$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: GxMNVkW3OHEwEPunjlzFEn8QkqUWaD8EevnHirF+vd8= Subject key identifier: 68:65:CB:A6:1F:E3:02:0B:52:4E:A5:C8:5B:1A:EA:DE:A7:CB:F5:B0 Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 7753E691735626DA391F461AB02F7747313C6F01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: 0150 Signing time: Thu 19 Mar 2026 15:32:20 +0000 Manifest this update: Thu 19 Mar 2026 15:27:20 +0000 Manifest next update: Sun 22 Mar 2026 19:26:20 +0000 Files and hashes: 1: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: /uvYv6HXm75DxIAvpZkO8f6t2HrqKvSXY9kmVPmsLBo=) 2: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: 8ixe2dRumddWkrBmHosfvx4FJoWXHlX3nS2UyxDbnjU=) 3: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: jqfTRowotRE9toTW7s6XxuVzWTLvd0wPa0s2vyImrss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 19:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:53:e6:91:73:56:26:da:39:1f:46:1a:b0:2f:77:47:31:3c:6f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Mar 19 15:27:20 2026 GMT Not After : Mar 22 19:26:20 2026 GMT Subject: CN=6865CBA61FE3020B524EA5C85B1AEADEA7CBF5B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:dc:84:b3:2d:74:54:a8:80:c4:93:51:32: ff:fe:c2:97:6c:d1:3e:38:04:ec:6c:56:4d:1a:01: da:9c:d8:65:7b:9c:4c:f8:b9:ae:cd:0d:89:8b:4d: 5e:cf:35:db:22:d6:66:73:8d:c6:55:02:6f:7a:69: 74:00:12:6c:31:77:60:3d:e1:a7:c7:f4:74:fe:db: 3e:9b:7a:7b:69:a0:12:16:d0:17:29:f5:c1:7a:d4: 2c:ea:73:ab:ff:a5:03:ee:8c:be:2e:9a:7a:65:4d: 22:89:ee:a4:cc:5b:0b:3e:e1:93:c1:e4:de:db:3c: 38:1c:65:ca:c0:b7:c3:46:39:28:a0:27:b9:a6:e3: 29:60:0c:37:88:9a:fd:74:8e:be:01:a5:50:0a:c0: c4:5d:08:28:62:f9:c9:a0:34:69:8c:d8:a0:05:17: f0:a8:08:2a:af:df:0f:88:e0:97:17:9c:10:75:9e: 5b:b1:4e:a6:96:34:9c:41:b5:a7:04:7a:a5:b1:54: 13:9d:4e:bc:f3:8f:90:c6:4b:74:7e:1e:81:84:40: c7:e0:30:ab:1a:bd:04:33:39:72:0a:4e:e3:66:8f: 74:ea:f5:a0:4e:fd:d5:be:43:6d:d8:54:5c:08:8f: 02:fb:19:bc:17:7c:a6:db:f5:ef:82:ee:0a:1b:d7: de:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:65:CB:A6:1F:E3:02:0B:52:4E:A5:C8:5B:1A:EA:DE:A7:CB:F5:B0 X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:60:93:10:f3:9b:63:31:96:1b:87:e6:67:f4:75:48:d2:75: 9b:af:3e:fb:79:34:2e:51:3e:69:a5:2a:fd:44:47:00:29:06: 55:63:13:88:c0:b3:7c:9d:a8:c5:bf:29:eb:c4:a7:b1:00:ea: 25:a4:f1:b2:a4:cf:3f:53:1a:5b:3c:8d:30:e1:ee:59:5b:e6: 6f:cc:69:cf:59:8c:b6:b6:9d:76:59:0b:f9:ba:e3:b1:7f:5e: 57:56:fc:b8:45:c6:ca:43:13:cb:89:bf:a4:af:b2:b6:d1:68: a0:46:3e:8a:71:77:a6:2d:85:64:cb:36:01:d5:81:f5:d2:a3: d1:c4:18:21:4a:96:8f:d1:16:57:7a:f3:d8:48:84:1a:15:91: 01:68:97:00:8e:9f:9d:e9:22:33:7c:c0:0e:4a:51:93:76:78: 0a:e6:46:f5:c8:c1:7b:bc:04:93:c6:92:9f:87:36:cb:8d:75: 9a:b6:f3:e8:23:d4:e1:d9:0a:c2:b5:f8:ec:77:01:87:1b:c6: fe:b4:50:a6:1e:d0:32:0a:95:bd:03:2c:d8:6c:e7:a5:16:ca: e8:50:52:3a:c9:7f:27:f0:98:21:51:dc:29:b6:a2:cf:eb:21: ae:e9:d6:e8:0a:bb:15:43:24:d9:b1:26:16:f7:1b:d8:f3:53: a2:91:a0:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd1PmkXNWJto5H0YasC93RzE8bwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNjAzMTkxNTI3MjBaFw0yNjAzMjIxOTI2MjBaMDMxMTAvBgNV BAMTKDY4NjVDQkE2MUZFMzAyMEI1MjRFQTVDODVCMUFFQURFQTdDQkY1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzl9yEsy10VKiAxJNRMv/+wpds 0T44BOxsVk0aAdqc2GV7nEz4ua7NDYmLTV7PNdsi1mZzjcZVAm96aXQAEmwxd2A9 4afH9HT+2z6bentpoBIW0Bcp9cF61Czqc6v/pQPujL4umnplTSKJ7qTMWws+4ZPB 5N7bPDgcZcrAt8NGOSigJ7mm4ylgDDeImv10jr4BpVAKwMRdCChi+cmgNGmM2KAF F/CoCCqv3w+I4JcXnBB1nluxTqaWNJxBtacEeqWxVBOdTrzzj5DGS3R+HoGEQMfg MKsavQQzOXIKTuNmj3Tq9aBO/dW+Q23YVFwIjwL7GbwXfKbb9e+C7gob195jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaGXLph/jAgtSTqXIWxrq3qfL9bAwHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJgkxDzm2MxlhuH5mf0dUjSdZuvPvt5NC5R PmmlKv1ERwApBlVjE4jAs3ydqMW/KevEp7EA6iWk8bKkzz9TGls8jTDh7llb5m/M ac9ZjLa2nXZZC/m647F/XldW/LhFxspDE8uJv6SvsrbRaKBGPopxd6YthWTLNgHV gfXSo9HEGCFKlo/RFld689hIhBoVkQFolwCOn53pIjN8wA5KUZN2eArmRvXIwXu8 BJPGkp+HNsuNdZq28+gj1OHZCsK1+Ox3AYcbxv60UKYe0DIKlb0DLNhs56UWyuhQ UjrJfyfwmCFR3Cm2os/rIa7p1ugKuxVDJNmxJhb3G9jzU6KRoHI= -----END CERTIFICATE-----Generated at Fri Mar 20 18:53:25 2026 by rpki-client