$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft File: E3FB5E3343EC63D705FF51B645113F74C7965236.mft (raw, json) Hash identifier: pOMv3rzuu9wej9PUpYykUbnZRAjSR+GelA8rIpQo+Lg= Subject key identifier: 34:38:42:59:A2:B4:3E:BD:8D:2D:38:D3:33:56:21:8E:1C:0A:B2:15 Authority key identifier: E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 Certificate issuer: /CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Certificate serial: 69948CF67F3DCCACED3E9527C9B52BADF8A4FAFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft Manifest number: 0102 Signing time: Mon 02 Mar 2026 11:51:33 +0000 Manifest this update: Mon 02 Mar 2026 11:46:33 +0000 Manifest next update: Thu 05 Mar 2026 17:33:33 +0000 Files and hashes: 1: 3136302e32352e3232322e302f32332d3233203d3e20313533303837.roa (hash: KzwY0iiHcJ5O0UVPUHPKtH6yEpVlgjbtPe1xq08+n3c=) 2: E3FB5E3343EC63D705FF51B645113F74C7965236.crl (hash: C6h4GjfqqnlMvsfnxYG9H1M9HZsP98saUck7DiwxvBo=) 3: 3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa (hash: 4O9lmpHneuudT9xjvw5LwULxiETAfGvFoNCP2XYgoOQ=) 4: 3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa (hash: pcP51KVAYXagtYkUaOdwTyhCZXZM5gMNbSSkIN9xwSo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:94:8c:f6:7f:3d:cc:ac:ed:3e:95:27:c9:b5:2b:ad:f8:a4:fa:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Validity Not Before: Mar 2 11:46:33 2026 GMT Not After : Mar 5 17:33:33 2026 GMT Subject: CN=34384259A2B43EBD8D2D38D33356218E1C0AB215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e9:49:10:1d:79:70:c2:f0:a4:44:ae:70:d3: aa:44:83:db:db:89:b5:20:38:b3:e0:eb:9d:7f:3a: 37:f0:bf:9e:c6:03:54:17:d6:bd:9e:36:5d:43:54: c0:14:17:1b:85:48:09:5c:c6:fa:3b:27:a4:ac:8d: 71:ee:cb:28:88:51:ed:9f:c4:e1:60:1e:4c:88:9f: 31:1e:90:ee:3a:73:e3:66:4e:a2:16:2c:0a:b9:ac: fd:fb:53:65:26:e5:5f:bd:5f:4e:93:18:b4:87:7a: de:a1:c8:f3:6c:9b:3d:4f:ec:b9:3a:d3:53:5d:a6: 37:e0:46:82:bc:f2:4f:d7:64:0e:67:59:0e:f5:12: 3c:06:26:22:cb:b1:82:45:e8:af:fb:b1:e3:29:c6: e8:4a:e0:6a:47:78:b4:c2:39:c6:91:15:59:19:95: e9:41:cc:90:19:81:79:11:cd:c9:bf:99:8d:63:8e: b7:0c:ba:f2:d2:08:db:ce:a1:e3:8e:b1:b4:1e:55: ab:dc:94:0d:93:61:ba:60:65:9c:11:80:34:3d:38: ba:57:98:84:ff:00:67:d9:75:8b:24:60:b6:4f:7c: c2:d7:25:f2:90:09:82:b5:7f:6b:00:00:22:c2:23: 0e:3c:98:be:b5:b7:61:3b:b7:30:a6:59:51:1c:d8: f9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:38:42:59:A2:B4:3E:BD:8D:2D:38:D3:33:56:21:8E:1C:0A:B2:15 X509v3 Authority Key Identifier: keyid:E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:5d:4c:b0:2a:71:78:dc:fe:bb:f3:e8:cd:8f:a8:54:2d:21: d9:fc:0e:fc:6f:fb:45:17:c3:73:78:e4:3b:98:e8:2d:12:53: 68:44:1f:ec:04:9c:90:4d:a7:bb:db:67:2b:0d:33:e5:36:4b: 9f:dc:6c:c9:64:ab:08:a7:c0:e0:6d:05:c9:29:1b:46:95:bb: a7:ac:f1:ff:5a:a7:c4:36:98:38:4e:6b:11:f7:c8:1d:a4:12: bb:d7:72:71:27:1f:ac:3b:62:30:e1:c6:46:b6:a7:b1:21:ff: c3:a3:cf:b9:b9:aa:cf:20:7e:03:ae:e2:eb:db:02:3a:08:15: e3:bf:8b:7d:28:0c:12:f7:36:d0:ee:04:89:1b:c9:20:54:f3: b8:f0:b6:60:60:96:73:7f:e8:fe:a0:2e:2f:55:71:0a:78:19: a8:e8:06:ed:a0:ce:da:ce:4b:ec:b7:b7:84:54:91:69:44:dc: 61:a7:d6:47:60:2f:4b:b9:a6:d1:a6:0c:52:5d:e4:45:37:19: 8f:0e:3f:da:54:11:08:2c:96:2c:16:06:d4:db:ad:39:e1:6e: bf:cc:f1:4b:32:e3:1c:bd:a4:5d:78:8b:0d:82:2b:1b:10:62: ce:a7:d1:95:c8:38:ec:3c:9a:f4:52:64:73:b2:53:cf:9a:ec: 8f:ee:8e:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZSM9n89zKztPpUnybUrrfik+v0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRD Nzk2NTIzNjAeFw0yNjAzMDIxMTQ2MzNaFw0yNjAzMDUxNzMzMzNaMDMxMTAvBgNV BAMTKDM0Mzg0MjU5QTJCNDNFQkQ4RDJEMzhEMzMzNTYyMThFMUMwQUIyMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc6UkQHXlwwvCkRK5w06pEg9vb ibUgOLPg651/Ojfwv57GA1QX1r2eNl1DVMAUFxuFSAlcxvo7J6SsjXHuyyiIUe2f xOFgHkyInzEekO46c+NmTqIWLAq5rP37U2Um5V+9X06TGLSHet6hyPNsmz1P7Lk6 01NdpjfgRoK88k/XZA5nWQ71EjwGJiLLsYJF6K/7seMpxuhK4GpHeLTCOcaRFVkZ lelBzJAZgXkRzcm/mY1jjrcMuvLSCNvOoeOOsbQeVavclA2TYbpgZZwRgDQ9OLpX mIT/AGfZdYskYLZPfMLXJfKQCYK1f2sAACLCIw48mL61t2E7tzCmWVEc2PmvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNDhCWaK0Pr2NLTjTM1YhjhwKshUwHwYDVR0j BBgwFoAU4/teM0PsY9cF/1G2RRE/dMeWUjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMC9FM0ZCNUUzMzQz RUM2M0Q3MDVGRjUxQjY0NTExM0Y3NEM3OTY1MjM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRDNzk2 NTIzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm OTYtNjNkMzcyMDMxMWRlLzAvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNG NzRDNzk2NTIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABddTLAqcXjc/rvz6M2PqFQtIdn8Dvxv+0UX w3N45DuY6C0SU2hEH+wEnJBNp7vbZysNM+U2S5/cbMlkqwinwOBtBckpG0aVu6es 8f9ap8Q2mDhOaxH3yB2kErvXcnEnH6w7YjDhxka2p7Eh/8Ojz7m5qs8gfgOu4uvb AjoIFeO/i30oDBL3NtDuBIkbySBU87jwtmBglnN/6P6gLi9VcQp4GajoBu2gztrO S+y3t4RUkWlE3GGn1kdgL0u5ptGmDFJd5EU3GY8OP9pUEQgsliwWBtTbrTnhbr/M 8Usy4xy9pF14iw2CKxsQYs6n0ZXIOOw8mvRSZHOyU8+a7I/ujgY= -----END CERTIFICATE-----Generated at Mon Mar 2 20:16:00 2026 by rpki-client