$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft File: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft (raw, json) Hash identifier: +wHRNwqXkjkNLjKRFC15H+fYMXhTfV30P5SrGOWpmOw= Subject key identifier: 9B:3A:83:FE:8A:B8:98:92:1D:A0:43:C8:60:AE:49:8D:A7:70:84:49 Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Certificate serial: 171F5BA7CB0E973FA26709C71666072398B00624 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft Manifest number: 01B0 Signing time: Sun 01 Mar 2026 07:32:34 +0000 Manifest this update: Sun 01 Mar 2026 07:27:34 +0000 Manifest next update: Wed 04 Mar 2026 13:13:34 +0000 Files and hashes: 1: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: LGuKxagsq/7vmLaELbXZH0S7mkj0txetpKocd5RK03Y=) 2: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl (hash: Bml7HuPMeIimbQjYIfUPThzCgaCwXkeYtSasmHS8iPw=) 3: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: /c44B7YWLXkTIXveICv4tGTzoppi+BEbX8keLXTbk3Q=) 4: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: OhIKqdGLlbYOYf2QSJaf1Zp1dQFPdS35U6UJ3Ooje5Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:1f:5b:a7:cb:0e:97:3f:a2:67:09:c7:16:66:07:23:98:b0:06:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Validity Not Before: Mar 1 07:27:34 2026 GMT Not After : Mar 4 13:13:34 2026 GMT Subject: CN=9B3A83FE8AB898921DA043C860AE498DA7708449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:85:9a:88:e9:bd:b0:e0:7a:5a:11:a6:56: 6d:a7:57:0f:78:15:7b:82:11:7b:fd:7e:f4:fc:7b: b3:e1:2f:79:67:4d:3f:d2:c1:48:3d:a2:0d:1e:e7: 84:a4:33:b6:cb:56:86:78:27:69:5d:af:91:e7:0a: 64:f7:4a:e6:2c:03:5b:69:e8:eb:53:df:33:d8:42: 3d:6f:c8:4e:0f:c0:50:9f:4e:ea:1c:ed:39:bf:2d: 9f:f8:b7:60:0f:83:3d:b3:d4:22:42:1c:ff:55:6c: 63:25:5d:29:83:ea:04:eb:0f:77:d4:9b:4c:78:e9: 1e:4d:97:11:f2:e4:51:b8:64:9a:e5:47:21:3d:ef: 80:14:a4:af:b5:70:ae:7a:43:ad:76:d8:9d:05:85: c4:f4:cb:dc:a1:b8:f9:f8:e5:c6:2b:d4:d5:66:63: 88:98:c2:30:49:40:bd:07:a7:03:aa:d5:dd:f5:e4: af:80:d5:02:b1:5f:ba:1a:87:71:b0:6f:35:c8:f1: 16:d0:23:27:7c:c9:5c:fd:99:f2:58:2f:04:0d:8e: 2c:ea:4e:63:29:6b:fc:05:4a:b1:5c:92:10:81:11: cf:61:59:a8:f9:05:ac:ae:3d:28:81:a0:6d:91:9a: e2:01:ef:2e:5d:f9:83:fe:83:d0:9e:ed:ab:d5:66: eb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3A:83:FE:8A:B8:98:92:1D:A0:43:C8:60:AE:49:8D:A7:70:84:49 X509v3 Authority Key Identifier: keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:0c:be:62:32:00:f1:47:f2:ba:92:0f:81:44:f3:18:e2:20: 39:5a:6b:bf:11:a7:d6:0b:a1:ee:b3:23:3d:7e:15:ce:88:5d: 05:6a:6e:f1:e0:1e:d7:15:33:2a:ab:cb:9e:34:6a:53:00:09: a0:66:6c:7f:aa:86:4f:9f:89:9a:80:59:4b:dd:1b:07:d4:b7: 6e:24:93:ce:eb:94:97:87:af:55:3d:88:cb:1f:ed:ab:06:7b: 4c:fc:09:e0:3f:c0:19:c0:bc:fa:31:23:30:6d:43:d8:1f:44: 9e:75:2e:2a:5e:6d:5b:10:02:af:87:4b:ea:05:b2:81:3a:e4: a4:6b:81:ad:ca:2d:52:45:4f:e8:6c:68:f4:1a:b7:a4:fa:51: f1:6a:12:9c:5f:1d:d7:31:5a:c7:cc:20:e2:1a:b2:51:f9:cb: 9a:f2:09:3a:bf:07:77:43:3e:4b:c5:fe:11:ca:54:4a:c1:e0: 89:7d:ed:3f:99:11:7a:e4:3d:ce:5c:9b:d1:13:f7:f9:22:36: 29:09:5f:e3:45:3b:9e:2b:83:64:ba:b1:f0:a6:f5:c0:da:6c: 28:82:b1:ac:a4:21:88:b0:85:37:08:55:9e:fa:f1:5a:c0:a0: 50:38:53:d0:3e:0a:02:49:7a:db:eb:ab:e1:94:d2:7c:a9:8a: c6:47:2e:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFx9bp8sOlz+iZwnHFmYHI5iwBiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdB MEI4RDNCMzAeFw0yNjAzMDEwNzI3MzRaFw0yNjAzMDQxMzEzMzRaMDMxMTAvBgNV BAMTKDlCM0E4M0ZFOEFCODk4OTIxREEwNDNDODYwQUU0OThEQTc3MDg0NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0QYWaiOm9sOB6WhGmVm2nVw94 FXuCEXv9fvT8e7PhL3lnTT/SwUg9og0e54SkM7bLVoZ4J2ldr5HnCmT3SuYsA1tp 6OtT3zPYQj1vyE4PwFCfTuoc7Tm/LZ/4t2APgz2z1CJCHP9VbGMlXSmD6gTrD3fU m0x46R5NlxHy5FG4ZJrlRyE974AUpK+1cK56Q6122J0FhcT0y9yhuPn45cYr1NVm Y4iYwjBJQL0HpwOq1d315K+A1QKxX7oah3GwbzXI8RbQIyd8yVz9mfJYLwQNjizq TmMpa/wFSrFckhCBEc9hWaj5BayuPSiBoG2RmuIB7y5d+YP+g9Ce7avVZuupAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmzqD/oq4mJIdoEPIYK5JjadwhEkwHwYDVR0j BBgwFoAURCIbPRRfzBdzT3xSM1PLZ6C407MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMC80NDIyMUIzRDE0 NUZDQzE3NzM0RjdDNTIzMzUzQ0I2N0EwQjhEM0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdBMEI4 RDNCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NC NjdBMEI4RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwMvmIyAPFH8rqSD4FE8xjiIDlaa78Rp9YL oe6zIz1+Fc6IXQVqbvHgHtcVMyqry540alMACaBmbH+qhk+fiZqAWUvdGwfUt24k k87rlJeHr1U9iMsf7asGe0z8CeA/wBnAvPoxIzBtQ9gfRJ51LipebVsQAq+HS+oF soE65KRrga3KLVJFT+hsaPQat6T6UfFqEpxfHdcxWsfMIOIaslH5y5ryCTq/B3dD PkvF/hHKVErB4Il97T+ZEXrkPc5cm9ET9/kiNikJX+NFO54rg2S6sfCm9cDabCiC saykIYiwhTcIVZ768VrAoFA4U9A+CgJJetvrq+GU0nypisZHLvQ= -----END CERTIFICATE-----Generated at Mon Mar 2 09:29:24 2026 by rpki-client