$ rpki-client -vvf repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft File: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft (raw, json) Hash identifier: zlEVP17axLHWtU2irr8pa6C8ysWUzM3DIGSh4nhNh2U= Subject key identifier: C4:7A:97:6D:2F:35:68:E3:25:56:1E:1A:1D:8A:51:46:4C:67:81:24 Authority key identifier: 3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A Certificate issuer: /CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Certificate serial: 2941B9BD94B785F09730958077E5D3D28E315C66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft Manifest number: 0107 Signing time: Sun 01 Mar 2026 06:03:41 +0000 Manifest this update: Sun 01 Mar 2026 05:58:41 +0000 Manifest next update: Wed 04 Mar 2026 09:33:41 +0000 Files and hashes: 1: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl (hash: F0QMCOm7g5otFLy4A91ben4xX72KPmeBudaz/srJ7vM=) 2: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (hash: NaC6OjHEbkMsjBRQmR8Tqmru4zPhSmsJN/hiJNkC18Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:41:b9:bd:94:b7:85:f0:97:30:95:80:77:e5:d3:d2:8e:31:5c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Validity Not Before: Mar 1 05:58:41 2026 GMT Not After : Mar 4 09:33:41 2026 GMT Subject: CN=C47A976D2F3568E325561E1A1D8A51464C678124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c4:f2:86:f2:23:23:ee:96:4e:5a:f6:30:73: 51:e0:e5:82:3b:38:a6:41:87:ae:a1:4e:82:0a:a5: b8:47:36:ce:40:0e:bf:73:c2:c6:4f:84:e3:8c:93: ff:51:4a:5b:81:76:96:2e:40:de:1d:9b:5f:82:8a: 6f:de:46:d7:8e:82:ca:5e:c8:d8:d2:d9:e0:b4:71: 3b:97:ee:6d:e1:a1:64:c4:6e:31:e2:28:f9:86:55: 9d:a5:1e:30:3f:72:ef:f3:80:71:18:14:91:52:f2: 9c:e7:db:cb:a1:b0:35:ca:7c:48:ac:4c:49:d9:35: dc:42:d4:e4:11:02:71:ec:ca:09:39:97:a1:c2:b5: 08:49:b4:63:6d:20:2e:e1:39:e2:f9:b9:20:c6:a9: d9:e1:b7:bf:eb:9d:de:fa:b2:05:13:02:31:43:79: 05:59:e1:e6:02:e7:61:88:aa:bf:7d:6d:e5:fe:25: ce:03:3d:e4:05:d7:da:49:ed:ee:8a:00:09:3d:f7: 9a:95:e8:7d:9d:3d:4f:27:6a:32:6c:ce:05:e4:fb: 7b:e0:24:89:8c:4a:f0:38:3a:48:99:86:ee:8b:b0: be:7c:e6:8e:e5:04:4d:c6:cc:51:e3:ca:79:be:af: 65:40:b4:35:34:a5:32:bd:3e:74:a7:03:e5:3b:f4: cf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7A:97:6D:2F:35:68:E3:25:56:1E:1A:1D:8A:51:46:4C:67:81:24 X509v3 Authority Key Identifier: keyid:3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:cb:64:3a:70:ec:59:85:56:cd:e8:4a:b3:4e:d9:bb:d6:ee: 1c:18:9c:a8:dc:7b:9c:9e:f3:80:1c:1a:66:3a:1f:cc:fd:18: c4:12:a7:19:b2:d7:3b:74:4a:c0:0a:52:d1:1c:fe:57:56:4d: 9b:f1:9e:25:34:b6:75:02:e5:a1:5c:ad:59:7f:92:8d:ea:46: 81:8e:1e:29:0e:2c:b1:c1:33:5f:77:7d:c9:2a:55:cd:10:d1: bd:28:5d:04:9e:fd:cf:ad:b3:29:ed:49:f4:52:14:b6:67:f1: 07:f9:ec:4c:d8:c0:90:b5:96:86:d1:ab:b6:da:e7:35:c4:e3: 79:e8:70:97:4a:8c:f9:d0:9a:c0:90:5b:db:8a:00:98:a4:91: 50:ef:e0:f0:72:b6:82:ab:fa:0c:21:26:f0:70:ef:1b:8e:85: df:8e:ba:20:eb:3b:7d:e5:06:9a:e2:57:98:d5:c4:a1:b7:56: 64:ed:51:83:b0:ae:8a:6b:e7:95:17:64:c6:a8:05:e6:d1:54: ad:6a:64:f8:56:ed:eb:73:c4:3e:82:c9:99:dd:71:6d:53:53: 85:6c:23:58:78:cb:3d:79:72:91:79:38:5f:5d:7a:09:cc:44: 2e:19:b8:29:a1:7e:29:a4:95:cc:2e:a0:97:6b:64:6a:1a:37: 3e:2f:56:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKUG5vZS3hfCXMJWAd+XT0o4xXGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVG ODlCQUI5QTAeFw0yNjAzMDEwNTU4NDFaFw0yNjAzMDQwOTMzNDFaMDMxMTAvBgNV BAMTKEM0N0E5NzZEMkYzNTY4RTMyNTU2MUUxQTFEOEE1MTQ2NEM2NzgxMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkxPKG8iMj7pZOWvYwc1Hg5YI7 OKZBh66hToIKpbhHNs5ADr9zwsZPhOOMk/9RSluBdpYuQN4dm1+Cim/eRteOgspe yNjS2eC0cTuX7m3hoWTEbjHiKPmGVZ2lHjA/cu/zgHEYFJFS8pzn28uhsDXKfEis TEnZNdxC1OQRAnHsygk5l6HCtQhJtGNtIC7hOeL5uSDGqdnht7/rnd76sgUTAjFD eQVZ4eYC52GIqr99beX+Jc4DPeQF19pJ7e6KAAk995qV6H2dPU8najJszgXk+3vg JImMSvA4OkiZhu6LsL585o7lBE3GzFHjynm+r2VAtDU0pTK9PnSnA+U79M/ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxHqXbS81aOMlVh4aHYpRRkxngSQwHwYDVR0j BBgwFoAUPdzEykO0kvQMjLBuSZNOxfibq5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWI1MzQyMC04YzU5LTQ5Y2YtYjNiMi1mNTVlOTg5MGRkY2QvMC8zRERDQzRDQTQz QjQ5MkY0MEM4Q0IwNkU0OTkzNEVDNUY4OUJBQjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVGODlC QUI5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliNTM0MjAtOGM1OS00OWNmLWIz YjItZjU1ZTk4OTBkZGNkLzAvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRF QzVGODlCQUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrLZDpw7FmFVs3oSrNO2bvW7hwYnKjce5ye 84AcGmY6H8z9GMQSpxmy1zt0SsAKUtEc/ldWTZvxniU0tnUC5aFcrVl/ko3qRoGO HikOLLHBM193fckqVc0Q0b0oXQSe/c+tsyntSfRSFLZn8Qf57EzYwJC1lobRq7ba 5zXE43nocJdKjPnQmsCQW9uKAJikkVDv4PBytoKr+gwhJvBw7xuOhd+OuiDrO33l BpriV5jVxKG3VmTtUYOwropr55UXZMaoBebRVK1qZPhW7etzxD6CyZndcW1TU4Vs I1h4yz15cpF5OF9degnMRC4ZuCmhfimklcwuoJdrZGoaNz4vVsQ= -----END CERTIFICATE-----Generated at Mon Mar 2 11:38:41 2026 by rpki-client