$ rpki-client -vvf repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft File: 3008AF948C4742A525201F3FDA7EFB1800D52D64.mft (raw, json) Hash identifier: drYZmOT49IzXEohqZvDCfEhRIwxdF1PNA4K0XJM+alc= Subject key identifier: 74:47:71:68:93:36:21:D0:37:E0:4D:8B:BA:4E:2F:A0:25:C2:DF:81 Authority key identifier: 30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 Certificate issuer: /CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Certificate serial: 54316C87A6A54A7C32EEDEB8DE58B18A8D15DE6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft Manifest number: 0151 Signing time: Sat 28 Feb 2026 21:42:12 +0000 Manifest this update: Sat 28 Feb 2026 21:37:12 +0000 Manifest next update: Tue 03 Mar 2026 22:28:12 +0000 Files and hashes: 1: 3135372e31352e34372e302f32342d3234203d3e20313532333936.roa (hash: JBRMsmUAdYzb3+gwoPUcR31Beca7hRL3R3vmPms0eZM=) 2: 3135372e31352e34362e302f32342d3234203d3e20313532333936.roa (hash: tNNCYWCbEdiPKfhICvbEu1ERGWQQfGZS5vvTiRz7UTA=) 3: 3008AF948C4742A525201F3FDA7EFB1800D52D64.crl (hash: XzUKwXYIQkqfQAwxk9FmCyB3nvv+BxTUj7hcmTXeq7Y=) 4: 3135372e31352e34362e302f32332d3234203d3e20313532333936.roa (hash: 3+C7KNVLkkeXH4Q6aCfPacCb6QKO1RmfOhT9j4ffkS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:31:6c:87:a6:a5:4a:7c:32:ee:de:b8:de:58:b1:8a:8d:15:de:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Validity Not Before: Feb 28 21:37:12 2026 GMT Not After : Mar 3 22:28:12 2026 GMT Subject: CN=74477168933621D037E04D8BBA4E2FA025C2DF81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:aa:26:c6:9f:54:0e:e0:72:0b:a7:c2:b5:d8: ef:99:9d:2f:8e:ec:6d:6a:b1:03:ff:a9:16:40:7c: b0:0c:b2:ae:0d:5e:22:3f:92:a4:97:c9:d7:86:05: c7:21:4e:fb:24:e5:cc:13:34:ad:81:d6:b2:82:00: d9:01:23:81:0f:75:99:ee:b0:19:43:db:96:75:73: 88:3f:7f:0f:5d:b8:74:12:0d:59:73:ca:40:bd:8d: 20:06:00:c6:35:c0:4a:2a:84:05:63:f0:f2:f1:b1: 01:17:a5:21:08:f2:af:63:f9:0a:bf:69:15:09:69: 80:6e:62:ed:bf:3b:50:50:80:42:de:a5:e9:2c:97: d9:31:61:b1:66:50:17:ca:29:c1:98:92:52:41:71: bf:78:e1:29:2f:13:94:3f:1e:6b:17:8e:d3:bb:06: 91:97:3b:e0:e0:89:3d:7d:81:17:5b:c2:48:0e:44: 5a:99:c6:cf:82:6b:71:39:79:90:09:eb:cd:42:81: 14:09:27:1d:8b:24:0a:46:50:24:67:e9:6d:69:22: 85:a4:9f:0a:b5:1c:94:ae:b7:4b:43:97:44:04:55: 8c:3e:49:ae:5f:f1:4a:c5:79:ad:ec:10:18:cb:50: 47:18:6f:c0:ab:52:53:c3:12:62:d4:d1:d1:a1:5f: d1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:47:71:68:93:36:21:D0:37:E0:4D:8B:BA:4E:2F:A0:25:C2:DF:81 X509v3 Authority Key Identifier: keyid:30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:53:eb:3d:f4:0b:0d:7c:ee:03:5d:c6:95:a8:29:82:a2:bf: 32:a4:93:1d:b8:18:67:ec:fb:7f:94:5d:52:65:72:91:15:c7: b8:5c:3d:28:b5:4d:ce:19:77:81:b9:f5:7b:66:77:f2:d8:f6: f2:dd:9b:97:7f:83:30:20:7f:c0:00:b2:4e:55:2a:0f:54:55: ee:75:fa:8c:10:3e:f2:7d:71:20:85:a1:84:cf:e5:45:20:05: 57:2d:a0:e6:cb:43:e0:61:b2:44:7f:39:b7:94:58:f5:23:cb: 61:90:90:68:ff:b8:d9:73:a1:8d:e6:b8:83:6b:42:ac:f9:5f: 74:55:27:ae:d0:99:b1:2b:da:e7:4b:77:5f:05:01:a8:97:3c: 10:47:f6:3a:c5:e1:eb:f7:95:b4:ca:97:9b:5d:c9:72:18:2c: ba:4a:20:90:b6:87:eb:9f:13:7a:00:69:4a:6e:68:ec:69:4e: d6:5e:eb:24:96:3e:20:7b:a2:65:4d:f7:ae:69:91:53:ac:69: 08:f2:df:fe:c0:8d:9a:0d:28:94:1e:3a:0a:81:fd:70:5a:82: f3:f0:90:78:cf:d9:57:93:2b:04:a9:f3:22:7d:fe:f3:1b:87: a2:28:4a:59:7b:65:b6:e6:f6:e3:ce:2b:a9:be:d1:dc:c3:25: 05:eb:59:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVDFsh6alSnwy7t643lixio0V3mswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgw MEQ1MkQ2NDAeFw0yNjAyMjgyMTM3MTJaFw0yNjAzMDMyMjI4MTJaMDMxMTAvBgNV BAMTKDc0NDc3MTY4OTMzNjIxRDAzN0UwNEQ4QkJBNEUyRkEwMjVDMkRGODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8qibGn1QO4HILp8K12O+ZnS+O 7G1qsQP/qRZAfLAMsq4NXiI/kqSXydeGBcchTvsk5cwTNK2B1rKCANkBI4EPdZnu sBlD25Z1c4g/fw9duHQSDVlzykC9jSAGAMY1wEoqhAVj8PLxsQEXpSEI8q9j+Qq/ aRUJaYBuYu2/O1BQgELepeksl9kxYbFmUBfKKcGYklJBcb944SkvE5Q/HmsXjtO7 BpGXO+DgiT19gRdbwkgORFqZxs+Ca3E5eZAJ681CgRQJJx2LJApGUCRn6W1pIoWk nwq1HJSut0tDl0QEVYw+Sa5f8UrFea3sEBjLUEcYb8CrUlPDEmLU0dGhX9FvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdEdxaJM2IdA34E2Luk4voCXC34EwHwYDVR0j BBgwFoAUMAivlIxHQqUlIB8/2n77GADVLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzM0ZWVkOS0xODdlLTRmNDYtYTViYi0wZWE4ZjY2OWFlOTAvMC8zMDA4QUY5NDhD NDc0MkE1MjUyMDFGM0ZEQTdFRkIxODAwRDUyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgwMEQ1 MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMzNGVlZDktMTg3ZS00ZjQ2LWE1 YmItMGVhOGY2NjlhZTkwLzAvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZC MTgwMEQ1MkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM1T6z30Cw187gNdxpWoKYKivzKkkx24GGfs +3+UXVJlcpEVx7hcPSi1Tc4Zd4G59Xtmd/LY9vLdm5d/gzAgf8AAsk5VKg9UVe51 +owQPvJ9cSCFoYTP5UUgBVctoObLQ+BhskR/ObeUWPUjy2GQkGj/uNlzoY3muINr Qqz5X3RVJ67QmbEr2udLd18FAaiXPBBH9jrF4ev3lbTKl5tdyXIYLLpKIJC2h+uf E3oAaUpuaOxpTtZe6ySWPiB7omVN965pkVOsaQjy3/7AjZoNKJQeOgqB/XBagvPw kHjP2VeTKwSp8yJ9/vMbh6IoSll7Zbbm9uPOK6m+0dzDJQXrWWg= -----END CERTIFICATE-----Generated at Mon Mar 2 14:58:19 2026 by rpki-client