$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft File: 3E69DE558C030D2041570E32C387F764C38BBBA9.mft (raw, json) Hash identifier: xiYC4r4X6JaLtTden0t54BamQpm00Dt6Hk3/5RYUnFQ= Subject key identifier: 89:4E:18:A4:DB:DD:0A:A8:81:BB:5B:8C:B8:46:30:E5:55:ED:AD:9F Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 Certificate issuer: /CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Certificate serial: 62E9D8E179EB960D85C7092CAE6CA6A16A040794 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft Manifest number: 024A Signing time: Fri 20 Mar 2026 00:42:19 +0000 Manifest this update: Fri 20 Mar 2026 00:37:19 +0000 Manifest next update: Mon 23 Mar 2026 08:44:19 +0000 Files and hashes: 1: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: +aYgV7p1X1TAw32sJQDFPZ5QXQcUqf2Pg9Wsy7Iew4g=) 2: 3E69DE558C030D2041570E32C387F764C38BBBA9.crl (hash: LuQr1000QQzJiWGsnsZd6KGYit/3aNi8MhaNR6CoGv8=) 3: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: xCOn9NWbt0GGMLt//qaNrgk/Sb/ECXg1/Jw9T03F6gc=) 4: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: rPKEvLXWGWoztExe4HntWPPQ3bNHicZSmrS4LoU+DGA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 08:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e9:d8:e1:79:eb:96:0d:85:c7:09:2c:ae:6c:a6:a1:6a:04:07:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Validity Not Before: Mar 20 00:37:19 2026 GMT Not After : Mar 23 08:44:19 2026 GMT Subject: CN=894E18A4DBDD0AA881BB5B8CB84630E555EDAD9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:48:e6:5e:ea:1e:dd:b8:53:b6:1f:bf:bf:cb: 3d:db:6d:18:5e:0b:09:29:6b:a1:d3:65:c6:bc:bc: 9b:a7:9d:41:08:90:4c:a0:e2:e5:7c:aa:e4:c7:e7: da:8e:9e:1d:31:aa:48:49:46:c5:99:a8:02:94:cf: 72:bd:65:43:75:9a:0e:33:7a:91:f4:93:16:ae:90: 55:8e:0f:b2:31:de:c6:b0:de:28:cf:19:fb:7e:0f: 01:c3:6c:ab:0c:38:43:ca:6a:88:22:a1:75:54:10: 44:07:28:12:a1:20:b6:ea:22:6d:bc:4b:a0:ac:90: 73:ba:36:db:8e:d8:d9:65:56:32:5a:fa:fd:63:cc: 35:56:6f:c9:c7:b1:33:87:98:7e:52:ac:97:41:a6: 36:30:ed:de:6f:3e:0d:78:b6:46:2b:08:6c:92:90: 09:a7:1a:44:f2:91:9f:2c:03:ad:ff:59:d0:65:d3: 3d:64:7d:c3:f6:0f:d6:36:09:65:38:77:b7:b2:64: 13:a9:f7:e8:1e:6d:6b:aa:df:f7:08:0d:f1:15:da: bd:97:83:3b:54:f3:8d:cb:9b:75:3d:f5:02:1c:dd: 48:84:77:93:3c:db:8b:26:57:71:26:79:8a:f6:51: 2f:ca:f0:0b:d7:70:b3:b1:80:42:44:bb:36:ca:52: 48:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4E:18:A4:DB:DD:0A:A8:81:BB:5B:8C:B8:46:30:E5:55:ED:AD:9F X509v3 Authority Key Identifier: keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:2c:8c:78:89:11:60:ad:d2:ca:cd:42:71:82:50:5d:a9:1a: 36:ff:2c:23:f5:e4:e1:98:f2:92:8a:d8:e0:e9:8d:e9:49:3a: 97:4b:d0:17:03:ff:40:02:34:78:8c:04:97:e6:80:f8:a1:31: 83:58:28:72:c2:55:cd:99:f0:6c:c8:fe:a0:f7:0d:ef:9e:f8: 9a:10:40:4f:a3:54:13:48:49:6e:6d:08:81:90:31:91:43:37: bd:13:14:71:07:d5:15:56:6d:b8:d9:c8:37:9b:38:a8:98:fc: 52:9b:a7:b8:da:93:8b:54:0d:ea:04:3b:ff:4e:53:e1:66:1b: 50:1a:1a:79:78:31:2c:d5:c1:f7:39:35:34:61:9a:63:d8:a7: 2e:5d:9a:e1:50:a7:92:00:79:76:62:51:4e:96:9a:05:27:5d: d4:88:e1:41:44:0c:ae:dc:f1:fb:43:27:44:ad:01:13:69:8c: 28:d9:9d:43:aa:b0:59:29:ba:ee:41:23:94:b8:5d:b8:1a:8b: 39:73:75:70:97:d0:76:5c:22:36:de:36:53:91:36:06:aa:75: 2c:5a:e0:06:68:a2:7f:09:7c:5f:61:93:51:3c:1d:66:46:8e: bf:05:5b:d3:3e:72:9f:da:f5:78:26:07:fe:d9:d0:d9:12:68: 81:69:90:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYunY4Xnrlg2FxwksrmymoWoEB5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRD MzhCQkJBOTAeFw0yNjAzMjAwMDM3MTlaFw0yNjAzMjMwODQ0MTlaMDMxMTAvBgNV BAMTKDg5NEUxOEE0REJERDBBQTg4MUJCNUI4Q0I4NDYzMEU1NTVFREFEOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjSOZe6h7duFO2H7+/yz3bbRhe Cwkpa6HTZca8vJunnUEIkEyg4uV8quTH59qOnh0xqkhJRsWZqAKUz3K9ZUN1mg4z epH0kxaukFWOD7Ix3saw3ijPGft+DwHDbKsMOEPKaogioXVUEEQHKBKhILbqIm28 S6CskHO6NtuO2NllVjJa+v1jzDVWb8nHsTOHmH5SrJdBpjYw7d5vPg14tkYrCGyS kAmnGkTykZ8sA63/WdBl0z1kfcP2D9Y2CWU4d7eyZBOp9+gebWuq3/cIDfEV2r2X gztU843Lm3U99QIc3UiEd5M824smV3EmeYr2US/K8AvXcLOxgEJEuzbKUkg3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiU4YpNvdCqiBu1uMuEYw5VXtrZ8wHwYDVR0j BBgwFoAUPmneVYwDDSBBVw4yw4f3ZMOLu6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIzYmIzNC0xNWUyLTQ0ODctYjUyNy02ZTc1MTI4NmNlN2QvMC8zRTY5REU1NThD MDMwRDIwNDE1NzBFMzJDMzg3Rjc2NEMzOEJCQkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRDMzhC QkJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3 NjRDMzhCQkJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAsjHiJEWCt0srNQnGCUF2pGjb/LCP15OGY 8pKK2ODpjelJOpdL0BcD/0ACNHiMBJfmgPihMYNYKHLCVc2Z8GzI/qD3De+e+JoQ QE+jVBNISW5tCIGQMZFDN70TFHEH1RVWbbjZyDebOKiY/FKbp7jak4tUDeoEO/9O U+FmG1AaGnl4MSzVwfc5NTRhmmPYpy5dmuFQp5IAeXZiUU6WmgUnXdSI4UFEDK7c 8ftDJ0StARNpjCjZnUOqsFkpuu5BI5S4XbgaizlzdXCX0HZcIjbeNlORNgaqdSxa 4AZoon8JfF9hk1E8HWZGjr8FW9M+cp/a9XgmB/7Z0NkSaIFpkFs= -----END CERTIFICATE-----Generated at Fri Mar 20 12:45:06 2026 by rpki-client