$ rpki-client -vvf repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft File: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft (raw, json) Hash identifier: CiHryzsXJ69a07Sz8TSP6GmtpR1Bkbx7WFlLTOb70YE= Subject key identifier: 3E:D6:60:08:EC:97:0F:86:79:2C:48:CE:FA:D9:5E:20:79:03:D0:54 Authority key identifier: 33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 Certificate issuer: /CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Certificate serial: 78AB9052A214383EBFDB3BACE4125FDB29C06DE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft Manifest number: 0249 Signing time: Sat 28 Feb 2026 10:30:06 +0000 Manifest this update: Sat 28 Feb 2026 10:25:06 +0000 Manifest next update: Tue 03 Mar 2026 18:29:06 +0000 Files and hashes: 1: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: wUN0Izu+1jvS2QJEMcI/REBlf+WT4oRYhW3TrlPnH1I=) 2: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl (hash: jICsJFaMwVt9/JbP8jn+ZRGi9xGvwSFdP5y2jj7eGL8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ab:90:52:a2:14:38:3e:bf:db:3b:ac:e4:12:5f:db:29:c0:6d:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Validity Not Before: Feb 28 10:25:06 2026 GMT Not After : Mar 3 18:29:06 2026 GMT Subject: CN=3ED66008EC970F86792C48CEFAD95E207903D054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bc:08:08:f4:d7:56:b2:cc:11:73:aa:8a:51: b2:82:92:d1:b3:02:92:20:91:1b:97:84:2b:0e:08: 83:5c:64:a4:af:3d:35:66:d6:50:37:f1:ac:d7:bc: 78:45:48:57:ca:cd:ed:2c:1e:ac:9d:d8:2c:1f:5f: 91:4b:04:39:fa:74:26:e9:74:5d:10:f5:c4:0f:96: 75:b6:49:6c:33:6e:80:e8:a0:9a:c6:db:19:d0:09: d8:64:f3:56:36:31:ab:1f:aa:d7:55:05:97:ae:90: 25:8c:a7:50:b6:ea:47:6c:d3:9b:c5:42:5a:ea:59: b2:8a:d2:78:36:01:9a:f2:48:97:80:28:b0:81:d5: 01:a6:b0:5a:eb:e0:15:d2:9c:b9:fa:5d:aa:8a:b7: 70:d9:f0:3d:41:4d:06:61:c9:9e:3c:18:98:73:be: a6:eb:a5:58:81:a9:51:27:1d:f6:90:06:d3:4d:6a: 4a:bb:8d:6f:bb:23:5d:b7:94:82:39:3d:cf:79:39: 13:a6:02:b8:57:7e:6c:20:af:dc:f3:d9:b1:95:6a: dd:c4:95:bb:85:c4:7d:8b:85:5e:6b:31:a7:48:2e: 96:1c:3a:a0:fe:d4:50:a8:91:bc:26:45:7e:21:b1: 42:f1:58:c1:e4:db:6f:60:83:ed:50:6c:2a:23:ec: bd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D6:60:08:EC:97:0F:86:79:2C:48:CE:FA:D9:5E:20:79:03:D0:54 X509v3 Authority Key Identifier: keyid:33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:6c:36:cd:00:47:d3:5c:b8:c8:a1:a9:b7:1c:2f:27:06:4e: 44:02:ff:0b:10:1e:72:d4:f7:61:28:51:28:8d:52:e7:44:c2: 3c:26:79:c6:fe:ba:fe:aa:c4:d6:e5:8e:56:5e:24:00:20:87: 00:70:47:7c:8d:4c:72:c6:d9:43:35:a7:0d:74:75:41:46:fa: c5:0b:d5:cd:03:4e:81:4b:96:64:cd:bc:57:48:aa:08:ec:9e: ef:0d:c7:74:ac:36:37:43:21:c2:81:80:3e:fa:b9:1f:05:88: 45:f4:06:7e:a8:db:e4:09:74:b3:d2:7b:2c:c0:18:f2:0d:36: 3a:a6:a6:0a:ee:74:b3:8a:a3:af:8a:9d:11:15:ff:bc:61:08: bf:9a:50:7f:55:52:d2:c3:70:fa:94:c9:ee:88:85:a7:e7:98: 21:0e:e7:a6:04:05:78:77:a7:61:36:53:3a:98:a5:c9:95:db: 58:91:96:22:ce:f8:1f:d9:b6:6e:12:3f:92:17:5d:59:1b:60: d1:a7:4e:a3:ee:39:f0:b2:47:9b:dc:cb:e4:12:ea:9a:ae:63: 20:98:5a:73:e1:27:58:a6:e6:bf:ad:95:c9:3d:56:8f:da:b5: 5f:ee:50:a9:38:e5:71:2b:3a:53:d8:0d:ac:0a:5a:47:70:da: c4:e5:ac:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeKuQUqIUOD6/2zus5BJf2ynAbecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJC NDZCRkQ1MTAeFw0yNjAyMjgxMDI1MDZaFw0yNjAzMDMxODI5MDZaMDMxMTAvBgNV BAMTKDNFRDY2MDA4RUM5NzBGODY3OTJDNDhDRUZBRDk1RTIwNzkwM0QwNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFvAgI9NdWsswRc6qKUbKCktGz ApIgkRuXhCsOCINcZKSvPTVm1lA38azXvHhFSFfKze0sHqyd2CwfX5FLBDn6dCbp dF0Q9cQPlnW2SWwzboDooJrG2xnQCdhk81Y2MasfqtdVBZeukCWMp1C26kds05vF QlrqWbKK0ng2AZrySJeAKLCB1QGmsFrr4BXSnLn6XaqKt3DZ8D1BTQZhyZ48GJhz vqbrpViBqVEnHfaQBtNNakq7jW+7I123lII5Pc95OROmArhXfmwgr9zz2bGVat3E lbuFxH2LhV5rMadILpYcOqD+1FCokbwmRX4hsULxWMHk229gg+1QbCoj7L1RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPtZgCOyXD4Z5LEjO+tleIHkD0FQwHwYDVR0j BBgwFoAUM2bNVXO7SxFpTbzw8VAs4rRr/VEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2EyNmJmYi02NzVmLTQ0NGYtOTBjOS01ZDNhOWIxOGMzNGMvMC8zMzY2Q0Q1NTcz QkI0QjExNjk0REJDRjBGMTUwMkNFMkI0NkJGRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJCNDZC RkQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNhMjZiZmItNjc1Zi00NDRmLTkw YzktNWQzYTliMThjMzRjLzAvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJD RTJCNDZCRkQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlsNs0AR9NcuMihqbccLycGTkQC/wsQHnLU 92EoUSiNUudEwjwmecb+uv6qxNbljlZeJAAghwBwR3yNTHLG2UM1pw10dUFG+sUL 1c0DToFLlmTNvFdIqgjsnu8Nx3SsNjdDIcKBgD76uR8FiEX0Bn6o2+QJdLPSeyzA GPINNjqmpgrudLOKo6+KnREV/7xhCL+aUH9VUtLDcPqUye6IhafnmCEO56YEBXh3 p2E2UzqYpcmV21iRliLO+B/Ztm4SP5IXXVkbYNGnTqPuOfCyR5vcy+QS6pquYyCY WnPhJ1im5r+tlck9Vo/atV/uUKk45XErOlPYDawKWkdw2sTlrPo= -----END CERTIFICATE-----Generated at Mon Mar 2 02:54:01 2026 by rpki-client