$ rpki-client -vvf repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft File: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft (raw, json) Hash identifier: NB6SHMG6KZR1dOlxAUT0M7BqBULqjgLyPLfMnhCsorM= Subject key identifier: 58:2A:B0:BE:4A:7B:A7:53:38:66:86:3D:15:9B:8D:BA:BB:DC:8E:14 Authority key identifier: 3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13 Certificate issuer: /CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613 Certificate serial: 4826D2AE1161065F58CAF9CC8B2F8994C9DF11E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer Subject info access: rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft Manifest number: 0244 Signing time: Sun 01 Mar 2026 09:31:34 +0000 Manifest this update: Sun 01 Mar 2026 09:26:34 +0000 Manifest next update: Wed 04 Mar 2026 11:01:34 +0000 Files and hashes: 1: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: QZrvNrtpXCKPjhSgsC8kdyvVzWQ/ADZleC5w3ZKWFT4=) 2: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl (hash: Suh+7ZYCPhCejRO/4ioThNlOCZ4YUKq7MKKy/qDvF4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:26:d2:ae:11:61:06:5f:58:ca:f9:cc:8b:2f:89:94:c9:df:11:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613 Validity Not Before: Mar 1 09:26:34 2026 GMT Not After : Mar 4 11:01:34 2026 GMT Subject: CN=582AB0BE4A7BA7533866863D159B8DBABBDC8E14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:33:b1:41:db:91:02:f6:7b:01:0d:f4:3c:41: 60:f9:01:9c:54:66:fe:f7:58:f2:5d:7c:c4:5d:d2: 78:90:60:cf:2c:54:2d:3d:1b:a3:95:db:7e:53:64: 7f:84:4f:19:4f:4f:cd:32:5d:cb:ed:09:e5:64:ee: ab:d0:25:a8:c7:8e:b8:0c:1c:b5:9a:b3:9f:1f:c7: 41:47:05:1f:15:0e:e7:4c:29:00:15:31:da:d2:28: fe:32:04:d1:20:d0:db:e1:dd:7b:84:01:df:a3:18: 98:4d:24:df:60:23:9b:2a:ab:08:e1:08:7a:d5:e1: 39:bf:a7:2a:f4:37:69:af:57:6e:17:23:24:f3:01: e4:1e:ee:71:91:d1:79:2c:39:e2:35:2e:28:a3:97: 3b:c3:5e:f7:b6:4d:82:1a:a4:e6:a6:6b:89:43:54: e4:96:ee:86:a2:af:29:e4:30:e5:8d:78:ce:0e:97: d4:25:20:e4:1e:d6:2d:c0:1d:82:93:4a:d5:87:29: 5a:ae:03:db:cc:5b:2a:93:5f:87:9d:36:40:22:14: 14:5b:c8:bb:c5:14:ca:86:81:fd:f9:f6:65:15:aa: 41:d8:1c:15:15:12:92:4a:63:72:ff:df:3f:13:89: 00:db:92:53:ff:4f:b1:ed:e3:38:2a:58:52:e4:a7: a5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2A:B0:BE:4A:7B:A7:53:38:66:86:3D:15:9B:8D:BA:BB:DC:8E:14 X509v3 Authority Key Identifier: keyid:3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f0:f6:63:8e:4d:fb:40:57:28:ea:61:13:2c:59:92:95:db: b9:dd:79:08:2b:e3:2e:88:e4:a8:ea:da:a1:37:95:e6:cb:36: 0c:66:95:45:9a:14:bf:5a:fd:83:c2:a4:57:e1:1d:58:ac:c6: ca:b1:17:ff:69:ab:5d:52:70:08:4b:5b:59:7b:45:71:01:d2: fd:a9:05:e9:ab:93:9b:0e:d2:e8:74:a5:e9:8a:b3:df:c4:00: 9e:4e:a0:ba:cc:42:cd:4d:29:d7:48:4b:ae:31:1e:31:c1:2a: ab:a9:2b:19:2d:9f:f5:83:da:33:6d:e0:69:6c:2e:a3:b0:be: 32:ea:7e:67:b6:04:4f:7f:db:a6:d3:5c:83:2d:e7:aa:ab:5d: 54:f4:80:08:77:e7:9a:0b:35:7e:42:6b:09:51:25:86:45:e7: 63:48:96:7c:b3:9e:b9:f6:49:23:23:93:f0:32:0e:3a:bd:7d: 24:c8:e9:3a:99:b2:8c:92:de:34:aa:66:3e:22:14:9c:47:1f: 2c:02:9f:48:54:93:70:bc:c0:6a:41:1d:35:2a:65:29:e3:56: 73:ec:6d:3a:bb:82:7a:3d:9e:84:92:60:7c:96:de:03:e4:a7: 2b:f3:c9:49:d7:07:89:8c:e7:e8:76:16:7d:ed:fe:6d:ee:b4: cc:e8:e4:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSCbSrhFhBl9YyvnMiy+JlMnfEeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRDMEZG MjAwRjYxMzAeFw0yNjAzMDEwOTI2MzRaFw0yNjAzMDQxMTAxMzRaMDMxMTAvBgNV BAMTKDU4MkFCMEJFNEE3QkE3NTMzODY2ODYzRDE1OUI4REJBQkJEQzhFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPM7FB25EC9nsBDfQ8QWD5AZxU Zv73WPJdfMRd0niQYM8sVC09G6OV235TZH+ETxlPT80yXcvtCeVk7qvQJajHjrgM HLWas58fx0FHBR8VDudMKQAVMdrSKP4yBNEg0Nvh3XuEAd+jGJhNJN9gI5sqqwjh CHrV4Tm/pyr0N2mvV24XIyTzAeQe7nGR0XksOeI1LiijlzvDXve2TYIapOama4lD VOSW7oairynkMOWNeM4Ol9QlIOQe1i3AHYKTStWHKVquA9vMWyqTX4edNkAiFBRb yLvFFMqGgf359mUVqkHYHBUVEpJKY3L/3z8TiQDbklP/T7Ht4zgqWFLkp6WLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWCqwvkp7p1M4ZoY9FZuNurvcjhQwHwYDVR0j BBgwFoAUPmSOaoYjxcXd8AFSbQ/cD/IA9hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjFmM2ZhZS1kMGNiLTRhMTctYTU0OC0xYmE2NjMxYjFlMDkvMC8zRTY0OEU2QTg2 MjNDNUM1RERGMDAxNTI2RDBGREMwRkYyMDBGNjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRDMEZGMjAw RjYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIxZjNmYWUtZDBjYi00YTE3LWE1 NDgtMWJhNjYzMWIxZTA5LzAvM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRD MEZGMjAwRjYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXw9mOOTftAVyjqYRMsWZKV27ndeQgr4y6I 5Kjq2qE3lebLNgxmlUWaFL9a/YPCpFfhHVisxsqxF/9pq11ScAhLW1l7RXEB0v2p Bemrk5sO0uh0pemKs9/EAJ5OoLrMQs1NKddIS64xHjHBKqupKxktn/WD2jNt4Gls LqOwvjLqfme2BE9/26bTXIMt56qrXVT0gAh355oLNX5CawlRJYZF52NIlnyznrn2 SSMjk/AyDjq9fSTI6TqZsoyS3jSqZj4iFJxHHywCn0hUk3C8wGpBHTUqZSnjVnPs bTq7gno9noSSYHyW3gPkpyvzyUnXB4mM5+h2Fn3t/m3utMzo5II= -----END CERTIFICATE-----Generated at Mon Mar 2 12:43:00 2026 by rpki-client