$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft File: 3CA825E93FE8830376EF386786BF847CB239BE70.mft (raw, json) Hash identifier: ZmVKS29p06BPuCKyVlpmXCs82qzd9U8jNy40+elWCes= Subject key identifier: 8E:8D:1F:B7:35:89:15:5F:46:62:DD:D7:B5:82:80:D0:5B:CD:66:A0 Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 Certificate issuer: /CN=3CA825E93FE8830376EF386786BF847CB239BE70 Certificate serial: 5BA5EAE5F90D27F9D82EA7CB4A479A04F0644A8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft Manifest number: 0553 Signing time: Sat 28 Feb 2026 03:21:53 +0000 Manifest this update: Sat 28 Feb 2026 03:16:53 +0000 Manifest next update: Tue 03 Mar 2026 15:10:53 +0000 Files and hashes: 1: 3CA825E93FE8830376EF386786BF847CB239BE70.crl (hash: 84rU0YnFOtDK5cK1zv1D3teeFukPTaC006uz8ofCC1M=) 2: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (hash: rMCMSl1s+WWM7uToBUHib02Gf8GW78oaPsE3tZQeKpc=) 3: 3230322e3138322e35362e302f32312d3234203d3e203234323133.roa (hash: DlnKcd87VD3rZuVTk+tNhtDr4vaeUIcVlv5lIcH6uws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a5:ea:e5:f9:0d:27:f9:d8:2e:a7:cb:4a:47:9a:04:f0:64:4a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70 Validity Not Before: Feb 28 03:16:53 2026 GMT Not After : Mar 3 15:10:53 2026 GMT Subject: CN=8E8D1FB73589155F4662DDD7B58280D05BCD66A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:df:05:d2:bc:b8:7e:24:a0:0a:81:e9:7a:0b: d7:a8:fa:cc:ea:a4:d8:84:d8:91:06:76:9f:ca:23: d7:d8:43:e8:79:f0:39:1e:09:62:58:8d:a8:9b:1f: bb:2e:b7:25:11:f1:85:03:5b:18:5a:45:b3:a1:9c: 90:f4:ae:00:54:89:32:13:10:15:19:45:77:0b:8a: 46:2f:bb:da:29:d5:28:a6:4c:b2:5d:44:64:24:17: 59:17:d2:e6:22:f2:ec:ce:fe:cf:42:8a:63:23:58: f7:9a:6d:f1:c6:8e:7b:36:97:d6:fb:b2:a1:ea:ba: 91:4e:b7:ee:04:97:3c:64:aa:af:43:07:d1:76:d7: bf:6c:bd:ba:33:6f:ab:f4:c2:46:c6:9c:f7:05:72: 2c:03:79:9a:0b:83:fe:8d:76:23:ba:3e:f1:91:cb: f3:8a:75:61:56:dc:c3:60:ab:9c:f5:56:96:59:15: 2a:17:c4:9d:ea:b0:3a:c9:66:2b:44:28:56:cb:22: 0e:89:c3:5e:ab:4e:b1:7e:da:c0:33:37:b2:0e:4b: ad:f1:5f:b8:16:31:07:fc:33:ce:a4:24:8a:a3:3d: 51:93:a9:ac:b3:ef:3e:f3:8a:ea:30:fd:2d:ae:30: 98:1e:43:34:ae:ba:34:e9:53:a2:e9:2f:41:01:78: 96:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8D:1F:B7:35:89:15:5F:46:62:DD:D7:B5:82:80:D0:5B:CD:66:A0 X509v3 Authority Key Identifier: keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f7:9c:96:d6:1f:8f:b3:ae:80:52:49:82:12:f3:82:ec:92: 44:3e:1a:40:18:be:02:50:55:00:98:7a:54:d8:97:d7:3a:34: 6c:b7:7e:70:16:7f:9c:30:ec:85:76:eb:cb:5b:94:4b:7c:ea: f0:20:cc:97:7e:71:26:56:18:fd:40:3d:8d:6b:33:5a:ec:16: 08:f0:6f:13:3c:06:98:a6:3d:8d:81:fa:1e:1a:70:0f:1c:5b: 97:50:3d:43:40:61:84:45:12:6a:57:0c:1d:a7:82:b7:30:63: c9:64:a7:7d:dc:e5:b1:be:14:91:47:d3:41:9f:9d:3b:6e:07: c7:ff:f4:e1:d6:77:57:19:19:7d:05:56:02:3b:44:58:c7:54: 8e:f9:d9:bb:4a:4f:e7:d9:dd:a6:86:0b:b1:d2:3a:c3:57:07: 91:d8:43:b3:f8:b2:81:cf:66:90:7d:b1:b0:b6:8e:2d:de:24: 1f:c8:0d:42:77:55:1e:86:d3:d2:1c:c8:1e:18:a8:4f:5c:83: 22:22:b7:6f:04:d5:15:b9:52:29:82:aa:e7:99:01:e2:dc:a7: 19:a4:6f:ce:5c:b4:82:fa:e0:f7:7a:5d:21:3d:56:6f:db:25: 89:6b:a2:10:a7:af:12:d7:5a:63:99:63:3f:8d:83:8d:f9:be: 2d:ba:49:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW6Xq5fkNJ/nYLqfLSkeaBPBkSowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NC MjM5QkU3MDAeFw0yNjAyMjgwMzE2NTNaFw0yNjAzMDMxNTEwNTNaMDMxMTAvBgNV BAMTKDhFOEQxRkI3MzU4OTE1NUY0NjYyREREN0I1ODI4MEQwNUJDRDY2QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf3wXSvLh+JKAKgel6C9eo+szq pNiE2JEGdp/KI9fYQ+h58DkeCWJYjaibH7sutyUR8YUDWxhaRbOhnJD0rgBUiTIT EBUZRXcLikYvu9op1SimTLJdRGQkF1kX0uYi8uzO/s9CimMjWPeabfHGjns2l9b7 sqHqupFOt+4Elzxkqq9DB9F2179svbozb6v0wkbGnPcFciwDeZoLg/6NdiO6PvGR y/OKdWFW3MNgq5z1VpZZFSoXxJ3qsDrJZitEKFbLIg6Jw16rTrF+2sAzN7IOS63x X7gWMQf8M86kJIqjPVGTqayz7z7ziuow/S2uMJgeQzSuujTpU6LpL0EBeJabAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjo0ftzWJFV9GYt3XtYKA0FvNZqAwHwYDVR0j BBgwFoAUPKgl6T/ogwN27zhnhr+EfLI5vnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OGI4YzFiNS0zYmU4LTRhYTctYTRjNi0yMWJjYzhmM2ZhNDAvMC8zQ0E4MjVFOTNG RTg4MzAzNzZFRjM4Njc4NkJGODQ3Q0IyMzlCRTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NCMjM5 QkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0 N0NCMjM5QkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIP3nJbWH4+zroBSSYIS84LskkQ+GkAYvgJQ VQCYelTYl9c6NGy3fnAWf5ww7IV268tblEt86vAgzJd+cSZWGP1APY1rM1rsFgjw bxM8BpimPY2B+h4acA8cW5dQPUNAYYRFEmpXDB2ngrcwY8lkp33c5bG+FJFH00Gf nTtuB8f/9OHWd1cZGX0FVgI7RFjHVI752btKT+fZ3aaGC7HSOsNXB5HYQ7P4soHP ZpB9sbC2ji3eJB/IDUJ3VR6G09IcyB4YqE9cgyIit28E1RW5UimCqueZAeLcpxmk b85ctIL64Pd6XSE9Vm/bJYlrohCnrxLXWmOZYz+Ng435vi26SVo= -----END CERTIFICATE-----Generated at Mon Mar 2 13:53:55 2026 by rpki-client