$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft File: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft (raw, json) Hash identifier: 7f8x2qrPBvvmhp/5o8HMt8cpQIgJ/NgWk4E2j4399rk= Subject key identifier: 2E:1D:92:C0:84:A0:5A:0D:84:EA:71:9B:4F:E6:0A:E6:C0:D4:CE:49 Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B Certificate issuer: /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Certificate serial: 3B4B6D6C01F8C185EC9971A5F559BE4B542E78A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft Manifest number: 0520 Signing time: Sat 28 Feb 2026 17:52:16 +0000 Manifest this update: Sat 28 Feb 2026 17:47:16 +0000 Manifest next update: Tue 03 Mar 2026 21:45:16 +0000 Files and hashes: 1: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl (hash: UVsBOMzBSkXT6qraoEE9Cucv+z0dy8+siyrtZaommIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4b:6d:6c:01:f8:c1:85:ec:99:71:a5:f5:59:be:4b:54:2e:78:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Validity Not Before: Feb 28 17:47:16 2026 GMT Not After : Mar 3 21:45:16 2026 GMT Subject: CN=2E1D92C084A05A0D84EA719B4FE60AE6C0D4CE49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b9:4a:5c:12:ba:11:01:99:6e:e9:9f:50:2e: 0b:84:cd:c0:d7:b9:cb:c9:1a:a1:6b:54:67:a1:cf: d8:9a:54:9c:d8:bf:e1:05:85:11:f3:17:76:91:54: 69:a9:db:d4:be:a8:df:f3:0c:3b:5a:2e:ac:28:ea: b5:a1:58:8f:6e:f0:4b:44:31:9d:48:d4:89:c5:aa: d4:2d:7e:4d:42:17:30:d3:cb:35:57:0f:06:18:46: f3:9e:d0:ea:a0:ee:5a:7b:89:7e:63:83:0a:cc:04: 0d:6a:31:aa:76:9f:ed:40:61:bf:75:e0:d7:84:c6: 04:3e:fc:42:94:d7:5e:07:d9:a7:91:69:09:d8:b7: 85:14:1e:4e:2d:7b:b7:4b:22:98:df:37:b9:85:09: d3:5b:2b:6a:df:b8:e6:c8:77:41:07:57:17:0b:11: fd:5a:ce:94:96:5e:30:08:24:4d:fb:01:85:e8:3e: 9b:14:24:d4:25:cb:b8:54:f3:78:a6:da:67:ba:55: 71:d3:0b:49:1d:01:1c:7e:24:75:a3:66:85:6e:91: 42:59:e6:30:5f:6b:c8:71:02:eb:af:d2:04:2d:6d: bf:2a:e6:b2:22:f6:dd:7b:f8:4e:6d:30:41:9c:15: fd:92:45:05:30:44:58:e4:8e:31:a0:50:e5:86:c2: cb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1D:92:C0:84:A0:5A:0D:84:EA:71:9B:4F:E6:0A:E6:C0:D4:CE:49 X509v3 Authority Key Identifier: keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:0b:3f:2b:28:d0:86:65:a6:40:42:4c:27:d4:44:dc:25:b8: 51:68:6b:44:2a:4c:07:0f:8f:8b:f0:73:9b:01:f6:c9:12:c7: 62:b8:55:6a:ef:8a:41:b1:e6:b1:e6:d4:35:d5:cf:d6:31:1c: b0:2e:9f:56:5b:64:52:2e:cd:44:88:21:5b:7a:27:98:3f:82: 2b:f1:46:5b:00:06:73:b7:58:d7:1d:e6:d7:0d:47:60:75:ca: 9b:92:5d:f5:9a:af:8e:70:35:c9:f5:67:a9:5f:21:92:01:67: d3:47:00:d3:95:a5:d9:3e:89:e6:4a:34:7c:83:4a:60:6b:05: f2:41:7d:53:69:6d:7a:0d:1d:69:92:69:a1:b0:d2:58:6f:8d: cc:d9:1e:7b:b9:6b:fe:d2:fa:d6:80:90:ef:28:bd:4b:82:2f: c8:53:01:e7:1e:d3:05:f4:da:e3:3c:8f:a8:24:28:67:29:ef: 48:8f:13:db:73:f8:38:eb:d4:87:21:6c:7f:63:1f:be:2e:74: 9b:3d:06:ce:b6:af:37:45:5d:d9:5f:cb:19:ee:26:37:4a:58: f8:a1:f4:c9:4e:c6:11:8f:eb:dc:3a:28:d2:96:06:ed:21:5f: 42:b6:cd:6a:83:0b:cc:8b:e5:85:6d:58:5b:2b:ba:02:d9:c2: 77:e1:9e:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO0ttbAH4wYXsmXGl9Vm+S1QueKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUz QzkzQjk2QjAeFw0yNjAyMjgxNzQ3MTZaFw0yNjAzMDMyMTQ1MTZaMDMxMTAvBgNV BAMTKDJFMUQ5MkMwODRBMDVBMEQ4NEVBNzE5QjRGRTYwQUU2QzBENENFNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzuUpcEroRAZlu6Z9QLguEzcDX ucvJGqFrVGehz9iaVJzYv+EFhRHzF3aRVGmp29S+qN/zDDtaLqwo6rWhWI9u8EtE MZ1I1InFqtQtfk1CFzDTyzVXDwYYRvOe0Oqg7lp7iX5jgwrMBA1qMap2n+1AYb91 4NeExgQ+/EKU114H2aeRaQnYt4UUHk4te7dLIpjfN7mFCdNbK2rfuObId0EHVxcL Ef1azpSWXjAIJE37AYXoPpsUJNQly7hU83im2me6VXHTC0kdARx+JHWjZoVukUJZ 5jBfa8hxAuuv0gQtbb8q5rIi9t17+E5tMEGcFf2SRQUwRFjkjjGgUOWGwsuJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULh2SwISgWg2E6nGbT+YK5sDUzkkwHwYDVR0j BBgwFoAUM43rjXBRxj/GzNexpd2MnjyTuWswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjRhNjVmNC00ZjRiLTQ0YjYtYTJlYi01OTk1N2JjNmE0ZDMvMC8zMzhERUI4RDcw NTFDNjNGQzZDQ0Q3QjFBNUREOEM5RTNDOTNCOTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUzQzkz Qjk2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0YTY1ZjQtNGY0Yi00NGI2LWEy ZWItNTk5NTdiYzZhNGQzLzAvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhD OUUzQzkzQjk2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABALPyso0IZlpkBCTCfURNwluFFoa0QqTAcP j4vwc5sB9skSx2K4VWrvikGx5rHm1DXVz9YxHLAun1ZbZFIuzUSIIVt6J5g/givx RlsABnO3WNcd5tcNR2B1ypuSXfWar45wNcn1Z6lfIZIBZ9NHANOVpdk+ieZKNHyD SmBrBfJBfVNpbXoNHWmSaaGw0lhvjczZHnu5a/7S+taAkO8ovUuCL8hTAece0wX0 2uM8j6gkKGcp70iPE9tz+Djr1IchbH9jH74udJs9Bs62rzdFXdlfyxnuJjdKWPih 9MlOxhGP69w6KNKWBu0hX0K2zWqDC8yL5YVtWFsrugLZwnfhnsI= -----END CERTIFICATE-----Generated at Mon Mar 2 07:33:39 2026 by rpki-client