$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft File: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft (raw, json) Hash identifier: 8JnJeU1QFM1ptL9zIHngPq4hjrlp9AKLot5Nkm4p4Og= Subject key identifier: 7E:E0:B4:DC:68:A7:BF:F8:41:40:E9:AC:40:DA:96:50:31:49:C0:D5 Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Certificate serial: 4D2C86CCDD778A10F831B26EB8C146D7185EAA20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft Manifest number: 03AC Signing time: Fri 27 Feb 2026 19:31:26 +0000 Manifest this update: Fri 27 Feb 2026 19:26:26 +0000 Manifest next update: Tue 03 Mar 2026 04:21:26 +0000 Files and hashes: 1: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: DS4rfXsOZAd6zyO+PWFbBzflwksjO/ECzvelckHR5dk=) 2: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl (hash: 6oTi8O5WnkP6W9nN1nimfNn8ue5tlphriMwmZLYpNP0=) 3: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5h5J8xW62JxvWusBPqO7t7BtPqu0f0FKKCSn5YoWmpk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2c:86:cc:dd:77:8a:10:f8:31:b2:6e:b8:c1:46:d7:18:5e:aa:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Validity Not Before: Feb 27 19:26:26 2026 GMT Not After : Mar 3 04:21:26 2026 GMT Subject: CN=7EE0B4DC68A7BFF84140E9AC40DA96503149C0D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7d:47:7f:df:de:0f:02:4b:22:55:f3:4f:08: 5f:64:94:00:f6:81:1a:07:14:e5:47:0f:e9:30:7e: cb:19:84:c5:a8:42:23:90:d8:fb:01:b8:6f:10:9c: 13:6a:fb:36:c9:a8:6e:cf:58:85:60:3c:20:12:6a: cb:d8:cf:5c:61:ba:81:a4:33:25:5e:de:84:14:60: d4:33:f8:49:9e:75:e9:0d:49:6a:cd:fa:ee:2e:bc: 3c:5e:67:0f:e7:3f:00:8c:ab:8e:56:a2:c4:99:92: 5a:60:7f:cf:31:1a:59:8b:db:30:09:a6:47:3c:af: f4:61:27:bf:ad:76:d0:42:f8:19:93:df:58:b1:b6: bd:35:56:75:3f:be:ba:c4:c9:ef:25:3e:25:eb:87: 47:ea:45:e5:b3:b0:54:0e:2c:df:7a:60:8d:62:4e: 90:e3:72:df:18:67:de:84:ac:d6:54:2d:1a:d2:3f: 21:d5:eb:1e:d2:41:41:ef:0e:4e:b7:92:40:79:4c: ca:b8:cb:69:f6:8e:df:b5:4a:2a:29:d6:d7:8b:b4: 11:cb:d3:0e:16:f2:42:68:8b:26:6d:4f:6c:10:bd: 20:6c:f9:45:49:43:ff:5d:fc:e8:76:f4:05:06:50: 66:51:de:09:e7:04:dc:98:44:ce:f0:5b:37:fc:b5: 92:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E0:B4:DC:68:A7:BF:F8:41:40:E9:AC:40:DA:96:50:31:49:C0:D5 X509v3 Authority Key Identifier: keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:70:d2:ef:e8:b8:d8:ea:40:b1:e7:0d:66:13:98:57:d3:8e: a6:c6:14:26:54:8b:e7:63:3b:b5:5c:dd:56:f7:e8:50:58:e1: ca:45:f2:e9:55:09:fd:b1:42:e5:2a:ba:23:9d:e1:db:f2:60: 4d:4b:3c:7c:34:50:3b:4d:b7:08:00:02:3b:b6:ee:29:d9:00: 7a:ae:21:89:53:b8:d0:51:de:d5:84:71:c2:b6:05:7a:e3:69: 2c:b3:90:31:df:57:0a:fd:f2:ae:43:bb:d1:c2:f8:9a:a3:6f: 26:e6:d4:09:ef:45:d1:4f:c1:6b:a2:6b:8b:25:8f:1a:11:1b: 46:05:cb:5a:fe:7c:59:57:ae:ed:e4:a2:7c:41:6b:b1:35:36: 39:ed:88:f7:1c:83:fc:b8:7f:b2:19:5f:ad:24:7f:d3:9a:6a: 76:c6:b7:39:7c:e8:0a:d8:ca:9f:7f:1c:89:fa:f4:34:0f:b7: 2b:69:d9:2a:fa:7a:84:48:ee:da:2e:be:aa:63:a5:e0:8b:4c: 6d:61:94:59:96:f1:3f:e9:93:13:8d:5f:2a:72:16:39:2f:74: 2d:ca:4b:d8:f1:5e:3d:da:6b:f1:0e:97:a6:86:fb:3f:d1:ec: 08:79:bf:d1:b0:50:b1:85:f9:ad:de:c4:64:7e:24:26:08:f3: b6:78:9d:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTSyGzN13ihD4MbJuuMFG1xheqiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZB MENCOUY4QjAeFw0yNjAyMjcxOTI2MjZaFw0yNjAzMDMwNDIxMjZaMDMxMTAvBgNV BAMTKDdFRTBCNERDNjhBN0JGRjg0MTQwRTlBQzQwREE5NjUwMzE0OUMwRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDafUd/394PAksiVfNPCF9klAD2 gRoHFOVHD+kwfssZhMWoQiOQ2PsBuG8QnBNq+zbJqG7PWIVgPCASasvYz1xhuoGk MyVe3oQUYNQz+EmedekNSWrN+u4uvDxeZw/nPwCMq45WosSZklpgf88xGlmL2zAJ pkc8r/RhJ7+tdtBC+BmT31ixtr01VnU/vrrEye8lPiXrh0fqReWzsFQOLN96YI1i TpDjct8YZ96ErNZULRrSPyHV6x7SQUHvDk63kkB5TMq4y2n2jt+1Siop1teLtBHL 0w4W8kJoiyZtT2wQvSBs+UVJQ/9d/Oh29AUGUGZR3gnnBNyYRM7wWzf8tZKFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfuC03Ginv/hBQOmsQNqWUDFJwNUwHwYDVR0j BBgwFoAUPJFI7yevXtNIE0L13vJaJqDLn4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YThmNjlmNy05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC8zQzkxNDhFRjI3 QUY1RUQzNDgxMzQyRjVERUYyNUEyNkEwQ0I5RjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZBMENC OUY4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVB MjZBMENCOUY4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZw0u/ouNjqQLHnDWYTmFfTjqbGFCZUi+dj O7Vc3Vb36FBY4cpF8ulVCf2xQuUquiOd4dvyYE1LPHw0UDtNtwgAAju27inZAHqu IYlTuNBR3tWEccK2BXrjaSyzkDHfVwr98q5Du9HC+Jqjbybm1AnvRdFPwWuia4sl jxoRG0YFy1r+fFlXru3konxBa7E1NjntiPccg/y4f7IZX60kf9OaanbGtzl86ArY yp9/HIn69DQPtytp2Sr6eoRI7touvqpjpeCLTG1hlFmW8T/pkxONXypyFjkvdC3K S9jxXj3aa/EOl6aG+z/R7Ah5v9GwULGF+a3exGR+JCYI87Z4nck= -----END CERTIFICATE-----Generated at Mon Mar 2 05:56:52 2026 by rpki-client