$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft File: 3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json) Hash identifier: XyHgpBOWmj5lYbSm55HmnvYpQd9GzLSHSKAiqjkGLKY= Subject key identifier: 17:0E:44:7C:0B:EB:42:A7:22:CC:C8:EF:3F:04:E3:74:C4:5E:14:93 Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Certificate serial: 7C50954836F91A3F6A3114CCF746F593E8773D26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft Manifest number: 025C Signing time: Sun 01 Mar 2026 15:02:03 +0000 Manifest this update: Sun 01 Mar 2026 14:57:03 +0000 Manifest next update: Wed 04 Mar 2026 15:39:03 +0000 Files and hashes: 1: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: jxUYJQpEaP8bPhyLYtacTJc3csgAE9Hd2kaadYQz8QA=) 2: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: ldrGJsy+/TLnpHhOovohV+mReZwkU+jIEX++pOvvnkI=) 3: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: 85V6qA8RHEszjBxF6yv2LBrZ9dlUnY8/+0ZLxd1aOzQ=) 4: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: KZ/BrcpNlnq1GeOoeq+ujqu98XEmwwqQMF5ra78kfE0=) 5: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: sLrHFjpETq9cL4/mrbNtElCohbscWZuQSbiMNEwoTG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:50:95:48:36:f9:1a:3f:6a:31:14:cc:f7:46:f5:93:e8:77:3d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Validity Not Before: Mar 1 14:57:03 2026 GMT Not After : Mar 4 15:39:03 2026 GMT Subject: CN=170E447C0BEB42A722CCC8EF3F04E374C45E1493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e1:c4:3a:1f:0f:6e:92:d0:27:87:9e:97:d5: 8a:d6:ca:17:16:18:8b:d8:3a:4e:de:cd:e2:7a:80: 39:48:b6:e6:d4:dd:bf:38:00:de:b2:56:0f:5b:04: de:6f:88:ac:03:2f:16:a0:0f:ee:f8:6f:ee:09:42: a7:63:15:b6:df:33:43:59:ae:d9:23:39:ef:5d:e7: 49:ab:ce:c6:1a:2e:74:d6:d1:4c:57:11:c9:81:e2: 9c:f9:2f:dd:95:65:ad:e4:c8:f4:cb:35:96:d5:5c: 09:10:bc:81:2e:4a:c0:cd:63:5b:e6:d6:fa:2f:7b: 65:9a:bb:d1:96:b6:5b:40:7e:a6:9f:de:e5:ba:69: c1:c9:6d:4d:7f:ab:94:0a:4a:03:c7:45:47:e7:c9: 90:6a:cc:9b:de:34:1f:d8:25:95:e9:ce:6a:17:b1: 27:75:22:2b:38:28:15:a9:56:e2:f8:91:02:47:45: 38:0f:8d:1e:5b:ea:96:fd:d1:31:40:3f:82:bd:b4: 8e:18:0d:c0:f5:80:b5:9b:d6:59:9f:1f:a6:cc:f2: ce:06:2e:0a:ff:73:d2:74:02:a8:7d:85:2d:a2:1d: 72:47:3b:51:4f:fc:02:48:40:c4:0d:da:59:4f:c1: f5:39:f5:1b:2d:35:ac:d1:9f:5e:11:3f:a3:c1:cc: 72:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0E:44:7C:0B:EB:42:A7:22:CC:C8:EF:3F:04:E3:74:C4:5E:14:93 X509v3 Authority Key Identifier: keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f5:38:de:f8:c3:8a:c3:f8:51:11:30:d7:11:e1:a3:0c:53: ac:67:bf:6b:12:b8:dd:c1:8a:94:fd:ab:06:4c:26:17:40:c4: 11:15:a5:25:99:82:3a:37:20:dd:ac:b5:8e:a5:c4:42:50:c0: 06:fa:64:3c:a2:0e:cd:62:40:d4:e7:91:58:9b:c8:99:ea:24: 75:92:bd:3b:04:3c:9a:c7:8b:7a:e4:ef:11:da:e2:bb:0d:b6: 8f:28:c3:8f:0c:c9:3c:1d:36:e8:7a:c3:87:0e:a1:fc:98:57: ec:41:e2:0e:e4:22:e3:43:af:f1:49:8b:82:69:24:69:6b:ed: 4e:71:63:6e:ff:c3:c6:0f:17:34:07:ea:d5:5b:8c:de:2f:2b: 1d:55:91:70:c9:da:47:9a:cd:12:fd:2e:7b:5d:9e:1c:3c:9f: 27:70:67:24:53:78:cd:fd:ec:6c:f5:1b:0a:f7:94:58:9a:a4: 49:a5:9b:4a:ec:63:8b:f2:41:51:2f:f7:62:ae:35:c6:60:d6: a4:6f:6c:8b:2f:ba:a7:a1:b5:60:20:02:e3:d9:80:6e:dc:6c: 01:5c:a6:d5:0c:98:a7:c7:aa:0f:15:7e:c9:e8:f9:6d:d0:10: 06:b8:ee:57:8f:61:65:b2:8a:71:ff:90:42:d4:68:9f:4a:32: 57:cc:28:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfFCVSDb5Gj9qMRTM90b1k+h3PSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUy M0FFMjBBQzAeFw0yNjAzMDExNDU3MDNaFw0yNjAzMDQxNTM5MDNaMDMxMTAvBgNV BAMTKDE3MEU0NDdDMEJFQjQyQTcyMkNDQzhFRjNGMDRFMzc0QzQ1RTE0OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN4cQ6Hw9uktAnh56X1YrWyhcW GIvYOk7ezeJ6gDlItubU3b84AN6yVg9bBN5viKwDLxagD+74b+4JQqdjFbbfM0NZ rtkjOe9d50mrzsYaLnTW0UxXEcmB4pz5L92VZa3kyPTLNZbVXAkQvIEuSsDNY1vm 1vove2Wau9GWtltAfqaf3uW6acHJbU1/q5QKSgPHRUfnyZBqzJveNB/YJZXpzmoX sSd1Iis4KBWpVuL4kQJHRTgPjR5b6pb90TFAP4K9tI4YDcD1gLWb1lmfH6bM8s4G Lgr/c9J0Aqh9hS2iHXJHO1FP/AJIQMQN2llPwfU59RstNazRn14RP6PBzHK1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFw5EfAvrQqcizMjvPwTjdMReFJMwHwYDVR0j BBgwFoAUPDyGilZ0tCX65WdCa8sjjiOuIKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjk5ZTZmMC1mMjNjLTQxZmYtYjY3Yy00MWFmMDUxMzM5ZDEvMC8zQzNDODY4QTU2 NzRCNDI1RkFFNTY3NDI2QkNCMjM4RTIzQUUyMEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUyM0FF MjBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIz OEUyM0FFMjBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABb1ON74w4rD+FERMNcR4aMMU6xnv2sSuN3B ipT9qwZMJhdAxBEVpSWZgjo3IN2stY6lxEJQwAb6ZDyiDs1iQNTnkVibyJnqJHWS vTsEPJrHi3rk7xHa4rsNto8ow48MyTwdNuh6w4cOofyYV+xB4g7kIuNDr/FJi4Jp JGlr7U5xY27/w8YPFzQH6tVbjN4vKx1VkXDJ2keazRL9Lntdnhw8nydwZyRTeM39 7Gz1Gwr3lFiapEmlm0rsY4vyQVEv92KuNcZg1qRvbIsvuqehtWAgAuPZgG7cbAFc ptUMmKfHqg8Vfsno+W3QEAa47lePYWWyinH/kELUaJ9KMlfMKFw= -----END CERTIFICATE-----Generated at Mon Mar 2 18:00:52 2026 by rpki-client