$ rpki-client -vvf repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft File: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft (raw, json) Hash identifier: uGHOo83zQNiuNljInWhBqLRUHn8Xnwsv2lETqeKxoDw= Subject key identifier: 57:23:CA:F4:4A:A1:B5:D3:E6:B2:C9:DC:64:A2:DB:6F:78:70:36:59 Authority key identifier: 3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 Certificate issuer: /CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Certificate serial: 46B8D494F3CB381000151A789484A4F80968B75D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft Manifest number: 033E Signing time: Sat 28 Feb 2026 08:12:19 +0000 Manifest this update: Sat 28 Feb 2026 08:07:19 +0000 Manifest next update: Tue 03 Mar 2026 19:21:19 +0000 Files and hashes: 1: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: KB67q4SCRzcFv43ZUJG/KADzbe2hXV8kny5lP7t0r80=) 2: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl (hash: mARC1YVjpdpP+VffVMnS3dd8FmvJ8klc3t4BgVNGcoI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 19:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b8:d4:94:f3:cb:38:10:00:15:1a:78:94:84:a4:f8:09:68:b7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Validity Not Before: Feb 28 08:07:19 2026 GMT Not After : Mar 3 19:21:19 2026 GMT Subject: CN=5723CAF44AA1B5D3E6B2C9DC64A2DB6F78703659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ed:54:0d:44:22:bb:2b:e8:dd:45:6d:25:49: a8:77:e7:90:27:7a:a4:6a:89:2c:8c:2d:21:84:51: 97:72:aa:9d:2f:0e:96:a6:32:45:6c:f0:ef:08:c8: ac:72:c4:bd:d1:4f:bd:54:0b:c0:92:77:aa:e0:26: fa:4f:05:67:12:fc:b8:e9:e7:fb:1e:fd:fc:c2:6e: 36:24:02:3f:04:72:06:41:e7:bf:54:83:32:f4:ad: 88:4c:2a:54:bf:c6:98:d2:44:4c:d0:13:36:de:17: 13:93:7c:d7:12:45:46:9e:07:7d:c5:0c:33:00:33: fc:3b:e4:48:8b:d3:9d:b9:ca:3a:9f:46:0b:0b:7b: c0:a4:21:22:94:0c:55:3e:e6:6f:ae:60:58:4a:d8: 80:4c:1c:dd:bf:35:0f:6c:c5:cb:7e:c5:14:c8:35: 87:b2:e3:08:3b:58:8d:41:17:99:fd:ac:dd:54:dc: cf:a8:6b:9a:22:e8:4a:6a:1c:49:35:5a:5b:4f:82: 46:93:3a:b5:1f:82:06:80:2c:42:77:14:28:93:39: 74:89:43:25:0a:9f:ae:67:ea:ff:01:fa:ef:1f:a2: 55:06:48:45:ea:eb:cb:de:4b:40:fb:c0:39:a5:c0: 50:84:c5:12:2d:3b:21:be:95:3c:29:24:b4:c2:34: e8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:23:CA:F4:4A:A1:B5:D3:E6:B2:C9:DC:64:A2:DB:6F:78:70:36:59 X509v3 Authority Key Identifier: keyid:3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:92:e4:fe:10:4f:d4:15:a7:55:b0:f3:bb:50:44:ae:0e:01: b4:b8:c1:ad:75:2d:ef:a2:69:3c:69:d6:4d:77:c1:99:e4:0f: 3b:33:a7:44:02:ad:3b:33:70:52:2e:11:3d:60:b4:f3:6d:82: 21:65:b7:2d:ae:ef:25:5c:60:7f:c6:1f:92:77:d6:16:31:4e: 65:ec:d1:da:f1:3a:c5:bc:d7:73:ea:5e:59:3a:37:af:66:f8: e7:5c:96:93:61:28:dd:e1:85:fd:07:7b:57:90:b4:1e:bf:51: 6c:2a:6d:f5:da:03:36:72:de:44:2b:7b:8d:ed:6f:44:e6:d7: f2:7d:4d:63:80:0c:cb:9b:64:67:d6:32:5b:ab:94:89:dd:d6: 9f:c3:de:43:18:2a:74:4b:03:c0:15:c5:32:8a:c1:85:8e:7e: 27:7d:91:ae:d0:a2:e1:98:93:7c:d6:f2:7c:bb:36:92:31:cf: 36:8d:d2:2a:88:ff:cf:47:72:ee:91:c9:90:6e:4d:ef:f5:24: ca:75:38:cb:76:b4:05:75:05:97:cb:12:f3:be:12:69:06:67: dc:ae:a7:ec:65:0d:20:bf:d3:d9:01:b5:af:aa:fa:a6:07:fc: b7:4c:90:a8:90:20:bf:29:11:7f:8f:4b:40:d5:4d:2a:b9:07: b9:b0:0f:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURrjUlPPLOBAAFRp4lISk+Alot10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4 NkNFRDYxNDAeFw0yNjAyMjgwODA3MTlaFw0yNjAzMDMxOTIxMTlaMDMxMTAvBgNV BAMTKDU3MjNDQUY0NEFBMUI1RDNFNkIyQzlEQzY0QTJEQjZGNzg3MDM2NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx7VQNRCK7K+jdRW0lSah355An eqRqiSyMLSGEUZdyqp0vDpamMkVs8O8IyKxyxL3RT71UC8CSd6rgJvpPBWcS/Ljp 5/se/fzCbjYkAj8EcgZB579UgzL0rYhMKlS/xpjSREzQEzbeFxOTfNcSRUaeB33F DDMAM/w75EiL0525yjqfRgsLe8CkISKUDFU+5m+uYFhK2IBMHN2/NQ9sxct+xRTI NYey4wg7WI1BF5n9rN1U3M+oa5oi6EpqHEk1WltPgkaTOrUfggaALEJ3FCiTOXSJ QyUKn65n6v8B+u8folUGSEXq68veS0D7wDmlwFCExRItOyG+lTwpJLTCNOh/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVyPK9EqhtdPmssncZKLbb3hwNlkwHwYDVR0j BBgwFoAUOtfaYeulgAPT7yn3mq+8rYbO1hQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2E1NDc4MS05Njc4LTQ3NWMtYWMxYi1jZDRiZmNmNWQwZWEvMC8zQUQ3REE2MUVC QTU4MDAzRDNFRjI5Rjc5QUFGQkNBRDg2Q0VENjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4NkNF RDYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJD QUQ4NkNFRDYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOS5P4QT9QVp1Ww87tQRK4OAbS4wa11Le+i aTxp1k13wZnkDzszp0QCrTszcFIuET1gtPNtgiFlty2u7yVcYH/GH5J31hYxTmXs 0drxOsW813PqXlk6N69m+OdclpNhKN3hhf0He1eQtB6/UWwqbfXaAzZy3kQre43t b0Tm1/J9TWOADMubZGfWMlurlInd1p/D3kMYKnRLA8AVxTKKwYWOfid9ka7QouGY k3zW8ny7NpIxzzaN0iqI/89Hcu6RyZBuTe/1JMp1OMt2tAV1BZfLEvO+EmkGZ9yu p+xlDSC/09kBta+q+qYH/LdMkKiQIL8pEX+PS0DVTSq5B7mwDw4= -----END CERTIFICATE-----Generated at Mon Mar 2 00:10:58 2026 by rpki-client