$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft File: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft (raw, json) Hash identifier: C5gMk0b/jXPQnG9D2T72BVNaWM4r/m0R7fN/YXk0rrU= Subject key identifier: C2:99:1A:44:34:09:92:D8:D5:91:9E:41:4A:03:46:65:B9:5A:65:2A Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Certificate serial: 5653702EF8992E346C1DD01C155E8C987237BBD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft Manifest number: 03B4 Signing time: Tue 17 Mar 2026 11:01:29 +0000 Manifest this update: Tue 17 Mar 2026 10:56:29 +0000 Manifest next update: Fri 20 Mar 2026 15:08:29 +0000 Files and hashes: 1: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl (hash: MRYwkZjvZ+IFvlA5DFGaXWdIk8Ro0vvUYFFPl2yU/8s=) 2: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: VIiYsiciQqUcEybdJzWc2/mfp8SJKq8E8uJ2ZasR81U=) 3: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: Bs5Awi2ROwKff4BLbS2KelsdGscmWwXl7Ms/+kA85eg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 15:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:53:70:2e:f8:99:2e:34:6c:1d:d0:1c:15:5e:8c:98:72:37:bb:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Validity Not Before: Mar 17 10:56:29 2026 GMT Not After : Mar 20 15:08:29 2026 GMT Subject: CN=C2991A44340992D8D5919E414A034665B95A652A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:28:4d:71:44:8c:29:2a:1f:cb:ed:87:e3:d6: 4e:c0:8f:9c:77:1d:b8:5e:24:20:4c:39:44:03:9d: 4e:cd:db:65:2e:bc:ee:f9:8e:66:8d:76:a1:ad:e9: ce:67:57:d7:a5:3a:dc:7c:be:0c:24:ff:e1:d5:15: 0c:9e:13:09:3b:3e:c2:5b:78:42:81:4a:38:8f:13: cf:93:04:be:a3:72:fc:34:19:8f:9c:87:b6:51:f4: 28:a8:dc:c4:5b:4f:b5:24:83:bf:4d:da:66:b7:6f: ba:54:3b:c9:48:d6:e6:35:5c:bd:73:0f:17:f7:46: 22:c9:b6:21:f9:3f:41:fd:d1:e6:06:40:6a:41:f0: 30:1d:d0:11:ad:3a:97:3c:0b:fe:fe:31:46:5e:98: 47:70:80:32:23:14:e3:6f:b9:b8:35:e5:1b:23:6f: ae:3f:95:5d:51:ec:c0:2a:1c:5e:b1:65:90:10:2e: d2:b1:14:1f:8b:66:9d:b6:a1:e5:68:1f:46:ea:08: e0:ae:70:1f:87:bd:25:57:84:b7:df:e1:20:8d:61: bf:d0:0a:12:fe:db:82:49:c6:3f:75:b4:df:ee:86: fa:fd:47:3b:30:b9:5a:73:15:97:d3:f6:ec:cd:28: 89:56:0e:d6:1d:c9:ad:7a:60:2f:81:a8:6e:c7:63: 23:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:99:1A:44:34:09:92:D8:D5:91:9E:41:4A:03:46:65:B9:5A:65:2A X509v3 Authority Key Identifier: keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:cc:df:cf:a0:87:9d:82:16:b9:8f:2e:aa:56:3e:a8:64:cc: b0:a2:d6:a2:18:4d:89:42:58:7a:36:08:5c:06:10:81:69:c0: 48:50:7b:5a:bf:d2:b1:ab:54:1a:30:94:98:c1:8c:65:e4:5e: be:c9:a3:05:5e:f6:7c:8b:75:b3:a0:12:ab:51:ab:33:11:cd: 68:7d:cd:bb:3c:b9:27:98:18:2e:d2:5a:fb:e5:45:fc:b0:3c: d6:24:88:83:12:a5:c4:27:66:e4:22:3e:ec:3a:d3:9e:75:5b: 85:75:8f:a1:a7:b9:57:5b:a0:0b:84:ac:ac:0e:e0:1f:cb:49: 76:ce:31:bd:ce:ed:69:86:97:b8:45:0f:75:45:da:2d:1b:02: 8b:a4:dd:89:a8:8c:d1:e2:9c:b0:a2:95:17:be:1f:22:e1:1c: 7a:6f:77:f8:43:5a:55:ad:e7:93:d3:73:c7:bd:0b:16:70:15: 11:df:e6:e0:a0:f6:bf:02:f1:47:71:68:09:2e:2f:48:ff:9e: df:f8:d3:bd:42:7d:59:f0:b5:5b:39:a2:8c:30:82:67:9b:c2: c5:63:7d:41:70:7a:3f:15:c9:b1:4d:92:0b:6f:87:b3:2a:38: 77:a0:84:7b:80:ea:41:9d:df:80:56:fe:58:2d:5f:37:c5:bf: f2:14:8c:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlNwLviZLjRsHdAcFV6MmHI3u9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZB MENCOUY4QjAeFw0yNjAzMTcxMDU2MjlaFw0yNjAzMjAxNTA4MjlaMDMxMTAvBgNV BAMTKEMyOTkxQTQ0MzQwOTkyRDhENTkxOUU0MTRBMDM0NjY1Qjk1QTY1MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKE1xRIwpKh/L7Yfj1k7Aj5x3 HbheJCBMOUQDnU7N22UuvO75jmaNdqGt6c5nV9elOtx8vgwk/+HVFQyeEwk7PsJb eEKBSjiPE8+TBL6jcvw0GY+ch7ZR9Cio3MRbT7Ukg79N2ma3b7pUO8lI1uY1XL1z Dxf3RiLJtiH5P0H90eYGQGpB8DAd0BGtOpc8C/7+MUZemEdwgDIjFONvubg15Rsj b64/lV1R7MAqHF6xZZAQLtKxFB+LZp22oeVoH0bqCOCucB+HvSVXhLff4SCNYb/Q ChL+24JJxj91tN/uhvr9RzswuVpzFZfT9uzNKIlWDtYdya16YC+BqG7HYyMFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwpkaRDQJktjVkZ5BSgNGZblaZSowHwYDVR0j BBgwFoAUPJFI7yevXtNIE0L13vJaJqDLn4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YThmNjlmNy05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC8zQzkxNDhFRjI3 QUY1RUQzNDgxMzQyRjVERUYyNUEyNkEwQ0I5RjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZBMENC OUY4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVB MjZBMENCOUY4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/M38+gh52CFrmPLqpWPqhkzLCi1qIYTYlC WHo2CFwGEIFpwEhQe1q/0rGrVBowlJjBjGXkXr7JowVe9nyLdbOgEqtRqzMRzWh9 zbs8uSeYGC7SWvvlRfywPNYkiIMSpcQnZuQiPuw60551W4V1j6GnuVdboAuErKwO 4B/LSXbOMb3O7WmGl7hFD3VF2i0bAouk3YmojNHinLCilRe+HyLhHHpvd/hDWlWt 55PTc8e9CxZwFRHf5uCg9r8C8UdxaAkuL0j/nt/4071CfVnwtVs5oowwgmebwsVj fUFwej8VybFNkgtvh7MqOHeghHuA6kGd34BW/lgtXzfFv/IUjJ0= -----END CERTIFICATE-----Generated at Tue Mar 17 17:36:49 2026 by rpki-client