$ rpki-client -vvf repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft File: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft (raw, json) Hash identifier: StC35CN82E9+XggQx20KtdrOAN828k3UQ7PWZFgR3G8= Subject key identifier: EF:8E:34:0A:82:16:43:1A:E6:8F:14:F7:93:9A:BA:0B:04:DC:49:54 Authority key identifier: D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 Certificate issuer: /CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Certificate serial: 3EF52A5C8CBA533143C39F2E936C1847CACE87A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft Manifest number: D7 Signing time: Fri 06 Mar 2026 16:20:02 +0000 Manifest this update: Fri 06 Mar 2026 16:15:02 +0000 Manifest next update: Mon 09 Mar 2026 19:39:02 +0000 Files and hashes: 1: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl (hash: /IvbGLfCgMVSdsqwabbDdOiRLnbfdT45LdvwlRqRLgE=) 2: 3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (hash: hp0FWXodRjkZ1xCt3tnFlPQ3FclJlDZduoZ/rI+jC6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f5:2a:5c:8c:ba:53:31:43:c3:9f:2e:93:6c:18:47:ca:ce:87:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Validity Not Before: Mar 6 16:15:02 2026 GMT Not After : Mar 9 19:39:02 2026 GMT Subject: CN=EF8E340A8216431AE68F14F7939ABA0B04DC4954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:22:cb:ae:8a:47:49:41:30:35:ae:e5:e4: 2f:bf:2f:01:fa:ec:30:1c:ff:77:2d:64:c4:ff:0d: 58:be:0e:bd:a1:76:66:73:a8:f3:04:31:a9:09:10: 80:b2:ed:7a:37:fd:17:9a:88:fd:18:e6:2b:34:d1: d8:26:38:17:a0:cd:a1:bf:e6:55:6e:98:d9:10:46: 62:26:c0:2e:19:9c:97:57:b3:7e:43:d4:50:19:97: 8d:7f:ea:45:86:57:ed:8b:61:7d:1f:d2:ed:fc:6c: b8:a0:5f:25:17:bb:3e:0f:8f:92:e2:c7:ac:0d:de: 53:a9:92:b5:e0:24:70:3d:fb:3b:b5:fb:a0:17:a0: 45:7a:31:ac:ab:4c:7f:1d:b0:21:0a:d0:a6:b0:c3: 03:38:c0:77:52:69:27:0f:29:d6:64:a1:ec:78:8b: 86:ba:14:18:74:1e:eb:43:dc:e9:fe:57:db:1e:1a: 25:70:0d:2b:ca:11:f1:e5:2c:7e:d8:85:be:0b:a3: a2:f4:39:6a:9b:03:14:c8:5e:c8:40:2f:15:7c:1c: 81:c5:17:8d:ed:85:ec:1a:a0:8f:a6:20:1e:bc:cf: 06:e6:1e:36:c4:37:48:9a:4e:8b:bb:cf:ee:e2:7b: f3:6d:a9:be:00:9c:e6:59:70:39:03:19:2b:39:18: 94:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8E:34:0A:82:16:43:1A:E6:8F:14:F7:93:9A:BA:0B:04:DC:49:54 X509v3 Authority Key Identifier: keyid:D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:bf:54:8c:91:a5:ad:fd:12:84:38:0a:cb:6e:2e:35:33:a0: 04:69:b8:ea:74:3c:02:99:84:50:0c:94:0e:b2:4e:06:41:dd: 53:de:5a:01:e3:37:e0:17:60:0b:c0:65:6e:d8:2c:db:90:d2: e4:ea:d4:6d:00:1c:5f:ce:d1:3e:c5:e8:a2:01:ed:64:31:76: 3c:00:47:ae:b1:00:ba:ec:83:69:06:73:3b:bd:5c:61:05:46: 11:97:e5:ff:93:8b:1f:ee:01:68:ae:07:57:ec:90:fd:6d:0e: 7d:3c:e2:2e:54:88:0e:2f:61:91:94:f6:75:cc:8e:4e:5e:6b: 75:71:7e:82:5b:d0:11:46:0f:53:e7:00:a2:f6:1e:32:57:5e: df:f5:a9:02:26:7f:2a:17:4e:ce:f5:00:cc:e6:b9:2f:28:0e: b2:5b:16:e5:7c:bc:b9:c9:98:e6:c3:f1:16:a4:0f:cd:b3:42: de:bd:ec:72:aa:1e:a7:11:8e:85:a4:1a:7a:36:ea:4a:58:79: ea:c6:56:51:d9:76:32:fd:d2:c2:eb:d5:d6:14:32:b5:28:43: e6:e5:6d:7e:33:83:5e:a2:cf:7d:3a:54:89:5e:58:a0:fe:e4: 4d:f7:a2:45:55:05:47:9b:2a:72:e2:bb:aa:cf:9f:99:d2:14: 06:b6:8c:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPvUqXIy6UzFDw58uk2wYR8rOh6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJC NEZBMjhGMDAeFw0yNjAzMDYxNjE1MDJaFw0yNjAzMDkxOTM5MDJaMDMxMTAvBgNV BAMTKEVGOEUzNDBBODIxNjQzMUFFNjhGMTRGNzkzOUFCQTBCMDREQzQ5NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6iLLropHSUEwNa7l5C+/LwH6 7DAc/3ctZMT/DVi+Dr2hdmZzqPMEMakJEICy7Xo3/ReaiP0Y5is00dgmOBegzaG/ 5lVumNkQRmImwC4ZnJdXs35D1FAZl41/6kWGV+2LYX0f0u38bLigXyUXuz4Pj5Li x6wN3lOpkrXgJHA9+zu1+6AXoEV6MayrTH8dsCEK0KawwwM4wHdSaScPKdZkoex4 i4a6FBh0HutD3On+V9seGiVwDSvKEfHlLH7Yhb4Lo6L0OWqbAxTIXshALxV8HIHF F43thewaoI+mIB68zwbmHjbEN0iaTou7z+7ie/Ntqb4AnOZZcDkDGSs5GJRnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7440CoIWQxrmjxT3k5q6CwTcSVQwHwYDVR0j BBgwFoAU07Ddu44H/NmKOZyQxbP8MrT6KPAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDlmOThmMy03MmYwLTQwMDYtYmU5OS1iOWE5ZThkOWQyYmYvMC9EM0IwRERCQjhF MDdGQ0Q5OEEzOTlDOTBDNUIzRkMzMkI0RkEyOEYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJCNEZB MjhGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q5Zjk4ZjMtNzJmMC00MDA2LWJl OTktYjlhOWU4ZDlkMmJmLzAvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZD MzJCNEZBMjhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+/VIyRpa39EoQ4CstuLjUzoARpuOp0PAKZ hFAMlA6yTgZB3VPeWgHjN+AXYAvAZW7YLNuQ0uTq1G0AHF/O0T7F6KIB7WQxdjwA R66xALrsg2kGczu9XGEFRhGX5f+Tix/uAWiuB1fskP1tDn084i5UiA4vYZGU9nXM jk5ea3VxfoJb0BFGD1PnAKL2HjJXXt/1qQImfyoXTs71AMzmuS8oDrJbFuV8vLnJ mObD8RakD82zQt697HKqHqcRjoWkGno26kpYeerGVlHZdjL90sLr1dYUMrUoQ+bl bX4zg16iz306VIleWKD+5E33okVVBUebKnLiu6rPn5nSFAa2jLE= -----END CERTIFICATE-----Generated at Sat Mar 7 17:48:41 2026 by rpki-client