00M2I1LTg1 MDUtOTNiNDk4ZTdkOGFiLzAvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5 QkUzQjAxNzcwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaSEZ3AeHtEm8vUT/cij3S04/7MtSFy7ZFt fYldubOxFDxwR9IJ+Itsk8FVLNhug9PiVePylhMAPpJfWVdYSbGdOe3KHD6UbOGU rQ24xUT4PPV5azzmt6TCShmSVNHAhmdnKITMk4ghmo6pXf5nUQn1C7XxWNuFeVy6 Tw30tJpX3fUW7xuEoLHpyqHpwtyOEOLAATIwNnlHECG9YKRDILc1qBEwxGQb4pNe XenbHGqMhNHhCa7xkozsNVqtU3wC3Eb7UyUsxI2tketNbJtiUd6h+CTuTInJ1j6N XsufTzjofLYGXYyrRB99jCv+ZyBCcog1Elq4ZEJ0I7t7GjJMP78= -----END CERTIFICATE-----Generated at Thu Mar 26 16:44:08 2026 by rpki-client