$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft (raw, json) Hash identifier: TwoT05fFlL2IE3xRUDq4B7r+5fEMgJlNZATd+OWt6TE= Subject key identifier: EA:DD:1B:D9:21:EA:B4:F4:3F:1A:34:B7:81:6E:96:82:2E:88:34:2E Authority key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Certificate issuer: /CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Certificate serial: 1CD86722336664B2A71BF70214C0E9D7976FF246 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft Manifest number: 01CF Signing time: Sat 28 Feb 2026 21:12:35 +0000 Manifest this update: Sat 28 Feb 2026 21:07:35 +0000 Manifest next update: Tue 03 Mar 2026 22:35:35 +0000 Files and hashes: 1: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl (hash: IzC7R+pfXq9I6lN+bKPu1eylSH+KH66qsLbPmrIZ+Js=) 2: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: ICnoqiEwX4K5+bPW5k+TuCD6FcA6NPx7U34EDJ/BnWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d8:67:22:33:66:64:b2:a7:1b:f7:02:14:c0:e9:d7:97:6f:f2:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Validity Not Before: Feb 28 21:07:35 2026 GMT Not After : Mar 3 22:35:35 2026 GMT Subject: CN=EADD1BD921EAB4F43F1A34B7816E96822E88342E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:24:e2:17:67:de:7c:d2:6b:86:e3:e9:9f:3c: 7a:54:70:11:70:60:9d:96:12:f5:dd:1b:86:61:10: 3d:10:1a:2f:1b:60:27:1a:c7:c1:37:a2:28:a1:a1: 5f:4c:6f:29:3d:76:74:a9:ae:b4:f1:b0:ac:1b:ba: e4:96:48:a9:a2:19:48:84:64:9e:28:5c:2f:d5:3c: 52:c9:3a:1c:92:e9:d3:b9:0c:27:b5:65:d3:27:2b: 3c:eb:7c:fb:6f:1d:31:0c:28:b4:92:55:f3:29:8b: e7:41:91:74:1f:0e:65:89:5a:06:87:f4:71:fb:66: d8:a4:18:02:fe:50:ee:a2:91:5e:fd:49:78:76:3b: 30:2e:ec:d8:98:6f:09:e4:53:59:ad:77:5f:a2:19: 9b:eb:dd:ec:76:ff:b4:9d:a3:e0:28:61:74:66:41: 99:47:3e:67:65:0e:14:c3:4e:6a:4c:29:23:e6:69: dd:24:15:82:b5:24:b8:dd:e2:42:46:9e:37:7f:6a: 87:88:2b:71:2e:4e:b6:51:7e:65:c0:1e:b1:47:29: 58:0a:12:2c:fb:2f:a6:6b:cc:37:1a:8a:da:10:2b: b6:6c:7e:ed:fc:d5:0e:51:be:77:ed:2a:68:07:6f: a2:31:5e:fd:44:fc:c0:ba:aa:48:4b:96:3b:16:18: 02:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DD:1B:D9:21:EA:B4:F4:3F:1A:34:B7:81:6E:96:82:2E:88:34:2E X509v3 Authority Key Identifier: keyid:3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:16:b1:07:dd:4e:f0:fa:e3:fb:2e:24:70:6f:43:7c:ec:fd: 36:76:4c:64:a0:bb:58:e3:0c:21:3f:44:ef:56:81:8e:6b:3d: af:5f:c0:85:bb:f5:e5:55:de:a1:da:d6:7a:8b:32:c2:d2:e9: 07:36:25:a8:97:fe:11:13:b2:f6:34:06:68:de:d4:ac:69:84: e7:86:60:f8:da:e4:2a:b2:08:5a:88:9d:71:d0:9c:2d:f3:5e: f8:9d:eb:c5:07:f3:53:a2:57:f3:95:b4:3c:64:cd:58:b9:e3: 49:66:97:a8:cc:b3:d7:06:3e:82:da:a7:56:45:16:ac:24:0c: 12:ca:cd:71:08:02:be:6b:e7:25:e0:56:75:46:70:d4:33:01: ee:dc:51:82:b7:ad:b0:b8:36:42:2c:c4:04:99:d0:e3:ec:34: 32:9a:e2:30:48:3c:4e:26:25:b9:ff:82:4d:d1:6e:46:6e:f0: 4c:7c:0d:f0:90:42:ee:7e:d4:a3:a9:18:69:ab:e8:f7:f3:9c: a1:c8:3d:7e:e5:3e:28:1f:15:66:7a:2e:b7:d4:7a:93:84:63: b8:7d:ef:e1:72:e7:8a:7e:71:68:2b:ca:b0:73:6f:a6:1a:1a: 22:fa:ca:bf:24:fd:98:a9:05:fb:58:a0:b6:59:51:e3:91:f3: 7c:5c:9d:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHNhnIjNmZLKnG/cCFMDp15dv8kYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0 NzIxREI0NzAeFw0yNjAyMjgyMTA3MzVaFw0yNjAzMDMyMjM1MzVaMDMxMTAvBgNV BAMTKEVBREQxQkQ5MjFFQUI0RjQzRjFBMzRCNzgxNkU5NjgyMkU4ODM0MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLJOIXZ9580muG4+mfPHpUcBFw YJ2WEvXdG4ZhED0QGi8bYCcax8E3oiihoV9Mbyk9dnSprrTxsKwbuuSWSKmiGUiE ZJ4oXC/VPFLJOhyS6dO5DCe1ZdMnKzzrfPtvHTEMKLSSVfMpi+dBkXQfDmWJWgaH 9HH7ZtikGAL+UO6ikV79SXh2OzAu7NiYbwnkU1mtd1+iGZvr3ex2/7Sdo+AoYXRm QZlHPmdlDhTDTmpMKSPmad0kFYK1JLjd4kJGnjd/aoeIK3EuTrZRfmXAHrFHKVgK Eiz7L6ZrzDcaitoQK7Zsfu381Q5RvnftKmgHb6IxXv1E/MC6qkhLljsWGAIBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6t0b2SHqtPQ/GjS3gW6Wgi6INC4wHwYDVR0j BBgwFoAUOgnPMuxPbVxP0sg3oRdO00ch20cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMC8zQTA5Q0YzMkVD NEY2RDVDNEZEMkM4MzdBMTE3NEVEMzQ3MjFEQjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0NzIx REI0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDllZTIwOWEtMTE5My00ZDZmLTlk YmUtODc3N2JiODk4MGFhLzAvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRF RDM0NzIxREI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoWsQfdTvD64/suJHBvQ3zs/TZ2TGSgu1jj DCE/RO9WgY5rPa9fwIW79eVV3qHa1nqLMsLS6Qc2JaiX/hETsvY0Bmje1KxphOeG YPja5CqyCFqInXHQnC3zXvid68UH81OiV/OVtDxkzVi540lml6jMs9cGPoLap1ZF FqwkDBLKzXEIAr5r5yXgVnVGcNQzAe7cUYK3rbC4NkIsxASZ0OPsNDKa4jBIPE4m Jbn/gk3RbkZu8Ex8DfCQQu5+1KOpGGmr6PfznKHIPX7lPigfFWZ6LrfUepOEY7h9 7+Fy54p+cWgryrBzb6YaGiL6yr8k/ZipBftYoLZZUeOR83xcnd4= -----END CERTIFICATE-----Generated at Mon Mar 2 02:06:56 2026 by rpki-client