$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json) Hash identifier: mBapyeKe1EOTQIIP8XDnpZDrkpLcaWOzB5X3TT5RLr4= Subject key identifier: CE:2C:E0:93:11:0B:3F:10:A6:99:A8:99:1C:C3:EC:1B:F0:6D:08:D2 Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Certificate serial: 7EFB31FFC73D2155E2EFB000E1BEE0F0BB60E0ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft Manifest number: 020A Signing time: Sun 01 Mar 2026 14:52:05 +0000 Manifest this update: Sun 01 Mar 2026 14:47:05 +0000 Manifest next update: Wed 04 Mar 2026 22:16:05 +0000 Files and hashes: 1: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: 1x+UKHgfa9Js2a7977hpESdJiBp9Jnx229YVU6Odyjo=) 2: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: ncYGXRGoDNxvYIX3PcGqdrJLj1FxUvjJrqOvy1GAKxo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:fb:31:ff:c7:3d:21:55:e2:ef:b0:00:e1:be:e0:f0:bb:60:e0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Validity Not Before: Mar 1 14:47:05 2026 GMT Not After : Mar 4 22:16:05 2026 GMT Subject: CN=CE2CE093110B3F10A699A8991CC3EC1BF06D08D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:a2:45:76:40:63:8a:43:eb:9b:c7:f5:f6: a4:9d:22:29:cc:3f:6e:37:49:d1:50:8b:fb:33:69: 33:36:da:09:13:7b:c4:80:aa:3d:e9:c8:c6:6a:d2: 7a:2b:f3:34:d7:b5:3d:ec:68:12:6a:36:4b:e2:2b: 08:6f:0b:c8:61:ff:a2:ee:45:de:2e:81:08:40:75: 7f:dc:6e:43:5e:cc:29:f1:7c:71:92:7a:36:c3:db: 59:a1:73:1c:45:7d:d3:76:8a:6e:d4:ad:92:96:53: e7:1a:97:9f:b7:30:a4:0d:b8:17:8d:4a:f0:9d:13: 74:19:2d:74:5a:c1:9a:42:45:9e:cd:b7:19:3f:15: 81:e6:c8:ec:18:98:16:0a:d8:81:d1:4f:54:62:17: 3c:01:86:6b:2f:e4:c2:ad:17:57:11:b0:c9:6f:b7: f3:16:11:09:33:0f:f7:b0:5c:63:fe:9f:6c:0d:4d: 31:fa:d2:3f:16:12:32:dd:4e:55:c3:f7:ef:54:8a: ce:45:55:09:69:67:2e:22:ca:91:af:25:d6:42:27: d0:51:7e:d0:b4:dc:2f:be:ae:15:8a:0a:c5:4c:ce: 81:39:4c:8d:dd:20:0f:50:d7:cd:77:2a:90:0c:d8: f7:ff:a9:60:35:3e:c6:51:6f:6e:7f:e0:45:d4:b7: 2b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2C:E0:93:11:0B:3F:10:A6:99:A8:99:1C:C3:EC:1B:F0:6D:08:D2 X509v3 Authority Key Identifier: keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:99:d6:73:2d:bb:52:6a:8c:f3:e7:98:ba:66:87:26:4e:ef: f5:00:18:c9:e1:5f:8d:8d:29:7a:12:9f:fa:c8:21:31:4f:27: a7:1a:56:33:d5:08:ad:c1:fb:24:3e:86:c6:ca:21:77:77:31: 9f:d1:2b:67:3c:91:88:15:07:00:7c:9f:ef:e3:00:1a:67:95: b3:54:ee:20:7a:f1:a4:41:46:e6:2c:aa:81:f2:31:6e:55:10: 5d:50:ed:f8:11:d1:5a:bb:ad:91:2d:82:7c:7a:7e:e1:37:34: 5c:68:6c:f4:f8:61:cf:5b:de:b8:97:ab:22:b7:c7:1d:f0:25: cc:4a:db:47:0d:1a:fd:a2:d5:f7:5c:19:98:19:c7:d9:20:b7: da:34:f8:40:78:e3:f7:13:10:8e:d8:85:f6:28:f0:83:eb:81: e5:86:a2:2c:1f:55:83:e6:34:7f:ce:c3:3f:e4:eb:e5:56:c5: df:50:42:c2:94:1e:6a:06:51:41:3b:c0:c4:93:a8:ee:d2:40: bc:f1:4c:36:bc:85:04:b4:71:d8:06:f6:04:6a:35:ea:a7:15: 16:3d:d3:52:d3:b7:b5:24:a5:0c:34:8b:01:8a:0a:33:76:8e: d2:b9:3b:56:80:15:ce:93:02:45:aa:90:e3:e6:52:a2:a4:db: cb:e7:a4:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfvsx/8c9IVXi77AA4b7g8Ltg4O0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRF QTgxNTZEMzAeFw0yNjAzMDExNDQ3MDVaFw0yNjAzMDQyMjE2MDVaMDMxMTAvBgNV BAMTKENFMkNFMDkzMTEwQjNGMTBBNjk5QTg5OTFDQzNFQzFCRjA2RDA4RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRc6JFdkBjikPrm8f19qSdIinM P243SdFQi/szaTM22gkTe8SAqj3pyMZq0nor8zTXtT3saBJqNkviKwhvC8hh/6Lu Rd4ugQhAdX/cbkNezCnxfHGSejbD21mhcxxFfdN2im7UrZKWU+cal5+3MKQNuBeN SvCdE3QZLXRawZpCRZ7Ntxk/FYHmyOwYmBYK2IHRT1RiFzwBhmsv5MKtF1cRsMlv t/MWEQkzD/ewXGP+n2wNTTH60j8WEjLdTlXD9+9Uis5FVQlpZy4iypGvJdZCJ9BR ftC03C++rhWKCsVMzoE5TI3dIA9Q1813KpAM2Pf/qWA1PsZRb25/4EXUtyv9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzizgkxELPxCmmaiZHMPsG/BtCNIwHwYDVR0j BBgwFoAUP7/pLVsiDps2s3vNMJHXVOqBVtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC8zRkJGRTkyRDVC MjIwRTlCMzZCMzdCQ0QzMDkxRDc1NEVBODE1NkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRFQTgx NTZEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI5NDAxZDAtMjZhNy00Nzg3LWI2 OGEtMTgyYjE1MmE5NTEzLzAvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3 NTRFQTgxNTZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKZ1nMtu1JqjPPnmLpmhyZO7/UAGMnhX42N KXoSn/rIITFPJ6caVjPVCK3B+yQ+hsbKIXd3MZ/RK2c8kYgVBwB8n+/jABpnlbNU 7iB68aRBRuYsqoHyMW5VEF1Q7fgR0Vq7rZEtgnx6fuE3NFxobPT4Yc9b3riXqyK3 xx3wJcxK20cNGv2i1fdcGZgZx9kgt9o0+EB44/cTEI7YhfYo8IPrgeWGoiwfVYPm NH/Owz/k6+VWxd9QQsKUHmoGUUE7wMSTqO7SQLzxTDa8hQS0cdgG9gRqNeqnFRY9 01LTt7UkpQw0iwGKCjN2jtK5O1aAFc6TAkWqkOPmUqKk28vnpNc= -----END CERTIFICATE-----Generated at Mon Mar 2 16:49:22 2026 by rpki-client