$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft File: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft (raw, json) Hash identifier: ScM5XDbqJxG72cIfRHCKeOAuvcRiG1Ixbrl7Bbh6g/U= Subject key identifier: FC:D1:A2:51:80:B2:ED:0D:05:46:1F:26:04:61:2C:2C:C7:FF:E6:51 Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A Certificate issuer: /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Certificate serial: 1D3B7C2DF993155421303EB89221A99588FCB5DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft Manifest number: 0282 Signing time: Sat 28 Feb 2026 19:22:20 +0000 Manifest this update: Sat 28 Feb 2026 19:17:20 +0000 Manifest next update: Tue 03 Mar 2026 23:12:20 +0000 Files and hashes: 1: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl (hash: t9zwKOGUaJWwlE/I/a1S1bXFo06HHBuJoRtjrss0E+Q=) 2: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: DTS/Msv2+J+yWcCmX3IMnnNepiaqaJENVR2ewyRj56c=) 3: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: Iu3jqOF1OKCYSUkajjnPtBWzUDppzjUa82PRV4A9qHs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 23:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:3b:7c:2d:f9:93:15:54:21:30:3e:b8:92:21:a9:95:88:fc:b5:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Validity Not Before: Feb 28 19:17:20 2026 GMT Not After : Mar 3 23:12:20 2026 GMT Subject: CN=FCD1A25180B2ED0D05461F2604612C2CC7FFE651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:0e:6e:65:48:0f:ea:10:82:29:9f:9b:40: 16:3e:5c:57:d4:b5:7d:00:91:d5:63:89:0a:51:23: 19:33:6f:e3:eb:01:e2:8b:6d:be:18:e5:e4:c9:b9: 67:f4:ce:2a:68:1f:21:a8:f7:a5:5f:2c:60:09:cc: c5:22:43:b1:cb:46:cf:95:15:27:09:7a:90:d3:9e: f3:b1:44:cd:11:78:30:bc:a5:ad:f7:13:e4:45:f3: b3:53:7b:c7:ae:f5:da:8d:27:86:91:cf:e3:10:91: c6:23:89:e4:7a:72:46:35:14:b6:65:5d:0a:e1:f0: f4:50:e4:3b:90:01:fb:bc:f0:c5:ce:27:45:d9:39: d7:31:75:62:74:22:5d:aa:e6:e4:a3:91:e0:ad:cf: bd:2d:19:90:39:f3:20:16:85:75:f0:c0:b1:9b:c2: f9:71:6f:db:1d:9f:4d:72:f7:06:2d:56:6e:60:d5: 84:10:92:2f:3b:2a:54:b1:fb:9b:bd:b9:90:6f:7b: 46:7b:ef:f6:bd:4c:c4:a1:6a:65:61:f0:f9:3f:6f: 90:41:3c:1e:34:ed:b8:f0:30:6a:fd:b3:99:a6:ff: 45:96:71:40:40:23:6b:2c:d6:fa:81:5d:22:45:03: 33:49:f4:82:e5:17:57:3e:54:58:09:53:1e:55:a7: 67:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D1:A2:51:80:B2:ED:0D:05:46:1F:26:04:61:2C:2C:C7:FF:E6:51 X509v3 Authority Key Identifier: keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:19:91:b0:78:a8:f3:62:15:44:62:eb:51:cb:61:fe:51:4a: 7f:05:35:38:9f:27:19:8c:fe:c5:2e:2f:4f:b9:d0:c3:09:a4: ca:c8:17:ae:e2:31:7c:4f:19:65:77:56:d1:21:78:6d:da:69: ee:50:4a:99:14:35:49:e8:ce:e0:c2:45:fa:88:69:91:a0:a9: 71:01:83:de:fc:ae:56:b2:b0:b5:e6:22:30:5d:ad:24:0c:ac: 75:58:cc:84:7a:ef:61:ac:41:aa:2e:e4:92:2a:61:ef:b0:5e: a8:2b:65:e9:a3:40:ac:30:9e:3d:9e:ba:bd:33:3c:e5:0c:5f: c7:c1:2a:c5:3a:f6:27:01:98:6e:4a:81:58:f1:30:a8:be:5b: 08:f2:af:ee:7d:9d:0a:a3:24:9e:f4:fd:26:7a:6b:fa:b8:78: 4d:7e:f9:73:94:81:b3:f7:82:e0:47:f9:64:68:6d:85:4f:fe: e4:eb:26:e8:0c:54:b5:7e:2d:ae:9f:c2:f9:b8:b1:51:95:25: 3e:c5:d9:ca:5c:d0:58:a4:d0:35:6a:83:e8:90:a2:29:bc:12: 82:4f:41:c6:2e:f1:a4:06:07:50:18:93:1e:1b:06:4f:5e:0e: b9:6c:a5:0f:7c:63:5e:29:98:1b:c8:3c:42:cc:1e:dc:57:ef: 3b:5a:45:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHTt8LfmTFVQhMD64kiGplYj8tdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAy N0FCM0Y5QTAeFw0yNjAyMjgxOTE3MjBaFw0yNjAzMDMyMzEyMjBaMDMxMTAvBgNV BAMTKEZDRDFBMjUxODBCMkVEMEQwNTQ2MUYyNjA0NjEyQzJDQzdGRkU2NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bw5uZUgP6hCCKZ+bQBY+XFfU tX0AkdVjiQpRIxkzb+PrAeKLbb4Y5eTJuWf0zipoHyGo96VfLGAJzMUiQ7HLRs+V FScJepDTnvOxRM0ReDC8pa33E+RF87NTe8eu9dqNJ4aRz+MQkcYjieR6ckY1FLZl XQrh8PRQ5DuQAfu88MXOJ0XZOdcxdWJ0Il2q5uSjkeCtz70tGZA58yAWhXXwwLGb wvlxb9sdn01y9wYtVm5g1YQQki87KlSx+5u9uZBve0Z77/a9TMShamVh8Pk/b5BB PB407bjwMGr9s5mm/0WWcUBAI2ss1vqBXSJFAzNJ9ILlF1c+VFgJUx5Vp2f5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/NGiUYCy7Q0FRh8mBGEsLMf/5lEwHwYDVR0j BBgwFoAUP9brF+Z6zEBg93f1pOP5oCerP5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTIyNjk0OC1iMWExLTQyOTQtOTE1MC02YWYwZTBiZWJmYjgvMC8zRkQ2RUIxN0U2 N0FDQzQwNjBGNzc3RjVBNEUzRjlBMDI3QUIzRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAyN0FC M0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjkyMjY5NDgtYjFhMS00Mjk0LTkx NTAtNmFmMGUwYmViZmI4LzAvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5 QTAyN0FCM0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEZkbB4qPNiFURi61HLYf5RSn8FNTifJxmM /sUuL0+50MMJpMrIF67iMXxPGWV3VtEheG3aae5QSpkUNUnozuDCRfqIaZGgqXEB g978rlaysLXmIjBdrSQMrHVYzIR672GsQaou5JIqYe+wXqgrZemjQKwwnj2eur0z POUMX8fBKsU69icBmG5KgVjxMKi+Wwjyr+59nQqjJJ70/SZ6a/q4eE1++XOUgbP3 guBH+WRobYVP/uTrJugMVLV+La6fwvm4sVGVJT7F2cpc0Fik0DVqg+iQoim8EoJP QcYu8aQGB1AYkx4bBk9eDrlspQ98Y14pmBvIPELMHtxX7ztaRWo= -----END CERTIFICATE-----Generated at Mon Mar 2 08:21:36 2026 by rpki-client