$ rpki-client -vvf repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft (raw, json) Hash identifier: xAN6ER6Tt0WKU/KtSPrgvsaCAUMmfdu/VI7eDKNubNg= Subject key identifier: 91:0A:D4:30:DB:9F:3D:B8:8C:00:08:9B:01:BD:AE:82:19:4C:F6:E7 Authority key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Certificate issuer: /CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Certificate serial: 6A6FE7787811B8AF9C6A5C92D2DA0FC8ECDBD015 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft Manifest number: 037B Signing time: Sat 28 Feb 2026 10:31:58 +0000 Manifest this update: Sat 28 Feb 2026 10:26:58 +0000 Manifest next update: Tue 03 Mar 2026 18:02:58 +0000 Files and hashes: 1: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl (hash: lUHth1YH3aFoqXveDhvUFqjH5cGFcUdCfxK6NLX5j0g=) 2: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: vTpKFtEuSQzd7i6WWufB9z0/u+k/lMjz3IOnInep2vs=) 3: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: B3IC/AW+40oETvGKZUM7eObcGOyNmLTwTu+s/VISsCU=) 4: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: mN4kUWey1FjzRsPdo9biO1LPdXh7z4TjPNv+IxlpTMI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:6f:e7:78:78:11:b8:af:9c:6a:5c:92:d2:da:0f:c8:ec:db:d0:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Validity Not Before: Feb 28 10:26:58 2026 GMT Not After : Mar 3 18:02:58 2026 GMT Subject: CN=910AD430DB9F3DB88C00089B01BDAE82194CF6E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:53:73:e6:7d:11:b1:24:5c:fb:6f:e9:44: be:4b:7f:83:9f:54:0e:c0:41:f6:7b:6c:e7:6e:b8: d3:22:c4:89:97:0c:1a:33:8c:d9:ba:9d:cc:1e:a5: 48:3c:23:6c:6f:a0:ed:70:fa:00:32:89:e6:9a:ef: 28:07:9e:a0:97:83:ef:28:5a:29:f8:5b:06:5e:74: 8c:cd:21:28:dc:9a:ff:1d:63:8b:eb:21:90:b5:fb: 85:7c:16:ee:48:62:cb:c5:15:b8:0f:80:e9:cf:dc: e6:3b:b1:b3:7c:86:85:51:0e:f2:7f:c8:bf:21:13: ea:56:70:99:6f:90:17:c5:52:7f:15:26:14:bb:c5: ff:83:b4:f4:9a:b1:90:b6:24:ba:c3:0a:00:6f:89: a9:16:4e:95:06:eb:74:6a:28:93:3f:c3:04:0a:77: ae:a3:78:2d:7a:3f:85:80:04:8b:f6:14:de:c6:57: a0:d2:ed:21:ca:ea:e9:d1:a1:20:3e:07:c3:9e:84: 8a:15:5a:ce:68:ea:16:db:26:d6:e0:2b:4d:39:1b: cd:cc:05:16:31:de:cf:04:f9:f5:84:ec:b7:6a:6b: cc:52:39:94:15:8b:38:bc:27:15:55:17:5e:51:bf: 07:c6:f4:33:e2:03:cd:6e:13:53:15:4b:62:5a:69: d1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0A:D4:30:DB:9F:3D:B8:8C:00:08:9B:01:BD:AE:82:19:4C:F6:E7 X509v3 Authority Key Identifier: keyid:37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:51:c4:28:da:92:2f:87:fe:9c:2d:96:47:ac:4c:dc:15:31: 23:8f:af:91:c9:b9:55:5e:b6:86:2a:c2:bb:94:d5:9a:bd:00: 82:09:4e:a4:3c:cc:af:44:20:e7:f9:80:f9:18:a3:84:88:00: c6:79:1e:44:5f:67:2b:c6:b5:37:8b:85:3a:e6:05:6c:55:43: 0f:59:2f:94:b8:ec:52:67:06:61:11:49:ef:8c:82:0a:f4:3c: c1:7d:5b:b0:5c:74:7b:37:d7:61:1f:97:81:41:89:6a:3e:6f: c2:f9:a3:4a:07:34:f8:7b:75:6c:43:d3:13:ac:e9:53:d8:2e: bd:ef:e6:0b:f4:a8:2e:db:29:62:cf:20:ba:ef:be:7d:b9:6e: 8c:bb:5d:9e:16:a6:76:ee:7f:4a:80:34:67:5c:d0:04:ae:df: 30:71:36:73:22:6b:7a:5e:12:e0:a0:53:14:45:f8:96:93:44: 8c:ee:50:64:37:a2:5d:aa:13:5a:12:06:73:37:a1:50:5f:85: 90:8b:5c:6d:45:1f:74:f5:4b:4b:12:a1:31:cf:20:1f:12:55: f0:01:6e:cc:94:dd:f1:cc:1f:4c:80:dc:62:86:cf:3c:35:6a: 51:49:d5:2a:24:9c:34:bd:71:24:60:9e:ae:d1:40:a7:eb:31: d7:7c:2b:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUam/neHgRuK+calyS0toPyOzb0BUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBD ODhFNEJBOTAeFw0yNjAyMjgxMDI2NThaFw0yNjAzMDMxODAyNThaMDMxMTAvBgNV BAMTKDkxMEFENDMwREI5RjNEQjg4QzAwMDg5QjAxQkRBRTgyMTk0Q0Y2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGvlNz5n0RsSRc+2/pRL5Lf4Of VA7AQfZ7bOduuNMixImXDBozjNm6ncwepUg8I2xvoO1w+gAyieaa7ygHnqCXg+8o Win4WwZedIzNISjcmv8dY4vrIZC1+4V8Fu5IYsvFFbgPgOnP3OY7sbN8hoVRDvJ/ yL8hE+pWcJlvkBfFUn8VJhS7xf+DtPSasZC2JLrDCgBviakWTpUG63RqKJM/wwQK d66jeC16P4WABIv2FN7GV6DS7SHK6unRoSA+B8OehIoVWs5o6hbbJtbgK005G83M BRYx3s8E+fWE7Ldqa8xSOZQVizi8JxVVF15RvwfG9DPiA81uE1MVS2JaadGNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkQrUMNufPbiMAAibAb2ughlM9ucwHwYDVR0j BBgwFoAUNxln370gOi/UToj3htnw8MiOS6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMC8zNzE5NjdERkJE MjAzQTJGRDQ0RTg4Rjc4NkQ5RjBGMEM4OEU0QkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBDODhF NEJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYw RjBDODhFNEJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1RxCjaki+H/pwtlkesTNwVMSOPr5HJuVVe toYqwruU1Zq9AIIJTqQ8zK9EIOf5gPkYo4SIAMZ5HkRfZyvGtTeLhTrmBWxVQw9Z L5S47FJnBmERSe+Mggr0PMF9W7BcdHs312Efl4FBiWo+b8L5o0oHNPh7dWxD0xOs 6VPYLr3v5gv0qC7bKWLPILrvvn25boy7XZ4Wpnbuf0qANGdc0ASu3zBxNnMia3pe EuCgUxRF+JaTRIzuUGQ3ol2qE1oSBnM3oVBfhZCLXG1FH3T1S0sSoTHPIB8SVfAB bsyU3fHMH0yA3GKGzzw1alFJ1SoknDS9cSRgnq7RQKfrMdd8K3w= -----END CERTIFICATE-----Generated at Mon Mar 2 02:36:31 2026 by rpki-client