$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json) Hash identifier: zFu4dGunuVKWTBDOP0A2mNQdmEJxjBLUNMqogA0+DHU= Subject key identifier: CB:E4:32:04:B8:0B:DD:5B:31:6E:AA:03:EE:24:99:07:63:1E:39:4C Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Certificate serial: 2B9A306652D9FFB51FC48A0785388D6DC15C538D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft Manifest number: 0115 Signing time: Sat 07 Mar 2026 15:22:35 +0000 Manifest this update: Sat 07 Mar 2026 15:17:35 +0000 Manifest next update: Wed 11 Mar 2026 03:19:35 +0000 Files and hashes: 1: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: DQadYp56Gdfz360fO/cZ6Yq1gq0V/iJ5rvZ/ih43P0k=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: Sfdp2ETmAB6FU1WSvmecpTzRs2Nz0Rf6LLcGShnuuzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:9a:30:66:52:d9:ff:b5:1f:c4:8a:07:85:38:8d:6d:c1:5c:53:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Validity Not Before: Mar 7 15:17:35 2026 GMT Not After : Mar 11 03:19:35 2026 GMT Subject: CN=CBE43204B80BDD5B316EAA03EE249907631E394C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:87:71:2b:2d:42:d1:6a:cb:79:a0:30:55:71: f6:79:cb:20:fe:bc:00:cf:5d:d8:b7:fa:15:71:ed: 14:6d:60:53:cf:64:63:9b:ad:f7:9a:a9:9c:e5:d3: 88:4b:6c:89:f3:ea:0d:91:c6:b8:2c:41:20:8f:e6: ff:6d:ae:d0:2c:25:87:7d:47:96:4e:d8:02:b0:6d: 96:78:0c:ba:60:46:27:4e:fc:f7:e3:cf:7c:36:61: 67:b3:01:2f:40:ec:eb:00:e9:42:76:7a:db:73:71: fa:2e:4c:e9:3b:d8:56:6c:d5:4e:98:f0:f3:dc:db: 24:d1:3b:66:62:53:ed:6d:b8:6f:2b:a3:de:10:1b: c0:7c:6f:1a:46:35:a7:dd:e4:45:bb:e8:11:b4:e8: 34:11:bd:7b:2c:52:27:a7:71:7c:0c:2e:ee:ed:3d: ef:d8:35:3e:29:04:82:38:89:6d:09:b2:88:d1:e7: 6c:53:a8:b5:f0:de:bd:b8:75:2b:bb:80:d7:4d:e5: c4:0c:e0:98:ac:ce:2b:5b:92:09:64:75:ea:44:a2: e9:90:d7:1f:20:f9:3b:b0:9f:2c:68:eb:55:8a:d3: 3c:95:ed:d7:ab:39:b9:03:8a:62:42:69:dd:37:db: 14:c7:99:35:f7:ec:d9:59:a0:09:01:00:2a:4d:bf: f6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E4:32:04:B8:0B:DD:5B:31:6E:AA:03:EE:24:99:07:63:1E:39:4C X509v3 Authority Key Identifier: keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:b8:ea:57:8d:13:3e:e0:f9:20:f7:27:d6:e2:9c:ff:dd:c1: bc:c8:80:3f:96:47:96:06:03:9b:77:59:1d:ca:4a:90:70:7c: 1e:8e:3d:d5:e9:00:34:4d:f7:1b:9a:f1:37:2a:a0:11:a0:4b: 17:a5:a8:91:5b:da:70:d9:96:f8:72:f5:6b:2c:dd:a4:b1:07: 75:c4:c1:6b:44:22:65:7a:54:59:1d:f9:82:90:c4:fe:21:cb: b4:e4:ad:9a:e0:4f:2a:f6:a7:ab:d2:ac:f6:8b:a0:a1:03:46: 34:c5:16:71:20:ca:d3:f8:46:37:3f:be:90:cf:82:e2:f9:99: 3c:cb:b1:3c:70:7d:bd:41:79:e8:34:90:9f:d9:52:8a:10:f8: 09:ce:49:86:13:82:ad:f0:32:3c:f0:3c:05:7d:5f:20:1d:47: f4:71:b7:c0:73:95:b8:3a:b5:58:e0:62:11:a7:62:52:9d:df: 20:8e:f6:9c:03:f0:2c:a1:17:72:07:bb:d8:6f:57:ac:62:07: 56:f1:1f:ff:6d:e8:b0:65:e6:00:e2:90:b5:88:97:b4:f1:46: c4:02:2d:c4:aa:0b:3e:0b:f8:ca:89:26:a5:a4:14:2d:96:ad: b5:39:93:a2:48:9a:3a:d8:87:fc:de:de:95:2d:37:46:62:d0: 4e:b5:3d:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK5owZlLZ/7UfxIoHhTiNbcFcU40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4 RjM4QkFBNjAeFw0yNjAzMDcxNTE3MzVaFw0yNjAzMTEwMzE5MzVaMDMxMTAvBgNV BAMTKENCRTQzMjA0QjgwQkRENUIzMTZFQUEwM0VFMjQ5OTA3NjMxRTM5NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkh3ErLULRast5oDBVcfZ5yyD+ vADPXdi3+hVx7RRtYFPPZGObrfeaqZzl04hLbInz6g2RxrgsQSCP5v9trtAsJYd9 R5ZO2AKwbZZ4DLpgRidO/Pfjz3w2YWezAS9A7OsA6UJ2ettzcfouTOk72FZs1U6Y 8PPc2yTRO2ZiU+1tuG8ro94QG8B8bxpGNafd5EW76BG06DQRvXssUiencXwMLu7t Pe/YNT4pBII4iW0JsojR52xTqLXw3r24dSu7gNdN5cQM4JiszitbkglkdepEoumQ 1x8g+Tuwnyxo61WK0zyV7derObkDimJCad032xTHmTX37NlZoAkBACpNv/ZdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy+QyBLgL3VsxbqoD7iSZB2MeOUwwHwYDVR0j BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5 MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4 QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFe46leNEz7g+SD3J9binP/dwbzIgD+WR5YG A5t3WR3KSpBwfB6OPdXpADRN9xua8TcqoBGgSxelqJFb2nDZlvhy9Wss3aSxB3XE wWtEImV6VFkd+YKQxP4hy7TkrZrgTyr2p6vSrPaLoKEDRjTFFnEgytP4Rjc/vpDP guL5mTzLsTxwfb1Beeg0kJ/ZUooQ+AnOSYYTgq3wMjzwPAV9XyAdR/Rxt8Bzlbg6 tVjgYhGnYlKd3yCO9pwD8CyhF3IHu9hvV6xiB1bxH/9t6LBl5gDikLWIl7TxRsQC LcSqCz4L+MqJJqWkFC2WrbU5k6JImjrYh/ze3pUtN0Zi0E61Pew= -----END CERTIFICATE-----Generated at Sun Mar 8 00:35:36 2026 by rpki-client