$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft File: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft (raw, json) Hash identifier: dEKEbnjv7OqWwSht+W4qClpmFDhoZkfngxEIJycwGpE= Subject key identifier: A0:45:FA:4A:18:61:5A:82:67:2C:20:C2:0E:C2:A7:B9:6C:AE:B4:2C Authority key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F Certificate issuer: /CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Certificate serial: 492EB0223E5CFA543A50E43ED8D383089D5C0819 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft Manifest number: 0150 Signing time: Tue 24 Mar 2026 09:12:14 +0000 Manifest this update: Tue 24 Mar 2026 09:07:14 +0000 Manifest next update: Fri 27 Mar 2026 21:05:14 +0000 Files and hashes: 1: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: rg9lpQpQ+ZgL/aBtSdpzREEnhOBkrouF51BUGtJjEn0=) 2: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: kkiTIIYSjBTKRfHlWaLnjPTQdK1oEnXuZHdGsrSz9QU=) 3: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: E0CjFn5U/9BTQeO2HTeXnXZQvzamSjcjllnOK42R05A=) 4: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl (hash: NzKRbuiiaVwkaRDaGtICz7maqX3sK0ocO7zvOwRaFrU=) 5: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: mRxvTYWPyY4uCFeQDxVkCJFWfVPhlAl1Ny0mi+/MyiE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:2e:b0:22:3e:5c:fa:54:3a:50:e4:3e:d8:d3:83:08:9d:5c:08:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Validity Not Before: Mar 24 09:07:14 2026 GMT Not After : Mar 27 21:05:14 2026 GMT Subject: CN=A045FA4A18615A82672C20C20EC2A7B96CAEB42C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d8:0b:d1:ce:0b:27:62:88:31:b9:f2:93:42: 9b:13:f3:1a:14:90:56:e3:a9:d0:a5:65:b2:46:f4: 63:1e:08:58:02:ef:e2:f8:87:62:d8:e7:66:e3:d0: b5:2c:e7:e6:7a:e0:2d:75:f4:8a:e3:b0:98:30:f4: bd:cf:73:ef:83:4b:d9:b2:d7:d1:55:ec:aa:9e:b4: 7d:1c:20:c2:1e:3d:93:a9:7b:95:d3:e3:bb:89:43: 83:1f:31:b3:41:23:4b:41:51:db:e3:59:45:11:c3: 84:77:e7:6c:32:df:ae:f5:b1:9f:55:f1:62:df:15: 17:f8:29:9b:0d:de:61:93:22:f2:c2:bf:fe:3e:c6: d0:87:80:63:f5:f9:ef:d0:e4:3d:8e:0b:dc:9d:00: d6:ee:51:82:46:53:96:54:53:c8:4c:1e:79:51:28: 96:2e:91:68:52:eb:6f:ae:10:d6:57:14:a6:e1:c1: 5e:85:20:b1:fe:4c:da:da:91:82:f1:a7:95:a7:e1: 9b:8c:e3:ce:bb:fb:ae:44:b1:b5:c9:80:ad:d4:53: da:a1:9d:26:b4:f3:77:c0:61:5a:30:cf:e0:69:98: 30:ff:fd:7d:37:10:f3:b8:a3:b4:18:6b:c0:12:75: e2:a6:11:aa:0a:53:d8:bb:93:18:a2:a3:c6:65:5b: 74:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:45:FA:4A:18:61:5A:82:67:2C:20:C2:0E:C2:A7:B9:6C:AE:B4:2C X509v3 Authority Key Identifier: keyid:3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:92:a2:a9:21:ca:2b:be:ae:62:7f:76:83:26:e0:f8:5e:b4: e4:9a:66:f1:06:8f:11:b0:0f:ff:61:5d:78:d1:b2:0f:dc:22: 28:ef:a5:41:a5:cc:74:44:3b:4f:57:27:75:89:b6:38:4a:cc: af:f5:ca:b9:56:c5:b1:39:bc:cf:10:12:ee:31:7f:0a:d0:a3: 66:2a:45:54:75:e2:c8:e4:32:c5:00:76:63:f7:3a:f2:e4:4b: e7:40:e2:d6:20:c7:ea:31:e1:7b:d4:2d:c4:44:89:f1:cd:68: 84:d1:db:f9:9f:45:4e:c7:2a:a2:4d:a0:97:66:90:3d:6d:4f: a2:5d:aa:3c:47:b4:94:ff:d9:19:b9:6d:74:7c:2f:46:2c:a1: 6e:a3:53:ea:24:0a:b4:e3:8e:73:7f:1c:5c:31:35:a5:d2:c9: 11:b4:22:79:22:ce:83:80:75:f2:ea:00:08:17:0f:15:41:cc: e7:35:61:d9:b8:a9:09:ee:e1:dd:ab:7b:50:05:f0:0a:a9:9c: f9:b2:65:cf:dc:40:8c:55:44:a0:9d:fc:65:87:db:0e:4c:61: 92:16:3c:30:f2:ec:aa:96:38:53:68:6b:74:29:5c:26:81:22: dd:2f:72:dd:c2:0a:95:7c:7d:39:8e:76:a8:6c:c6:2b:ce:32: 81:6d:83:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSS6wIj5c+lQ6UOQ+2NODCJ1cCBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVC RjBBRkIwRjAeFw0yNjAzMjQwOTA3MTRaFw0yNjAzMjcyMTA1MTRaMDMxMTAvBgNV BAMTKEEwNDVGQTRBMTg2MTVBODI2NzJDMjBDMjBFQzJBN0I5NkNBRUI0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa2AvRzgsnYogxufKTQpsT8xoU kFbjqdClZbJG9GMeCFgC7+L4h2LY52bj0LUs5+Z64C119IrjsJgw9L3Pc++DS9my 19FV7KqetH0cIMIePZOpe5XT47uJQ4MfMbNBI0tBUdvjWUURw4R352wy3671sZ9V 8WLfFRf4KZsN3mGTIvLCv/4+xtCHgGP1+e/Q5D2OC9ydANbuUYJGU5ZUU8hMHnlR KJYukWhS62+uENZXFKbhwV6FILH+TNrakYLxp5Wn4ZuM4867+65EsbXJgK3UU9qh nSa083fAYVowz+BpmDD//X03EPO4o7QYa8ASdeKmEaoKU9i7kxiio8ZlW3SbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoEX6ShhhWoJnLCDCDsKnuWyutCwwHwYDVR0j BBgwFoAUPHkP5KuCosFQF9JlcUsSRb8K+w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMC8zQzc5MEZFNEFC ODJBMkMxNTAxN0QyNjU3MTRCMTI0NUJGMEFGQjBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVCRjBB RkIwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3ZTgwODEtNjNhZi00OWU3LTk2 NDYtNzZjMjVhNWU5N2NhLzAvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEy NDVCRjBBRkIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuSoqkhyiu+rmJ/doMm4PhetOSaZvEGjxGw D/9hXXjRsg/cIijvpUGlzHREO09XJ3WJtjhKzK/1yrlWxbE5vM8QEu4xfwrQo2Yq RVR14sjkMsUAdmP3OvLkS+dA4tYgx+ox4XvULcREifHNaITR2/mfRU7HKqJNoJdm kD1tT6JdqjxHtJT/2Rm5bXR8L0YsoW6jU+okCrTjjnN/HFwxNaXSyRG0InkizoOA dfLqAAgXDxVBzOc1Ydm4qQnu4d2re1AF8AqpnPmyZc/cQIxVRKCd/GWH2w5MYZIW PDDy7KqWOFNoa3QpXCaBIt0vct3CCpV8fTmOdqhsxivOMoFtg8Q= -----END CERTIFICATE-----Generated at Thu Mar 26 14:31:00 2026 by rpki-client