$ rpki-client -vvf repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft File: 3308A0FBD29F359AD61CAA389208E1D74CC28164.mft (raw, json) Hash identifier: 7ObxcqbkBoNE3ljMFilVO0b1jtaquNupMpYimewnuMg= Subject key identifier: 74:B3:0C:B0:DB:BD:00:D7:8B:A2:0F:76:1C:BE:EF:F8:4A:F4:58:1D Authority key identifier: 33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 Certificate issuer: /CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Certificate serial: 3916601DE6BFEA6CA649F3F5736165A3D84B66A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft Manifest number: 0134 Signing time: Mon 02 Mar 2026 08:52:34 +0000 Manifest this update: Mon 02 Mar 2026 08:47:34 +0000 Manifest next update: Thu 05 Mar 2026 20:29:34 +0000 Files and hashes: 1: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: jVBeyFMPWkiATlRCTVFrCw8EykcpuEgYVgn4T3UPT6M=) 2: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: cpQ+yGOPRMcycDguY5pOMH22P4g6dN/h+7VVRFd0gvs=) 3: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: EV9DFisiiygvSyZKF0tZ0Lxf1X12CCisGawptespLsI=) 4: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: azmIwktH3vpajsF8gQt8znOMbH0C7Vn9MDVUjZva6CY=) 5: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: db2ZBDbPQBZ+1fLhUcrVMNSFZdZMKLIQU1qfyXpKY5M=) 6: 3308A0FBD29F359AD61CAA389208E1D74CC28164.crl (hash: G6abv6Jw8hz9cShLvDKuWr7U6DIFzTjlebR4oRCMWBo=) 7: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: Hv2jdXQUlOnlnToQUuoVlZDHe+biYftXfxb3LM1GOc0=) 8: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: Csz/yUZ7Lzvn/nuu4THB9U+el9Pek+D7VdsMj61HX6w=) 9: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: ldyK2huQ95pUCINHnT0U5z7ALHHC4dFAFsmJktUnRJw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:16:60:1d:e6:bf:ea:6c:a6:49:f3:f5:73:61:65:a3:d8:4b:66:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Validity Not Before: Mar 2 08:47:34 2026 GMT Not After : Mar 5 20:29:34 2026 GMT Subject: CN=74B30CB0DBBD00D78BA20F761CBEEFF84AF4581D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0c:26:dc:4c:49:eb:cd:7d:d7:da:19:95:19: e8:ae:43:25:86:4a:80:43:a0:db:03:35:4c:55:2e: bf:12:8c:7e:f0:6f:6e:96:c4:2e:4f:66:df:e1:ae: 74:04:98:cb:0d:91:3f:b7:b0:c4:7a:7b:74:78:45: d0:b9:e0:ae:9d:04:02:d3:4a:2c:ca:57:07:7a:e6: 0b:29:fe:c0:00:1d:33:cd:38:fb:ed:6d:54:56:30: f5:31:39:e1:78:37:fb:3a:eb:d4:3c:3c:15:3a:ec: 65:fe:e3:a0:ec:d3:97:46:3c:cd:9d:90:66:29:15: 65:4c:4d:ca:b5:74:50:ac:47:f9:d0:90:9c:0e:d7: 26:e5:44:00:b0:98:2e:d9:55:4c:f0:13:52:69:ec: 87:cb:f9:58:16:28:af:f1:f2:7a:d3:4c:2c:93:4d: 9d:fa:55:56:4c:b5:de:4d:4e:05:9c:bf:e0:c3:31: c0:ca:24:37:da:83:8c:a1:15:86:ea:91:ec:a0:38: 52:b4:ca:3c:8c:5a:4d:4d:f2:b0:bf:42:0c:22:65: ec:7d:e7:94:e2:bd:2f:8c:6b:8d:88:10:b7:fb:60: a5:2c:8b:cb:95:9e:f9:92:6d:25:7c:4f:9c:4a:c1: 8f:7e:d5:eb:a8:6c:cd:c3:77:2b:a0:76:64:10:37: e2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B3:0C:B0:DB:BD:00:D7:8B:A2:0F:76:1C:BE:EF:F8:4A:F4:58:1D X509v3 Authority Key Identifier: keyid:33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:3f:82:03:71:3d:b6:34:3b:04:0a:78:c7:4f:e0:d3:8d:21: 87:5d:1f:b8:11:dc:ec:62:f0:fc:f1:71:1d:a1:9f:47:4d:7a: f4:b3:1d:cc:67:5e:25:b7:06:39:98:b1:94:f4:b9:1e:ed:b3: bf:ea:1f:f0:64:07:a0:26:27:9b:ac:50:5e:d1:2d:d0:f3:31: 93:22:19:ec:91:90:5c:b4:6a:bb:72:fe:4e:04:61:6f:57:e7: bb:a2:15:4b:e2:f3:5a:4e:fc:ad:68:be:d8:b3:f9:c7:44:66: 60:99:e0:25:06:b1:4e:40:7a:ad:7a:a3:63:b1:ce:0c:ce:11: 2d:36:af:8b:fe:1d:75:2b:ff:3e:af:ae:43:78:4e:f2:88:8e: 38:82:75:35:ed:75:9a:24:53:8a:de:76:50:dc:01:0e:64:2a: 70:a1:ff:ac:d8:b1:58:be:77:eb:27:01:b7:df:ef:a1:f9:a4: f9:c8:4c:02:b5:82:b1:7d:f3:40:bf:d5:2c:5d:ab:13:c7:c4: d6:1d:3e:70:58:35:d3:a6:23:9a:f9:3e:c8:04:0f:3f:9f:7e: 4e:a2:db:5e:71:46:e3:71:85:4a:1e:25:42:36:ea:15:dc:a1: 7f:3f:04:59:6c:13:7b:36:8a:3d:e5:93:b2:fc:b1:db:b0:c3: e1:9f:ac:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUORZgHea/6mymSfP1c2Flo9hLZqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0 Q0MyODE2NDAeFw0yNjAzMDIwODQ3MzRaFw0yNjAzMDUyMDI5MzRaMDMxMTAvBgNV BAMTKDc0QjMwQ0IwREJCRDAwRDc4QkEyMEY3NjFDQkVFRkY4NEFGNDU4MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwDCbcTEnrzX3X2hmVGeiuQyWG SoBDoNsDNUxVLr8SjH7wb26WxC5PZt/hrnQEmMsNkT+3sMR6e3R4RdC54K6dBALT SizKVwd65gsp/sAAHTPNOPvtbVRWMPUxOeF4N/s669Q8PBU67GX+46Ds05dGPM2d kGYpFWVMTcq1dFCsR/nQkJwO1yblRACwmC7ZVUzwE1Jp7IfL+VgWKK/x8nrTTCyT TZ36VVZMtd5NTgWcv+DDMcDKJDfag4yhFYbqkeygOFK0yjyMWk1N8rC/QgwiZex9 55TivS+Ma42IELf7YKUsi8uVnvmSbSV8T5xKwY9+1euobM3DdyugdmQQN+ILAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdLMMsNu9ANeLog92HL7v+Er0WB0wHwYDVR0j BBgwFoAUMwig+9KfNZrWHKo4kgjh10zCgWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTcyZGZiZS00Y2EwLTRhNDYtODAzNy00OTY4ZWQ5N2NhZGMvMC8zMzA4QTBGQkQy OUYzNTlBRDYxQ0FBMzg5MjA4RTFENzRDQzI4MTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0Q0My ODE2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUx RDc0Q0MyODE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQ/ggNxPbY0OwQKeMdP4NONIYddH7gR3Oxi 8PzxcR2hn0dNevSzHcxnXiW3BjmYsZT0uR7ts7/qH/BkB6AmJ5usUF7RLdDzMZMi GeyRkFy0arty/k4EYW9X57uiFUvi81pO/K1ovtiz+cdEZmCZ4CUGsU5Aeq16o2Ox zgzOES02r4v+HXUr/z6vrkN4TvKIjjiCdTXtdZokU4redlDcAQ5kKnCh/6zYsVi+ d+snAbff76H5pPnITAK1grF980C/1SxdqxPHxNYdPnBYNdOmI5r5PsgEDz+ffk6i 215xRuNxhUoeJUI26hXcoX8/BFlsE3s2ij3lk7L8sduww+GfrF0= -----END CERTIFICATE-----Generated at Mon Mar 2 18:30:23 2026 by rpki-client