$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft File: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft (raw, json) Hash identifier: Pij3hBBSf677qUQUYWUiVeEc9QndKwwcZ3J5qT6u3Z0= Subject key identifier: D4:87:AE:23:84:52:47:34:6F:4A:97:B1:6C:BC:51:B7:47:AF:6C:31 Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 Certificate issuer: /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Certificate serial: 04C6574BDDDEF35BF3665FA47DCF692786F0C947 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft Manifest number: 01DD Signing time: Sun 01 Mar 2026 21:22:37 +0000 Manifest this update: Sun 01 Mar 2026 21:17:37 +0000 Manifest next update: Thu 05 Mar 2026 04:54:37 +0000 Files and hashes: 1: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl (hash: lVpVRATLTD6Ei9ylmobCo6sd2ZZSPkAMXTDF65KVEHc=) 2: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: M4XvK4+KSlb81JlrVQsMEAe2ZSv8ZUvIs/IgDYzVWX8=) 3: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: OZaXLB6WOsZ0iT1ekgvM7U/1Xm1GvHimP1k0atvZFXA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 04:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c6:57:4b:dd:de:f3:5b:f3:66:5f:a4:7d:cf:69:27:86:f0:c9:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Validity Not Before: Mar 1 21:17:37 2026 GMT Not After : Mar 5 04:54:37 2026 GMT Subject: CN=D487AE23845247346F4A97B16CBC51B747AF6C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:8d:f5:f3:06:dd:3a:b9:c1:9d:05:ca:36: f2:64:32:e7:be:94:9a:13:28:e5:67:46:cc:6a:26: bc:c5:32:9a:4c:28:ce:cd:74:6c:24:97:0f:88:19: e7:3f:e7:09:f8:5a:e9:f2:33:e9:cf:75:e1:b1:69: ae:ac:8e:f3:82:a0:8d:98:a8:42:1c:73:13:d1:9a: 11:48:3f:4e:18:8c:81:90:bc:04:f8:f9:ad:b4:ba: 94:44:cf:84:bb:fd:d3:bd:ce:fa:77:fe:1d:9b:98: 84:b5:d7:69:9a:2d:34:5d:ce:c0:33:82:f5:55:5b: f2:e2:f9:d9:c8:f6:07:e2:fc:2b:c9:1d:e6:50:50: 41:ea:16:e4:1d:4e:88:f9:2e:dc:d7:66:b3:a2:3f: bf:73:12:3a:2f:48:8c:de:d7:a5:b8:83:e0:a5:0f: cf:0d:b2:26:ff:90:5c:b8:f8:0b:2c:fe:a3:fa:90: 60:74:5f:e2:f1:2b:84:92:b9:fe:d3:ca:23:98:93: 97:8f:75:3c:fd:1e:b4:86:91:af:73:fb:f3:08:ab: 7e:e5:4c:9e:c7:9f:08:7b:e4:f1:e6:2f:fd:c7:93: ed:e3:4a:9b:c6:46:f1:d4:b3:60:74:3c:e9:77:2f: 0a:a9:72:ca:e9:a9:8b:0b:dd:3a:a7:85:18:66:4b: 30:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:87:AE:23:84:52:47:34:6F:4A:97:B1:6C:BC:51:B7:47:AF:6C:31 X509v3 Authority Key Identifier: keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b9:74:a3:82:e3:9c:0a:c1:ed:af:51:de:dc:54:29:02:2c: f4:b4:10:1f:c8:6c:f2:9d:ff:be:da:ef:70:8d:44:f3:34:30: 22:80:77:2a:9e:b8:02:e1:e6:96:87:ea:78:0a:3b:91:5d:b5: 01:a3:fe:50:65:df:ce:06:df:17:c5:50:ca:d6:42:25:e9:45: 52:a1:a7:13:0d:52:61:90:3b:6c:dd:c3:63:68:6b:88:63:97: 2a:fc:eb:81:9f:22:69:7c:7f:8e:5e:b3:77:c6:f4:c1:e2:38: 75:cd:c4:60:ae:8e:df:28:ac:ac:cd:32:ce:61:b9:f8:0b:e2: f6:a4:3a:72:41:d9:16:ca:fd:e9:ea:c3:59:48:cc:cb:5b:e3: ea:10:22:1b:ef:9b:53:cd:6f:8a:33:3f:2e:0e:64:46:d7:2e: 64:3f:ce:22:d5:d7:5f:9f:32:5d:fe:c8:e3:87:54:6c:90:8f: 9f:c0:14:06:84:46:cf:70:b6:7d:8b:8d:37:9b:d8:9b:0e:20: 51:db:c2:de:03:e9:b3:92:ec:f8:fa:f9:a6:67:72:7d:0f:74: 63:d5:8e:19:28:51:86:08:63:90:9e:9b:68:15:b3:46:2c:17: 1b:79:bd:74:71:94:8b:23:c0:65:79:41:d4:b8:57:2c:08:32: 11:02:87:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMZXS93e81vzZl+kfc9pJ4bwyUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1 MTMwRDUzMDAeFw0yNjAzMDEyMTE3MzdaFw0yNjAzMDUwNDU0MzdaMDMxMTAvBgNV BAMTKEQ0ODdBRTIzODQ1MjQ3MzQ2RjRBOTdCMTZDQkM1MUI3NDdBRjZDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDETo318wbdOrnBnQXKNvJkMue+ lJoTKOVnRsxqJrzFMppMKM7NdGwklw+IGec/5wn4WunyM+nPdeGxaa6sjvOCoI2Y qEIccxPRmhFIP04YjIGQvAT4+a20upREz4S7/dO9zvp3/h2bmIS112maLTRdzsAz gvVVW/Li+dnI9gfi/CvJHeZQUEHqFuQdToj5LtzXZrOiP79zEjovSIze16W4g+Cl D88Nsib/kFy4+Ass/qP6kGB0X+LxK4SSuf7TyiOYk5ePdTz9HrSGka9z+/MIq37l TJ7Hnwh75PHmL/3Hk+3jSpvGRvHUs2B0POl3LwqpcsrpqYsL3TqnhRhmSzBRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1IeuI4RSRzRvSpexbLxRt0evbDEwHwYDVR0j BBgwFoAUP/X5PNqy9ma5Y8QbuD7T41Ew1TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzgzZWQyOC01ODgxLTQ3ZGEtYWU2Ni1lMWRiNjc5NDJlYjEvMC8zRkY1RjkzQ0RB QjJGNjY2Qjk2M0M0MUJCODNFRDNFMzUxMzBENTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1MTMw RDUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc4M2VkMjgtNTg4MS00N2RhLWFl NjYtZTFkYjY3OTQyZWIxLzAvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQz RTM1MTMwRDUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAK5dKOC45wKwe2vUd7cVCkCLPS0EB/IbPKd /77a73CNRPM0MCKAdyqeuALh5paH6ngKO5FdtQGj/lBl384G3xfFUMrWQiXpRVKh pxMNUmGQO2zdw2Noa4hjlyr864GfIml8f45es3fG9MHiOHXNxGCujt8orKzNMs5h ufgL4vakOnJB2RbK/enqw1lIzMtb4+oQIhvvm1PNb4ozPy4OZEbXLmQ/ziLV11+f Ml3+yOOHVGyQj5/AFAaERs9wtn2LjTeb2JsOIFHbwt4D6bOS7Pj6+aZncn0PdGPV jhkoUYYIY5Cem2gVs0YsFxt5vXRxlIsjwGV5QdS4VywIMhECh6g= -----END CERTIFICATE-----Generated at Mon Mar 2 13:23:56 2026 by rpki-client