$ rpki-client -vvf repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft File: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft (raw, json) Hash identifier: H1WqRYv8fU3ExUdv3UelMa4iYlwenqIwDZFZsVtpsMY= Subject key identifier: AF:50:AB:94:F3:97:6E:AD:7B:E5:AF:46:37:19:2B:F1:33:C5:4A:F1 Authority key identifier: 3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 Certificate issuer: /CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Certificate serial: 18DDDE657D0EDC31DAFA1D75D3247C9B3C4CBB68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft Manifest number: 0558 Signing time: Wed 18 Mar 2026 13:21:27 +0000 Manifest this update: Wed 18 Mar 2026 13:16:27 +0000 Manifest next update: Sat 21 Mar 2026 15:19:27 +0000 Files and hashes: 1: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl (hash: ebfiW2cInsTuHG0jNqVWeRrQHLiJFKZUAkrHGpAciI0=) 2: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: LtScTHZoxOHSbHhuqbZIrkhW+lipK1u0xCr0E9aMFWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 15:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:dd:de:65:7d:0e:dc:31:da:fa:1d:75:d3:24:7c:9b:3c:4c:bb:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Validity Not Before: Mar 18 13:16:27 2026 GMT Not After : Mar 21 15:19:27 2026 GMT Subject: CN=AF50AB94F3976EAD7BE5AF4637192BF133C54AF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:49:58:0e:a0:54:50:0e:df:88:a7:22:ce:c0: 96:89:c6:95:70:ac:30:ff:b9:4a:53:97:76:a7:92: ea:c2:f0:71:3c:5d:78:b6:bb:ba:e6:39:78:a8:49: 15:a5:5d:df:55:2b:aa:89:9e:8c:65:4d:b0:54:e6: dd:65:de:02:37:b1:4e:fa:91:52:ee:ff:bf:cc:04: e6:32:0a:4c:ca:40:ce:63:4e:47:0e:b5:94:d1:ad: 31:06:82:0c:cc:0b:75:d0:70:2f:ba:b4:2c:f6:c1: 89:90:42:f4:66:79:2a:09:80:5c:70:92:25:e7:b9: e5:ab:de:d3:a6:b3:e1:79:e9:4d:58:6f:d7:4e:67: e9:01:6c:0b:34:20:1a:56:0c:8e:66:08:cb:57:73: 9c:e6:cb:a6:f0:59:84:2d:74:ae:e2:f6:f9:84:a8: cb:20:17:01:94:12:76:8f:19:61:ae:03:f1:0b:77: da:14:4f:1d:ec:b1:5f:b0:df:a9:01:9d:23:4f:8e: 73:46:05:29:52:f2:b4:8a:1e:df:74:83:77:04:3d: db:ff:56:51:5a:7b:9e:fc:0b:0a:2e:da:62:b1:bd: 0c:28:08:47:3a:cb:42:5f:07:ad:62:77:de:2c:b3: a5:fd:5a:9e:1a:06:fe:fb:92:81:d4:1a:a5:a5:f4: b7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:50:AB:94:F3:97:6E:AD:7B:E5:AF:46:37:19:2B:F1:33:C5:4A:F1 X509v3 Authority Key Identifier: keyid:3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:4f:9d:50:38:15:f8:9d:6c:23:f8:d3:aa:d8:11:bf:5c:c4: 50:3c:8f:9e:ca:ab:8a:cd:ce:ee:5d:69:1b:22:03:25:ea:bb: 64:9f:4e:d0:26:ca:67:a5:4b:75:78:c8:15:31:12:1b:7c:ad: c0:d8:f3:cf:8f:df:b0:06:b5:1e:79:50:81:bd:3b:2e:f8:85: 81:08:5c:94:08:5d:a5:d1:3e:c5:2e:ba:0e:e9:6c:d4:16:31: 2c:38:18:4d:e0:a5:6d:b8:cc:19:b9:72:3d:bb:e8:ae:08:e0: f6:a9:83:d5:8a:46:82:0b:72:91:a3:1c:73:20:4d:9f:86:d0: 3d:23:79:b3:3a:21:5e:8f:cc:23:2f:6a:bf:da:76:87:af:32: 82:ba:c6:e6:09:dd:e2:e4:41:81:5c:fd:d2:a8:48:ef:ef:37: bd:bd:3e:0c:1e:f8:07:f3:23:d1:8a:0d:2f:c1:b4:c6:33:30: 36:12:47:5b:cd:ca:09:d9:82:7d:27:02:ea:07:43:b6:ac:a7: 39:8e:02:a8:cd:19:8c:67:b2:38:e6:c1:4a:05:f2:37:1c:51: 02:b1:5d:98:e3:ef:a7:14:7b:00:c1:36:d2:2a:e3:87:bf:35: 02:3c:ba:04:42:95:2f:8e:49:f6:06:ca:73:7e:c9:0f:20:9e: 17:04:51:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGN3eZX0O3DHa+h110yR8mzxMu2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhF RkNFMENBMDAeFw0yNjAzMTgxMzE2MjdaFw0yNjAzMjExNTE5MjdaMDMxMTAvBgNV BAMTKEFGNTBBQjk0RjM5NzZFQUQ3QkU1QUY0NjM3MTkyQkYxMzNDNTRBRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYSVgOoFRQDt+IpyLOwJaJxpVw rDD/uUpTl3ankurC8HE8XXi2u7rmOXioSRWlXd9VK6qJnoxlTbBU5t1l3gI3sU76 kVLu/7/MBOYyCkzKQM5jTkcOtZTRrTEGggzMC3XQcC+6tCz2wYmQQvRmeSoJgFxw kiXnueWr3tOms+F56U1Yb9dOZ+kBbAs0IBpWDI5mCMtXc5zmy6bwWYQtdK7i9vmE qMsgFwGUEnaPGWGuA/ELd9oUTx3ssV+w36kBnSNPjnNGBSlS8rSKHt90g3cEPdv/ VlFae578Cwou2mKxvQwoCEc6y0JfB61id94ss6X9Wp4aBv77koHUGqWl9Lc9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr1CrlPOXbq175a9GNxkr8TPFSvEwHwYDVR0j BBgwFoAUPR1ElzFVb44UUd5luy4PiO/ODKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM3Mzk2Yy00YmJlLTRjNmUtOGY1MC00NDJjMjA1ZTA3MGMvMC8zRDFENDQ5NzMx NTU2RjhFMTQ1MURFNjVCQjJFMEY4OEVGQ0UwQ0EwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhFRkNF MENBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjNzM5NmMtNGJiZS00YzZlLThm NTAtNDQyYzIwNWUwNzBjLzAvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBG ODhFRkNFMENBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVPnVA4FfidbCP406rYEb9cxFA8j57Kq4rN zu5daRsiAyXqu2SfTtAmymelS3V4yBUxEht8rcDY88+P37AGtR55UIG9Oy74hYEI XJQIXaXRPsUuug7pbNQWMSw4GE3gpW24zBm5cj276K4I4Papg9WKRoILcpGjHHMg TZ+G0D0jebM6IV6PzCMvar/adoevMoK6xuYJ3eLkQYFc/dKoSO/vN729Pgwe+Afz I9GKDS/BtMYzMDYSR1vNygnZgn0nAuoHQ7aspzmOAqjNGYxnsjjmwUoF8jccUQKx XZjj76cUewDBNtIq44e/NQI8ugRClS+OSfYGynN+yQ8gnhcEURI= -----END CERTIFICATE-----Generated at Thu Mar 19 09:42:32 2026 by rpki-client