$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: FlICZyMIP9TKU7xtXhxhRcapjZgdxoW19aQOm6ui0oM= Subject key identifier: 0B:30:CF:29:A4:5F:58:BC:AC:56:80:0E:E2:FD:D9:72:7B:72:1D:B1 Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 7217CF74EEA70142AE75FEFDBA7CE17BF0F295B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: 0157 Signing time: Sat 28 Feb 2026 03:00:48 +0000 Manifest this update: Sat 28 Feb 2026 02:55:48 +0000 Manifest next update: Tue 03 Mar 2026 10:45:48 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: wdrBZgIsT0M3RzQAmccuZ99JfY040IZy/fr8+3psCao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 10:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:17:cf:74:ee:a7:01:42:ae:75:fe:fd:ba:7c:e1:7b:f0:f2:95:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: Feb 28 02:55:48 2026 GMT Not After : Mar 3 10:45:48 2026 GMT Subject: CN=0B30CF29A45F58BCAC56800EE2FDD9727B721DB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d0:2b:0b:45:ae:9c:20:ca:ae:9e:36:e3:c6: c3:aa:26:06:4c:50:36:f9:d4:ac:f3:fa:2e:44:d6: be:a6:40:7e:0b:6b:7e:71:db:d4:5e:61:49:8a:88: 08:00:52:8a:b1:30:09:f3:48:e5:d8:ea:9b:63:d3: 4f:a3:c8:fb:23:c3:80:28:d6:b4:57:ba:ae:be:97: cd:8f:43:92:29:79:2b:a3:5e:f9:cc:31:45:b7:68: 4b:c7:68:44:78:f5:8c:44:3d:b5:76:69:84:c0:1c: 8b:61:0c:1c:f5:6a:eb:d9:9a:9e:a2:06:c3:79:4b: 04:e5:ef:aa:c6:31:8f:a5:36:95:18:a6:ff:4e:a7: ee:a4:b3:52:cf:cc:03:52:b7:69:73:e2:c8:e3:fe: 4b:67:00:0d:b7:c7:1b:6a:0e:af:cf:7d:d8:f9:47: b5:9b:ed:f4:c7:0d:b4:93:62:a1:df:10:8c:e8:7a: 62:1b:59:e5:d5:d9:81:fb:41:ba:b9:9f:b9:3c:b9: 69:4f:f7:74:a5:1e:15:da:33:f1:c9:88:a4:65:0b: f8:63:69:c1:0d:65:2d:c0:18:a1:b1:4f:dd:d8:8f: e9:7e:20:7f:2c:97:13:d3:22:66:4c:73:44:6a:3c: 8a:31:cf:a4:be:bb:15:60:41:80:61:84:51:19:3e: 04:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:30:CF:29:A4:5F:58:BC:AC:56:80:0E:E2:FD:D9:72:7B:72:1D:B1 X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:20:91:a1:c6:96:76:49:68:39:a5:8e:c7:99:40:4e:ad:d5: cd:76:e5:a3:c4:54:1c:4d:7c:6e:2e:eb:c1:61:1c:18:c4:41: 02:c7:92:01:4e:c4:c5:28:fb:09:b9:99:b4:98:40:c2:f6:42: 66:b5:80:e0:d4:47:21:6e:be:82:c6:36:c6:3e:89:15:cc:e7: 86:58:ac:a9:ed:04:e6:f2:2f:7c:1a:03:e9:42:e9:aa:e5:d4: a9:51:7c:30:d3:a0:59:0a:b3:0c:2a:fb:51:a8:50:19:63:33: 17:3b:cf:8e:69:9a:cd:21:63:50:c4:4d:d4:15:8f:05:d2:a3: 5e:25:00:d6:0d:8c:b9:59:cc:95:81:b7:b3:05:88:21:ab:9a: f1:41:0a:fd:17:64:05:de:8f:e3:2e:31:e0:c4:da:8d:30:70: 05:27:ec:a6:38:e6:d6:eb:02:15:96:88:c6:83:19:fb:da:a7: e3:dd:7e:70:58:2d:38:24:4f:2f:fb:3a:b8:cd:21:26:e8:d6: b9:86:9a:ea:ad:00:0c:f4:49:43:9d:ed:db:24:5c:c9:c5:74: 72:ef:19:40:fd:87:7b:6a:2a:8a:23:32:cf:d1:73:bf:04:4d: e8:0f:a9:8a:a6:9b:f8:ff:66:32:98:cd:8a:4d:ad:71:ad:18: 12:49:1c:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUchfPdO6nAUKudf79unzhe/DylbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNjAyMjgwMjU1NDhaFw0yNjAzMDMxMDQ1NDhaMDMxMTAvBgNV BAMTKDBCMzBDRjI5QTQ1RjU4QkNBQzU2ODAwRUUyRkREOTcyN0I3MjFEQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd0CsLRa6cIMqunjbjxsOqJgZM UDb51Kzz+i5E1r6mQH4La35x29ReYUmKiAgAUoqxMAnzSOXY6ptj00+jyPsjw4Ao 1rRXuq6+l82PQ5IpeSujXvnMMUW3aEvHaER49YxEPbV2aYTAHIthDBz1auvZmp6i BsN5SwTl76rGMY+lNpUYpv9Op+6ks1LPzANSt2lz4sjj/ktnAA23xxtqDq/Pfdj5 R7Wb7fTHDbSTYqHfEIzoemIbWeXV2YH7Qbq5n7k8uWlP93SlHhXaM/HJiKRlC/hj acENZS3AGKGxT93Yj+l+IH8slxPTImZMc0RqPIoxz6S+uxVgQYBhhFEZPgQDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCzDPKaRfWLysVoAO4v3ZcntyHbEwHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANUgkaHGlnZJaDmljseZQE6t1c125aPEVBxN fG4u68FhHBjEQQLHkgFOxMUo+wm5mbSYQML2Qma1gODURyFuvoLGNsY+iRXM54ZY rKntBObyL3waA+lC6arl1KlRfDDToFkKswwq+1GoUBljMxc7z45pms0hY1DETdQV jwXSo14lANYNjLlZzJWBt7MFiCGrmvFBCv0XZAXej+MuMeDE2o0wcAUn7KY45tbr AhWWiMaDGfvap+PdfnBYLTgkTy/7OrjNISbo1rmGmuqtAAz0SUOd7dskXMnFdHLv GUD9h3tqKoojMs/Rc78ETegPqYqmm/j/ZjKYzYpNrXGtGBJJHPs= -----END CERTIFICATE-----Generated at Mon Mar 2 11:23:40 2026 by rpki-client