$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft File: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft (raw, json) Hash identifier: JFXTdnQcbGeMIC7efb7GP+86xdYgb+CSOThyJuqL93I= Subject key identifier: 65:5F:9D:7D:59:C2:F2:F6:9B:9E:2A:77:06:3A:5E:F8:B9:4B:D1:83 Authority key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F Certificate issuer: /CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Certificate serial: 3CAC663391C4E95788FEFEE4C8B9A3DEF5C6400D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft Manifest number: 0146 Signing time: Mon 02 Mar 2026 06:22:15 +0000 Manifest this update: Mon 02 Mar 2026 06:17:15 +0000 Manifest next update: Thu 05 Mar 2026 13:40:15 +0000 Files and hashes: 1: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: mRxvTYWPyY4uCFeQDxVkCJFWfVPhlAl1Ny0mi+/MyiE=) 2: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl (hash: VS/cVob/FtmZmQP4dPQuCEQTDanaP9HUOyogH5LF1WU=) 3: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: E0CjFn5U/9BTQeO2HTeXnXZQvzamSjcjllnOK42R05A=) 4: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: kkiTIIYSjBTKRfHlWaLnjPTQdK1oEnXuZHdGsrSz9QU=) 5: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: rg9lpQpQ+ZgL/aBtSdpzREEnhOBkrouF51BUGtJjEn0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ac:66:33:91:c4:e9:57:88:fe:fe:e4:c8:b9:a3:de:f5:c6:40:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Validity Not Before: Mar 2 06:17:15 2026 GMT Not After : Mar 5 13:40:15 2026 GMT Subject: CN=655F9D7D59C2F2F69B9E2A77063A5EF8B94BD183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:ce:f2:a8:eb:71:b8:01:f7:29:1d:c3:15: 5e:9e:2f:a6:33:ba:56:c2:9a:69:8c:d7:d3:66:8d: 75:38:d5:cb:81:66:52:81:d0:32:f6:74:a8:b2:8d: 05:77:37:4f:b4:54:f8:c1:9a:d0:12:86:a3:08:cc: 43:42:6d:65:7c:d3:42:3d:0f:69:34:f9:3b:80:96: c3:e9:4a:ad:e4:d0:e2:b6:d7:a4:48:53:82:84:12: c7:c1:ba:99:43:4c:e7:9b:80:6a:19:8e:77:63:9a: 3e:3e:36:4f:d6:14:3e:5a:13:26:c7:63:f1:20:e2: 37:e5:ce:fc:93:fb:a6:3e:c4:e4:f8:f9:b7:c7:21: ae:d8:c6:d7:1e:ca:1b:83:2a:ff:2d:0b:d6:42:49: a1:7b:df:49:bb:d5:b4:dd:e6:69:97:1f:42:c1:1b: 47:68:69:b2:3f:d1:a0:7d:2b:5f:dd:0e:6e:47:d0: 64:28:38:4c:e7:81:0d:d9:32:f8:35:19:7f:19:d9: 9e:ff:23:85:14:11:73:8c:84:ad:5e:c5:a1:fa:77: 18:ba:c5:9a:de:9f:6d:95:d3:af:c9:65:28:84:9b: 70:e3:c1:09:78:38:a2:49:8d:85:e9:b2:f4:1a:98: 11:1e:df:4e:6c:a0:07:6a:4a:fe:fb:f0:a4:1e:5d: 3a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5F:9D:7D:59:C2:F2:F6:9B:9E:2A:77:06:3A:5E:F8:B9:4B:D1:83 X509v3 Authority Key Identifier: keyid:3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:93:66:e4:71:60:e8:02:ae:68:58:2f:49:42:64:7e:69:58: cb:4c:17:08:56:6c:c1:35:10:c9:f1:ab:b3:00:a9:5f:29:48: 82:ff:ce:1a:da:e9:b1:bb:29:3d:f6:d7:d2:81:12:a0:da:a3: fe:c7:71:14:16:b6:9f:a7:7e:ac:1c:c5:85:3a:e3:86:06:5d: 68:c2:e7:8f:dc:9b:0a:3c:8a:30:e0:11:da:02:17:f0:d9:1e: e9:1f:d2:7a:34:be:55:74:b5:32:50:0c:08:89:7f:8a:5c:6d: 17:77:41:d2:5f:53:6c:53:1e:31:ae:06:cb:3a:e7:3d:97:f1: 08:39:44:56:32:62:8b:73:77:a6:13:49:e4:c0:2f:83:53:cf: 52:9c:6a:52:6b:06:5e:62:92:3e:b9:ad:a4:6d:a3:ca:75:e3: 83:90:84:c5:ba:0b:af:98:42:f5:b5:70:ab:c2:45:9e:6d:6a: 51:0f:4a:93:ea:3a:73:2b:65:6e:c4:4b:08:fc:93:16:be:f5: 3a:cb:ed:a9:54:c2:2d:a5:82:c0:01:57:98:70:18:41:9a:5a: 9c:b1:51:44:6c:bc:b2:28:26:3a:18:ce:81:39:11:c3:25:1a: 4c:1a:d0:69:98:7e:bd:f7:f4:29:19:58:08:1c:23:74:58:22: 3e:2b:86:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKxmM5HE6VeI/v7kyLmj3vXGQA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVC RjBBRkIwRjAeFw0yNjAzMDIwNjE3MTVaFw0yNjAzMDUxMzQwMTVaMDMxMTAvBgNV BAMTKDY1NUY5RDdENTlDMkYyRjY5QjlFMkE3NzA2M0E1RUY4Qjk0QkQxODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH3M7yqOtxuAH3KR3DFV6eL6Yz ulbCmmmM19NmjXU41cuBZlKB0DL2dKiyjQV3N0+0VPjBmtAShqMIzENCbWV800I9 D2k0+TuAlsPpSq3k0OK216RIU4KEEsfBuplDTOebgGoZjndjmj4+Nk/WFD5aEybH Y/Eg4jflzvyT+6Y+xOT4+bfHIa7YxtceyhuDKv8tC9ZCSaF730m71bTd5mmXH0LB G0doabI/0aB9K1/dDm5H0GQoOEzngQ3ZMvg1GX8Z2Z7/I4UUEXOMhK1exaH6dxi6 xZren22V06/JZSiEm3DjwQl4OKJJjYXpsvQamBEe305soAdqSv778KQeXTrDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZV+dfVnC8vabnip3Bjpe+LlL0YMwHwYDVR0j BBgwFoAUPHkP5KuCosFQF9JlcUsSRb8K+w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMC8zQzc5MEZFNEFC ODJBMkMxNTAxN0QyNjU3MTRCMTI0NUJGMEFGQjBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVCRjBB RkIwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3ZTgwODEtNjNhZi00OWU3LTk2 NDYtNzZjMjVhNWU5N2NhLzAvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEy NDVCRjBBRkIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCTZuRxYOgCrmhYL0lCZH5pWMtMFwhWbME1 EMnxq7MAqV8pSIL/zhra6bG7KT3219KBEqDao/7HcRQWtp+nfqwcxYU644YGXWjC 54/cmwo8ijDgEdoCF/DZHukf0no0vlV0tTJQDAiJf4pcbRd3QdJfU2xTHjGuBss6 5z2X8Qg5RFYyYotzd6YTSeTAL4NTz1KcalJrBl5ikj65raRto8p144OQhMW6C6+Y QvW1cKvCRZ5talEPSpPqOnMrZW7ESwj8kxa+9TrL7alUwi2lgsABV5hwGEGaWpyx UURsvLIoJjoYzoE5EcMlGkwa0GmYfr339CkZWAgcI3RYIj4rhqg= -----END CERTIFICATE-----Generated at Mon Mar 2 20:01:40 2026 by rpki-client