$ rpki-client -vvf repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/3809A288AA4D4C241EA6011D90DBF2693B3333D2.mft File: 3809A288AA4D4C241EA6011D90DBF2693B3333D2.mft (raw, json) Hash identifier: Ex+K+S1HrQkHW8IyrmyykhIWAS4u4+MsYkHbeUcJ0JU= Subject key identifier: D5:BA:79:B6:0E:1F:32:9C:FE:01:84:41:D2:D1:FE:AC:EA:D9:6A:E9 Authority key identifier: 38:09:A2:88:AA:4D:4C:24:1E:A6:01:1D:90:DB:F2:69:3B:33:33:D2 Certificate issuer: /CN=3809A288AA4D4C241EA6011D90DBF2693B3333D2 Certificate serial: 2280DF6BF83CD10768A3094A08A3F2BE55D7899F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3809A288AA4D4C241EA6011D90DBF2693B3333D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/3809A288AA4D4C241EA6011D90DBF2693B3333D2.mft Manifest number: 1C Signing time: Sun 01 Mar 2026 19:00:04 +0000 Manifest this update: Sun 01 Mar 2026 18:55:04 +0000 Manifest next update: Thu 05 Mar 2026 02:05:04 +0000 Files and hashes: 1: 3809A288AA4D4C241EA6011D90DBF2693B3333D2.crl (hash: UMAkD4DZA5DrUcfMA3cupUGWNmZS+C2b3JCcniX5trQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/3809A288AA4D4C241EA6011D90DBF2693B3333D2.crl rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/3809A288AA4D4C241EA6011D90DBF2693B3333D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3809A288AA4D4C241EA6011D90DBF2693B3333D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:80:df:6b:f8:3c:d1:07:68:a3:09:4a:08:a3:f2:be:55:d7:89:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3809A288AA4D4C241EA6011D90DBF2693B3333D2 Validity Not Before: Mar 1 18:55:04 2026 GMT Not After : Mar 5 02:05:04 2026 GMT Subject: CN=D5BA79B60E1F329CFE018441D2D1FEACEAD96AE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ee:93:6b:de:a4:59:9a:16:78:b3:90:34:7d: 5b:d1:4b:25:63:ab:fd:34:b3:1b:cf:2a:b1:17:30: 31:24:dd:43:1d:c3:fa:0f:7d:54:48:16:c4:ec:f3: 55:5e:9a:14:60:5c:a1:a8:9d:89:4c:3a:ad:88:1a: c3:b8:ba:bc:d7:9c:2e:46:e2:3a:a7:83:65:2e:aa: dc:ad:18:2d:86:1a:34:1f:36:f6:50:f9:be:23:7a: f1:fb:b5:1d:53:7c:21:8f:1e:51:b1:03:b7:7a:fd: fc:1a:62:14:5d:84:32:28:37:cf:4f:f0:98:e8:4f: 98:0b:39:16:b8:08:11:fb:e1:a2:c8:e9:a2:5b:74: 7b:f7:15:16:38:0e:62:4b:95:84:1a:cd:b7:96:09: ee:a8:95:4e:39:c7:7a:3b:8f:2f:06:db:2a:b3:6c: 75:86:4b:48:dd:96:20:00:34:d1:5f:2f:02:c0:72: 31:5c:fb:57:34:46:64:db:66:51:80:be:e6:45:5b: 8f:d1:18:1c:1f:dd:f1:a8:7f:5d:10:87:be:38:69: de:16:16:06:de:93:15:30:e4:89:17:11:17:24:02: 08:5d:80:9b:3b:ba:f9:2b:19:37:10:9d:14:20:94: b2:1c:6b:a6:cd:bc:9d:c5:b0:ce:a6:f7:59:c9:a3: e2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BA:79:B6:0E:1F:32:9C:FE:01:84:41:D2:D1:FE:AC:EA:D9:6A:E9 X509v3 Authority Key Identifier: keyid:38:09:A2:88:AA:4D:4C:24:1E:A6:01:1D:90:DB:F2:69:3B:33:33:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/3809A288AA4D4C241EA6011D90DBF2693B3333D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3809A288AA4D4C241EA6011D90DBF2693B3333D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/3809A288AA4D4C241EA6011D90DBF2693B3333D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:2d:b5:02:a7:f3:90:86:2c:40:d6:be:e6:43:df:1a:d3:4c: 06:39:40:ed:9d:86:ad:f3:5e:73:14:15:bf:5d:c6:31:d4:6a: 6e:90:ef:68:b4:10:c0:45:e5:11:14:69:11:81:d7:16:0c:00: 7e:6a:7e:c7:4f:3e:37:b3:cd:d8:66:bc:7e:f9:b3:20:e5:8f: b3:96:a6:ca:b7:f9:6b:e4:5f:97:21:5e:17:b3:ca:e8:37:e3: e4:e5:b7:d1:14:e6:99:71:0a:4b:dd:72:8a:92:b8:86:2a:95: 6a:62:83:88:28:15:c3:01:49:70:7e:09:70:3e:e0:76:6a:fb: 00:8e:e0:19:b5:0e:b2:cb:6c:d1:f1:aa:f5:a4:ec:f7:a6:61: 06:17:9c:6d:1e:ad:3a:9f:8a:40:b4:a3:3a:6b:06:63:c5:de: 8f:b2:32:2f:49:28:01:13:70:28:5c:38:84:0f:e6:ab:18:d4: 26:eb:68:80:0e:44:5c:1c:45:fa:a2:60:8b:93:f3:68:bd:a1: 4b:97:69:48:a3:bf:3d:9c:eb:36:98:35:73:38:18:04:ce:79: 8f:37:16:07:c2:35:ef:97:81:bc:0e:0b:5e:ec:13:24:17:f1: cd:76:65:4e:6a:d4:3c:ce:f5:4d:9d:48:ed:58:b6:63:cf:12: 7b:ae:dd:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIoDfa/g80QdoowlKCKPyvlXXiZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgwOUEyODhBQTRENEMyNDFFQTYwMTFEOTBEQkYyNjkz QjMzMzNEMjAeFw0yNjAzMDExODU1MDRaFw0yNjAzMDUwMjA1MDRaMDMxMTAvBgNV BAMTKEQ1QkE3OUI2MEUxRjMyOUNGRTAxODQ0MUQyRDFGRUFDRUFEOTZBRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP7pNr3qRZmhZ4s5A0fVvRSyVj q/00sxvPKrEXMDEk3UMdw/oPfVRIFsTs81VemhRgXKGonYlMOq2IGsO4urzXnC5G 4jqng2UuqtytGC2GGjQfNvZQ+b4jevH7tR1TfCGPHlGxA7d6/fwaYhRdhDIoN89P 8JjoT5gLORa4CBH74aLI6aJbdHv3FRY4DmJLlYQazbeWCe6olU45x3o7jy8G2yqz bHWGS0jdliAANNFfLwLAcjFc+1c0RmTbZlGAvuZFW4/RGBwf3fGof10Qh744ad4W FgbekxUw5IkXERckAghdgJs7uvkrGTcQnRQglLIca6bNvJ3FsM6m91nJo+InAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1bp5tg4fMpz+AYRB0tH+rOrZaukwHwYDVR0j BBgwFoAUOAmiiKpNTCQepgEdkNvyaTszM9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDc4YjUwYi00NDljLTQ1NGItODUwZC1mMjA4MDM3ODliNTgvMC8zODA5QTI4OEFB NEQ0QzI0MUVBNjAxMUQ5MERCRjI2OTNCMzMzM0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzgwOUEyODhBQTRENEMyNDFFQTYwMTFEOTBEQkYyNjkzQjMz MzNEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzAvMzgwOUEyODhBQTRENEMyNDFFQTYwMTFEOTBEQkYy NjkzQjMzMzNEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEttQKn85CGLEDWvuZD3xrTTAY5QO2dhq3z XnMUFb9dxjHUam6Q72i0EMBF5REUaRGB1xYMAH5qfsdPPjezzdhmvH75syDlj7OW psq3+WvkX5chXhezyug34+Tlt9EU5plxCkvdcoqSuIYqlWpig4goFcMBSXB+CXA+ 4HZq+wCO4Bm1DrLLbNHxqvWk7PemYQYXnG0erTqfikC0ozprBmPF3o+yMi9JKAET cChcOIQP5qsY1CbraIAORFwcRfqiYIuT82i9oUuXaUijvz2c6zaYNXM4GATOeY83 FgfCNe+XgbwOC17sEyQX8c12ZU5q1DzO9U2dSO1YtmPPEnuu3fk= -----END CERTIFICATE-----Generated at Mon Mar 2 22:17:09 2026 by rpki-client