$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft File: 3E69DE558C030D2041570E32C387F764C38BBBA9.mft (raw, json) Hash identifier: gqPG7LwH+uPv9Fr1zHvBw9jJpZCM4bTQO2WRXEMu4Ew= Subject key identifier: 50:BE:86:74:A7:FA:3C:8F:B2:2B:AC:9F:C8:66:9E:A4:D6:11:93:51 Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 Certificate issuer: /CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Certificate serial: 43D80208188E152EDF602FF4E104596D9FE5B7E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft Manifest number: 0242 Signing time: Mon 02 Mar 2026 12:52:13 +0000 Manifest this update: Mon 02 Mar 2026 12:47:13 +0000 Manifest next update: Thu 05 Mar 2026 16:33:13 +0000 Files and hashes: 1: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: xCOn9NWbt0GGMLt//qaNrgk/Sb/ECXg1/Jw9T03F6gc=) 2: 3E69DE558C030D2041570E32C387F764C38BBBA9.crl (hash: pkZQRlfGgV3zANQ4IsfXJqs+vvH/INnD/ea+Vg2vIOg=) 3: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: rPKEvLXWGWoztExe4HntWPPQ3bNHicZSmrS4LoU+DGA=) 4: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: +aYgV7p1X1TAw32sJQDFPZ5QXQcUqf2Pg9Wsy7Iew4g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d8:02:08:18:8e:15:2e:df:60:2f:f4:e1:04:59:6d:9f:e5:b7:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Validity Not Before: Mar 2 12:47:13 2026 GMT Not After : Mar 5 16:33:13 2026 GMT Subject: CN=50BE8674A7FA3C8FB22BAC9FC8669EA4D6119351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:d7:7f:29:af:01:7c:56:99:88:8d:4b:5e: b7:24:f1:8f:30:17:51:c3:88:1d:20:a9:c1:8f:49: 75:73:b9:ba:a5:aa:1d:7d:0a:31:04:92:9c:32:41: 50:5b:ad:80:60:4a:e1:e6:c9:c1:21:9b:f9:6b:4d: 95:06:14:25:ce:fb:ad:96:78:65:1a:1c:11:c5:2d: ac:22:e7:40:10:99:c0:eb:95:c7:df:30:75:a3:b5: 46:c1:28:04:f0:c6:3a:b1:4c:9e:9b:f8:6e:68:8d: 38:5e:78:d5:b7:dd:5c:84:20:39:6e:0e:e8:09:a0: 0f:f6:b7:87:8b:3a:5d:0c:ef:59:cd:86:6f:13:4d: 2c:29:95:b5:03:a2:c6:01:d5:3b:5d:e0:7c:79:20: 6e:44:6c:36:40:3e:d2:5a:44:94:2e:4e:b4:93:9b: fb:f7:f1:00:1d:13:e3:01:93:b9:a9:b5:56:68:be: 38:8b:fd:c3:f6:fe:15:00:93:bf:b6:09:31:65:45: 3d:af:99:05:c9:57:8a:cb:90:2a:e2:50:b9:c5:6e: 26:9c:35:45:0c:09:ef:eb:18:00:4e:f0:fe:f3:28: 25:67:02:33:0d:cd:ea:64:a0:16:50:65:f4:8d:06: b8:00:6b:20:62:72:08:3b:80:5d:b2:cf:32:de:8f: fe:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BE:86:74:A7:FA:3C:8F:B2:2B:AC:9F:C8:66:9E:A4:D6:11:93:51 X509v3 Authority Key Identifier: keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:36:88:cc:75:c7:33:e0:2f:b6:a5:f7:8b:be:97:95:8b:8b: 67:9b:2b:48:f3:e0:02:01:e6:2d:58:5d:f4:10:88:24:9d:2e: 46:0c:33:71:0e:05:58:27:88:84:d8:21:87:ef:21:4a:65:ee: f9:77:de:ec:36:93:07:67:76:4e:5f:cb:e1:0b:83:ad:62:9c: aa:92:7b:c8:c7:b6:52:ea:23:f3:b5:0e:69:b4:f5:86:3f:db: de:44:40:5b:10:d4:1f:7c:8b:ea:47:63:ec:9a:8c:e5:44:f4: 49:91:3c:c2:24:0f:8c:6b:87:94:86:05:3b:ca:ce:bc:f5:98: 65:bb:64:26:76:8c:ec:ff:af:36:5e:aa:6e:ac:b5:f0:90:fc: f3:58:6a:ed:e9:ee:27:ab:37:14:66:08:fe:43:8b:c8:7e:f3: 03:a4:97:bd:8c:25:2a:f0:c1:94:21:40:35:54:20:f5:6b:73: c6:cb:eb:9a:9a:97:58:ff:6e:37:36:d0:85:23:01:9f:5c:1f: 35:6f:06:b4:dc:6c:92:18:24:95:ce:90:a1:9f:6d:30:85:b4: d9:e7:2d:94:9e:46:4a:1e:ca:8c:90:32:2d:5c:19:8c:fe:ea: 1d:fa:31:0d:12:e5:ba:04:e7:9b:80:59:f1:65:69:9e:7b:87: f2:a2:0f:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ9gCCBiOFS7fYC/04QRZbZ/lt+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRD MzhCQkJBOTAeFw0yNjAzMDIxMjQ3MTNaFw0yNjAzMDUxNjMzMTNaMDMxMTAvBgNV BAMTKDUwQkU4Njc0QTdGQTNDOEZCMjJCQUM5RkM4NjY5RUE0RDYxMTkzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4k9d/Ka8BfFaZiI1LXrck8Y8w F1HDiB0gqcGPSXVzubqlqh19CjEEkpwyQVBbrYBgSuHmycEhm/lrTZUGFCXO+62W eGUaHBHFLawi50AQmcDrlcffMHWjtUbBKATwxjqxTJ6b+G5ojTheeNW33VyEIDlu DugJoA/2t4eLOl0M71nNhm8TTSwplbUDosYB1Ttd4Hx5IG5EbDZAPtJaRJQuTrST m/v38QAdE+MBk7mptVZovjiL/cP2/hUAk7+2CTFlRT2vmQXJV4rLkCriULnFbiac NUUMCe/rGABO8P7zKCVnAjMNzepkoBZQZfSNBrgAayBicgg7gF2yzzLej/4BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUL6GdKf6PI+yK6yfyGaepNYRk1EwHwYDVR0j BBgwFoAUPmneVYwDDSBBVw4yw4f3ZMOLu6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIzYmIzNC0xNWUyLTQ0ODctYjUyNy02ZTc1MTI4NmNlN2QvMC8zRTY5REU1NThD MDMwRDIwNDE1NzBFMzJDMzg3Rjc2NEMzOEJCQkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRDMzhC QkJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3 NjRDMzhCQkJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGA2iMx1xzPgL7al94u+l5WLi2ebK0jz4AIB 5i1YXfQQiCSdLkYMM3EOBVgniITYIYfvIUpl7vl33uw2kwdndk5fy+ELg61inKqS e8jHtlLqI/O1Dmm09YY/295EQFsQ1B98i+pHY+yajOVE9EmRPMIkD4xrh5SGBTvK zrz1mGW7ZCZ2jOz/rzZeqm6stfCQ/PNYau3p7ierNxRmCP5Di8h+8wOkl72MJSrw wZQhQDVUIPVrc8bL65qal1j/bjc20IUjAZ9cHzVvBrTcbJIYJJXOkKGfbTCFtNnn LZSeRkoeyoyQMi1cGYz+6h36MQ0S5boE55uAWfFlaZ57h/KiDy8= -----END CERTIFICATE-----Generated at Mon Mar 2 22:55:12 2026 by rpki-client