$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft File: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft (raw, json) Hash identifier: FZaETptKrSfswz+73HPJUQkyvzr2ScMeqLmsVXQe9M8= Subject key identifier: 6A:1F:67:FE:F7:A9:BB:C3:A0:8C:DE:2F:0B:AD:E0:29:BE:65:65:36 Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Certificate serial: 32F3229EDB4D06BED6578AC176FFBD2E049FC4DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft Manifest number: 0252 Signing time: Sat 28 Feb 2026 11:31:41 +0000 Manifest this update: Sat 28 Feb 2026 11:26:41 +0000 Manifest next update: Tue 03 Mar 2026 12:29:41 +0000 Files and hashes: 1: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl (hash: l9/cbaDBaKB4Yj7J6Xmu8fJB++r8hympAAjmUw4nYHw=) 2: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: Zm0hpNa3KzjUY5ugGNSToALOnFgESrmbArm+FZK1Qzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f3:22:9e:db:4d:06:be:d6:57:8a:c1:76:ff:bd:2e:04:9f:c4:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Validity Not Before: Feb 28 11:26:41 2026 GMT Not After : Mar 3 12:29:41 2026 GMT Subject: CN=6A1F67FEF7A9BBC3A08CDE2F0BADE029BE656536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:52:a1:08:ba:97:b3:7e:aa:7b:bf:ea:70:a0: 8d:9c:ea:bd:c6:e5:28:5b:46:6f:7d:e1:2f:6f:30: 01:d2:5f:60:08:1c:41:e2:5f:c3:d9:98:38:58:c4: e5:74:89:d7:bc:9e:e9:7e:ab:9d:7f:ed:7b:bb:2e: f3:15:26:47:c9:37:64:f2:3a:e8:21:a5:4e:52:c3: 56:92:82:fe:aa:a1:0f:bc:5b:b8:31:f9:1f:5f:d8: 9c:e6:2b:c9:ff:60:22:5e:68:02:78:01:21:77:10: c7:3f:b1:8f:84:9f:c4:c1:a3:5e:03:49:cb:ac:ac: c8:c5:55:c6:33:34:a8:eb:f6:be:fe:43:d6:bf:7e: 17:67:24:71:8e:ac:d8:d3:15:91:6b:40:d9:b4:96: d2:c4:5d:70:9c:3e:37:87:8d:87:ca:ed:c1:42:6f: d9:b7:85:30:7a:84:0d:47:b8:76:ae:f2:db:f9:f5: 77:3a:d6:18:19:3d:c2:68:49:9d:0d:44:4a:84:5a: 60:bd:c9:20:8b:10:6e:33:77:f4:46:5d:3e:2b:25: 34:be:5a:3d:72:47:31:3e:fe:ed:cb:8c:ff:86:b2: 4f:4e:bd:16:0b:f7:f1:23:14:ec:31:0b:9c:cc:f0: ca:9f:d9:64:da:73:cd:46:d3:05:70:23:df:8d:28: c5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:1F:67:FE:F7:A9:BB:C3:A0:8C:DE:2F:0B:AD:E0:29:BE:65:65:36 X509v3 Authority Key Identifier: keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1a:cd:c3:b3:b9:73:b9:85:e9:0f:61:e8:2b:2c:1b:25:fd: b9:46:2f:e6:c4:a5:7b:42:f1:68:0d:d7:c6:0f:e1:11:6d:84: 58:e0:a8:ba:18:ec:2a:ef:12:f3:04:b6:76:5e:f6:9d:e1:d1: 32:3c:9a:59:11:45:dc:2a:a1:7b:5b:25:ca:92:8c:1f:9b:a1: 8d:69:f1:6e:b9:33:8c:b9:91:af:5b:d2:94:15:b4:13:e1:8d: f9:42:ae:cd:73:0a:0e:31:e9:93:1a:9d:6d:da:97:27:4e:26: 12:01:23:01:a5:f4:8b:34:c5:36:ac:95:6e:52:f7:65:48:27: 2b:26:13:1d:77:a6:47:14:c6:ff:2a:bc:ec:8e:e4:fc:6f:df: f1:07:25:6d:b0:e8:5c:23:0a:74:8e:52:6c:65:2b:bc:4c:cb: 86:e1:cf:82:0c:02:4d:e6:04:52:52:9f:04:41:6b:cc:d3:b2: 53:eb:58:b2:5c:45:20:8b:c9:b8:6a:e5:7e:ec:78:ca:20:65: bb:4e:25:6f:0d:a2:bf:20:92:da:7b:da:5c:d8:13:21:70:af: d9:9e:89:f8:3d:df:a8:06:ce:74:b8:6e:58:c9:3d:7e:2b:59: af:be:23:05:8f:6a:d2:fd:db:34:e5:f2:df:7c:18:18:9b:40: 13:f2:15:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMvMinttNBr7WV4rBdv+9LgSfxNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0 N0IwMzRDMjAeFw0yNjAyMjgxMTI2NDFaFw0yNjAzMDMxMjI5NDFaMDMxMTAvBgNV BAMTKDZBMUY2N0ZFRjdBOUJCQzNBMDhDREUyRjBCQURFMDI5QkU2NTY1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIUqEIupezfqp7v+pwoI2c6r3G 5ShbRm994S9vMAHSX2AIHEHiX8PZmDhYxOV0ide8nul+q51/7Xu7LvMVJkfJN2Ty OughpU5Sw1aSgv6qoQ+8W7gx+R9f2JzmK8n/YCJeaAJ4ASF3EMc/sY+En8TBo14D ScusrMjFVcYzNKjr9r7+Q9a/fhdnJHGOrNjTFZFrQNm0ltLEXXCcPjeHjYfK7cFC b9m3hTB6hA1HuHau8tv59Xc61hgZPcJoSZ0NREqEWmC9ySCLEG4zd/RGXT4rJTS+ Wj1yRzE+/u3LjP+Gsk9OvRYL9/EjFOwxC5zM8Mqf2WTac81G0wVwI9+NKMXpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUah9n/vepu8OgjN4vC63gKb5lZTYwHwYDVR0j BBgwFoAUPX6neI4CXhLe/RjusnivbUewNMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzcwZmVlYi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC8zRDdFQTc3ODhF MDI1RTEyREVGRDE4RUVCMjc4QUY2RDQ3QjAzNEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0N0Iw MzRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi NDMtZjY1MmExMWZkMDhjLzAvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFG NkQ0N0IwMzRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0azcOzuXO5hekPYegrLBsl/blGL+bEpXtC 8WgN18YP4RFthFjgqLoY7CrvEvMEtnZe9p3h0TI8mlkRRdwqoXtbJcqSjB+boY1p 8W65M4y5ka9b0pQVtBPhjflCrs1zCg4x6ZManW3alydOJhIBIwGl9Is0xTaslW5S 92VIJysmEx13pkcUxv8qvOyO5Pxv3/EHJW2w6FwjCnSOUmxlK7xMy4bhz4IMAk3m BFJSnwRBa8zTslPrWLJcRSCLybhq5X7seMogZbtOJW8Nor8gktp72lzYEyFwr9me ifg936gGznS4bljJPX4rWa++IwWPatL92zTl8t98GBibQBPyFfM= -----END CERTIFICATE-----Generated at Mon Mar 2 10:43:32 2026 by rpki-client