$ rpki-client -vvf repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft File: 3BB7346C991B689223BADC6F82DD19BE3B017704.mft (raw, json) Hash identifier: Sm4b9Ebvxm2+VhxAfxlAF1/aQ0EPU11NHWusuNEW36U= Subject key identifier: 1A:01:DD:EF:25:55:BB:E3:EE:96:FF:68:DF:A7:8E:5E:D8:05:44:03 Authority key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 Certificate issuer: /CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Certificate serial: 1463AD2F4C5B37EB4D299A27B389614F3DD717DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft Manifest number: 042E Signing time: Sun 01 Mar 2026 09:00:47 +0000 Manifest this update: Sun 01 Mar 2026 08:55:47 +0000 Manifest next update: Wed 04 Mar 2026 16:09:47 +0000 Files and hashes: 1: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: 9IhGsQ54tY2/cR1q0Xs6zMzTt5FF9c1oVfoMV5wVdC8=) 2: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: lHTn8z38a4raxygkZHiK5olLO1hmwWy67YSOaXSHPY8=) 3: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: LlPhblyPcezHXhcFqA+CZXrxHEMGvdt9TGaJB5yD+gY=) 4: 3BB7346C991B689223BADC6F82DD19BE3B017704.crl (hash: TgPHUDVVL35/FXeBeGrz3+YGAcF7TuAXe/rUH/P4Ag8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:63:ad:2f:4c:5b:37:eb:4d:29:9a:27:b3:89:61:4f:3d:d7:17:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Validity Not Before: Mar 1 08:55:47 2026 GMT Not After : Mar 4 16:09:47 2026 GMT Subject: CN=1A01DDEF2555BBE3EE96FF68DFA78E5ED8054403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b5:cb:b7:78:94:8f:db:95:97:76:e8:fd:b2: 17:26:29:45:57:0d:2c:e8:7a:2c:01:7a:59:55:5d: 8d:01:fd:fe:1a:f7:3a:e5:07:3d:81:34:a8:93:61: 2f:b3:7b:56:f6:16:d2:4f:35:2b:67:1f:a9:34:f4: d5:8d:aa:63:74:68:dc:07:1c:76:8e:6f:be:fa:97: 18:3f:7d:09:ca:8b:9b:05:93:9d:46:97:38:51:ed: ad:aa:7b:68:f5:91:c0:a4:41:6f:e5:5c:67:41:10: 4c:2f:91:e4:51:60:93:30:47:0e:c2:1a:3a:22:88: 46:58:f4:bc:f6:29:a6:48:4f:57:68:73:d8:93:3f: ed:82:7f:25:1d:95:e0:55:19:28:f6:0c:e0:eb:fb: 5c:18:93:1d:fb:eb:aa:74:4e:27:fe:7d:16:6e:65: c3:fa:50:76:94:90:8d:36:ac:eb:2c:60:78:f9:a5: ed:e8:48:1d:a9:5b:27:fd:09:c8:68:e8:d2:01:84: 61:19:d0:28:cb:01:dd:06:79:c4:a8:2c:3c:87:95: d8:be:04:36:13:9d:a0:04:1e:cc:21:96:b6:d7:93: 1b:0e:9c:71:f1:bd:9f:40:a5:b1:1e:63:73:4b:65: 50:9e:cd:fb:63:a7:a7:88:ea:fe:51:26:75:3f:43: 73:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:01:DD:EF:25:55:BB:E3:EE:96:FF:68:DF:A7:8E:5E:D8:05:44:03 X509v3 Authority Key Identifier: keyid:3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d7:2d:5d:a2:3c:f0:23:a5:90:0f:c7:84:02:98:58:2f:ee: 1f:8d:b6:1d:bf:0e:e2:ea:ca:83:20:f3:cf:4d:83:a6:2b:94: 2b:31:e0:44:96:60:e2:bd:03:1f:98:74:a1:63:f9:f6:d7:b0: 2d:65:75:78:95:f7:e6:99:d5:a1:02:b9:26:ca:fb:ef:b6:ca: c7:a4:ca:75:71:51:1f:4e:b5:fe:91:c2:8a:eb:3b:63:2b:ac: 41:eb:f3:e1:a1:a0:66:b2:bf:2c:4a:82:0f:3a:df:64:fc:ea: 3e:f6:15:fb:e7:76:7b:ba:b7:d3:ab:ee:4c:2d:ec:5d:b0:cd: c6:5e:c8:49:18:8c:c3:40:e6:19:ae:3a:d5:33:8d:0e:f3:cd: 1b:65:75:58:ef:2f:28:de:a5:fd:d4:cb:29:ab:c0:c7:91:98: 37:61:02:08:a3:3f:70:e1:bd:d5:a5:a9:24:a4:e1:bf:20:01: 05:f4:40:81:15:e7:b9:61:eb:4d:ac:84:e6:65:eb:cc:59:d6: 81:54:58:6e:fb:2b:ef:60:d7:a1:27:ae:9f:ae:e8:79:85:87: 4b:e9:4c:95:c9:ec:64:dc:18:f5:13:1e:a6:f7:44:b4:04:39: c0:20:47:1e:84:93:bb:31:ea:ca:ff:3c:91:97:eb:9a:85:53: a1:10:d0:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFGOtL0xbN+tNKZons4lhTz3XF94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUz QjAxNzcwNDAeFw0yNjAzMDEwODU1NDdaFw0yNjAzMDQxNjA5NDdaMDMxMTAvBgNV BAMTKDFBMDFEREVGMjU1NUJCRTNFRTk2RkY2OERGQTc4RTVFRDgwNTQ0MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFtcu3eJSP25WXduj9shcmKUVX DSzoeiwBellVXY0B/f4a9zrlBz2BNKiTYS+ze1b2FtJPNStnH6k09NWNqmN0aNwH HHaOb776lxg/fQnKi5sFk51GlzhR7a2qe2j1kcCkQW/lXGdBEEwvkeRRYJMwRw7C GjoiiEZY9Lz2KaZIT1doc9iTP+2CfyUdleBVGSj2DODr+1wYkx3766p0Tif+fRZu ZcP6UHaUkI02rOssYHj5pe3oSB2pWyf9Ccho6NIBhGEZ0CjLAd0GecSoLDyHldi+ BDYTnaAEHswhlrbXkxsOnHHxvZ9ApbEeY3NLZVCezftjp6eI6v5RJnU/Q3N9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGgHd7yVVu+Pulv9o36eOXtgFRAMwHwYDVR0j BBgwFoAUO7c0bJkbaJIjutxvgt0ZvjsBdwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMC8zQkI3MzQ2Qzk5 MUI2ODkyMjNCQURDNkY4MkREMTlCRTNCMDE3NzA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUzQjAx NzcwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI2ZTQ1NjQtNDhmMi00M2I1LTg1 MDUtOTNiNDk4ZTdkOGFiLzAvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5 QkUzQjAxNzcwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7XLV2iPPAjpZAPx4QCmFgv7h+Nth2/DuLq yoMg889Ng6YrlCsx4ESWYOK9Ax+YdKFj+fbXsC1ldXiV9+aZ1aECuSbK+++2ysek ynVxUR9Otf6RworrO2MrrEHr8+GhoGayvyxKgg8632T86j72Ffvndnu6t9Or7kwt 7F2wzcZeyEkYjMNA5hmuOtUzjQ7zzRtldVjvLyjepf3UyymrwMeRmDdhAgijP3Dh vdWlqSSk4b8gAQX0QIEV57lh602shOZl68xZ1oFUWG77K+9g16Enrp+u6HmFh0vp TJXJ7GTcGPUTHqb3RLQEOcAgRx6Ek7sx6sr/PJGX65qFU6EQ0Gk= -----END CERTIFICATE-----Generated at Mon Mar 2 20:15:46 2026 by rpki-client