$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft File: 3CA825E93FE8830376EF386786BF847CB239BE70.mft (raw, json) Hash identifier: uLS6NwOEZQEEKiplHO/8Yk9Z8XUwhrEa8SN5Rl46UHY= Subject key identifier: DB:0E:9D:ED:3C:B8:2B:4F:AF:4F:82:23:19:13:9F:B5:F2:A0:E0:19 Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 Certificate issuer: /CN=3CA825E93FE8830376EF386786BF847CB239BE70 Certificate serial: 3B7F4692EB6AD2C041568FB67C7F92B8BB270074 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft Manifest number: 0568 Signing time: Fri 17 Apr 2026 03:51:58 +0000 Manifest this update: Fri 17 Apr 2026 03:46:58 +0000 Manifest next update: Mon 20 Apr 2026 10:30:58 +0000 Files and hashes: 1: 3CA825E93FE8830376EF386786BF847CB239BE70.crl (hash: svy2p/o+OgrgYJeHdfrj3koyZR/HjEm7t/M3K/QjZSg=) 2: 3230322e3138322e35362e302f32312d3234203d3e203234323133.roa (hash: DlnKcd87VD3rZuVTk+tNhtDr4vaeUIcVlv5lIcH6uws=) 3: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (hash: rMCMSl1s+WWM7uToBUHib02Gf8GW78oaPsE3tZQeKpc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:7f:46:92:eb:6a:d2:c0:41:56:8f:b6:7c:7f:92:b8:bb:27:00:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70 Validity Not Before: Apr 17 03:46:58 2026 GMT Not After : Apr 20 10:30:58 2026 GMT Subject: CN=DB0E9DED3CB82B4FAF4F822319139FB5F2A0E019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:f7:75:7a:19:2b:7d:58:45:f2:19:64:f4: 6f:17:54:14:c0:01:1e:61:a4:98:66:d0:0b:29:21: d3:bd:be:5b:8c:0c:83:7c:7e:dc:20:93:57:8d:d1: 22:19:f6:7c:8c:1f:1a:a0:9a:65:a6:d9:36:ef:10: be:43:63:58:fa:33:55:66:7d:3e:84:5b:67:eb:51: e6:3a:86:cb:5f:ac:c2:06:6c:52:33:34:77:b5:fc: e9:db:87:ed:d1:46:7a:46:67:95:75:f1:0c:cc:2e: da:f9:de:b8:8f:54:bf:a5:6e:ec:cc:f9:7a:d7:f2: fb:6a:11:0e:96:f6:73:36:61:74:0b:07:bd:40:50: 7d:ce:25:46:73:75:9d:c5:a5:c2:b7:1d:8a:6d:be: a1:8d:69:90:a7:59:a9:d6:56:7a:a5:fd:1d:d6:e7: 47:f9:a5:94:13:93:cf:31:34:47:56:fb:d3:ae:f1: a7:bf:52:f7:5c:e9:b3:62:41:85:02:2f:14:f7:94: 63:e4:d8:a0:45:53:29:d8:83:d6:7f:53:27:4d:d4: 4c:1d:21:02:e1:41:22:4e:ed:cf:8d:e8:8d:cb:86: ad:95:7b:58:f3:9a:52:00:3c:33:52:be:5e:42:0a: 76:d3:80:4d:d3:22:60:c8:a4:59:8b:48:7c:fb:ed: 67:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0E:9D:ED:3C:B8:2B:4F:AF:4F:82:23:19:13:9F:B5:F2:A0:E0:19 X509v3 Authority Key Identifier: keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c3:5f:4e:3c:c2:7f:6e:f3:60:ba:c9:0e:6e:75:06:63:4a: 09:91:89:16:56:b9:b3:c7:d3:2a:c0:e9:45:2b:7b:3c:6e:d8: 51:02:c0:21:70:69:10:ad:5d:08:5e:65:c5:df:a1:ff:b8:bd: 25:63:71:8b:4c:88:4d:01:2c:e5:a6:34:53:a8:a1:6a:1a:13: 2d:c6:34:b9:92:4c:2b:6e:53:b6:2a:d8:81:cc:f0:0f:1c:2b: 69:81:fb:e9:dc:82:96:9a:23:d5:26:ad:5f:ac:4f:d3:cb:d8: 3e:c5:de:68:1e:a5:5a:2c:37:da:68:ad:7b:02:19:cd:8c:6c: fa:7b:8e:76:f4:e2:82:70:96:0e:5a:dd:f5:d7:3d:ab:12:5a: ac:5d:62:d3:41:90:9c:93:9e:d3:1d:42:cd:b9:11:fa:39:3f: ae:25:17:3e:e2:a1:6c:af:c3:b2:94:df:91:22:c7:f4:aa:19: 6b:63:0a:fc:96:74:98:42:43:31:5e:36:38:e6:62:bb:91:68: b8:a4:fd:c2:3f:bf:8e:38:77:c7:d9:a7:e9:93:e1:77:75:ae: 52:91:e5:18:98:d2:ee:c7:4f:75:61:db:67:f5:4b:a2:5d:e2: bd:47:41:cb:4a:8c:ae:eb:91:a8:80:a5:3f:84:d8:95:60:99: 60:c2:06:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO39Gkutq0sBBVo+2fH+SuLsnAHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NC MjM5QkU3MDAeFw0yNjA0MTcwMzQ2NThaFw0yNjA0MjAxMDMwNThaMDMxMTAvBgNV BAMTKERCMEU5REVEM0NCODJCNEZBRjRGODIyMzE5MTM5RkI1RjJBMEUwMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjPd1ehkrfVhF8hlk9G8XVBTA AR5hpJhm0AspIdO9vluMDIN8ftwgk1eN0SIZ9nyMHxqgmmWm2TbvEL5DY1j6M1Vm fT6EW2frUeY6hstfrMIGbFIzNHe1/Onbh+3RRnpGZ5V18QzMLtr53riPVL+lbuzM +XrX8vtqEQ6W9nM2YXQLB71AUH3OJUZzdZ3FpcK3HYptvqGNaZCnWanWVnql/R3W 50f5pZQTk88xNEdW+9Ou8ae/Uvdc6bNiQYUCLxT3lGPk2KBFUynYg9Z/UydN1Ewd IQLhQSJO7c+N6I3Lhq2Ve1jzmlIAPDNSvl5CCnbTgE3TImDIpFmLSHz77WcXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2w6d7Ty4K0+vT4IjGROftfKg4BkwHwYDVR0j BBgwFoAUPKgl6T/ogwN27zhnhr+EfLI5vnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OGI4YzFiNS0zYmU4LTRhYTctYTRjNi0yMWJjYzhmM2ZhNDAvMC8zQ0E4MjVFOTNG RTg4MzAzNzZFRjM4Njc4NkJGODQ3Q0IyMzlCRTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NCMjM5 QkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0 N0NCMjM5QkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfDX048wn9u82C6yQ5udQZjSgmRiRZWubPH 0yrA6UUrezxu2FECwCFwaRCtXQheZcXfof+4vSVjcYtMiE0BLOWmNFOooWoaEy3G NLmSTCtuU7Yq2IHM8A8cK2mB++ncgpaaI9UmrV+sT9PL2D7F3mgepVosN9porXsC Gc2MbPp7jnb04oJwlg5a3fXXPasSWqxdYtNBkJyTntMdQs25Efo5P64lFz7ioWyv w7KU35Eix/SqGWtjCvyWdJhCQzFeNjjmYruRaLik/cI/v444d8fZp+mT4Xd1rlKR 5RiY0u7HT3Vh22f1S6Jd4r1HQctKjK7rkaiApT+E2JVgmWDCBhw= -----END CERTIFICATE-----Generated at Fri Apr 17 20:05:01 2026 by rpki-client