$ rpki-client -vvf repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft File: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft (raw, json) Hash identifier: dx9QOonBOlRJrjQwSUfaDoT8ZPmdRzPSCEPBsBC9CpI= Subject key identifier: E7:89:8F:2B:98:94:DE:2E:74:5E:F7:A1:88:FD:22:55:E7:2B:B3:DB Authority key identifier: 3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 Certificate issuer: /CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Certificate serial: 4397229AD243636C69835754D57A9A59E6B94AE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft Manifest number: 0551 Signing time: Mon 02 Mar 2026 16:51:31 +0000 Manifest this update: Mon 02 Mar 2026 16:46:31 +0000 Manifest next update: Thu 05 Mar 2026 18:32:31 +0000 Files and hashes: 1: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl (hash: Ii8eMIub7rO0bd3S/K1Wm158nQaTbly+2OBLhVI0AW0=) 2: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: LtScTHZoxOHSbHhuqbZIrkhW+lipK1u0xCr0E9aMFWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:97:22:9a:d2:43:63:6c:69:83:57:54:d5:7a:9a:59:e6:b9:4a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Validity Not Before: Mar 2 16:46:31 2026 GMT Not After : Mar 5 18:32:31 2026 GMT Subject: CN=E7898F2B9894DE2E745EF7A188FD2255E72BB3DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:9c:cd:10:db:d5:f5:73:aa:d1:79:c2:e2: 13:84:5e:8f:c4:2c:d6:45:e0:10:97:76:99:e3:13: a1:dc:24:93:04:a1:24:53:3b:f6:1e:ed:ef:ee:97: cb:15:b1:fd:10:da:a9:6f:3e:27:35:fd:eb:97:9d: d6:39:14:d1:a7:bf:15:ab:25:42:aa:1b:9c:f3:24: c4:1d:d7:7b:af:8d:4e:06:c3:f3:2e:5f:8e:6a:3e: 09:bb:ab:b6:f6:e5:8c:67:6a:72:18:87:4c:bb:64: a2:8b:ae:c1:ca:e9:08:ab:c7:ee:16:dd:9a:5f:0c: d8:f0:c1:86:b4:40:6a:ef:3f:ec:2e:55:65:7a:24: 13:7f:0c:0f:5f:27:e0:d5:e9:e0:bc:8b:c9:37:da: e1:28:f3:f1:f1:e8:33:c1:c8:23:7b:17:32:cf:a6: a4:b9:95:8a:ad:fa:c6:19:58:da:9e:8c:8a:58:f3: 7e:12:c0:22:cc:91:a2:30:8d:e2:c5:89:e3:12:f3: e3:b5:08:9d:3e:80:35:a6:c0:5d:18:e5:7c:ea:a8: fc:d3:58:5d:5e:14:82:7e:79:c0:d1:06:0a:19:70: 7d:61:10:20:50:28:5e:77:e3:cd:92:ee:4b:97:1a: 35:bc:80:29:3e:4e:c9:01:ee:44:56:12:89:8a:9a: 9a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:89:8F:2B:98:94:DE:2E:74:5E:F7:A1:88:FD:22:55:E7:2B:B3:DB X509v3 Authority Key Identifier: keyid:3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5f:a0:7f:d6:58:f0:0a:10:16:fd:d7:82:ca:f1:49:47:e3: 79:ff:c8:41:4e:6a:45:54:f6:ec:e8:b0:30:b0:d4:60:01:c6: 9c:f9:03:9c:df:9b:70:78:4d:b7:ec:85:b2:3f:2f:a9:cf:8b: 7b:b4:88:b3:36:a2:24:4f:93:4d:7d:62:33:23:12:90:95:2c: f3:6f:83:e8:08:86:31:65:e6:ed:d3:b4:e0:25:5b:68:8b:f5: 8d:6c:85:5d:bd:28:6d:4a:1e:b1:df:39:cf:f4:a4:27:31:d2: 40:8e:ae:21:18:df:6f:5b:67:0c:0a:02:fa:61:82:dc:df:a6: d5:06:ef:e4:52:0a:03:cd:a8:47:ad:b3:9d:94:7e:d6:ba:cd: d4:5c:bc:fd:31:ec:c7:d1:a6:f7:be:85:0f:78:d3:96:10:94: f8:b7:c2:d0:72:a3:1b:f7:88:50:ed:fc:af:51:55:3d:01:79: b6:b1:86:dc:41:06:f2:5f:71:46:1a:68:e6:f1:ea:58:fd:f9: 49:e5:a7:cb:91:ed:d2:b5:8e:0b:0f:b0:d6:f3:b2:b5:29:b4: c7:f0:7e:c3:f7:aa:5e:4c:c1:28:3b:ee:88:8f:67:ec:dc:43: 06:62:41:48:8b:94:07:52:25:15:52:98:e8:3f:1c:bc:31:34: 98:d1:f3:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5cimtJDY2xpg1dU1XqaWea5SuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhF RkNFMENBMDAeFw0yNjAzMDIxNjQ2MzFaFw0yNjAzMDUxODMyMzFaMDMxMTAvBgNV BAMTKEU3ODk4RjJCOTg5NERFMkU3NDVFRjdBMTg4RkQyMjU1RTcyQkIzREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFRpzNENvV9XOq0XnC4hOEXo/E LNZF4BCXdpnjE6HcJJMEoSRTO/Ye7e/ul8sVsf0Q2qlvPic1/euXndY5FNGnvxWr JUKqG5zzJMQd13uvjU4Gw/MuX45qPgm7q7b25YxnanIYh0y7ZKKLrsHK6Qirx+4W 3ZpfDNjwwYa0QGrvP+wuVWV6JBN/DA9fJ+DV6eC8i8k32uEo8/Hx6DPByCN7FzLP pqS5lYqt+sYZWNqejIpY834SwCLMkaIwjeLFieMS8+O1CJ0+gDWmwF0Y5XzqqPzT WF1eFIJ+ecDRBgoZcH1hECBQKF53482S7kuXGjW8gCk+TskB7kRWEomKmpoHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU54mPK5iU3i50XvehiP0iVecrs9swHwYDVR0j BBgwFoAUPR1ElzFVb44UUd5luy4PiO/ODKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM3Mzk2Yy00YmJlLTRjNmUtOGY1MC00NDJjMjA1ZTA3MGMvMC8zRDFENDQ5NzMx NTU2RjhFMTQ1MURFNjVCQjJFMEY4OEVGQ0UwQ0EwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhFRkNF MENBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjNzM5NmMtNGJiZS00YzZlLThm NTAtNDQyYzIwNWUwNzBjLzAvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBG ODhFRkNFMENBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpfoH/WWPAKEBb914LK8UlH43n/yEFOakVU 9uzosDCw1GABxpz5A5zfm3B4TbfshbI/L6nPi3u0iLM2oiRPk019YjMjEpCVLPNv g+gIhjFl5u3TtOAlW2iL9Y1shV29KG1KHrHfOc/0pCcx0kCOriEY329bZwwKAvph gtzfptUG7+RSCgPNqEets52Ufta6zdRcvP0x7MfRpve+hQ9405YQlPi3wtByoxv3 iFDt/K9RVT0BebaxhtxBBvJfcUYaaObx6lj9+Unlp8uR7dK1jgsPsNbzsrUptMfw fsP3ql5MwSg77oiPZ+zcQwZiQUiLlAdSJRVSmOg/HLwxNJjR81c= -----END CERTIFICATE-----Generated at Mon Mar 2 19:33:43 2026 by rpki-client