$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft File: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft (raw, json) Hash identifier: wyhH5Mfoq7qhVKYlCnEFKYZ67XqGj2bUs0srxZ6oAZY= Subject key identifier: BD:62:10:15:1B:EB:56:5B:41:D7:DD:96:D4:A2:EB:CC:CC:C5:41:B1 Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 Certificate issuer: /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Certificate serial: 56363166A2CC5C59526003CE56D29C1C3F1C6817 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft Manifest number: 040B Signing time: Wed 25 Mar 2026 12:02:27 +0000 Manifest this update: Wed 25 Mar 2026 11:57:27 +0000 Manifest next update: Sat 28 Mar 2026 22:21:27 +0000 Files and hashes: 1: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: ApcZEcO0CdRpriMpjZ8NMdcvm7zZPBlUASlOFKPUlhU=) 2: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl (hash: sH+M/B0ZxOAS1FWJvr3wEoCmUilRjYHapJvTykeCT3M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:36:31:66:a2:cc:5c:59:52:60:03:ce:56:d2:9c:1c:3f:1c:68:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Validity Not Before: Mar 25 11:57:27 2026 GMT Not After : Mar 28 22:21:27 2026 GMT Subject: CN=BD6210151BEB565B41D7DD96D4A2EBCCCCC541B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:83:54:be:b0:4f:50:ce:0b:04:63:16:fa: 63:7e:1c:92:c0:ba:a5:9f:c1:c4:c5:35:cf:46:2f: 9c:dd:62:29:ba:7e:0b:fc:0e:80:c9:c5:47:8c:fd: 33:2f:9c:03:78:d4:3c:b6:84:e7:26:fe:a3:8b:1c: 1f:fc:6c:e6:92:18:f7:ba:86:d9:7d:ee:6c:4a:77: 0d:30:11:9b:0e:3e:bd:51:bf:c3:93:d5:3a:7e:42: f5:9b:e5:68:cf:d4:2d:29:75:8e:6c:87:39:34:55: f0:cb:e1:31:b0:93:ca:2c:67:fe:7c:2e:a0:8d:fb: 9c:19:b5:f7:b2:fe:bf:3f:4f:5f:f9:ed:c4:7b:97: f1:4e:45:92:22:24:fb:f5:c3:bf:28:63:53:e9:1f: b4:a8:80:60:d5:3d:fe:45:d8:6a:97:22:ef:a9:17: 6b:68:3f:de:87:a6:fc:c4:d0:42:01:a8:6e:ad:37: 9e:3e:54:1d:93:31:74:14:cc:f2:dd:c2:a1:90:68: d4:ff:eb:47:b3:04:23:ce:c4:6d:96:71:39:b0:55: b2:d3:80:45:95:d2:21:e5:31:2d:60:5a:9d:90:9e: b9:bd:79:5c:fe:4e:9d:f6:89:cc:dd:48:63:f1:55: 98:da:02:9c:c4:66:34:2e:32:64:38:a0:52:62:03: 4c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:62:10:15:1B:EB:56:5B:41:D7:DD:96:D4:A2:EB:CC:CC:C5:41:B1 X509v3 Authority Key Identifier: keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:04:89:f7:f1:91:c5:cc:3f:81:ca:de:5e:91:01:f4:e6:55: 9a:e2:31:05:d3:f0:72:37:9e:a1:b7:db:47:da:c1:df:4a:3f: 52:82:59:bc:fb:8a:bf:8e:99:39:93:a8:64:cf:f7:3d:49:d7: e8:4c:a0:3d:a2:75:e3:dc:2f:7d:3d:06:75:65:5d:8f:36:c9: 62:c8:7d:d2:24:3d:69:34:b1:91:bc:7c:c9:a0:11:20:cb:08: 89:e5:c2:c5:92:e1:b1:6e:ad:12:42:f5:c2:e4:2a:4c:25:f5: c9:50:1b:1b:6c:45:7c:62:99:78:39:3c:12:4e:3e:0e:92:04: 52:3c:ad:77:e2:45:f1:21:5d:8d:c1:61:5e:6c:ea:10:f5:10: 9a:aa:e2:37:7d:6f:e0:61:53:2f:14:e8:3d:51:21:2b:cf:db: ed:70:52:bc:be:b2:74:3c:48:03:41:02:86:8f:52:7e:33:12: d6:01:0d:cc:2f:da:c3:09:bb:f8:58:c0:dd:9f:5b:99:36:c5: 54:d2:69:ff:3e:61:47:92:e2:1a:5e:4c:00:b0:f8:52:44:c0: 72:4a:80:44:6e:8a:65:ed:0e:80:d0:36:c5:65:a3:c2:cf:18: ea:37:d8:b7:a6:6a:74:4e:cd:35:21:e4:88:31:c7:e0:01:e9: c4:2d:14:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVjYxZqLMXFlSYAPOVtKcHD8caBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0 Q0RENzgzNjAeFw0yNjAzMjUxMTU3MjdaFw0yNjAzMjgyMjIxMjdaMDMxMTAvBgNV BAMTKEJENjIxMDE1MUJFQjU2NUI0MUQ3REQ5NkQ0QTJFQkNDQ0NDNTQxQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkOINUvrBPUM4LBGMW+mN+HJLA uqWfwcTFNc9GL5zdYim6fgv8DoDJxUeM/TMvnAN41Dy2hOcm/qOLHB/8bOaSGPe6 htl97mxKdw0wEZsOPr1Rv8OT1Tp+QvWb5WjP1C0pdY5shzk0VfDL4TGwk8osZ/58 LqCN+5wZtfey/r8/T1/57cR7l/FORZIiJPv1w78oY1PpH7SogGDVPf5F2GqXIu+p F2toP96HpvzE0EIBqG6tN54+VB2TMXQUzPLdwqGQaNT/60ezBCPOxG2WcTmwVbLT gEWV0iHlMS1gWp2Qnrm9eVz+Tp32iczdSGPxVZjaApzEZjQuMmQ4oFJiA0zvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvWIQFRvrVltB192W1KLrzMzFQbEwHwYDVR0j BBgwFoAUPAPPlReBlwxtCtvo+s/sakzdeDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMC8zQzAzQ0Y5NTE3 ODE5NzBDNkQwQURCRThGQUNGRUM2QTRDREQ3ODM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0Q0RE NzgzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVD NkE0Q0RENzgzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwEiffxkcXMP4HK3l6RAfTmVZriMQXT8HI3 nqG320fawd9KP1KCWbz7ir+OmTmTqGTP9z1J1+hMoD2idePcL309BnVlXY82yWLI fdIkPWk0sZG8fMmgESDLCInlwsWS4bFurRJC9cLkKkwl9clQGxtsRXximXg5PBJO Pg6SBFI8rXfiRfEhXY3BYV5s6hD1EJqq4jd9b+BhUy8U6D1RISvP2+1wUry+snQ8 SANBAoaPUn4zEtYBDcwv2sMJu/hYwN2fW5k2xVTSaf8+YUeS4hpeTACw+FJEwHJK gERuimXtDoDQNsVlo8LPGOo32LemanROzTUh5Igxx+AB6cQtFHM= -----END CERTIFICATE-----Generated at Thu Mar 26 12:56:51 2026 by rpki-client