$ rpki-client -vvf repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft File: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft (raw, json) Hash identifier: NmmtipZbC6+frHoU2xySuQG2+zjXnc0zr5V3Sz3FI24= Subject key identifier: F9:7E:55:09:BC:8B:F0:E5:3E:9B:F0:55:0C:87:CB:A4:A5:E2:98:1B Authority key identifier: 34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB Certificate issuer: /CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Certificate serial: 3965A459DCE6D8431A3536DBAD16F05112EED4C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft Manifest number: 024E Signing time: Sat 28 Feb 2026 18:11:07 +0000 Manifest this update: Sat 28 Feb 2026 18:06:07 +0000 Manifest next update: Wed 04 Mar 2026 03:17:07 +0000 Files and hashes: 1: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: 5ODCvpJsl+XnXZcZjU6a9g5frNriLFm4lEWGxVY15JQ=) 2: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl (hash: Q6hKHyuL1iwwG4nADCOCyzE9S2mwic2sokx981ea7vI=) 3: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: YfWdCVoIH1DQu9Nb8zknsBq3gjAx6STdl7+GflAiVVY=) 4: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: 6pWVSpFXVKH6EqJrCt3rmPa2Bj+n9pO/wL1SNQ2qvtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 03:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:65:a4:59:dc:e6:d8:43:1a:35:36:db:ad:16:f0:51:12:ee:d4:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Validity Not Before: Feb 28 18:06:07 2026 GMT Not After : Mar 4 03:17:07 2026 GMT Subject: CN=F97E5509BC8BF0E53E9BF0550C87CBA4A5E2981B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:c5:c9:97:65:bd:5d:ee:f6:b7:98:a5:75: 3a:a1:4a:06:a6:58:fd:a7:c8:31:99:60:de:05:53: 74:ed:97:8d:ef:91:05:85:c5:c3:d9:c2:f4:02:2d: d7:16:63:e5:e3:00:ad:e9:c1:c0:b4:2b:5e:73:d9: 05:5c:ef:db:28:a7:11:94:b1:81:62:5e:18:96:e0: 5f:01:84:90:8b:6e:f7:03:e1:a9:30:38:e9:76:c3: bc:25:c4:38:72:e1:ee:da:c3:ca:94:a8:95:95:93: 35:ee:94:5e:df:f0:8d:06:e1:1e:43:fe:b0:25:b3: 57:6c:f0:90:2a:bb:e7:a1:a0:8c:32:af:3b:17:e8: b8:ec:cc:b2:e0:b0:67:c7:3c:97:32:03:60:70:f6: 2b:5d:df:63:db:b9:0e:4d:f6:32:85:28:c7:b2:ed: e1:9b:c0:bd:13:73:5f:81:21:ba:33:fc:a1:9c:d7: f1:02:b4:7e:7a:5a:44:72:39:39:eb:a2:ba:cd:10: cb:4e:c3:db:dc:e2:a0:61:9d:b7:c0:46:69:a5:8a: 63:08:f0:fb:55:ff:94:b3:54:29:c2:27:60:05:86: 79:b5:af:04:f6:7d:74:62:12:68:fe:af:53:87:d0: 1a:7d:f5:53:84:c0:98:8d:a4:e8:af:47:eb:32:5a: 7e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7E:55:09:BC:8B:F0:E5:3E:9B:F0:55:0C:87:CB:A4:A5:E2:98:1B X509v3 Authority Key Identifier: keyid:34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e9:27:17:69:79:c7:84:88:bd:94:f0:6f:41:9c:ae:44:9e: 67:7f:dc:0e:62:15:e4:ed:ae:a4:93:16:11:73:fb:53:05:08: 0d:0f:21:51:0e:a1:49:b9:06:75:ee:f9:9a:ba:73:9c:b6:a9: 06:03:b5:b1:5b:6c:b5:78:6b:33:b2:52:2e:c2:bd:09:e8:76: ad:4e:aa:40:64:fb:f6:54:3a:25:8a:f9:7d:f2:d3:18:bd:04: a8:f1:31:ff:b4:53:c9:1f:47:a5:49:ed:f5:1c:0b:97:0e:3e: c1:74:75:3f:05:ba:92:a5:60:7f:d5:47:77:c6:39:5a:b4:f6: ac:51:d6:a3:8f:61:f4:dd:5a:42:ce:1c:55:8f:04:17:e5:08: 98:66:df:a2:5c:75:81:44:d2:10:74:db:20:33:7d:59:8b:11: d4:66:a2:a1:92:af:74:1e:2c:51:68:be:55:4e:fb:0d:32:63: 25:6f:0e:55:74:6f:43:fe:98:53:b3:d8:91:eb:2b:c5:21:8c: c0:4e:b2:be:93:4f:64:c6:0b:cf:8e:cd:f9:f3:60:1e:79:43: 07:d3:f8:bd:47:68:37:a3:34:6d:1b:5a:34:0d:01:3e:b4:7b: fc:d5:e7:df:29:a6:a1:82:11:af:62:30:fb:95:28:b7:b8:fe: d6:8a:6d:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOWWkWdzm2EMaNTbbrRbwURLu1McwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZC QTBCMzlCQjAeFw0yNjAyMjgxODA2MDdaFw0yNjAzMDQwMzE3MDdaMDMxMTAvBgNV BAMTKEY5N0U1NTA5QkM4QkYwRTUzRTlCRjA1NTBDODdDQkE0QTVFMjk4MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgYMXJl2W9Xe72t5ildTqhSgam WP2nyDGZYN4FU3Ttl43vkQWFxcPZwvQCLdcWY+XjAK3pwcC0K15z2QVc79sopxGU sYFiXhiW4F8BhJCLbvcD4akwOOl2w7wlxDhy4e7aw8qUqJWVkzXulF7f8I0G4R5D /rAls1ds8JAqu+ehoIwyrzsX6LjszLLgsGfHPJcyA2Bw9itd32PbuQ5N9jKFKMey 7eGbwL0Tc1+BIboz/KGc1/ECtH56WkRyOTnrorrNEMtOw9vc4qBhnbfARmmlimMI 8PtV/5SzVCnCJ2AFhnm1rwT2fXRiEmj+r1OH0Bp99VOEwJiNpOivR+syWn4fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+X5VCbyL8OU+m/BVDIfLpKXimBswHwYDVR0j BBgwFoAUNEjITd/5uZEtnRdJP+vbn7oLObswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjI5Y2E1MC1lOTVjLTQ1YmItOWMzMC02M2UxMmFmN2E1ZTEvMC8zNDQ4Qzg0RERG RjlCOTkxMkQ5RDE3NDkzRkVCREI5RkJBMEIzOUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZCQTBC MzlCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj MzAtNjNlMTJhZjdhNWUxLzAvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRC OUZCQTBCMzlCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrpJxdpeceEiL2U8G9BnK5Enmd/3A5iFeTt rqSTFhFz+1MFCA0PIVEOoUm5BnXu+Zq6c5y2qQYDtbFbbLV4azOyUi7CvQnodq1O qkBk+/ZUOiWK+X3y0xi9BKjxMf+0U8kfR6VJ7fUcC5cOPsF0dT8FupKlYH/VR3fG OVq09qxR1qOPYfTdWkLOHFWPBBflCJhm36JcdYFE0hB02yAzfVmLEdRmoqGSr3Qe LFFovlVO+w0yYyVvDlV0b0P+mFOz2JHrK8UhjMBOsr6TT2TGC8+OzfnzYB55QwfT +L1HaDejNG0bWjQNAT60e/zV598ppqGCEa9iMPuVKLe4/taKbWE= -----END CERTIFICATE-----Generated at Mon Mar 2 02:21:09 2026 by rpki-client