$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft File: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json) Hash identifier: TgzEWgu++BHckwJMR3XGaTWbUsp6FnJIQuQYCt7jadw= Subject key identifier: 2E:0B:31:29:0A:2B:15:B7:33:0D:11:7E:08:04:23:A2:53:7F:C7:E3 Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 Certificate issuer: /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Certificate serial: 3317C8EAA78BB3827F86B7CDAE063BC4154AE550 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft Manifest number: DA Signing time: Mon 02 Mar 2026 04:41:05 +0000 Manifest this update: Mon 02 Mar 2026 04:36:05 +0000 Manifest next update: Thu 05 Mar 2026 08:36:05 +0000 Files and hashes: 1: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: FtA1EsliUyS6Wxmt89FPwTTgtL4lI5pGPU7ULVBtYPY=) 2: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: homg5w1o8Ac7RkByH0/Fbb96kiXTeJPDkxjgg7Q4x1k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:17:c8:ea:a7:8b:b3:82:7f:86:b7:cd:ae:06:3b:c4:15:4a:e5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Validity Not Before: Mar 2 04:36:05 2026 GMT Not After : Mar 5 08:36:05 2026 GMT Subject: CN=2E0B31290A2B15B7330D117E080423A2537FC7E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:41:3f:7c:ab:8a:a0:a8:bb:33:2e:13:7f:98: 10:ae:c0:c3:77:4b:65:b3:6b:17:ef:89:fa:55:43: 3e:29:be:25:8d:a2:17:11:df:3c:65:5b:ce:28:47: 85:51:a2:6f:c5:2f:cb:e0:89:09:ab:cf:d6:bf:57: e7:0e:72:de:46:0a:3d:d6:e6:fe:b1:e0:a6:78:3c: 29:84:73:a0:b0:da:85:ee:99:17:1a:9b:9c:30:00: 41:3a:1c:fa:47:f3:8c:df:ac:20:91:3a:c3:9e:c4: ff:57:53:d4:87:b0:b3:80:c4:bf:d8:ed:1f:72:72: 89:65:6b:e3:13:16:cb:6d:9a:79:20:88:5a:26:0b: a5:af:19:fb:b4:03:54:1f:89:cb:c8:8a:13:e9:ef: ba:5d:ed:a0:f2:e3:12:d4:fe:61:44:d4:e7:15:83: 85:98:68:f1:6f:f5:77:13:69:10:b9:0c:48:f2:2f: 99:bc:f0:fe:16:2a:5e:cb:56:ec:e6:c7:fd:fd:17: 6d:ed:87:fe:ea:8b:fa:c2:ba:2b:06:8d:1a:b9:24: ad:24:aa:6e:54:02:8f:46:63:2a:07:c5:e4:10:60: f1:4a:ef:7f:ee:1f:5a:81:44:5e:5b:fc:84:aa:70: d2:73:c0:a8:4b:02:a7:15:83:3a:d9:90:b7:d2:ed: b2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0B:31:29:0A:2B:15:B7:33:0D:11:7E:08:04:23:A2:53:7F:C7:E3 X509v3 Authority Key Identifier: keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:20:65:c1:e7:64:d9:ce:9d:2e:1e:cf:16:00:d3:c6:54:e6: 29:6e:c5:1e:c5:2b:17:dc:7f:c1:db:7c:39:1a:27:ea:6b:98: 14:ef:2d:3a:de:a5:79:e8:a5:0e:bf:9a:c5:67:57:c2:a5:35: 9f:00:9c:c3:f1:d2:4d:3a:c8:9c:ca:c3:50:9e:0c:c7:35:bb: 53:b6:7f:cd:6b:25:12:53:12:45:6a:d1:91:f1:21:7d:e9:40: 1c:45:40:62:9c:05:62:81:fd:99:e8:c0:20:20:c4:b9:74:81: d6:1e:1f:d4:71:d1:00:d4:c2:ab:bb:0d:c4:ec:c7:cf:2a:80: 5a:5d:08:c0:40:38:6c:3b:33:e7:8c:df:26:a6:f0:f9:fa:52: 83:79:08:f1:42:02:e2:f2:54:67:39:d7:68:6f:c5:c8:0a:6a: b2:d6:f0:da:8a:08:08:f2:be:96:ff:e9:96:63:1b:9f:44:d8: ae:d0:e1:df:5c:00:64:83:20:16:b4:b0:ca:92:52:62:4e:de: 5f:bb:ac:80:b1:bc:ef:c8:58:26:7e:bc:02:9b:55:42:00:66: 80:a3:f3:5e:ef:55:8a:54:7b:e0:f4:fd:86:a5:8b:c7:82:bd: 6d:49:5a:4f:94:dd:79:0e:75:fd:3c:ae:e6:66:c9:67:66:31: 5d:6e:eb:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMxfI6qeLs4J/hrfNrgY7xBVK5VAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVF OUUwN0JGNDAeFw0yNjAzMDIwNDM2MDVaFw0yNjAzMDUwODM2MDVaMDMxMTAvBgNV BAMTKDJFMEIzMTI5MEEyQjE1QjczMzBEMTE3RTA4MDQyM0EyNTM3RkM3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpQT98q4qgqLszLhN/mBCuwMN3 S2WzaxfvifpVQz4pviWNohcR3zxlW84oR4VRom/FL8vgiQmrz9a/V+cOct5GCj3W 5v6x4KZ4PCmEc6Cw2oXumRcam5wwAEE6HPpH84zfrCCROsOexP9XU9SHsLOAxL/Y 7R9ycolla+MTFsttmnkgiFomC6WvGfu0A1QficvIihPp77pd7aDy4xLU/mFE1OcV g4WYaPFv9XcTaRC5DEjyL5m88P4WKl7LVuzmx/39F23th/7qi/rCuisGjRq5JK0k qm5UAo9GYyoHxeQQYPFK73/uH1qBRF5b/ISqcNJzwKhLAqcVgzrZkLfS7bJxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULgsxKQorFbczDRF+CAQjolN/x+MwHwYDVR0j BBgwFoAUPOympdKxOPXgXOgV1qnZBenge/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMC8zQ0VDQTZBNUQy QjEzOEY1RTA1Q0U4MTVENkE5RDkwNUU5RTA3QkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVFOUUw N0JGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ4ZWM1ZWItMDM1NC00ZDg3LWIy YmUtMDhmZmFkNGFhMDZhLzAvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5 MDVFOUUwN0JGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAgZcHnZNnOnS4ezxYA08ZU5iluxR7FKxfc f8HbfDkaJ+prmBTvLTrepXnopQ6/msVnV8KlNZ8AnMPx0k06yJzKw1CeDMc1u1O2 f81rJRJTEkVq0ZHxIX3pQBxFQGKcBWKB/ZnowCAgxLl0gdYeH9Rx0QDUwqu7DcTs x88qgFpdCMBAOGw7M+eM3yam8Pn6UoN5CPFCAuLyVGc512hvxcgKarLW8NqKCAjy vpb/6ZZjG59E2K7Q4d9cAGSDIBa0sMqSUmJO3l+7rICxvO/IWCZ+vAKbVUIAZoCj 817vVYpUe+D0/Yali8eCvW1JWk+U3XkOdf08ruZmyWdmMV1u65k= -----END CERTIFICATE-----Generated at Mon Mar 2 12:19:45 2026 by rpki-client