$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json) Hash identifier: atsLK99c++r0JLiAP8rm7U6fLKoQcEkKF8qplUigY1E= Subject key identifier: 16:FE:78:30:44:06:93:58:2A:3E:E6:DE:01:3A:A5:9E:C9:F3:67:69 Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Certificate serial: 49C0804F1ADEC82D3F48C1F8D20530E6069F562A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft Manifest number: 011D Signing time: Wed 25 Mar 2026 16:12:36 +0000 Manifest this update: Wed 25 Mar 2026 16:07:36 +0000 Manifest next update: Sat 28 Mar 2026 21:06:36 +0000 Files and hashes: 1: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: Sfdp2ETmAB6FU1WSvmecpTzRs2Nz0Rf6LLcGShnuuzQ=) 2: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: HYGUwAxpAEAfX8smaZlOAER2wvaB46Vz1USmxqoTOhc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c0:80:4f:1a:de:c8:2d:3f:48:c1:f8:d2:05:30:e6:06:9f:56:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Validity Not Before: Mar 25 16:07:36 2026 GMT Not After : Mar 28 21:06:36 2026 GMT Subject: CN=16FE7830440693582A3EE6DE013AA59EC9F36769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dc:54:2c:29:6d:b4:77:d3:72:3a:f0:c8:3d: e8:0c:9f:58:1b:71:18:99:dd:af:0a:8f:5a:92:a9: 4f:23:a2:d5:79:66:30:ac:f7:0c:39:69:31:c5:46: cf:ec:74:03:96:43:c2:ab:8f:de:44:3b:61:f6:d2: aa:3d:d2:de:34:16:97:27:fb:07:a8:74:a2:75:43: e8:41:48:e9:0c:5d:13:f0:7c:bf:df:6f:5f:be:21: de:64:6f:5a:29:b9:8e:b1:2b:22:03:69:5a:7a:bc: fd:2b:4d:bf:9d:a3:e2:33:d5:e9:21:6e:01:df:2e: 85:d0:cf:37:35:25:88:d7:11:63:b2:c9:f9:a6:79: 79:ad:25:d2:df:17:65:59:62:0a:b1:bd:d5:44:b6: f4:3c:3b:56:ac:52:9c:4c:7a:ac:31:8a:6e:6e:fc: d6:d0:b4:d9:b4:b4:ec:da:51:22:bb:23:f4:72:3f: 0b:68:11:6c:f6:d6:b5:03:d7:44:e4:a7:85:bb:b7: 64:2c:9d:f9:67:f0:7c:aa:23:c6:fb:58:61:79:73: f8:69:e6:bb:98:9d:9e:05:65:e7:44:64:d0:40:9b: 91:e4:61:1b:25:41:34:92:f2:42:1a:55:4c:4e:76: 09:5f:96:18:7d:df:9b:b8:f6:74:f6:b2:8c:53:bf: b3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FE:78:30:44:06:93:58:2A:3E:E6:DE:01:3A:A5:9E:C9:F3:67:69 X509v3 Authority Key Identifier: keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2c:de:ab:0d:56:63:b2:45:00:40:67:36:f6:3f:85:48:e6: 69:3b:c3:b8:15:d9:c7:41:02:02:6c:25:64:b0:7d:f5:cc:d4: ab:09:c7:96:bf:b1:ab:f9:8b:9a:f1:48:58:bb:9e:bb:a2:85: b9:b5:ea:a3:fd:db:db:69:e2:8f:f9:c1:50:3a:55:08:21:73: 0e:e7:c0:05:a2:37:f4:ee:ce:f9:77:9a:46:7d:a9:1c:5f:b3: e9:43:f2:78:83:a3:8b:3e:57:f2:99:e5:d6:8e:93:86:ac:1a: 61:d8:55:ae:5c:5e:ff:2f:63:82:03:f1:5e:3f:37:8e:ea:ca: b1:b7:9a:dd:1e:71:90:38:07:53:6b:5a:91:09:7f:f5:e8:2b: 09:66:93:56:0b:7d:e5:8b:8b:43:18:b0:64:ea:48:3f:5d:fe: a2:76:7e:1a:e8:8a:f9:53:6e:c6:aa:11:8f:6c:62:97:51:6d: 2a:29:60:1b:88:63:92:7b:f1:b8:5d:2c:5e:2c:c8:b9:73:e1: b4:3b:10:00:11:b1:04:7e:96:ed:4c:12:10:7e:19:cb:be:f7: 9f:f2:9a:71:f9:63:31:e5:cd:70:1e:99:34:02:7e:40:8a:f0: 94:2a:db:de:77:7d:d1:98:1c:4c:5a:4b:f7:d8:f2:3b:00:b5: a6:4e:f7:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScCATxreyC0/SMH40gUw5gafViowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4 RjM4QkFBNjAeFw0yNjAzMjUxNjA3MzZaFw0yNjAzMjgyMTA2MzZaMDMxMTAvBgNV BAMTKDE2RkU3ODMwNDQwNjkzNTgyQTNFRTZERTAxM0FBNTlFQzlGMzY3NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf3FQsKW20d9NyOvDIPegMn1gb cRiZ3a8Kj1qSqU8jotV5ZjCs9ww5aTHFRs/sdAOWQ8Krj95EO2H20qo90t40Fpcn +weodKJ1Q+hBSOkMXRPwfL/fb1++Id5kb1opuY6xKyIDaVp6vP0rTb+do+Iz1ekh bgHfLoXQzzc1JYjXEWOyyfmmeXmtJdLfF2VZYgqxvdVEtvQ8O1asUpxMeqwxim5u /NbQtNm0tOzaUSK7I/RyPwtoEWz21rUD10Tkp4W7t2Qsnfln8HyqI8b7WGF5c/hp 5ruYnZ4FZedEZNBAm5HkYRslQTSS8kIaVUxOdglflhh935u49nT2soxTv7NTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFv54MEQGk1gqPubeATqlnsnzZ2kwHwYDVR0j BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5 MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4 QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8s3qsNVmOyRQBAZzb2P4VI5mk7w7gV2cdB AgJsJWSwffXM1KsJx5a/sav5i5rxSFi7nruihbm16qP929tp4o/5wVA6VQghcw7n wAWiN/Tuzvl3mkZ9qRxfs+lD8niDo4s+V/KZ5daOk4asGmHYVa5cXv8vY4ID8V4/ N47qyrG3mt0ecZA4B1NrWpEJf/XoKwlmk1YLfeWLi0MYsGTqSD9d/qJ2fhroivlT bsaqEY9sYpdRbSopYBuIY5J78bhdLF4syLlz4bQ7EAARsQR+lu1MEhB+Gcu+95/y mnH5YzHlzXAemTQCfkCK8JQq2953fdGYHExaS/fY8jsAtaZO93U= -----END CERTIFICATE-----Generated at Thu Mar 26 12:00:44 2026 by rpki-client