$ rpki-client -vvf repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft File: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft (raw, json) Hash identifier: Kd95JBuhnrHWqNvR+PpIQmr2TWi0z26jlJ59DdGKsH8= Subject key identifier: CB:8C:12:B4:C2:3A:9E:4D:2C:C7:5E:F3:4F:B5:16:83:A8:29:C6:39 Authority key identifier: B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A Certificate issuer: /CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Certificate serial: 30655FB09BFA5FEB57813829F04C0BECD9C572C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft Manifest number: 0281 Signing time: Sat 28 Feb 2026 13:01:28 +0000 Manifest this update: Sat 28 Feb 2026 12:56:28 +0000 Manifest next update: Tue 03 Mar 2026 22:58:28 +0000 Files and hashes: 1: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl (hash: M/dl2QPL/xxIpyFKX4wfSD03hITzXnQjX5+IfCgL8ho=) 2: 3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa (hash: FC9WYK0GxhFuo5+IPpBOfrYKb96YdbcYuUIwD8S5/cc=) 3: 3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa (hash: vyyRX5ZN0c71huLL8k24+recuGAo/H2zFLb8iVt/MFQ=) 4: 3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa (hash: XO7OCQd7PiW3evlQ9RDZa78HCUTA5y41xkJCy0j4SPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:65:5f:b0:9b:fa:5f:eb:57:81:38:29:f0:4c:0b:ec:d9:c5:72:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Validity Not Before: Feb 28 12:56:28 2026 GMT Not After : Mar 3 22:58:28 2026 GMT Subject: CN=CB8C12B4C23A9E4D2CC75EF34FB51683A829C639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:04:f4:98:d1:3d:22:bd:25:12:2e:5b:6d:32: 64:b0:7b:25:ce:4c:d5:40:d7:a3:71:57:31:fd:23: 90:79:22:c9:32:9d:cc:9b:13:93:38:6d:48:8a:e2: f8:22:77:72:c6:af:17:37:c7:38:ae:28:2f:d8:d4: 49:25:e1:7c:6d:c9:a5:fc:d7:32:0f:88:11:d5:bc: 4c:03:1f:ea:98:77:6a:64:f6:af:ee:3d:7b:b5:6f: 27:d2:21:e8:78:3c:aa:b7:0b:3a:78:6f:2e:63:f3: 19:80:aa:b0:7c:2c:2d:54:c0:f6:c9:a3:77:e2:0f: ea:d8:52:7d:27:11:22:f8:27:47:92:59:07:ab:4e: e8:2f:2f:7a:36:ca:7a:0f:22:65:f6:68:e6:51:99: 23:de:1b:44:d6:c5:43:0b:75:5a:0d:4e:e0:be:8d: 16:6c:38:a9:2d:da:55:f5:47:dd:1d:6d:43:87:12: 22:be:3a:a2:6a:16:a4:a7:84:b1:bc:cc:23:6e:af: 50:73:2b:1f:71:54:57:42:b5:54:c4:6e:26:04:a3: ed:62:da:3b:12:53:ec:e9:ac:a7:db:61:a4:9e:24: 68:55:31:10:ca:11:91:1e:0e:db:45:29:67:6a:be: f2:21:0d:bd:22:1d:c9:44:3e:81:17:4a:b9:bc:ba: 5b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8C:12:B4:C2:3A:9E:4D:2C:C7:5E:F3:4F:B5:16:83:A8:29:C6:39 X509v3 Authority Key Identifier: keyid:B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1d:aa:06:36:3a:0c:6f:d2:c4:02:15:01:99:7b:c7:87:e5: 59:8f:bb:1b:78:ad:f3:4b:a9:fc:cb:c5:0a:77:53:93:8f:fa: 9d:58:93:cf:8a:cf:54:e7:d5:d3:90:c0:39:c7:17:41:b3:70: 61:d6:d7:4d:d4:51:dd:59:e1:f0:e0:5f:df:0d:8a:25:ba:91: bb:39:55:d2:13:73:5f:52:8e:42:72:d3:d6:f6:47:6f:f1:ab: cb:c5:b6:6e:8e:8c:d3:9a:3e:5d:03:1f:f0:97:3e:60:bd:c9: 91:05:c6:f7:ee:47:92:20:52:8c:44:29:46:35:73:b5:ca:ed: b3:25:60:97:a1:fa:e3:3e:00:f8:f0:34:f8:e6:f2:bc:7e:12: c4:38:fa:48:31:19:8f:de:5e:70:f1:9c:67:c3:97:b3:19:51: 63:a9:99:5c:53:80:31:92:31:68:6d:54:f3:2a:41:0d:67:b4: 9c:e2:a0:b6:ee:02:09:18:8f:13:c4:7c:0b:fc:f9:3e:c9:f1: a4:e1:2a:6d:b3:56:02:b7:21:d3:6b:a2:36:dc:3c:9d:84:a1: 81:14:0e:6f:f7:47:6f:4d:9c:1a:3e:7b:6f:00:2f:a7:93:28: 0d:bb:02:1c:d8:25:e7:21:66:55:18:a8:48:74:e5:1f:af:b1: 8e:83:06:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMGVfsJv6X+tXgTgp8EwL7NnFcsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlF MzVEOTM3QTAeFw0yNjAyMjgxMjU2MjhaFw0yNjAzMDMyMjU4MjhaMDMxMTAvBgNV BAMTKENCOEMxMkI0QzIzQTlFNEQyQ0M3NUVGMzRGQjUxNjgzQTgyOUM2MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBPSY0T0ivSUSLlttMmSweyXO TNVA16NxVzH9I5B5IskyncybE5M4bUiK4vgid3LGrxc3xziuKC/Y1Ekl4XxtyaX8 1zIPiBHVvEwDH+qYd2pk9q/uPXu1byfSIeh4PKq3Czp4by5j8xmAqrB8LC1UwPbJ o3fiD+rYUn0nESL4J0eSWQerTugvL3o2ynoPImX2aOZRmSPeG0TWxUMLdVoNTuC+ jRZsOKkt2lX1R90dbUOHEiK+OqJqFqSnhLG8zCNur1BzKx9xVFdCtVTEbiYEo+1i 2jsSU+zprKfbYaSeJGhVMRDKEZEeDttFKWdqvvIhDb0iHclEPoEXSrm8ultFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy4wStMI6nk0sx17zT7UWg6gpxjkwHwYDVR0j BBgwFoAUs/O5vEpWtUavzvR4ACLVWeNdk3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzdmMzUzMy0yMjc4LTQwZTEtYTI2Mi03ZTdlNDMxZWIyMzUvMC9CM0YzQjlCQzRB NTZCNTQ2QUZDRUY0NzgwMDIyRDU1OUUzNUQ5MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlFMzVE OTM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3ZjM1MzMtMjI3OC00MGUxLWEy NjItN2U3ZTQzMWViMjM1LzAvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1 NTlFMzVEOTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkdqgY2Ogxv0sQCFQGZe8eH5VmPuxt4rfNL qfzLxQp3U5OP+p1Yk8+Kz1Tn1dOQwDnHF0GzcGHW103UUd1Z4fDgX98NiiW6kbs5 VdITc19SjkJy09b2R2/xq8vFtm6OjNOaPl0DH/CXPmC9yZEFxvfuR5IgUoxEKUY1 c7XK7bMlYJeh+uM+APjwNPjm8rx+EsQ4+kgxGY/eXnDxnGfDl7MZUWOpmVxTgDGS MWhtVPMqQQ1ntJzioLbuAgkYjxPEfAv8+T7J8aThKm2zVgK3IdNrojbcPJ2EoYEU Dm/3R29NnBo+e28AL6eTKA27AhzYJechZlUYqEh05R+vsY6DBhI= -----END CERTIFICATE-----Generated at Mon Mar 2 14:44:06 2026 by rpki-client