$ rpki-client -vvf repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft File: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft (raw, json) Hash identifier: XoyHsae4EnG84pEOEiaiEq3heDWQ3Z+0AtYHxo1zaMA= Subject key identifier: F3:2A:5A:96:D4:3D:FE:2B:2B:15:7C:6E:1A:39:48:76:A3:B9:9E:AC Authority key identifier: 3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 Certificate issuer: /CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Certificate serial: 2BA8C05CF34548B7EA39143637F0023D84BB6CD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft Manifest number: 0349 Signing time: Wed 25 Mar 2026 16:42:22 +0000 Manifest this update: Wed 25 Mar 2026 16:37:22 +0000 Manifest next update: Sun 29 Mar 2026 04:07:22 +0000 Files and hashes: 1: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: KB67q4SCRzcFv43ZUJG/KADzbe2hXV8kny5lP7t0r80=) 2: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl (hash: 8WYpiKFdYAEO+HaaCYAkO9vwj9YTHEki9vAebWV4QU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a8:c0:5c:f3:45:48:b7:ea:39:14:36:37:f0:02:3d:84:bb:6c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Validity Not Before: Mar 25 16:37:22 2026 GMT Not After : Mar 29 04:07:22 2026 GMT Subject: CN=F32A5A96D43DFE2B2B157C6E1A394876A3B99EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:30:3a:25:c2:b2:7b:a5:5c:c7:05:2a:ce:5a: 76:49:a3:49:d8:65:9b:d6:cb:fd:f5:2d:11:6e:a4: 6c:44:e4:64:43:d6:5d:5d:a6:5d:07:c9:b7:3c:8a: 99:1b:51:a5:28:8a:c3:29:91:9b:57:9f:88:c7:12: ae:71:53:79:ba:3b:40:2c:d3:36:97:24:5e:1e:34: 09:ef:ee:c7:6e:d4:0f:1c:de:f0:5c:d1:22:4f:60: 4c:78:7c:99:b3:fa:59:08:b9:29:b2:b4:a8:dd:3f: fa:27:6b:ac:db:3a:43:d3:d4:1a:b3:31:97:cd:14: 5c:b8:cb:8a:e9:5c:52:e1:0e:11:b5:6e:d2:a0:b1: c2:dd:d6:d0:6b:ce:ed:a4:65:44:98:79:09:a2:3c: 94:8e:01:b1:89:f4:f7:a0:7f:d7:85:8b:99:66:6d: 67:10:6c:88:03:82:80:dd:9a:62:67:2e:73:92:72: 52:85:8c:21:08:3a:0b:00:b2:3e:8d:e4:e5:ac:c5: 85:d4:75:e1:0b:8c:51:1c:78:87:7e:dd:1d:81:a4: a4:c0:69:61:58:25:f7:88:78:ad:d5:e2:22:b9:46: e4:38:a1:49:66:51:eb:0e:61:a3:24:59:86:f5:58: df:bf:95:c7:d1:ae:28:69:78:83:3d:86:8b:57:31: de:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2A:5A:96:D4:3D:FE:2B:2B:15:7C:6E:1A:39:48:76:A3:B9:9E:AC X509v3 Authority Key Identifier: keyid:3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ae:c0:50:8a:67:a2:68:4c:1f:3c:7b:03:6c:6f:06:3d:84: 10:40:f1:a7:2d:7c:de:1e:c9:3a:0a:f6:96:b3:95:6f:cd:66: 12:23:1d:b7:fb:b6:ec:b9:29:fb:ff:88:c0:8c:e9:4f:35:37: e8:cb:47:85:76:c6:91:23:82:46:ca:e0:49:94:b1:10:d2:eb: e7:7c:26:0f:77:a2:59:ea:86:80:84:65:cf:29:e0:b7:b1:33: 88:d0:02:fd:bd:84:1a:a3:de:83:f0:83:a0:30:b3:7f:25:38: a3:1f:aa:9c:09:c9:32:cc:9a:2b:19:03:d2:92:cb:94:84:f2: 37:71:d7:f7:77:6b:2f:f4:3a:80:39:86:a4:2a:51:6d:18:08: c3:f9:b8:56:45:60:6a:cb:ff:1c:34:7f:1a:a1:13:60:47:23: 14:f9:63:12:f8:f1:11:0b:4e:c9:8f:e1:aa:a5:e4:ef:59:ef: 92:72:e0:0d:ed:71:2b:aa:bf:71:9f:c0:92:7b:26:65:2b:4c: 91:8b:0f:89:81:93:9d:26:c7:d1:f9:57:4c:bc:9c:1d:bf:d3: 40:16:bf:03:a0:16:86:51:a5:e1:11:0f:d3:39:9e:21:4e:cb: 9a:c8:5a:5f:04:a2:08:61:99:ca:8a:b8:c4:da:f5:4f:7a:69: 06:80:5b:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK6jAXPNFSLfqORQ2N/ACPYS7bNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4 NkNFRDYxNDAeFw0yNjAzMjUxNjM3MjJaFw0yNjAzMjkwNDA3MjJaMDMxMTAvBgNV BAMTKEYzMkE1QTk2RDQzREZFMkIyQjE1N0M2RTFBMzk0ODc2QTNCOTlFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBMDolwrJ7pVzHBSrOWnZJo0nY ZZvWy/31LRFupGxE5GRD1l1dpl0Hybc8ipkbUaUoisMpkZtXn4jHEq5xU3m6O0As 0zaXJF4eNAnv7sdu1A8c3vBc0SJPYEx4fJmz+lkIuSmytKjdP/ona6zbOkPT1Bqz MZfNFFy4y4rpXFLhDhG1btKgscLd1tBrzu2kZUSYeQmiPJSOAbGJ9Pegf9eFi5lm bWcQbIgDgoDdmmJnLnOSclKFjCEIOgsAsj6N5OWsxYXUdeELjFEceId+3R2BpKTA aWFYJfeIeK3V4iK5RuQ4oUlmUesOYaMkWYb1WN+/lcfRrihpeIM9hotXMd4rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8ypaltQ9/isrFXxuGjlIdqO5nqwwHwYDVR0j BBgwFoAUOtfaYeulgAPT7yn3mq+8rYbO1hQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2E1NDc4MS05Njc4LTQ3NWMtYWMxYi1jZDRiZmNmNWQwZWEvMC8zQUQ3REE2MUVC QTU4MDAzRDNFRjI5Rjc5QUFGQkNBRDg2Q0VENjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4NkNF RDYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJD QUQ4NkNFRDYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGauwFCKZ6JoTB88ewNsbwY9hBBA8actfN4e yToK9pazlW/NZhIjHbf7tuy5Kfv/iMCM6U81N+jLR4V2xpEjgkbK4EmUsRDS6+d8 Jg93olnqhoCEZc8p4LexM4jQAv29hBqj3oPwg6Aws38lOKMfqpwJyTLMmisZA9KS y5SE8jdx1/d3ay/0OoA5hqQqUW0YCMP5uFZFYGrL/xw0fxqhE2BHIxT5YxL48REL TsmP4aql5O9Z75Jy4A3tcSuqv3GfwJJ7JmUrTJGLD4mBk50mx9H5V0y8nB2/00AW vwOgFoZRpeERD9M5niFOy5rIWl8EoghhmcqKuMTa9U96aQaAW3s= -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:30 2026 by rpki-client