$ rpki-client -vvf repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft File: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft (raw, json) Hash identifier: QMNHCV5+umfq6ts0ite2x0vVAi/VYgVSrqmTSfb7KJs= Subject key identifier: 7D:B7:76:3C:0D:6C:CD:CE:73:B9:C8:32:1F:7D:BF:FA:81:F3:92:8A Authority key identifier: D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 Certificate issuer: /CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Certificate serial: 20831CA6541B99F80A2D59AE3BE38E1C5AF9E65D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft Manifest number: D5 Signing time: Mon 02 Mar 2026 05:00:02 +0000 Manifest this update: Mon 02 Mar 2026 04:55:02 +0000 Manifest next update: Thu 05 Mar 2026 15:56:02 +0000 Files and hashes: 1: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl (hash: pjgMrd13Sz1ct6OqxcvODOTx9x9ARHYTsT67CDcmtjM=) 2: 3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (hash: hp0FWXodRjkZ1xCt3tnFlPQ3FclJlDZduoZ/rI+jC6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:83:1c:a6:54:1b:99:f8:0a:2d:59:ae:3b:e3:8e:1c:5a:f9:e6:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Validity Not Before: Mar 2 04:55:02 2026 GMT Not After : Mar 5 15:56:02 2026 GMT Subject: CN=7DB7763C0D6CCDCE73B9C8321F7DBFFA81F3928A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e5:a3:03:41:84:f9:d1:ce:d7:ce:98:c1:74: 63:9d:09:d5:fa:7d:aa:d3:41:64:47:bf:29:80:8f: fd:43:33:99:71:88:12:32:05:dc:35:05:68:28:ba: 0b:0d:09:23:85:09:a5:64:72:03:97:ef:51:32:92: 49:31:c8:53:58:6e:08:03:e4:6f:1f:58:6c:4f:3d: a5:fe:ae:81:ae:36:f2:08:c0:5e:9a:5e:7a:17:0d: 9f:4a:0d:f8:80:67:9d:89:2d:11:a8:d2:f8:3f:6b: c6:a1:7c:68:9c:b3:4f:3e:e0:1b:b1:de:4c:05:87: ba:25:b0:b8:a1:b2:eb:c3:b5:68:5c:c3:ef:c0:31: ca:b1:9b:cf:bf:b6:56:58:de:ab:d2:24:0e:a2:52: 82:4a:2a:0d:d4:f5:0f:0f:d6:1a:91:6a:9f:f6:51: 4d:b5:b4:2d:d7:77:34:39:1e:30:db:f2:c0:f8:e4: 00:e9:8e:f8:99:1a:38:6e:fb:c7:44:76:c6:b8:75: 06:58:c7:f7:57:e8:a8:1a:81:c7:2f:f9:ba:81:b1: 04:41:b5:d5:1f:8b:31:85:5c:19:dc:5a:1e:3d:0b: 31:de:2c:2e:6d:f4:a9:41:1a:15:fb:8b:39:81:ef: 40:ad:09:05:72:d9:b9:0f:31:00:37:6a:90:35:8d: 19:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B7:76:3C:0D:6C:CD:CE:73:B9:C8:32:1F:7D:BF:FA:81:F3:92:8A X509v3 Authority Key Identifier: keyid:D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:38:d7:84:f3:af:5c:cc:44:34:13:83:b0:68:16:7c:fd:61: e3:33:0d:2b:9f:99:1e:2e:04:e7:ed:34:66:44:28:aa:4c:23: 36:13:82:90:17:17:a3:d2:b0:ca:c6:bc:1e:ee:c2:93:31:3f: 49:dd:5a:3a:06:cc:49:03:fc:cc:69:29:4d:98:0e:12:78:8b: f9:52:bd:ac:22:68:b6:bc:72:61:f0:3a:38:9e:eb:95:93:84: b9:5f:c5:12:90:c9:3a:8a:85:40:86:50:e7:70:dd:40:9e:2e: c4:d4:ef:0d:46:d8:a5:7d:90:e1:80:b4:2f:bb:38:ce:45:f6: 0b:d1:a5:73:bc:b2:52:12:81:42:06:9c:1f:54:ca:1e:00:36: ef:fd:15:89:7c:fb:6b:bb:65:cb:b3:85:41:9c:a8:c8:dc:16: 87:d1:3e:cf:93:d7:74:78:9f:97:07:55:71:0d:22:9b:92:20: 70:76:da:ee:a2:3c:3a:ce:66:68:e1:ef:d2:a9:88:fd:31:59: b4:60:b7:5b:e7:9d:8c:d3:2a:b3:21:a7:e3:90:4f:b6:1f:e0: c8:f4:bd:28:00:c1:fb:ef:ca:3b:eb:2b:60:e8:17:40:e6:04: a1:c8:fd:07:5c:5b:04:5d:c4:20:e8:39:c3:13:9a:97:7d:2e: 09:6f:73:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIIMcplQbmfgKLVmuO+OOHFr55l0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJC NEZBMjhGMDAeFw0yNjAzMDIwNDU1MDJaFw0yNjAzMDUxNTU2MDJaMDMxMTAvBgNV BAMTKDdEQjc3NjNDMEQ2Q0NEQ0U3M0I5QzgzMjFGN0RCRkZBODFGMzkyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx5aMDQYT50c7XzpjBdGOdCdX6 farTQWRHvymAj/1DM5lxiBIyBdw1BWgougsNCSOFCaVkcgOX71EykkkxyFNYbggD 5G8fWGxPPaX+roGuNvIIwF6aXnoXDZ9KDfiAZ52JLRGo0vg/a8ahfGics08+4Bux 3kwFh7olsLihsuvDtWhcw+/AMcqxm8+/tlZY3qvSJA6iUoJKKg3U9Q8P1hqRap/2 UU21tC3XdzQ5HjDb8sD45ADpjviZGjhu+8dEdsa4dQZYx/dX6Kgagccv+bqBsQRB tdUfizGFXBncWh49CzHeLC5t9KlBGhX7izmB70CtCQVy2bkPMQA3apA1jRnVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfbd2PA1szc5zucgyH32/+oHzkoowHwYDVR0j BBgwFoAU07Ddu44H/NmKOZyQxbP8MrT6KPAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDlmOThmMy03MmYwLTQwMDYtYmU5OS1iOWE5ZThkOWQyYmYvMC9EM0IwRERCQjhF MDdGQ0Q5OEEzOTlDOTBDNUIzRkMzMkI0RkEyOEYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJCNEZB MjhGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q5Zjk4ZjMtNzJmMC00MDA2LWJl OTktYjlhOWU4ZDlkMmJmLzAvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZD MzJCNEZBMjhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGM414Tzr1zMRDQTg7BoFnz9YeMzDSufmR4u BOftNGZEKKpMIzYTgpAXF6PSsMrGvB7uwpMxP0ndWjoGzEkD/MxpKU2YDhJ4i/lS vawiaLa8cmHwOjie65WThLlfxRKQyTqKhUCGUOdw3UCeLsTU7w1G2KV9kOGAtC+7 OM5F9gvRpXO8slISgUIGnB9Uyh4ANu/9FYl8+2u7ZcuzhUGcqMjcFofRPs+T13R4 n5cHVXENIpuSIHB22u6iPDrOZmjh79KpiP0xWbRgt1vnnYzTKrMhp+OQT7Yf4Mj0 vSgAwfvvyjvrK2DoF0DmBKHI/QdcWwRdxCDoOcMTmpd9Lglvc/s= -----END CERTIFICATE-----Generated at Mon Mar 2 13:02:08 2026 by rpki-client