$ rpki-client -vvf repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft File: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft (raw, json) Hash identifier: fgi8aeAy6pwYNE9YDdhgEbDCOZLvB47T06b0fGx0IOU= Subject key identifier: DB:AD:8C:AA:5F:68:5F:0C:DD:0F:3D:8E:2D:4B:6D:37:83:97:C9:41 Authority key identifier: 73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E Certificate issuer: /CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Certificate serial: 618002BFF6975760E49F6741824F413616B4A80B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft Manifest number: 010A Signing time: Sat 28 Feb 2026 00:03:18 +0000 Manifest this update: Fri 27 Feb 2026 23:58:18 +0000 Manifest next update: Tue 03 Mar 2026 10:03:18 +0000 Files and hashes: 1: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: vIO6PhCd4cB1k0BQaAZQv7MW8qfuF2ReRTB65p41S5s=) 2: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl (hash: AAYifMyp50CZIa0b03B8GSry5CUPIPGAdFH0jp+Kgm0=) 3: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: ky6kqewG2CLcXwQoFuB0Gbkz5WHCCY7RgpoJqEc0cVU=) 4: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: 5d1MR7rKvEWqFJE9IZmsunjaxhaRl4wODAGB+LLjxEo=) 5: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: urtgUYbcx2gytlBhM4p5dgZOXBrHzTqA0gycjFxEv78=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 10:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:80:02:bf:f6:97:57:60:e4:9f:67:41:82:4f:41:36:16:b4:a8:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Validity Not Before: Feb 27 23:58:18 2026 GMT Not After : Mar 3 10:03:18 2026 GMT Subject: CN=DBAD8CAA5F685F0CDD0F3D8E2D4B6D378397C941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:43:3a:3d:c8:e2:c8:96:55:c6:50:f6:3d:c5: e0:bd:ca:a6:96:2e:f3:38:1a:e7:0e:95:c0:1e:57: 55:62:7d:01:81:d0:d4:0b:33:77:56:80:92:51:54: 6e:d5:8e:c8:1a:3a:a6:b9:86:a0:c4:5e:99:ec:17: 20:e9:a2:d9:dd:31:26:68:0c:63:e8:b7:81:62:d1: 18:25:27:0b:9d:9c:0e:39:0c:6d:5d:bf:52:b4:a9: 1b:19:b1:d6:72:b6:09:e8:30:e6:a7:b1:7c:16:be: 52:7c:4f:2e:84:5e:c4:65:85:22:99:53:f6:e0:b1: e7:c1:5e:d1:45:13:f4:a0:76:97:e4:f9:b4:cc:d8: a5:73:f5:4f:38:e9:f3:82:10:b1:d9:d2:2b:60:74: 81:b8:f7:e3:8e:db:cc:08:44:4f:f9:38:24:cf:ad: d3:b8:ab:1e:af:30:f6:a6:fa:e3:f6:85:72:16:ef: 1c:0a:43:76:32:44:d6:80:4b:4f:fd:7f:36:3f:68: b7:3b:59:23:59:47:57:a4:b4:73:6e:40:de:c2:a5: 13:ce:ff:bb:56:a1:ba:a3:2a:4d:e6:9f:01:92:e9: 3a:5e:d0:97:55:90:26:e4:35:f6:5a:4c:f4:61:fd: 96:d8:5b:ec:0d:01:c3:8d:ed:36:31:e7:62:b7:ef: b2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AD:8C:AA:5F:68:5F:0C:DD:0F:3D:8E:2D:4B:6D:37:83:97:C9:41 X509v3 Authority Key Identifier: keyid:73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:77:7c:e4:f8:b9:23:35:03:9c:56:a8:9e:70:17:c6:3d:ea: 58:e9:0d:60:9c:f3:a4:a2:d3:52:cb:02:1b:c8:0f:33:c0:25: 57:7b:ae:f4:fd:04:04:9c:d7:5c:0b:5d:fb:52:8e:3c:9c:26: da:a8:d6:b6:0e:99:60:92:40:e2:44:03:8c:78:66:11:29:cc: cd:aa:b2:36:11:01:d9:6c:50:4e:5a:90:b0:fa:99:2b:8e:8e: 55:53:dc:4c:c5:05:bf:e9:81:e1:3e:e7:8b:c7:3d:2c:d2:52: b7:83:17:02:71:0b:42:95:e6:c1:4b:05:71:ea:27:69:b7:5b: 00:a6:e6:6b:85:3b:24:a5:53:32:1c:4a:10:fe:0a:54:2e:40: ce:5e:65:b2:17:ac:88:72:d6:03:f1:e6:f2:5e:04:51:0c:ab: b8:e8:59:f5:8b:4a:1b:4e:7f:ff:05:40:ce:d9:48:30:a0:01: bc:a2:a9:c3:05:2b:3f:3f:5f:62:e0:2a:26:68:1e:c2:bc:3b: 31:df:ed:ee:37:dc:6c:64:9f:02:56:23:dc:6f:11:f3:72:fb: 80:af:86:d7:f1:e1:14:b4:68:ff:43:5b:11:a0:f5:63:a3:c2: 2a:ea:f0:25:7e:0f:cc:f4:ca:0f:67:47:e2:fc:29:5c:8f:e2: cd:97:48:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYYACv/aXV2Dkn2dBgk9BNha0qAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3 REZDNkE4RTAeFw0yNjAyMjcyMzU4MThaFw0yNjAzMDMxMDAzMThaMDMxMTAvBgNV BAMTKERCQUQ4Q0FBNUY2ODVGMENERDBGM0Q4RTJENEI2RDM3ODM5N0M5NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUQzo9yOLIllXGUPY9xeC9yqaW LvM4GucOlcAeV1VifQGB0NQLM3dWgJJRVG7VjsgaOqa5hqDEXpnsFyDpotndMSZo DGPot4Fi0RglJwudnA45DG1dv1K0qRsZsdZytgnoMOansXwWvlJ8Ty6EXsRlhSKZ U/bgsefBXtFFE/Sgdpfk+bTM2KVz9U846fOCELHZ0itgdIG49+OO28wIRE/5OCTP rdO4qx6vMPam+uP2hXIW7xwKQ3YyRNaAS0/9fzY/aLc7WSNZR1ektHNuQN7CpRPO /7tWobqjKk3mnwGS6Tpe0JdVkCbkNfZaTPRh/ZbYW+wNAcON7TYx52K377LBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU262Mql9oXwzdDz2OLUttN4OXyUEwHwYDVR0j BBgwFoAUcx22dXK0ijqG8EdaDiHhon38ao4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yjc1YmZkMC1hODZjLTRiZWItOWY5OS1hYWMzM2ZiNWU0OWYvMC83MzFEQjY3NTcy QjQ4QTNBODZGMDQ3NUEwRTIxRTFBMjdERkM2QThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3REZD NkE4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I3NWJmZDAtYTg2Yy00YmViLTlm OTktYWFjMzNmYjVlNDlmLzAvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUx QTI3REZDNkE4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZ3fOT4uSM1A5xWqJ5wF8Y96ljpDWCc86Si 01LLAhvIDzPAJVd7rvT9BASc11wLXftSjjycJtqo1rYOmWCSQOJEA4x4ZhEpzM2q sjYRAdlsUE5akLD6mSuOjlVT3EzFBb/pgeE+54vHPSzSUreDFwJxC0KV5sFLBXHq J2m3WwCm5muFOySlUzIcShD+ClQuQM5eZbIXrIhy1gPx5vJeBFEMq7joWfWLShtO f/8FQM7ZSDCgAbyiqcMFKz8/X2LgKiZoHsK8OzHf7e433GxknwJWI9xvEfNy+4Cv htfx4RS0aP9DWxGg9WOjwirq8CV+D8z0yg9nR+L8KVyP4s2XSH8= -----END CERTIFICATE-----Generated at Mon Mar 2 00:50:30 2026 by rpki-client