$ rpki-client -vvf repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft File: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft (raw, json) Hash identifier: A5qT+VLRcuuXGcxmSLsV5fERGKePYksT8JwZBIAPM4k= Subject key identifier: 00:BB:E6:F8:4C:FF:8D:F9:69:47:2F:DC:58:B5:36:3D:2D:E2:7D:27 Authority key identifier: 3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 Certificate issuer: /CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Certificate serial: 677A379EE8F29D2F15AB3BD39F2A196CEA2629ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft Manifest number: 020E Signing time: Sun 01 Mar 2026 02:51:32 +0000 Manifest this update: Sun 01 Mar 2026 02:46:32 +0000 Manifest next update: Wed 04 Mar 2026 03:40:32 +0000 Files and hashes: 1: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl (hash: pXUdhS+CENn8r5nRl13GKbCbiSwvrE72y/oYny/I12w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 03:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7a:37:9e:e8:f2:9d:2f:15:ab:3b:d3:9f:2a:19:6c:ea:26:29:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Validity Not Before: Mar 1 02:46:32 2026 GMT Not After : Mar 4 03:40:32 2026 GMT Subject: CN=00BBE6F84CFF8DF969472FDC58B5363D2DE27D27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d3:09:36:62:79:d6:50:1d:89:59:e5:41:42: 8f:5f:ac:5f:f7:45:d7:c3:a5:90:f6:01:69:12:a4: db:22:3e:f7:16:3b:7a:2c:bf:53:42:ba:b3:28:76: f7:32:c0:1e:9d:9a:d5:ae:2f:fe:d5:63:bd:48:53: 19:f3:8c:c4:07:c1:e1:30:27:a9:d7:9b:f0:a6:e9: 00:1c:a2:ba:88:ee:1d:57:58:a6:e9:03:37:d6:7c: 59:b2:fa:cc:92:3f:9f:3d:25:9c:dc:4f:4f:37:d0: 25:20:3f:df:d0:ea:9d:d0:aa:71:07:dd:22:9a:fb: 90:1d:34:ef:c0:d5:51:d6:00:b3:08:fe:c5:7e:94: d6:dd:39:e3:3c:48:3a:f7:3b:e4:53:1d:c0:ae:c4: c1:ad:8f:c2:00:e1:9b:7c:97:5b:10:54:0c:bc:bf: 57:22:a7:40:c0:09:9c:43:d4:b1:57:98:a9:16:cf: ef:13:ee:3f:1e:a2:96:62:d0:ae:a2:a5:69:e6:67: 6a:69:bc:d3:0a:d6:5e:96:12:52:6e:5d:d9:71:90: 1f:f1:75:62:fb:09:3c:64:c0:de:a8:b0:ab:a3:a8: 2d:ae:0c:3b:c1:68:2d:ae:fd:a5:e1:f6:39:8c:cb: 48:7b:f6:78:97:40:68:5a:0c:f7:45:f2:82:ff:9d: 9a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BB:E6:F8:4C:FF:8D:F9:69:47:2F:DC:58:B5:36:3D:2D:E2:7D:27 X509v3 Authority Key Identifier: keyid:3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:26:d4:3b:4e:02:db:36:74:59:c8:57:0a:d5:25:fd:b7:3f: 52:20:cd:77:35:8d:8d:54:96:b5:64:30:78:2a:aa:15:d8:02: 0b:90:bf:b1:1f:5c:d3:1c:8d:4e:80:37:7f:96:75:5b:ab:77: 24:ba:30:31:8e:68:f0:42:b1:36:40:1c:d0:6d:2e:30:de:57: 9d:ca:3b:d2:a5:7a:a3:e9:43:f7:35:98:cb:9c:ce:8d:bf:83: 0c:56:74:10:90:cd:81:2d:f3:39:c6:69:65:65:d2:f2:fe:df: 39:5c:c2:65:26:1b:c9:a6:f0:a5:55:98:2e:66:81:16:7d:ab: 86:8d:d7:c6:da:96:f2:47:70:82:d4:71:e4:e1:52:d1:5e:c9: 95:b5:f6:35:98:f8:5e:f8:dc:9d:6c:31:f3:c3:53:f5:83:db: df:6f:1e:26:15:c8:05:5f:25:56:0a:ab:35:04:63:bf:57:16: e1:eb:14:38:21:c1:4b:c0:43:58:91:70:60:a8:d0:08:50:63: 93:49:0f:7e:cd:8b:80:e7:49:d5:8d:c8:9a:82:ca:69:56:48: 04:ee:2d:be:b0:53:c8:2e:ab:0f:15:65:a9:cd:e0:8b:96:bc: d4:91:0e:c5:c9:15:11:f5:3d:c6:8c:ac:bf:e8:c2:5d:cb:03: a8:99:d5:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ3o3nujynS8VqzvTnyoZbOomKe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJF RDM0OUFFMDAeFw0yNjAzMDEwMjQ2MzJaFw0yNjAzMDQwMzQwMzJaMDMxMTAvBgNV BAMTKDAwQkJFNkY4NENGRjhERjk2OTQ3MkZEQzU4QjUzNjNEMkRFMjdEMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0wk2YnnWUB2JWeVBQo9frF/3 RdfDpZD2AWkSpNsiPvcWO3osv1NCurModvcywB6dmtWuL/7VY71IUxnzjMQHweEw J6nXm/Cm6QAcorqI7h1XWKbpAzfWfFmy+sySP589JZzcT0830CUgP9/Q6p3QqnEH 3SKa+5AdNO/A1VHWALMI/sV+lNbdOeM8SDr3O+RTHcCuxMGtj8IA4Zt8l1sQVAy8 v1cip0DACZxD1LFXmKkWz+8T7j8eopZi0K6ipWnmZ2ppvNMK1l6WElJuXdlxkB/x dWL7CTxkwN6osKujqC2uDDvBaC2u/aXh9jmMy0h79niXQGhaDPdF8oL/nZo9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUALvm+Ez/jflpRy/cWLU2PS3ifScwHwYDVR0j BBgwFoAUO3ZOzj2zDeV8YDbcy66Vi+00muAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDAyOWMyMi0yMjE1LTQ4YzEtOWFiNi1iYjEzYzAxYjQzYjEvMC8zQjc2NEVDRTNE QjMwREU1N0M2MDM2RENDQkFFOTU4QkVEMzQ5QUUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJFRDM0 OUFFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1 OEJFRDM0OUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGom1DtOAts2dFnIVwrVJf23P1IgzXc1jY1U lrVkMHgqqhXYAguQv7EfXNMcjU6AN3+WdVurdyS6MDGOaPBCsTZAHNBtLjDeV53K O9KleqPpQ/c1mMuczo2/gwxWdBCQzYEt8znGaWVl0vL+3zlcwmUmG8mm8KVVmC5m gRZ9q4aN18balvJHcILUceThUtFeyZW19jWY+F743J1sMfPDU/WD299vHiYVyAVf JVYKqzUEY79XFuHrFDghwUvAQ1iRcGCo0AhQY5NJD37Ni4DnSdWNyJqCymlWSATu Lb6wU8guqw8VZanN4IuWvNSRDsXJFRH1PcaMrL/owl3LA6iZ1fo= -----END CERTIFICATE-----Generated at Mon Mar 2 17:12:03 2026 by rpki-client