$ rpki-client -vvf repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft File: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft (raw, json) Hash identifier: m2J717r5G6QxNBUwptEzz/l9/uI4K9eKlUmG49zUA0Q= Subject key identifier: 91:33:48:C9:87:D6:82:18:6F:0E:62:E6:C8:FB:1D:19:90:93:CA:37 Authority key identifier: 3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A Certificate issuer: /CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Certificate serial: 19524BADA15AC81CBB6BE52ED8C9B7669B407ED5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft Manifest number: 0109 Signing time: Thu 05 Mar 2026 12:32:37 +0000 Manifest this update: Thu 05 Mar 2026 12:27:37 +0000 Manifest next update: Sun 08 Mar 2026 22:06:37 +0000 Files and hashes: 1: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl (hash: x/M77UdUfmAVCDU0P6PrWAaY7P83/RiqrgCw0QGv8dU=) 2: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (hash: NaC6OjHEbkMsjBRQmR8Tqmru4zPhSmsJN/hiJNkC18Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:52:4b:ad:a1:5a:c8:1c:bb:6b:e5:2e:d8:c9:b7:66:9b:40:7e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Validity Not Before: Mar 5 12:27:37 2026 GMT Not After : Mar 8 22:06:37 2026 GMT Subject: CN=913348C987D682186F0E62E6C8FB1D199093CA37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:75:e1:ab:d7:89:27:66:d4:54:cf:7f:f4: 5d:16:1b:7c:95:00:19:e1:e1:6a:63:3e:fc:5d:f3: 93:e5:16:1c:ed:e3:96:40:93:1e:1c:8e:77:93:77: a9:9b:c0:19:b4:86:39:37:4a:e0:a0:f2:0d:60:f0: 8d:49:3b:d5:fc:05:fe:84:a7:12:44:49:b3:36:48: 06:6e:5e:04:89:09:d0:7e:9e:1d:71:12:6c:8a:4e: 90:8e:f3:c1:e8:a6:b7:3c:48:50:32:b9:bb:a4:00: c6:e7:3c:b4:ad:42:c4:46:a2:60:95:7b:03:f9:98: 67:37:2e:94:a0:7c:fd:4b:a4:cb:62:5c:9a:16:68: 0d:57:c7:36:a0:9d:c0:4f:fa:a2:a2:3a:70:37:bd: 08:22:6c:d8:2b:49:17:16:4e:f5:61:2d:62:f4:c5: 06:67:90:59:d1:4a:f4:f5:39:42:ce:5c:4b:e3:05: c1:c1:0a:6c:26:84:d2:78:86:63:bb:ad:9f:7e:9a: 3a:59:d2:40:a2:52:71:52:bd:6b:e6:41:dd:cd:1a: a1:e5:c7:c0:98:b9:81:07:af:32:86:f3:ea:83:8c: 95:fa:5c:f3:93:d1:44:b0:5c:71:13:b9:35:f8:f5: ce:81:37:5b:0b:77:ad:dd:cb:be:8a:3a:0c:53:06: ed:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:33:48:C9:87:D6:82:18:6F:0E:62:E6:C8:FB:1D:19:90:93:CA:37 X509v3 Authority Key Identifier: keyid:3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:8a:23:f2:a1:f4:15:6e:f9:6c:8f:4c:41:a5:8a:e8:50:e2: 7b:0c:72:5a:83:44:c6:80:38:52:e3:9c:51:41:d1:ed:56:75: 64:d7:a7:90:81:b1:3e:a8:47:43:3d:d2:a3:71:4d:27:ee:e0: 05:b0:0a:a3:43:15:60:1f:3e:21:ff:71:90:cb:31:20:8a:82: c9:4d:1b:aa:93:1f:86:73:fd:27:b3:29:56:21:fb:65:8a:59: 44:7c:c5:92:26:9f:d2:2e:f2:36:8a:22:c9:cf:63:c5:64:66: b9:fc:39:d6:45:88:ff:51:3e:1b:55:3a:08:90:07:aa:bb:6e: a4:84:9e:4d:11:37:76:b5:03:77:61:92:0c:70:33:47:2c:98: 57:5a:3a:a6:ad:80:07:62:42:b8:18:f7:c8:7c:c8:cc:c2:79: ee:16:e7:fe:ac:71:ba:2f:7b:07:52:3d:21:b8:54:ee:33:eb: f5:c8:f3:d1:3f:c9:71:3f:63:bb:c1:02:0d:da:13:f6:d5:35: ed:2e:ae:c7:71:74:2b:e7:60:a2:f0:b6:3f:7e:4c:67:e0:85: 17:c4:9c:ac:b0:35:19:c6:7c:f0:fb:eb:86:65:35:e6:5b:9f: 4b:5d:6b:ef:eb:b8:58:b0:6d:9d:64:92:a9:29:3c:27:bc:e8: 71:d8:e5:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGVJLraFayBy7a+Uu2Mm3ZptAftUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVG ODlCQUI5QTAeFw0yNjAzMDUxMjI3MzdaFw0yNjAzMDgyMjA2MzdaMDMxMTAvBgNV BAMTKDkxMzM0OEM5ODdENjgyMTg2RjBFNjJFNkM4RkIxRDE5OTA5M0NBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFG3Xhq9eJJ2bUVM9/9F0WG3yV ABnh4WpjPvxd85PlFhzt45ZAkx4cjneTd6mbwBm0hjk3SuCg8g1g8I1JO9X8Bf6E pxJESbM2SAZuXgSJCdB+nh1xEmyKTpCO88Hoprc8SFAyubukAMbnPLStQsRGomCV ewP5mGc3LpSgfP1LpMtiXJoWaA1XxzagncBP+qKiOnA3vQgibNgrSRcWTvVhLWL0 xQZnkFnRSvT1OULOXEvjBcHBCmwmhNJ4hmO7rZ9+mjpZ0kCiUnFSvWvmQd3NGqHl x8CYuYEHrzKG8+qDjJX6XPOT0USwXHETuTX49c6BN1sLd63dy76KOgxTBu2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkTNIyYfWghhvDmLmyPsdGZCTyjcwHwYDVR0j BBgwFoAUPdzEykO0kvQMjLBuSZNOxfibq5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWI1MzQyMC04YzU5LTQ5Y2YtYjNiMi1mNTVlOTg5MGRkY2QvMC8zRERDQzRDQTQz QjQ5MkY0MEM4Q0IwNkU0OTkzNEVDNUY4OUJBQjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVGODlC QUI5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliNTM0MjAtOGM1OS00OWNmLWIz YjItZjU1ZTk4OTBkZGNkLzAvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRF QzVGODlCQUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeKI/Kh9BVu+WyPTEGliuhQ4nsMclqDRMaA OFLjnFFB0e1WdWTXp5CBsT6oR0M90qNxTSfu4AWwCqNDFWAfPiH/cZDLMSCKgslN G6qTH4Zz/SezKVYh+2WKWUR8xZImn9Iu8jaKIsnPY8VkZrn8OdZFiP9RPhtVOgiQ B6q7bqSEnk0RN3a1A3dhkgxwM0csmFdaOqatgAdiQrgY98h8yMzCee4W5/6scbov ewdSPSG4VO4z6/XI89E/yXE/Y7vBAg3aE/bVNe0ursdxdCvnYKLwtj9+TGfghRfE nKywNRnGfPD764ZlNeZbn0tda+/ruFiwbZ1kkqkpPCe86HHY5bA= -----END CERTIFICATE-----Generated at Sat Mar 7 17:55:54 2026 by rpki-client