$ rpki-client -vvf repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft File: 3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft (raw, json) Hash identifier: mzXB7m6IB6YzXNxOG0TlfFT7pyP6ZcZAS4jzsx84bFo= Subject key identifier: 25:6F:07:4B:6E:86:69:7F:6B:8E:4A:4D:CD:A9:11:6E:59:9A:1F:70 Authority key identifier: 3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3 Certificate issuer: /CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3 Certificate serial: 51EE8B7A8BC46F9405AAA506C17A51C939F73F8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft Manifest number: 015E Signing time: Mon 02 Mar 2026 14:01:28 +0000 Manifest this update: Mon 02 Mar 2026 13:56:28 +0000 Manifest next update: Fri 06 Mar 2026 00:50:28 +0000 Files and hashes: 1: 3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa (hash: WyVvseBUv5X8ksDjsVqSJfve5PyMPgdJn+/FGNUqcmk=) 2: 3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl (hash: wwJje3cURbfDV9TTGy2Vci2LzRQasVPSLlX8b71p3h8=) 3: 3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (hash: FC4YL6B+zkeYZOTJZ5N7Yi4YIq94WZ3uKMPO/1YmBIg=) 4: 3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa (hash: fcE9nxP4F/tonEL2jLycsAVcDyzYWrh05xw29/4haAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ee:8b:7a:8b:c4:6f:94:05:aa:a5:06:c1:7a:51:c9:39:f7:3f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3 Validity Not Before: Mar 2 13:56:28 2026 GMT Not After : Mar 6 00:50:28 2026 GMT Subject: CN=256F074B6E86697F6B8E4A4DCDA9116E599A1F70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:f5:e3:95:87:7f:7b:d8:8c:e3:ac:d7:c9: 0d:1d:7c:e2:0a:fb:db:21:0c:74:72:2b:28:65:4c: 56:85:97:06:39:81:ec:ee:fe:ae:1f:9e:f5:b2:6c: ed:c3:b4:d2:23:a3:fb:ae:1e:4f:c8:32:a9:79:08: f3:85:3f:83:00:82:1c:97:50:94:3f:6b:4c:cc:2c: 2d:fb:91:1d:61:91:26:15:74:2c:9c:1d:ba:c6:f9: 83:9a:5a:f1:90:c6:b3:f0:d2:37:28:cd:e0:f6:f6: 1f:fc:37:50:92:a1:fb:60:df:51:ff:77:29:17:c5: 7a:a2:18:ea:84:6f:8e:01:bb:96:be:dc:da:8f:ba: 20:6b:84:36:e8:64:31:ad:da:58:ab:ea:dc:1a:a5: c7:41:05:ba:77:f0:06:bd:03:31:0b:86:2b:d7:7e: c5:11:29:48:1e:dd:61:b6:83:77:e5:44:1a:69:32: 8b:f6:d3:9e:0f:ce:cb:b2:69:5f:69:a7:87:06:99: 3d:41:00:8f:ef:f9:e4:62:07:27:02:59:1b:38:3e: fb:e6:f2:a5:3f:25:50:23:cd:96:94:e4:38:dc:d6: 9a:d5:72:2a:65:34:4f:d6:af:ec:77:d9:70:be:e3: 6e:d8:ee:e5:e3:9f:6a:11:49:ce:96:e1:a8:84:f3: 7a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6F:07:4B:6E:86:69:7F:6B:8E:4A:4D:CD:A9:11:6E:59:9A:1F:70 X509v3 Authority Key Identifier: keyid:3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:53:b4:25:da:bc:a8:f8:b3:f9:1b:48:58:e7:cc:1e:54:43: 70:74:90:45:14:8d:d3:28:54:6f:32:d2:56:dd:9d:34:12:3f: 1d:65:4a:e4:4c:ad:8d:47:36:53:7b:8c:71:2e:fd:6d:df:0d: 0a:70:ae:4c:02:92:f7:01:6f:15:ed:a8:32:76:23:24:92:2c: 43:42:47:83:3c:19:64:b5:ae:0d:f3:ab:26:87:63:29:60:b8: 20:e9:75:47:93:b9:19:08:67:76:40:35:75:b5:76:98:13:e6: c4:71:44:ac:96:c0:9d:86:c5:0f:b0:a9:98:25:c8:72:23:6f: 27:cc:23:5c:cd:b1:6d:26:1a:35:ee:5e:be:fc:b0:61:42:76: 6f:e4:bd:7d:b5:d1:87:e4:e7:8a:40:c1:e7:7a:84:77:a7:06: 3e:06:47:b8:5a:a1:44:9a:eb:83:03:90:43:c0:2f:33:4f:58: 33:7f:08:0a:83:21:1f:a0:10:9d:b9:2b:18:70:d7:5f:f3:51: 00:ba:93:1e:e5:b1:83:ce:00:59:de:79:21:2b:69:d0:a7:d2: c2:84:64:9e:3b:27:4c:23:7c:8f:89:76:a7:a4:af:9c:c0:eb: 59:6d:72:0b:ea:34:59:a9:dd:3a:e2:b0:90:3f:c1:c2:99:8f: f2:84:56:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUe6LeovEb5QFqqUGwXpRyTn3P4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3 MjM3OEJGMzAeFw0yNjAzMDIxMzU2MjhaFw0yNjAzMDYwMDUwMjhaMDMxMTAvBgNV BAMTKDI1NkYwNzRCNkU4NjY5N0Y2QjhFNEE0RENEQTkxMTZFNTk5QTFGNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ifXjlYd/e9iM46zXyQ0dfOIK +9shDHRyKyhlTFaFlwY5gezu/q4fnvWybO3DtNIjo/uuHk/IMql5CPOFP4MAghyX UJQ/a0zMLC37kR1hkSYVdCycHbrG+YOaWvGQxrPw0jcozeD29h/8N1CSoftg31H/ dykXxXqiGOqEb44Bu5a+3NqPuiBrhDboZDGt2lir6twapcdBBbp38Aa9AzELhivX fsURKUge3WG2g3flRBppMov2054PzsuyaV9pp4cGmT1BAI/v+eRiBycCWRs4Pvvm 8qU/JVAjzZaU5Djc1prVciplNE/Wr+x32XC+427Y7uXjn2oRSc6W4aiE83oVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJW8HS26GaX9rjkpNzakRblmaH3AwHwYDVR0j BBgwFoAUPguVe1gtiu+ZpJxkSPmZPHI3i/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZWRjOWU0Zi04MTgwLTQxZDYtYjA4ZC04ZWU1YThhNzBhMDUvMC8zRTBCOTU3QjU4 MkQ4QUVGOTlBNDlDNjQ0OEY5OTkzQzcyMzc4QkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3MjM3 OEJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGVkYzllNGYtODE4MC00MWQ2LWIw OGQtOGVlNWE4YTcwYTA1LzAvM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5 M0M3MjM3OEJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhTtCXavKj4s/kbSFjnzB5UQ3B0kEUUjdMo VG8y0lbdnTQSPx1lSuRMrY1HNlN7jHEu/W3fDQpwrkwCkvcBbxXtqDJ2IySSLENC R4M8GWS1rg3zqyaHYylguCDpdUeTuRkIZ3ZANXW1dpgT5sRxRKyWwJ2GxQ+wqZgl yHIjbyfMI1zNsW0mGjXuXr78sGFCdm/kvX210Yfk54pAwed6hHenBj4GR7haoUSa 64MDkEPALzNPWDN/CAqDIR+gEJ25Kxhw11/zUQC6kx7lsYPOAFneeSEradCn0sKE ZJ47J0wjfI+Jdqekr5zA61ltcgvqNFmp3TrisJA/wcKZj/KEVqs= -----END CERTIFICATE-----Generated at Mon Mar 2 22:19:14 2026 by rpki-client