$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft File: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft (raw, json) Hash identifier: PsIxZQ6qWEDEQb/NN47CBoeapo/NY8EoEZaHCQnX6B0= Subject key identifier: 78:35:4A:3E:7F:85:72:1B:0A:F5:95:E4:19:0E:6C:7E:70:CC:2A:0D Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 Certificate issuer: /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Certificate serial: 6FC4CAF6F981312DE456F4FA000314F3BB5C3EF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft Manifest number: 0405 Signing time: Thu 12 Mar 2026 10:22:24 +0000 Manifest this update: Thu 12 Mar 2026 10:17:24 +0000 Manifest next update: Sun 15 Mar 2026 10:32:24 +0000 Files and hashes: 1: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl (hash: MS+Ra6oAyAifsFBpD9ghFEpFJ2VSmNkIuDrP3WFcI24=) 2: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: ApcZEcO0CdRpriMpjZ8NMdcvm7zZPBlUASlOFKPUlhU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Mar 2026 10:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c4:ca:f6:f9:81:31:2d:e4:56:f4:fa:00:03:14:f3:bb:5c:3e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Validity Not Before: Mar 12 10:17:24 2026 GMT Not After : Mar 15 10:32:24 2026 GMT Subject: CN=78354A3E7F85721B0AF595E4190E6C7E70CC2A0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:56:07:68:37:7f:8a:b7:1e:89:ec:46:57:f1: f5:77:6f:be:a9:ea:d1:77:f6:04:69:39:d2:36:c6: 05:7a:b9:ae:60:f0:00:d1:6c:ca:d5:0e:ad:db:7c: 57:03:8d:42:fd:5e:50:57:6d:86:4e:6a:1e:6b:70: d3:9d:c2:68:9a:eb:e6:ce:b5:d1:9c:83:e7:e2:dc: 0e:c3:12:4e:c5:24:69:64:dc:93:3a:e9:6f:6f:4a: 31:c4:bc:f4:f4:34:2b:e0:26:3b:28:ef:b0:47:f9: 4f:17:87:9b:2b:e2:0c:15:d7:13:e8:40:c9:94:ff: 51:57:51:fd:fd:76:8e:6a:a5:7d:c9:e9:7c:87:36: 36:c8:e0:cc:c0:a5:c3:c3:b5:36:f8:60:a8:e4:6d: 8a:46:09:ab:1a:5a:0c:9d:d8:6a:14:36:23:4e:4c: 95:ce:bf:e1:71:32:2e:59:6e:c1:63:20:fd:1f:d7: d8:eb:82:8c:e7:83:e5:b3:a1:57:c5:d8:1c:9c:d3: 80:04:be:d1:97:24:c5:60:3a:f8:ac:83:8c:30:21: aa:e9:f6:10:57:37:00:ef:22:97:5c:9c:35:6e:4d: 74:15:5f:8a:2a:21:b8:6b:12:06:91:40:24:bc:cd: 18:7f:76:91:b7:ed:df:59:88:ff:53:15:33:48:f3: 4a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:35:4A:3E:7F:85:72:1B:0A:F5:95:E4:19:0E:6C:7E:70:CC:2A:0D X509v3 Authority Key Identifier: keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:01:3f:f6:d5:a9:0e:ed:f0:5b:d4:88:a9:56:ff:6a:b5:53: 07:a0:af:12:e7:34:67:ce:c6:d4:43:03:69:98:db:91:26:1e: 06:73:56:1c:30:02:68:ff:4a:19:3d:9e:3a:c9:cc:9e:29:c8: 6e:f6:51:60:58:d4:2c:b5:d7:d0:de:83:5f:1e:39:ac:c6:c7: d1:14:21:30:fe:c8:db:c9:3a:48:32:a0:41:19:01:00:29:0a: 16:41:d3:ed:8f:1c:3a:5f:c9:2a:41:0a:b6:41:b7:32:1f:c5: 94:50:c1:9c:0a:4b:70:e1:41:01:91:5d:b3:c6:db:22:e9:8a: 7f:a7:24:3a:21:cc:7b:fa:e1:7f:2a:40:cd:57:2a:b7:7a:5d: c7:dd:12:f9:0a:88:4a:9d:c4:9b:81:25:e0:0f:2e:6e:97:ef: a5:5b:5b:27:b2:45:92:0c:7e:95:7a:5f:e1:f2:10:84:1b:dd: 37:13:75:1b:32:d7:fc:76:89:55:5a:b2:71:70:a6:30:ea:79: cf:2c:50:80:59:33:5a:d7:47:1d:45:ba:d2:a2:51:be:7e:53: 56:a8:c0:19:39:bd:0a:40:7d:14:16:2e:ba:50:89:5d:17:54: 2f:07:20:41:83:b6:22:be:a2:3b:df:77:c3:fd:92:53:49:fd: 09:b8:32:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb8TK9vmBMS3kVvT6AAMU87tcPvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0 Q0RENzgzNjAeFw0yNjAzMTIxMDE3MjRaFw0yNjAzMTUxMDMyMjRaMDMxMTAvBgNV BAMTKDc4MzU0QTNFN0Y4NTcyMUIwQUY1OTVFNDE5MEU2QzdFNzBDQzJBMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAVgdoN3+Ktx6J7EZX8fV3b76p 6tF39gRpOdI2xgV6ua5g8ADRbMrVDq3bfFcDjUL9XlBXbYZOah5rcNOdwmia6+bO tdGcg+fi3A7DEk7FJGlk3JM66W9vSjHEvPT0NCvgJjso77BH+U8Xh5sr4gwV1xPo QMmU/1FXUf39do5qpX3J6XyHNjbI4MzApcPDtTb4YKjkbYpGCasaWgyd2GoUNiNO TJXOv+FxMi5ZbsFjIP0f19jrgozng+WzoVfF2Byc04AEvtGXJMVgOvisg4wwIarp 9hBXNwDvIpdcnDVuTXQVX4oqIbhrEgaRQCS8zRh/dpG37d9ZiP9TFTNI80pfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeDVKPn+FchsK9ZXkGQ5sfnDMKg0wHwYDVR0j BBgwFoAUPAPPlReBlwxtCtvo+s/sakzdeDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMC8zQzAzQ0Y5NTE3 ODE5NzBDNkQwQURCRThGQUNGRUM2QTRDREQ3ODM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0Q0RE NzgzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVD NkE0Q0RENzgzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMBP/bVqQ7t8FvUiKlW/2q1UwegrxLnNGfO xtRDA2mY25EmHgZzVhwwAmj/Shk9njrJzJ4pyG72UWBY1Cy119Deg18eOazGx9EU ITD+yNvJOkgyoEEZAQApChZB0+2PHDpfySpBCrZBtzIfxZRQwZwKS3DhQQGRXbPG 2yLpin+nJDohzHv64X8qQM1XKrd6XcfdEvkKiEqdxJuBJeAPLm6X76VbWyeyRZIM fpV6X+HyEIQb3TcTdRsy1/x2iVVasnFwpjDqec8sUIBZM1rXRx1FutKiUb5+U1ao wBk5vQpAfRQWLrpQiV0XVC8HIEGDtiK+ojvfd8P9klNJ/Qm4Mig= -----END CERTIFICATE-----Generated at Fri Mar 13 10:55:43 2026 by rpki-client