$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: 8idIymP8KgLNbgnsQKfpSHp+IZlrO3VU55THeadsTq8= Subject key identifier: B4:50:E1:7D:65:56:70:8A:BF:F7:9D:15:88:8C:75:8F:3A:0E:01:7A Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 532780D910BEFD6B48F224895DF05903CCB42DCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 0300 Signing time: Sun 01 Mar 2026 14:41:30 +0000 Manifest this update: Sun 01 Mar 2026 14:36:30 +0000 Manifest next update: Wed 04 Mar 2026 23:04:30 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: lDSKx6BOgrRANBTrD5FTsFfeCgef0Bsngyy4Sfqi6QY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:27:80:d9:10:be:fd:6b:48:f2:24:89:5d:f0:59:03:cc:b4:2d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Mar 1 14:36:30 2026 GMT Not After : Mar 4 23:04:30 2026 GMT Subject: CN=B450E17D6556708ABFF79D15888C758F3A0E017A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ac:39:f6:33:72:16:ad:5b:e3:97:87:ff:be: 92:9c:0f:13:44:35:ca:c0:5e:aa:fc:8b:18:d2:9e: 25:38:86:f4:46:9b:6c:4d:84:c5:8b:97:e6:d3:7b: f6:e2:14:2b:07:94:91:06:7a:ee:71:09:64:e0:88: 45:d2:d7:2b:54:1e:8c:e0:74:84:91:77:14:e9:e4: 4c:b9:6e:da:70:22:94:7a:69:95:93:04:9f:50:45: b2:10:d9:35:61:f3:8b:5c:74:36:ec:77:a3:fc:90: d1:19:2c:7b:cd:8e:61:7f:9b:2b:0e:34:55:c3:3c: 6a:9c:3a:24:66:bb:47:c1:71:c7:44:4d:76:4f:61: 0b:77:d8:eb:8e:a9:42:18:90:2f:0b:af:8f:5b:d3: 81:c8:1f:47:02:9c:1c:d7:c1:9f:5f:24:0f:51:44: f8:26:58:3d:d4:af:3d:0f:01:8f:e5:b6:a4:dc:c4: db:54:96:5f:50:33:dc:03:ef:a4:59:ff:ea:7f:78: 78:b4:56:4b:af:da:d8:c3:53:24:18:9d:00:f6:c1: da:fd:19:70:29:90:ae:29:6f:7c:b9:b6:b8:eb:e8: ab:eb:ec:f0:99:82:e2:65:1e:9c:05:75:24:53:2f: 90:e3:d1:e0:0a:a4:7b:17:81:98:7f:96:d6:27:42: a5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:50:E1:7D:65:56:70:8A:BF:F7:9D:15:88:8C:75:8F:3A:0E:01:7A X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:60:78:13:8e:c7:7d:e3:30:1c:d1:9e:41:4a:01:65:7c:1c: 0f:3a:56:3e:36:7f:f6:72:6a:24:2d:77:ca:e0:3e:62:e5:cd: 1f:8c:fe:09:96:51:79:38:65:dc:6d:a0:87:6c:9b:9b:c4:12: 30:fa:a5:fc:fe:fc:98:94:e3:40:ef:ce:76:b2:8e:c5:6a:6a: b3:56:29:b3:ca:55:fa:e1:e1:e4:1e:ac:ac:e4:5d:89:92:fe: 2a:f3:07:ab:ca:0c:80:30:6c:30:c4:8e:d4:24:74:3a:d6:9e: 09:18:e3:ac:43:e0:92:23:b0:0f:fc:54:a4:32:39:e4:a2:bc: 03:49:1f:e7:e1:af:39:18:f3:70:9e:fa:6e:70:bc:33:10:46: 69:a7:3f:c2:ab:ae:c3:b6:03:c6:2e:4d:7a:58:4e:14:e7:41: 1a:b9:66:7d:2d:93:53:4b:64:65:83:01:d9:5c:e8:4c:7b:10: e7:51:e3:f4:4c:68:54:7f:a7:c7:38:94:ec:5c:50:91:c8:fb: da:6a:9f:84:ee:a7:40:63:d4:05:a6:7e:26:c7:4a:df:ae:fa: 70:43:5a:11:d3:b5:e7:f9:0b:f6:a2:2b:d4:b0:89:af:c3:12: dd:1e:a3:25:3d:e3:85:52:48:11:bf:7b:ea:68:89:18:8f:10: 89:35:72:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUyeA2RC+/WtI8iSJXfBZA8y0LcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNjAzMDExNDM2MzBaFw0yNjAzMDQyMzA0MzBaMDMxMTAvBgNV BAMTKEI0NTBFMTdENjU1NjcwOEFCRkY3OUQxNTg4OEM3NThGM0EwRTAxN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+rDn2M3IWrVvjl4f/vpKcDxNE NcrAXqr8ixjSniU4hvRGm2xNhMWLl+bTe/biFCsHlJEGeu5xCWTgiEXS1ytUHozg dISRdxTp5Ey5btpwIpR6aZWTBJ9QRbIQ2TVh84tcdDbsd6P8kNEZLHvNjmF/mysO NFXDPGqcOiRmu0fBccdETXZPYQt32OuOqUIYkC8Lr49b04HIH0cCnBzXwZ9fJA9R RPgmWD3Urz0PAY/ltqTcxNtUll9QM9wD76RZ/+p/eHi0Vkuv2tjDUyQYnQD2wdr9 GXApkK4pb3y5trjr6Kvr7PCZguJlHpwFdSRTL5Dj0eAKpHsXgZh/ltYnQqXJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtFDhfWVWcIq/950ViIx1jzoOAXowHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtgeBOOx33jMBzRnkFKAWV8HA86Vj42f/Zy aiQtd8rgPmLlzR+M/gmWUXk4ZdxtoIdsm5vEEjD6pfz+/JiU40DvznayjsVqarNW KbPKVfrh4eQerKzkXYmS/irzB6vKDIAwbDDEjtQkdDrWngkY46xD4JIjsA/8VKQy OeSivANJH+fhrzkY83Ce+m5wvDMQRmmnP8KrrsO2A8YuTXpYThTnQRq5Zn0tk1NL ZGWDAdlc6Ex7EOdR4/RMaFR/p8c4lOxcUJHI+9pqn4Tup0Bj1AWmfibHSt+u+nBD WhHTtef5C/aiK9Swia/DEt0eoyU944VSSBG/e+poiRiPEIk1cqU= -----END CERTIFICATE-----Generated at Mon Mar 2 21:48:07 2026 by rpki-client