$ rpki-client -vvf repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft File: 3008AF948C4742A525201F3FDA7EFB1800D52D64.mft (raw, json) Hash identifier: dgHS7kxMmSXRFgC6eSoB3xQ/+eAOl4BKH/oAoH1xGUE= Subject key identifier: 2F:10:ED:7B:45:26:7E:7F:30:89:DB:E2:C6:51:0C:DD:E4:14:DD:B5 Authority key identifier: 30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 Certificate issuer: /CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Certificate serial: 8455D8B5C7B14686D668C2EE715F4F29357223 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft Manifest number: 0154 Signing time: Sat 07 Mar 2026 07:12:13 +0000 Manifest this update: Sat 07 Mar 2026 07:07:13 +0000 Manifest next update: Tue 10 Mar 2026 17:27:13 +0000 Files and hashes: 1: 3135372e31352e34372e302f32342d3234203d3e20313532333936.roa (hash: JBRMsmUAdYzb3+gwoPUcR31Beca7hRL3R3vmPms0eZM=) 2: 3135372e31352e34362e302f32332d3234203d3e20313532333936.roa (hash: 3+C7KNVLkkeXH4Q6aCfPacCb6QKO1RmfOhT9j4ffkS8=) 3: 3135372e31352e34362e302f32342d3234203d3e20313532333936.roa (hash: tNNCYWCbEdiPKfhICvbEu1ERGWQQfGZS5vvTiRz7UTA=) 4: 3008AF948C4742A525201F3FDA7EFB1800D52D64.crl (hash: 4eHxvJE3QU+MgoGFogr89tgAPmL4irg3+Fzi4C2By54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84:55:d8:b5:c7:b1:46:86:d6:68:c2:ee:71:5f:4f:29:35:72:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Validity Not Before: Mar 7 07:07:13 2026 GMT Not After : Mar 10 17:27:13 2026 GMT Subject: CN=2F10ED7B45267E7F3089DBE2C6510CDDE414DDB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:40:9e:77:d3:21:5d:90:6e:38:01:05:8d:93: 2b:c3:e0:46:b3:17:df:21:b6:9f:b1:40:4a:53:bb: a6:44:40:b0:9a:09:29:e1:b6:ca:d8:b7:51:96:7c: 47:88:26:6b:cc:85:02:f4:2c:d3:c2:60:75:3c:35: 26:28:d5:07:cf:28:0f:06:f9:31:10:44:89:e2:74: 0a:3f:7e:f8:dd:99:2d:4e:d6:97:54:b8:96:b6:26: b7:cc:06:0f:ec:66:2c:f7:27:24:b8:4e:d1:0d:96: 83:10:2f:e6:a7:1a:80:e8:85:fe:50:18:f4:81:87: ad:d1:55:40:d9:16:24:f6:4d:aa:75:61:07:3e:14: a1:75:f6:c6:fb:db:66:bd:cf:b6:d1:91:22:f0:e4: db:4e:d7:c8:e8:54:e7:f2:48:0e:4d:15:69:9f:98: cb:54:61:63:ff:28:1f:7d:eb:2b:10:dc:b9:f0:20: d6:22:dc:ee:da:a7:65:c0:ef:85:a9:82:90:2c:b8: b9:e8:8a:48:f4:95:50:69:3e:bb:ae:e3:13:c5:4e: 1f:28:07:f8:98:2c:4b:84:04:e7:ef:13:35:2d:7c: df:8c:e9:6d:d2:46:0d:28:9d:a1:7f:3e:f9:3b:8f: f1:6e:61:07:dc:ee:84:b9:7f:61:fe:5d:46:0e:cf: 62:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:10:ED:7B:45:26:7E:7F:30:89:DB:E2:C6:51:0C:DD:E4:14:DD:B5 X509v3 Authority Key Identifier: keyid:30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:bb:ff:85:49:2a:22:04:a3:27:51:47:fa:13:57:41:10:b6: fe:86:a2:66:99:17:15:c7:40:5f:e7:ae:c9:c6:99:73:bb:1a: 2c:bd:f7:c0:2b:10:4f:ea:94:83:dc:f3:69:3a:0a:3e:bb:fd: 3c:65:8c:1b:0a:b4:33:92:73:85:37:8f:aa:ba:f0:b0:f8:82: a4:63:93:93:50:98:3f:ba:1e:2d:e2:4e:96:f8:7e:ff:1d:ad: 2a:76:04:ee:9f:ba:f4:2f:cf:3a:7a:36:46:6c:01:77:2b:86: 6a:46:61:ec:00:e0:9b:95:eb:e6:08:90:11:e8:8a:30:aa:c9: 2c:49:21:ef:b2:c5:b0:dd:c6:86:64:f1:b2:3b:20:87:b6:3e: b9:e6:83:ef:e0:77:e3:e8:76:7a:d7:21:b1:de:c8:ee:91:28: 4a:4b:15:28:1b:22:48:c9:58:b4:ad:c8:93:dd:35:bd:be:d3: b8:96:a4:2f:41:78:79:f8:bf:6a:d6:f5:35:5f:7d:0d:d6:fc: 74:76:53:a0:ff:a4:bf:0b:46:d4:74:f6:e1:bc:3d:41:d7:59: c8:ba:a2:7a:e7:6f:46:41:9a:91:1d:f4:69:15:17:e8:ae:9a: a6:1a:1f:eb:26:09:d2:8a:c4:36:42:1d:fc:3b:84:77:1d:59: 71:50:3d:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAIRV2LXHsUaG1mjC7nFfTyk1ciMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgw MEQ1MkQ2NDAeFw0yNjAzMDcwNzA3MTNaFw0yNjAzMTAxNzI3MTNaMDMxMTAvBgNV BAMTKDJGMTBFRDdCNDUyNjdFN0YzMDg5REJFMkM2NTEwQ0RERTQxNEREQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVQJ530yFdkG44AQWNkyvD4Eaz F98htp+xQEpTu6ZEQLCaCSnhtsrYt1GWfEeIJmvMhQL0LNPCYHU8NSYo1QfPKA8G +TEQRInidAo/fvjdmS1O1pdUuJa2JrfMBg/sZiz3JyS4TtENloMQL+anGoDohf5Q GPSBh63RVUDZFiT2Tap1YQc+FKF19sb722a9z7bRkSLw5NtO18joVOfySA5NFWmf mMtUYWP/KB996ysQ3LnwINYi3O7ap2XA74WpgpAsuLnoikj0lVBpPruu4xPFTh8o B/iYLEuEBOfvEzUtfN+M6W3SRg0onaF/Pvk7j/FuYQfc7oS5f2H+XUYOz2LJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULxDte0Umfn8widvixlEM3eQU3bUwHwYDVR0j BBgwFoAUMAivlIxHQqUlIB8/2n77GADVLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzM0ZWVkOS0xODdlLTRmNDYtYTViYi0wZWE4ZjY2OWFlOTAvMC8zMDA4QUY5NDhD NDc0MkE1MjUyMDFGM0ZEQTdFRkIxODAwRDUyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgwMEQ1 MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMzNGVlZDktMTg3ZS00ZjQ2LWE1 YmItMGVhOGY2NjlhZTkwLzAvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZC MTgwMEQ1MkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEO7/4VJKiIEoydRR/oTV0EQtv6GomaZFxXH QF/nrsnGmXO7Giy998ArEE/qlIPc82k6Cj67/TxljBsKtDOSc4U3j6q68LD4gqRj k5NQmD+6Hi3iTpb4fv8drSp2BO6fuvQvzzp6NkZsAXcrhmpGYewA4JuV6+YIkBHo ijCqySxJIe+yxbDdxoZk8bI7IIe2Prnmg+/gd+PodnrXIbHeyO6RKEpLFSgbIkjJ WLStyJPdNb2+07iWpC9BeHn4v2rW9TVffQ3W/HR2U6D/pL8LRtR09uG8PUHXWci6 onrnb0ZBmpEd9GkVF+iumqYaH+smCdKKxDZCHfw7hHcdWXFQPZQ= -----END CERTIFICATE-----Generated at Sat Mar 7 17:52:35 2026 by rpki-client