$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft File: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json) Hash identifier: JuJz3FQouqnaJYPe3sGjvlFdKX8ILZ01EIuVGbDn7pc= Subject key identifier: 94:87:9B:A6:EE:FA:97:4B:4B:78:9F:B9:09:38:C6:03:6E:4C:06:9E Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Certificate serial: 0114748727F117E145A8A8C2027FAC3051B14CE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft Manifest number: 028B Signing time: Mon 30 Mar 2026 12:02:26 +0000 Manifest this update: Mon 30 Mar 2026 11:57:26 +0000 Manifest next update: Thu 02 Apr 2026 16:28:26 +0000 Files and hashes: 1: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: znbfpwqo/RqJTtKokVQJprWVfIE6ZeyWhe8h0U97wlw=) 2: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: HFCOA55xyCMgbWOZJ0m8zo5QisWtAOvky6WAOE1woSc=) 3: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: cJFNfS5UPmik4Tu/P1Y8olkkeC16bO4wOvGv71A6WXE=) 4: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 7h+0gopoSFJ2M48QEyz8CL99eJtVxfcZjzTpUAYVTZo=) 5: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: QBM9H9rd8+lS4gn1TV/zjjSpwBwL7sSfYx4yVL1I50s=) 6: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: wr6UHliebQd7p9YyHhYQ444oA44R+pMzEhtNFNELTlg=) 7: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: /v/t0LVvwP8ItAgvAEV4d3ird2OFydIuyNvk7Hjv9rU=) 8: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: naME29BjJNXWcG5xS5OYZKvtjsmmITu0eSf0OkwWWqI=) 9: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: KM8HCAE941ny+NeclcPdlUg9VIqsSih6MjHoa5IqXb8=) 10: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: FWaIS2C5y+tF+eXrrfhUKvMiaO2hbKHJ6PXu+XjlFjU=) 11: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: oP5w04R+DVBIXz7VN32/pUudJby5Bdnn9OzpJHzqMrY=) 12: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: C6l6zdsNHMzfA4VroXv38wYjaYdlZyMXfkyZpHinjgQ=) 13: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sYsKqli8EUEzTvSQXavM3oM1AVTdmnNeXY5Ib9nTkXk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 16:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:14:74:87:27:f1:17:e1:45:a8:a8:c2:02:7f:ac:30:51:b1:4c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Validity Not Before: Mar 30 11:57:26 2026 GMT Not After : Apr 2 16:28:26 2026 GMT Subject: CN=94879BA6EEFA974B4B789FB90938C6036E4C069E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e3:67:79:6d:cb:3f:1f:f8:cd:73:04:9b:55: 56:15:b0:21:b4:02:8f:2b:16:f2:03:f1:60:ac:54: d0:cc:e5:e3:12:3e:5d:43:ac:07:20:d3:1f:03:7c: e8:b8:5b:5e:25:e0:da:41:5e:86:28:55:ec:bc:86: 5c:19:42:d9:20:b5:6c:c1:b1:10:32:58:e6:cf:fb: 82:a1:b7:28:a6:9d:c9:d9:b3:a5:3c:83:5c:b1:c7: 91:20:90:6a:98:52:a6:7d:b7:0b:55:29:cd:84:9b: 11:e7:21:70:89:ff:a2:b2:5f:d3:48:5c:cd:c1:86: e2:0f:07:cf:84:3f:a2:83:c4:70:4c:54:2a:34:96: 5c:45:14:3a:84:9b:c7:f6:80:77:9d:f6:02:12:c2: e5:f8:29:d3:4f:ca:ac:91:b6:4d:e1:ca:cf:c2:69: a1:a5:3f:4a:1d:52:10:fc:d3:1c:c5:3c:62:a6:62: d3:c8:d3:d8:fe:9a:ef:e7:11:a8:6f:76:92:60:aa: a1:0d:ae:72:3b:36:13:bc:4b:bb:14:03:36:64:fd: d0:a7:2c:a5:9b:1e:9a:f8:eb:b3:0c:57:d2:3d:56: 64:71:0e:7f:ba:ea:d9:a5:80:83:8a:0c:50:2d:b4: a9:83:ca:5d:d9:0b:40:b4:c2:79:05:60:1e:3d:58: 5e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:87:9B:A6:EE:FA:97:4B:4B:78:9F:B9:09:38:C6:03:6E:4C:06:9E X509v3 Authority Key Identifier: keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:22:11:1e:57:57:46:18:cc:06:a4:1c:70:70:93:7b:e8:6f: d2:00:80:27:d7:36:39:8b:33:6d:df:bd:a0:02:ad:92:2b:5b: 98:4b:f4:97:09:dc:fc:9f:78:3d:f1:2a:10:66:60:21:8f:47: 8b:5d:b3:3c:f5:94:52:4e:12:67:25:41:56:59:38:b5:be:bf: 61:2c:b0:fa:9d:6c:d6:8f:f6:0d:27:dc:db:c3:3a:1a:cb:96: ba:4a:ba:26:8c:6d:d3:46:c4:b2:bd:20:05:0c:1a:73:22:8f: 3f:a9:55:67:0e:16:a5:69:02:c3:54:ef:28:75:e9:8e:3e:aa: 90:67:bd:f9:d0:fd:c5:e5:18:c6:f2:64:e3:93:c6:18:45:93: ec:9c:6b:42:ce:33:b3:e8:b6:a6:11:6a:82:85:c8:cf:f0:ad: 0a:ae:24:ab:79:25:cd:2a:ed:f1:84:a4:2b:68:99:12:0d:cf: b9:0a:92:93:13:4f:86:74:b4:93:a5:c1:41:41:97:f6:b5:cb: 3b:4d:0e:bf:84:b8:e0:1a:f5:82:96:c0:fd:34:49:af:f4:2a: 51:e6:7c:f2:bd:d8:1d:53:f1:7e:d4:20:eb:21:19:71:92:70: 87:ed:23:eb:e8:ef:dc:8c:bc:20:db:2b:62:d0:df:80:e5:72: c8:85:1a:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUARR0hyfxF+FFqKjCAn+sMFGxTOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG QzhBN0U5NzAeFw0yNjAzMzAxMTU3MjZaFw0yNjA0MDIxNjI4MjZaMDMxMTAvBgNV BAMTKDk0ODc5QkE2RUVGQTk3NEI0Qjc4OUZCOTA5MzhDNjAzNkU0QzA2OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr42d5bcs/H/jNcwSbVVYVsCG0 Ao8rFvID8WCsVNDM5eMSPl1DrAcg0x8DfOi4W14l4NpBXoYoVey8hlwZQtkgtWzB sRAyWObP+4KhtyimncnZs6U8g1yxx5EgkGqYUqZ9twtVKc2EmxHnIXCJ/6KyX9NI XM3BhuIPB8+EP6KDxHBMVCo0llxFFDqEm8f2gHed9gISwuX4KdNPyqyRtk3hys/C aaGlP0odUhD80xzFPGKmYtPI09j+mu/nEahvdpJgqqENrnI7NhO8S7sUAzZk/dCn LKWbHpr467MMV9I9VmRxDn+66tmlgIOKDFAttKmDyl3ZC0C0wnkFYB49WF6DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlIebpu76l0tLeJ+5CTjGA25MBp4wHwYDVR0j BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB N0U5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MTlhZWItNWM1Ni00Y2IzLTk0 YTAtMGY0MDBlYTZhMzc1LzAvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUz QUFGQzhBN0U5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4iER5XV0YYzAakHHBwk3vob9IAgCfXNjmL M23fvaACrZIrW5hL9JcJ3PyfeD3xKhBmYCGPR4tdszz1lFJOEmclQVZZOLW+v2Es sPqdbNaP9g0n3NvDOhrLlrpKuiaMbdNGxLK9IAUMGnMijz+pVWcOFqVpAsNU7yh1 6Y4+qpBnvfnQ/cXlGMbyZOOTxhhFk+yca0LOM7PotqYRaoKFyM/wrQquJKt5Jc0q 7fGEpCtomRINz7kKkpMTT4Z0tJOlwUFBl/a1yztNDr+EuOAa9YKWwP00Sa/0KlHm fPK92B1T8X7UIOshGXGScIftI+vo79yMvCDbK2LQ34DlcsiFGiU= -----END CERTIFICATE-----Generated at Wed Apr 1 06:42:22 2026 by rpki-client