$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft File: 3FFB3838E6BD431731306308CFEC299A86723365.mft (raw, json) Hash identifier: zn+q3qE7g7Ik2pj4EAoYx7Vo/dXw+udInCYX8e9m1RM= Subject key identifier: B8:DB:78:10:30:AC:28:5B:85:88:A7:03:1B:89:4F:22:5C:21:89:05 Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365 Certificate serial: 426FE7EBFD19334B26D6831A9490D54AE8473891 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft Manifest number: 01E3 Signing time: Sat 28 Feb 2026 09:51:41 +0000 Manifest this update: Sat 28 Feb 2026 09:46:41 +0000 Manifest next update: Tue 03 Mar 2026 19:42:41 +0000 Files and hashes: 1: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: V1qL9KpXi+aM0YLlOgcpxWGtKpt9u3OXh+uh8SzOfxo=) 2: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: CV24SqbvkbSixkw/z0Fm5hevRc2j9on8+yOAVNVWp6c=) 3: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: gDJkwQ9gyZKkFYwdRFTy7wrHGMBa5YbgBo4hYHB8PGU=) 4: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: In7/y6k0tKU1onXjk4QJUAhlh710hxTg1r3tOp5IDjs=) 5: 3FFB3838E6BD431731306308CFEC299A86723365.crl (hash: wE5BtOR93AUeGztRWeWhckNxPpqQsnMfZYzjhy+UW/k=) 6: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: 89uLp70du3ndPcZNl1H5Nk2O6ZHn9JMvGjuVHTSWLsE=) 7: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: Fqn9pPcHWwZKysUIYt5AzoYTYKUkmk/oFAlI41zCFg0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 19:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6f:e7:eb:fd:19:33:4b:26:d6:83:1a:94:90:d5:4a:e8:47:38:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365 Validity Not Before: Feb 28 09:46:41 2026 GMT Not After : Mar 3 19:42:41 2026 GMT Subject: CN=B8DB781030AC285B8588A7031B894F225C218905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:79:22:06:e3:2e:a4:76:b2:9f:56:04:34:23: fe:7a:6a:76:6d:1f:7b:02:bd:99:05:d5:11:df:e8: 05:76:3d:8e:b8:eb:6a:b1:61:26:03:13:0a:10:c8: 34:a5:c1:0c:c7:98:01:43:a7:f9:db:2f:f4:57:95: 6e:d6:7c:88:ab:2d:80:b0:59:2b:58:d0:c9:bb:49: 99:5e:f2:34:0a:86:b5:f6:cc:08:7c:44:1a:2c:91: b9:e8:fb:cb:f7:e8:5a:fa:2d:3e:62:41:33:17:4e: c2:f5:f1:b6:f0:80:b9:e1:e6:70:7d:a6:01:a9:01: e4:08:5c:bf:27:8a:f7:a6:43:2a:87:ef:6b:d3:5c: d9:c8:f3:a6:bf:de:32:f8:08:7f:09:a6:94:87:8b: 7c:35:79:2d:ce:34:29:fc:bf:ee:b4:3c:90:01:a1: 2c:5a:a4:08:03:ed:49:fe:57:09:a1:3c:9b:eb:a2: f8:92:5c:37:cb:bd:48:11:a9:ef:6b:74:39:8f:4b: ac:73:1b:7f:a7:1a:b7:84:0e:b7:c7:24:5b:53:65: 13:6c:6a:7b:cf:60:87:ca:78:d1:7a:7a:d0:c5:15: 11:eb:9f:e6:e2:16:7e:2a:de:9d:a2:5a:c1:f2:88: dd:43:2d:08:ec:2e:57:cb:54:8f:0b:e0:a6:35:e4: ec:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DB:78:10:30:AC:28:5B:85:88:A7:03:1B:89:4F:22:5C:21:89:05 X509v3 Authority Key Identifier: keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:63:fa:87:85:dc:5e:14:39:39:7c:2a:06:fd:86:37:ef:d3: a4:18:b5:c0:fa:fc:88:52:17:55:f1:c6:6a:3f:aa:26:72:d0: 83:18:2f:ed:10:4c:a3:9f:18:45:29:90:c8:d6:50:fa:89:5a: d7:5e:18:91:96:a2:ab:c5:0a:d6:2a:83:a6:da:46:a9:89:75: f5:17:f8:9d:77:d0:33:a8:08:77:ee:86:91:6c:82:7e:80:1d: 1f:9c:1a:f8:f9:b7:5f:ee:71:d7:5e:41:0a:31:28:8b:73:ff: 73:d2:a6:34:12:f3:fd:74:a1:5c:f0:56:20:6d:76:ba:f4:4a: 6c:da:2b:a9:66:dc:6e:59:c1:4d:96:a1:fa:b1:aa:a0:1b:53: b1:fe:4f:40:6e:c6:36:44:e4:85:2e:a0:d4:c4:54:67:19:b5: 93:2f:67:f4:2b:2e:d0:9b:07:1d:fc:f4:cf:dd:f1:c2:cd:fd: 45:3c:fc:c5:4a:b8:eb:81:e9:37:24:cd:51:da:9c:3b:c7:44: f6:97:6f:1c:8d:56:6c:d4:b7:bd:9a:33:cc:ee:72:eb:1f:dd: a9:9d:db:37:fb:f2:f6:a0:91:8d:e1:5a:02:cf:2c:7a:84:df: 04:09:49:42:0c:49:9b:8f:e1:56:d3:b2:9b:c7:91:04:b5:ab: 03:7d:1f:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQm/n6/0ZM0sm1oMalJDVSuhHOJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4 NjcyMzM2NTAeFw0yNjAyMjgwOTQ2NDFaFw0yNjAzMDMxOTQyNDFaMDMxMTAvBgNV BAMTKEI4REI3ODEwMzBBQzI4NUI4NTg4QTcwMzFCODk0RjIyNUMyMTg5MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoeSIG4y6kdrKfVgQ0I/56anZt H3sCvZkF1RHf6AV2PY6462qxYSYDEwoQyDSlwQzHmAFDp/nbL/RXlW7WfIirLYCw WStY0Mm7SZle8jQKhrX2zAh8RBoskbno+8v36Fr6LT5iQTMXTsL18bbwgLnh5nB9 pgGpAeQIXL8nivemQyqH72vTXNnI86a/3jL4CH8JppSHi3w1eS3ONCn8v+60PJAB oSxapAgD7Un+VwmhPJvroviSXDfLvUgRqe9rdDmPS6xzG3+nGreEDrfHJFtTZRNs anvPYIfKeNF6etDFFRHrn+biFn4q3p2iWsHyiN1DLQjsLlfLVI8L4KY15Oy5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuNt4EDCsKFuFiKcDG4lPIlwhiQUwHwYDVR0j BBgwFoAUP/s4OOa9QxcxMGMIz+wpmoZyM2UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMC8zRkZCMzgzOEU2 QkQ0MzE3MzEzMDYzMDhDRkVDMjk5QTg2NzIzMzY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4Njcy MzM2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyNjFjMzctNTlhNS00MzY5LTkx ZTUtNGIxMzY2MDEwYzZkLzAvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5 OUE4NjcyMzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApj+oeF3F4UOTl8Kgb9hjfv06QYtcD6/IhS F1Xxxmo/qiZy0IMYL+0QTKOfGEUpkMjWUPqJWtdeGJGWoqvFCtYqg6baRqmJdfUX +J130DOoCHfuhpFsgn6AHR+cGvj5t1/ucddeQQoxKItz/3PSpjQS8/10oVzwViBt drr0SmzaK6lm3G5ZwU2WofqxqqAbU7H+T0BuxjZE5IUuoNTEVGcZtZMvZ/QrLtCb Bx389M/d8cLN/UU8/MVKuOuB6TckzVHanDvHRPaXbxyNVmzUt72aM8zucusf3amd 2zf78vagkY3hWgLPLHqE3wQJSUIMSZuP4VbTspvHkQS1qwN9H7w= -----END CERTIFICATE-----Generated at Mon Mar 2 16:56:30 2026 by rpki-client