$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft File: 3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json) Hash identifier: zTOKA19ZaaLwcuoxSkU/5svQJCUBZLuSVHIDWTcEWaQ= Subject key identifier: FE:48:4A:9A:C4:87:FE:17:2E:A4:CE:A5:7A:71:E0:8F:68:27:1B:B5 Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Certificate serial: 5F1263C2E77274B66255DD984D584409C0DD2C42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft Manifest number: 0271 Signing time: Thu 16 Apr 2026 18:42:09 +0000 Manifest this update: Thu 16 Apr 2026 18:37:09 +0000 Manifest next update: Sun 19 Apr 2026 20:19:09 +0000 Files and hashes: 1: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: 85V6qA8RHEszjBxF6yv2LBrZ9dlUnY8/+0ZLxd1aOzQ=) 2: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: KZ/BrcpNlnq1GeOoeq+ujqu98XEmwwqQMF5ra78kfE0=) 3: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: ldrGJsy+/TLnpHhOovohV+mReZwkU+jIEX++pOvvnkI=) 4: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: U4JeNNdDtfgt8chl2YcBAbudKnnsOo1WG/kIzNmrQfE=) 5: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: jxUYJQpEaP8bPhyLYtacTJc3csgAE9Hd2kaadYQz8QA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:12:63:c2:e7:72:74:b6:62:55:dd:98:4d:58:44:09:c0:dd:2c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Validity Not Before: Apr 16 18:37:09 2026 GMT Not After : Apr 19 20:19:09 2026 GMT Subject: CN=FE484A9AC487FE172EA4CEA57A71E08F68271BB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:95:0f:7c:10:13:07:22:f7:f9:54:62:97: 4d:27:72:e7:29:ec:3d:52:ca:b1:62:df:8a:e3:ab: 90:78:c0:f9:9f:6e:2b:94:0b:d5:69:91:27:a4:2f: fa:9e:7a:06:dc:c7:5b:1c:18:b3:6b:23:dc:c7:f9: 8b:64:71:94:f5:69:40:98:68:ea:96:57:67:94:3d: c3:3f:13:83:35:6c:9d:b0:54:a5:2f:5e:21:c9:6f: c4:e2:3a:57:2e:6f:ea:12:1f:ac:2e:d2:1e:33:92: ae:2b:35:9b:7b:b4:eb:0c:61:81:c7:c6:28:83:27: 3f:6d:07:68:b0:92:50:29:a1:1f:a0:95:66:6c:08: 99:b9:05:26:13:06:b8:84:c0:23:da:e5:01:c6:6d: 48:14:ba:b5:d7:67:98:15:49:59:4d:7e:3a:66:6f: 1a:ae:df:65:86:c6:c4:d1:99:74:55:8e:b1:fb:9d: b8:7f:df:8f:5a:4f:92:a8:67:b1:b5:2f:b4:62:0a: f0:26:38:dd:95:91:1a:2e:a2:4c:6c:09:e9:c9:15: d2:57:fb:b8:3f:8e:f8:cf:4e:ba:ec:f1:c5:32:87: c6:6d:e0:41:da:4a:d9:f1:4b:4e:17:38:60:37:48: 6c:41:1f:be:ed:5a:a9:f3:4a:10:65:fc:c6:ef:aa: f3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:48:4A:9A:C4:87:FE:17:2E:A4:CE:A5:7A:71:E0:8F:68:27:1B:B5 X509v3 Authority Key Identifier: keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:3e:6e:5c:07:6b:f4:cb:53:0b:24:ba:bd:e3:4a:e4:9f:6a: 5c:7e:fd:5c:6b:f1:34:28:41:56:c2:f3:3f:d8:ff:26:e9:8b: 7b:b7:42:6c:07:95:41:11:e4:46:79:6c:ce:25:3a:a5:11:4a: 62:83:58:b2:e7:7d:ad:52:71:62:1d:62:68:27:bc:37:d3:9e: 08:51:15:fe:80:79:8b:19:e5:b4:6a:02:fd:56:3b:45:53:5a: 93:6e:28:ea:06:a2:e6:92:7a:31:a6:55:0a:e4:d8:56:e6:43: c2:b6:d7:bd:d4:28:ec:f9:81:2d:c4:36:64:4c:f6:84:44:3f: 96:83:96:ee:b1:c5:99:66:34:6e:8b:6a:56:fa:f4:f1:fc:ec: 99:a9:e8:83:03:82:f2:ff:49:e4:7e:02:22:55:9f:d8:4a:d0: 04:be:34:96:21:40:4c:ca:60:85:52:d8:64:67:e5:7e:c4:d1: da:0d:d9:dd:2d:82:ee:80:b7:84:8a:3e:4a:67:5b:e9:fd:b8: 97:ad:20:d5:a3:9d:97:e8:0a:32:28:ee:89:6f:cd:39:4a:a4: 11:66:d3:cb:4d:49:07:68:10:1a:e5:4d:35:7e:c9:44:93:28: bc:e4:2d:06:a3:f1:1a:5b:92:d7:44:71:4a:ca:b7:13:c0:50: 47:be:22:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXxJjwudydLZiVd2YTVhECcDdLEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUy M0FFMjBBQzAeFw0yNjA0MTYxODM3MDlaFw0yNjA0MTkyMDE5MDlaMDMxMTAvBgNV BAMTKEZFNDg0QTlBQzQ4N0ZFMTcyRUE0Q0VBNTdBNzFFMDhGNjgyNzFCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT+JUPfBATByL3+VRil00ncucp 7D1SyrFi34rjq5B4wPmfbiuUC9VpkSekL/qeegbcx1scGLNrI9zH+YtkcZT1aUCY aOqWV2eUPcM/E4M1bJ2wVKUvXiHJb8TiOlcub+oSH6wu0h4zkq4rNZt7tOsMYYHH xiiDJz9tB2iwklApoR+glWZsCJm5BSYTBriEwCPa5QHGbUgUurXXZ5gVSVlNfjpm bxqu32WGxsTRmXRVjrH7nbh/349aT5KoZ7G1L7RiCvAmON2VkRouokxsCenJFdJX +7g/jvjPTrrs8cUyh8Zt4EHaStnxS04XOGA3SGxBH77tWqnzShBl/MbvqvPhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/khKmsSH/hcupM6lenHgj2gnG7UwHwYDVR0j BBgwFoAUPDyGilZ0tCX65WdCa8sjjiOuIKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjk5ZTZmMC1mMjNjLTQxZmYtYjY3Yy00MWFmMDUxMzM5ZDEvMC8zQzNDODY4QTU2 NzRCNDI1RkFFNTY3NDI2QkNCMjM4RTIzQUUyMEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUyM0FF MjBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIz OEUyM0FFMjBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGY+blwHa/TLUwskur3jSuSfalx+/Vxr8TQo QVbC8z/Y/ybpi3u3QmwHlUER5EZ5bM4lOqURSmKDWLLnfa1ScWIdYmgnvDfTnghR Ff6AeYsZ5bRqAv1WO0VTWpNuKOoGouaSejGmVQrk2FbmQ8K2173UKOz5gS3ENmRM 9oREP5aDlu6xxZlmNG6Lalb69PH87Jmp6IMDgvL/SeR+AiJVn9hK0AS+NJYhQEzK YIVS2GRn5X7E0doN2d0tgu6At4SKPkpnW+n9uJetINWjnZfoCjIo7olvzTlKpBFm 08tNSQdoEBrlTTV+yUSTKLzkLQaj8RpbktdEcUrKtxPAUEe+Ios= -----END CERTIFICATE-----Generated at Sat Apr 18 00:44:42 2026 by rpki-client