$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft File: 3B1029D44B93CA0397DA506FE1E2147503641EC6.mft (raw, json) Hash identifier: 2cc8cgP3+yFxM+vkYssmVICqhjlzMsspGuAY+UvhD9Y= Subject key identifier: C7:E3:F3:D7:E5:B2:55:A1:C8:B2:67:A1:5F:71:AC:08:96:1A:AC:FC Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 Certificate issuer: /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Certificate serial: 41661DD485B5ED9652A9C2AFE565042DD0AD6CE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft Manifest number: 01F0 Signing time: Sun 01 Mar 2026 20:10:50 +0000 Manifest this update: Sun 01 Mar 2026 20:05:50 +0000 Manifest next update: Wed 04 Mar 2026 22:03:50 +0000 Files and hashes: 1: 3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa (hash: qKimyHaQNdX3m0DVQDydLkKY11suW3jDJ+qURPZrcJA=) 2: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (hash: /Fhxy2YkZ3i/kGpUap0g80MdqacR/7CVzqXxyBvq/j8=) 3: 3B1029D44B93CA0397DA506FE1E2147503641EC6.crl (hash: ZceJMotdUC0Cg7g4/QUBRyRkTGoQTvlX9I8HD5edPn0=) 4: 3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa (hash: qj7cnLHXdzh3RQf7tTOLzRFTMV5gpaSe50w+x59MCNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:66:1d:d4:85:b5:ed:96:52:a9:c2:af:e5:65:04:2d:d0:ad:6c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Validity Not Before: Mar 1 20:05:50 2026 GMT Not After : Mar 4 22:03:50 2026 GMT Subject: CN=C7E3F3D7E5B255A1C8B267A15F71AC08961AACFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5d:33:cb:aa:45:7b:a9:8e:56:a1:4c:a2:36: e5:7e:d9:c5:15:4f:6f:bb:01:36:4f:d2:d6:8e:16: a7:80:1d:29:22:4e:a8:e0:b3:cf:f1:01:d4:95:ce: 08:0b:be:f5:0e:85:3d:bc:0b:8c:7a:6c:80:87:a3: e6:3b:5b:19:81:59:8b:7e:e0:a0:e3:e2:38:89:7a: 5d:16:87:d1:8e:6e:d3:29:e6:05:e2:c0:a3:51:c7: 41:36:a5:de:64:b3:7a:b6:c8:08:ad:25:03:81:6a: dd:b0:8f:e9:af:9c:46:c3:d0:c1:2f:99:8f:9d:b0: 72:6b:27:89:a8:b6:6d:a7:b2:c0:88:4e:7f:d8:00: d3:9a:37:f5:e1:2f:09:bf:88:27:93:4a:1f:d8:ea: c0:8e:1f:8d:6f:30:09:3a:47:99:3d:bd:45:de:ee: a3:05:27:e8:ed:9f:d1:61:ec:4a:50:8e:ca:82:9d: 6b:cc:54:03:63:f6:6f:cb:29:49:b7:f4:af:e3:2c: e1:6f:49:a4:db:13:94:79:cb:6e:45:4b:c0:1c:21: c1:85:06:1e:91:17:be:a2:f8:14:e9:a7:7c:78:a5: ed:2f:4c:f0:96:7c:44:12:fa:8a:a8:c6:53:a5:e9: a9:20:03:f0:cb:50:4d:d3:22:77:52:b5:22:22:67: b5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E3:F3:D7:E5:B2:55:A1:C8:B2:67:A1:5F:71:AC:08:96:1A:AC:FC X509v3 Authority Key Identifier: keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:18:f4:62:87:58:bc:ee:1e:5c:a7:0a:21:13:a0:a3:fb:e7: ac:15:e7:01:ec:52:84:54:b1:67:08:9e:f7:de:49:5b:7d:75: f5:ae:5b:03:a7:14:64:90:28:3f:4f:58:f9:c1:ce:ee:6e:32: 69:56:17:b4:d4:99:01:27:f5:62:e5:34:27:92:0b:10:32:d1: c8:b6:7a:7b:47:18:a9:2c:0d:7c:43:fe:ac:17:70:54:9f:c5: 29:e8:13:c8:18:19:7c:b5:82:f6:07:cd:af:e5:57:ee:bc:ad: 78:51:bd:4a:6e:91:d9:68:c3:7c:c7:95:03:ce:ac:3a:a2:ac: c6:8c:da:a4:12:9c:6f:8b:7a:ab:c7:8b:fd:ce:8f:08:4d:e2: 52:25:cb:3d:18:4f:8b:b8:c7:d5:35:b5:ac:89:be:16:41:25: 65:9f:b5:6b:78:d3:90:24:35:38:1e:d3:7e:1b:9b:aa:77:a1: 7c:64:32:56:a9:b4:70:33:e4:58:b3:5c:6b:ae:be:56:83:7c: 02:b8:b4:d1:00:b9:90:49:22:c3:b8:84:48:d0:8e:b9:01:a4: ab:50:6a:b8:7f:95:92:f0:65:f3:5d:ad:9d:ab:b4:7a:8e:16: aa:65:55:30:3a:fa:a9:15:f2:20:8b:a8:6a:a0:6d:6d:43:e9: c2:b4:5e:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQWYd1IW17ZZSqcKv5WUELdCtbOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUw MzY0MUVDNjAeFw0yNjAzMDEyMDA1NTBaFw0yNjAzMDQyMjAzNTBaMDMxMTAvBgNV BAMTKEM3RTNGM0Q3RTVCMjU1QTFDOEIyNjdBMTVGNzFBQzA4OTYxQUFDRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXTPLqkV7qY5WoUyiNuV+2cUV T2+7ATZP0taOFqeAHSkiTqjgs8/xAdSVzggLvvUOhT28C4x6bICHo+Y7WxmBWYt+ 4KDj4jiJel0Wh9GObtMp5gXiwKNRx0E2pd5ks3q2yAitJQOBat2wj+mvnEbD0MEv mY+dsHJrJ4motm2nssCITn/YANOaN/XhLwm/iCeTSh/Y6sCOH41vMAk6R5k9vUXe 7qMFJ+jtn9Fh7EpQjsqCnWvMVANj9m/LKUm39K/jLOFvSaTbE5R5y25FS8AcIcGF Bh6RF76i+BTpp3x4pe0vTPCWfEQS+oqoxlOl6akgA/DLUE3TIndStSIiZ7WLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx+Pz1+WyVaHIsmehX3GsCJYarPwwHwYDVR0j BBgwFoAUOxAp1EuTygOX2lBv4eIUdQNkHsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzBkNDBiYy05M2M4LTQxNWItYjZhOC1hZWYwODhkN2Y0ZDQvMC8zQjEwMjlENDRC OTNDQTAzOTdEQTUwNkZFMUUyMTQ3NTAzNjQxRUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUwMzY0 MUVDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwZDQwYmMtOTNjOC00MTViLWI2 YTgtYWVmMDg4ZDdmNGQ0LzAvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0 NzUwMzY0MUVDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0Y9GKHWLzuHlynCiEToKP756wV5wHsUoRU sWcInvfeSVt9dfWuWwOnFGSQKD9PWPnBzu5uMmlWF7TUmQEn9WLlNCeSCxAy0ci2 entHGKksDXxD/qwXcFSfxSnoE8gYGXy1gvYHza/lV+68rXhRvUpukdlow3zHlQPO rDqirMaM2qQSnG+LeqvHi/3OjwhN4lIlyz0YT4u4x9U1tayJvhZBJWWftWt405Ak NTge034bm6p3oXxkMlaptHAz5FizXGuuvlaDfAK4tNEAuZBJIsO4hEjQjrkBpKtQ arh/lZLwZfNdrZ2rtHqOFqplVTA6+qkV8iCLqGqgbW1D6cK0Xk8= -----END CERTIFICATE-----Generated at Mon Mar 2 06:41:23 2026 by rpki-client