$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: TEqBkMjxvw+y1XDhqDN4QGhrffP6MsiqdHR4NrtUt9I= Subject key identifier: C3:80:94:E2:D3:51:B8:AF:32:BA:3D:6B:CF:07:77:91:71:6F:AF:8B Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 7882F2857D459E61E23C34DEE424BE0E7B327184 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: 0148 Signing time: Sun 01 Mar 2026 22:12:18 +0000 Manifest this update: Sun 01 Mar 2026 22:07:18 +0000 Manifest next update: Wed 04 Mar 2026 23:37:18 +0000 Files and hashes: 1: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: Q7Uhnw2W1JvNgjfS3j6FN/1akX3eK8VA5iJgxW+lLE4=) 2: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: jqfTRowotRE9toTW7s6XxuVzWTLvd0wPa0s2vyImrss=) 3: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: /uvYv6HXm75DxIAvpZkO8f6t2HrqKvSXY9kmVPmsLBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:82:f2:85:7d:45:9e:61:e2:3c:34:de:e4:24:be:0e:7b:32:71:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Mar 1 22:07:18 2026 GMT Not After : Mar 4 23:37:18 2026 GMT Subject: CN=C38094E2D351B8AF32BA3D6BCF077791716FAF8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:56:af:04:62:1d:e0:44:95:65:06:11:05:42: b9:f6:f8:8a:e9:ab:dc:45:53:bb:50:09:1b:49:71: 53:3b:03:0a:04:15:ef:59:f5:94:47:b9:84:0c:69: 4d:e3:a3:d7:6c:f2:d9:0e:fa:c3:cf:c9:0d:8b:78: 98:50:37:08:79:3f:14:dc:4e:9a:66:e0:5e:9c:4e: a5:51:90:a7:ad:18:01:31:92:27:14:78:9e:38:c6: 1b:ec:fa:d0:b1:d1:96:fc:01:a7:34:2a:09:49:e8: 4b:1f:c3:cb:b0:cc:94:10:e9:c2:21:22:40:55:0c: 30:cb:fc:3c:1b:80:f7:98:c3:18:c5:86:d1:7e:85: 6c:54:8c:a5:e8:31:0c:c2:0b:ae:c2:bb:a8:1f:41: ec:d1:71:6b:f6:92:05:fa:09:eb:75:4c:ba:ed:71: 18:a1:67:3f:a4:bb:d3:39:6a:07:2f:88:73:c6:cd: 6f:37:9e:d4:ea:ef:f7:3d:91:90:25:02:21:ba:c1: d0:dc:67:e8:a6:65:5c:2e:47:a7:17:60:7d:cd:8a: 0c:b4:ac:59:ed:08:c1:9e:75:38:b5:19:89:78:63: 37:01:d8:bf:36:d9:f6:bf:9c:46:85:61:4b:55:81: c2:d7:dc:bb:6b:d5:15:64:91:78:39:98:c4:7e:94: 95:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:80:94:E2:D3:51:B8:AF:32:BA:3D:6B:CF:07:77:91:71:6F:AF:8B X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:9b:79:66:9b:b9:a4:03:8a:9e:9f:94:b4:10:bd:62:8a:fc: 73:65:60:f4:8d:2e:57:12:4f:4b:f2:b7:67:42:ec:d7:d6:9a: 97:7f:47:da:46:77:2f:ac:fa:cd:52:6c:19:9e:2b:27:4c:4c: 39:43:72:b5:01:df:65:25:51:fd:ae:2b:94:14:10:2b:00:55: 33:bb:cd:54:a1:7b:96:64:a2:97:7d:76:e1:06:54:b7:51:87: 2e:5d:58:23:80:70:8f:78:0c:07:00:b7:0d:7a:16:5f:52:42: 39:0f:39:4f:36:68:9c:ed:19:96:da:5e:2e:bb:34:a3:c6:2f: 60:4f:a8:76:9f:01:0b:85:9f:12:d7:c4:fd:fd:90:dc:f8:da: 71:42:89:43:26:fa:3c:9c:9c:55:9c:24:53:d4:41:dc:8e:5b: 03:8e:af:60:ba:3d:f6:0d:2b:e9:76:45:3c:50:f3:46:9f:62: 8c:16:19:54:91:fc:40:47:b0:bf:b2:a8:f7:e4:3b:9f:49:9b: f5:3a:db:64:73:e0:b4:9c:11:a7:d3:78:3a:3d:ed:13:94:5d: d4:58:3d:f4:8d:62:9a:c0:42:b2:c8:a8:7a:0d:d0:38:0d:df: 36:c1:f7:34:ab:ea:62:29:21:27:13:3f:52:3d:3d:49:03:48: bd:d1:82:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeILyhX1FnmHiPDTe5CS+DnsycYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNjAzMDEyMjA3MThaFw0yNjAzMDQyMzM3MThaMDMxMTAvBgNV BAMTKEMzODA5NEUyRDM1MUI4QUYzMkJBM0Q2QkNGMDc3NzkxNzE2RkFGOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXVq8EYh3gRJVlBhEFQrn2+Irp q9xFU7tQCRtJcVM7AwoEFe9Z9ZRHuYQMaU3jo9ds8tkO+sPPyQ2LeJhQNwh5PxTc Tppm4F6cTqVRkKetGAExkicUeJ44xhvs+tCx0Zb8Aac0KglJ6Esfw8uwzJQQ6cIh IkBVDDDL/DwbgPeYwxjFhtF+hWxUjKXoMQzCC67Cu6gfQezRcWv2kgX6Cet1TLrt cRihZz+ku9M5agcviHPGzW83ntTq7/c9kZAlAiG6wdDcZ+imZVwuR6cXYH3Nigy0 rFntCMGedTi1GYl4YzcB2L822fa/nEaFYUtVgcLX3Ltr1RVkkXg5mMR+lJXLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw4CU4tNRuK8yuj1rzwd3kXFvr4swHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGbeWabuaQDip6flLQQvWKK/HNlYPSNLlcS T0vyt2dC7NfWmpd/R9pGdy+s+s1SbBmeKydMTDlDcrUB32UlUf2uK5QUECsAVTO7 zVShe5Zkopd9duEGVLdRhy5dWCOAcI94DAcAtw16Fl9SQjkPOU82aJztGZbaXi67 NKPGL2BPqHafAQuFnxLXxP39kNz42nFCiUMm+jycnFWcJFPUQdyOWwOOr2C6PfYN K+l2RTxQ80afYowWGVSR/EBHsL+yqPfkO59Jm/U622Rz4LScEafTeDo97ROUXdRY PfSNYprAQrLIqHoN0DgN3zbB9zSr6mIpIScTP1I9PUkDSL3RgpY= -----END CERTIFICATE-----Generated at Mon Mar 2 23:26:00 2026 by rpki-client