$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft File: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft (raw, json) Hash identifier: ts++bqcZ0gJnNt5k1kuvojetybbsRvyCudOgrYBSsyE= Subject key identifier: 91:27:3A:6F:C6:FC:C3:A7:FC:9C:5E:33:6B:A7:60:37:E1:FB:3F:97 Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 Certificate issuer: /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Certificate serial: 7928522659AF6A979140F0EA7609CA12FBF79F85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft Manifest number: 0259 Signing time: Sun 01 Mar 2026 16:42:12 +0000 Manifest this update: Sun 01 Mar 2026 16:37:12 +0000 Manifest next update: Thu 05 Mar 2026 00:28:12 +0000 Files and hashes: 1: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl (hash: sxhRIaGx4ud+P7lH1q6e28C2BuLEOp3goYwf2KLW+4I=) 2: 3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (hash: 51ekgtNLYDLFINvFYDj/N8stn5dpVipAbdc9vPbRQ7I=) 3: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (hash: Ykg6X7TmWGcN3xNxQzs8nCjH8QlPm6F3Uq9zQ4bEBTI=) 4: 3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (hash: TsTDpWhEe0S4QbX7Nvx05CapjsmJk1el8Dy5qKfw9Z4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:28:52:26:59:af:6a:97:91:40:f0:ea:76:09:ca:12:fb:f7:9f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Validity Not Before: Mar 1 16:37:12 2026 GMT Not After : Mar 5 00:28:12 2026 GMT Subject: CN=91273A6FC6FCC3A7FC9C5E336BA76037E1FB3F97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:29:1a:20:86:a2:1b:cb:bd:47:92:69:4e: b9:7b:d9:0e:7b:e9:13:47:17:91:4a:d8:d5:63:ed: 4b:63:a1:67:d4:5e:89:ee:af:c0:a7:19:c7:24:ae: ca:7f:80:4e:d9:f7:0e:bf:07:12:d1:2a:f8:7e:07: fc:ea:1e:22:3d:35:a7:21:29:85:75:3e:81:cc:d8: b7:e1:72:a6:84:4c:3f:57:c5:15:08:69:e6:fb:5c: 98:d1:c3:c6:f6:3c:a9:e1:a3:66:cd:8f:1c:e1:6e: 8d:a0:93:a8:47:1b:48:f7:3e:19:eb:4d:dd:e6:07: ee:7f:3b:98:c2:a7:fc:b4:51:21:62:2a:fb:86:cf: 74:43:79:58:78:c8:92:63:e8:03:28:0e:ad:0a:22: c9:cf:57:ad:09:44:ce:43:d4:a9:d0:68:26:34:32: 61:22:53:12:1c:ab:68:2c:f1:69:ee:47:e8:67:e2: 45:c6:9d:dc:ff:e3:53:cd:0a:b2:bc:ca:50:16:f5: 33:53:f5:a5:5a:13:c7:39:3f:5e:cc:2d:1e:aa:83: 7f:b4:90:a8:a5:83:c0:6b:6f:76:6b:e4:79:85:45: 8f:41:04:ec:c4:2e:78:8b:ce:19:e2:c3:17:c6:20: 84:77:34:6b:db:52:25:b8:9b:a3:c3:2a:d4:a4:8b: bd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:27:3A:6F:C6:FC:C3:A7:FC:9C:5E:33:6B:A7:60:37:E1:FB:3F:97 X509v3 Authority Key Identifier: keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ee:91:61:61:dc:84:78:4e:ce:b9:b9:67:ab:cc:b4:41:f0: ae:d9:ab:54:93:a8:15:6c:75:6d:d2:fe:b7:36:82:64:26:e7: 49:2c:28:1b:34:87:e0:91:fd:70:5a:cc:5d:f0:91:d7:5a:9f: c0:99:19:e5:29:58:ee:50:3b:b6:7d:8c:fd:c1:9a:b0:0f:4a: b1:27:0b:03:9e:f5:32:dc:f0:9d:67:cb:dc:77:e2:17:5e:4e: 96:17:05:0f:d2:e6:b3:7a:8a:ac:ce:74:26:55:60:c0:81:27: c3:12:96:52:42:fd:05:47:d8:96:d7:dd:6e:21:1f:f8:49:33: 71:fe:85:60:63:39:0c:ea:a6:c0:ed:ea:30:e2:78:ff:d0:02: 36:89:36:5b:5a:9b:90:61:e7:71:ac:73:b8:a3:f3:1d:4d:75: 4b:5c:5c:44:b6:30:90:12:dd:b0:24:43:e1:4e:85:f1:3b:e6: 6c:76:23:b8:54:cb:2a:83:e8:95:20:b7:73:56:e7:dc:d2:9e: e5:30:0e:6a:b5:f9:0a:b4:e5:dd:0c:5e:3f:19:a6:9a:73:31: a8:55:d2:31:91:4a:49:36:0f:60:60:d5:0f:a1:be:52:24:3a: 74:b6:b0:5c:b5:fb:18:01:d6:8b:97:82:43:6d:c0:17:65:9a: 64:2a:d7:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeShSJlmvapeRQPDqdgnKEvv3n4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAy MkNCREVFOTAeFw0yNjAzMDExNjM3MTJaFw0yNjAzMDUwMDI4MTJaMDMxMTAvBgNV BAMTKDkxMjczQTZGQzZGQ0MzQTdGQzlDNUUzMzZCQTc2MDM3RTFGQjNGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhSkaIIaiG8u9R5JpTrl72Q57 6RNHF5FK2NVj7UtjoWfUXonur8CnGcckrsp/gE7Z9w6/BxLRKvh+B/zqHiI9Nach KYV1PoHM2LfhcqaETD9XxRUIaeb7XJjRw8b2PKnho2bNjxzhbo2gk6hHG0j3Phnr Td3mB+5/O5jCp/y0USFiKvuGz3RDeVh4yJJj6AMoDq0KIsnPV60JRM5D1KnQaCY0 MmEiUxIcq2gs8WnuR+hn4kXGndz/41PNCrK8ylAW9TNT9aVaE8c5P17MLR6qg3+0 kKilg8Brb3Zr5HmFRY9BBOzELniLzhniwxfGIIR3NGvbUiW4m6PDKtSki73DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkSc6b8b8w6f8nF4za6dgN+H7P5cwHwYDVR0j BBgwFoAUO6XBAZCtyW7jTrSm0FRFcCLL3ukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTMxNDg1OC1iMzNhLTRiNjUtOWE1NS1kY2U0MWUyMjM4NzMvMC8zQkE1QzEwMTkw QURDOTZFRTM0RUI0QTZEMDU0NDU3MDIyQ0JERUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAyMkNC REVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWUzMTQ4NTgtYjMzYS00YjY1LTlh NTUtZGNlNDFlMjIzODczLzAvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1 NzAyMkNCREVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXukWFh3IR4Ts65uWerzLRB8K7Zq1STqBVs dW3S/rc2gmQm50ksKBs0h+CR/XBazF3wkddan8CZGeUpWO5QO7Z9jP3BmrAPSrEn CwOe9TLc8J1ny9x34hdeTpYXBQ/S5rN6iqzOdCZVYMCBJ8MSllJC/QVH2JbX3W4h H/hJM3H+hWBjOQzqpsDt6jDieP/QAjaJNltam5Bh53Gsc7ij8x1NdUtcXES2MJAS 3bAkQ+FOhfE75mx2I7hUyyqD6JUgt3NW59zSnuUwDmq1+Qq05d0MXj8ZpppzMahV 0jGRSkk2D2Bg1Q+hvlIkOnS2sFy1+xgB1ouXgkNtwBdlmmQq17Y= -----END CERTIFICATE-----Generated at Mon Mar 2 00:53:59 2026 by rpki-client