$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft File: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft (raw, json) Hash identifier: t33fTd1Y/0QGAJlVbk9q/6zPa2wlhNtaXm6azV/iq5U= Subject key identifier: 9B:A2:BC:AA:A5:EC:A0:65:86:99:F5:EF:AD:33:E0:A9:A1:D4:FA:3D Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A Certificate issuer: /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Certificate serial: 6BA7EA3B3CA7986A9F30AA989F2A33AC88B0986F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft Manifest number: 028D Signing time: Wed 25 Mar 2026 19:42:10 +0000 Manifest this update: Wed 25 Mar 2026 19:37:10 +0000 Manifest next update: Sun 29 Mar 2026 04:56:10 +0000 Files and hashes: 1: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl (hash: ZC/j3GHF+9pTrkGT531xuiUgJvtlaRZ7FTcSdNlHU6w=) 2: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: Iu3jqOF1OKCYSUkajjnPtBWzUDppzjUa82PRV4A9qHs=) 3: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: DTS/Msv2+J+yWcCmX3IMnnNepiaqaJENVR2ewyRj56c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a7:ea:3b:3c:a7:98:6a:9f:30:aa:98:9f:2a:33:ac:88:b0:98:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Validity Not Before: Mar 25 19:37:10 2026 GMT Not After : Mar 29 04:56:10 2026 GMT Subject: CN=9BA2BCAAA5ECA0658699F5EFAD33E0A9A1D4FA3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:34:c3:88:e3:e9:ea:9e:64:c8:3a:01:28: eb:ca:e7:a1:c8:9a:ae:9c:cb:12:45:52:ad:60:5f: 51:73:96:95:ae:44:05:f9:f9:f1:9f:39:71:46:75: 9c:1c:a5:37:0c:8f:68:f6:86:71:bf:d4:62:a8:62: 62:e4:5c:3d:6f:bd:a2:b0:6c:e6:69:7b:20:54:9e: ab:d4:db:a9:02:53:4a:24:65:7c:11:bf:bb:cc:71: a0:c0:ea:c8:63:26:bf:b4:e6:46:f2:88:ed:b3:a4: 64:90:7a:c4:9d:14:c7:d1:e3:18:c1:c4:19:e7:2b: 55:b4:54:fa:e2:c7:a2:b4:92:75:b1:eb:9a:1c:61: c3:8f:f9:11:6e:13:85:26:57:16:c9:96:f8:11:00: 96:e1:75:5c:ca:a1:8a:39:c3:11:f7:34:71:fa:0e: 01:2e:08:b0:87:f7:e7:93:60:e6:c9:4c:f0:8b:fc: ea:0e:2f:e8:0b:3d:e6:5b:09:cc:77:c7:5a:7f:47: 1e:f1:1e:a4:1e:0d:aa:b5:15:d9:ca:68:8b:d7:6d: 82:e4:01:2d:a4:b8:bb:c3:69:d3:29:74:1a:99:2f: b5:65:14:77:d5:9f:e5:09:25:1c:f8:3f:50:d9:e8: 05:fb:ef:74:00:bd:95:10:ec:e9:4f:be:16:a6:27: 35:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A2:BC:AA:A5:EC:A0:65:86:99:F5:EF:AD:33:E0:A9:A1:D4:FA:3D X509v3 Authority Key Identifier: keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:65:4a:57:a3:10:57:25:82:f4:2d:69:e8:b9:c1:2f:27:d6: 83:e7:48:58:d3:60:5f:56:91:9a:31:09:e3:29:08:79:79:60: 2f:e8:50:95:9f:30:d7:2f:56:72:b8:0a:ed:47:6a:73:fe:69: 1f:fd:89:04:f1:5d:3b:14:0d:5d:fb:bb:8a:17:a8:cc:40:3e: dc:4a:06:d4:21:85:49:da:af:00:d5:f0:2a:a0:09:99:61:82: 9a:2e:29:3a:c7:4a:70:3f:8a:10:c0:42:aa:fb:22:34:25:ca: 66:b5:e5:c9:35:b0:59:8e:a8:09:34:64:03:4c:78:24:66:f8: 94:34:a1:a2:30:a6:d2:16:27:48:21:f8:59:6d:6e:9a:17:92: 83:1b:90:58:d4:88:c7:c8:cf:9a:86:13:51:ad:1d:27:b8:3a: 3d:ee:86:48:76:a5:e2:00:58:7c:b1:85:d2:9d:1f:92:6d:9f: 00:25:40:5e:df:0d:c5:f4:52:26:91:c2:a8:f7:b8:7b:f9:1f: aa:5e:7e:91:80:3a:67:f2:7b:84:54:2c:7e:ba:2e:39:01:57: ac:4e:17:d9:0c:c7:dc:5a:9a:2d:f6:4a:06:5b:25:63:53:0a: bb:92:76:45:95:ab:ab:33:78:44:33:5f:39:02:6a:d1:b7:34: 47:75:4b:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa6fqOzynmGqfMKqYnyozrIiwmG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAy N0FCM0Y5QTAeFw0yNjAzMjUxOTM3MTBaFw0yNjAzMjkwNDU2MTBaMDMxMTAvBgNV BAMTKDlCQTJCQ0FBQTVFQ0EwNjU4Njk5RjVFRkFEMzNFMEE5QTFENEZBM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mDTDiOPp6p5kyDoBKOvK56HI mq6cyxJFUq1gX1FzlpWuRAX5+fGfOXFGdZwcpTcMj2j2hnG/1GKoYmLkXD1vvaKw bOZpeyBUnqvU26kCU0okZXwRv7vMcaDA6shjJr+05kbyiO2zpGSQesSdFMfR4xjB xBnnK1W0VPrix6K0knWx65ocYcOP+RFuE4UmVxbJlvgRAJbhdVzKoYo5wxH3NHH6 DgEuCLCH9+eTYObJTPCL/OoOL+gLPeZbCcx3x1p/Rx7xHqQeDaq1FdnKaIvXbYLk AS2kuLvDadMpdBqZL7VlFHfVn+UJJRz4P1DZ6AX773QAvZUQ7OlPvhamJzV5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm6K8qqXsoGWGmfXvrTPgqaHU+j0wHwYDVR0j BBgwFoAUP9brF+Z6zEBg93f1pOP5oCerP5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTIyNjk0OC1iMWExLTQyOTQtOTE1MC02YWYwZTBiZWJmYjgvMC8zRkQ2RUIxN0U2 N0FDQzQwNjBGNzc3RjVBNEUzRjlBMDI3QUIzRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAyN0FC M0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjkyMjY5NDgtYjFhMS00Mjk0LTkx NTAtNmFmMGUwYmViZmI4LzAvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5 QTAyN0FCM0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtlSlejEFclgvQtaei5wS8n1oPnSFjTYF9W kZoxCeMpCHl5YC/oUJWfMNcvVnK4Cu1HanP+aR/9iQTxXTsUDV37u4oXqMxAPtxK BtQhhUnarwDV8CqgCZlhgpouKTrHSnA/ihDAQqr7IjQlyma15ck1sFmOqAk0ZANM eCRm+JQ0oaIwptIWJ0gh+FltbpoXkoMbkFjUiMfIz5qGE1GtHSe4Oj3uhkh2peIA WHyxhdKdH5JtnwAlQF7fDcX0UiaRwqj3uHv5H6pefpGAOmfye4RULH66LjkBV6xO F9kMx9xami32SgZbJWNTCruSdkWVq6szeEQzXzkCatG3NEd1SxM= -----END CERTIFICATE-----Generated at Thu Mar 26 16:54:56 2026 by rpki-client