$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft File: 04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json) Hash identifier: No4N/4Nmofyhfd2rU8Sf7S8gL++kUEZxccSc/0aZThA= Subject key identifier: 12:23:55:C3:FE:5F:D9:04:E4:A3:29:1F:1C:9F:D2:50:6B:4B:85:92 Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 38DF2E38177B12710C1AF8EDE89D12315BD3CBEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft Manifest number: 0138 Signing time: Thu 16 Apr 2026 03:42:11 +0000 Manifest this update: Thu 16 Apr 2026 03:37:11 +0000 Manifest next update: Sun 19 Apr 2026 07:52:11 +0000 Files and hashes: 1: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: cVFzdmzLJEI/fSd97t0ozR5701iz99V95s98wkuB7V8=) 2: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: eH3Ao967QhqEJuVSKIqmK2LF3Jr+ZOMmcVpmUYs1R3g=) 3: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: uDBpr7O+iFMubPyltbc8ulM5s/26ABsK5CVCQ3JckaU=) 4: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: tAOR3+qopwEEpOJ1MoufsE4Gb6QgCqX7uwexYPM3lns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 07:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:df:2e:38:17:7b:12:71:0c:1a:f8:ed:e8:9d:12:31:5b:d3:cb:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Apr 16 03:37:11 2026 GMT Not After : Apr 19 07:52:11 2026 GMT Subject: CN=122355C3FE5FD904E4A3291F1C9FD2506B4B8592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:57:87:e2:21:b4:80:ac:fc:a1:49:78:62:ad: b0:ac:dc:df:b0:d2:b8:f6:0b:0d:6b:60:f9:e5:ff: 25:5c:5a:e9:e5:7d:b7:14:b7:8f:23:d1:cb:1b:c1: 14:d6:4b:a4:14:61:68:6f:c5:50:7d:3e:50:11:8a: fb:9f:6c:58:4c:6d:b4:ff:0f:4c:f0:f0:2b:be:87: 83:05:0e:04:04:73:81:11:67:6b:64:2a:66:01:ad: b8:94:9a:ec:27:aa:53:a7:9f:52:7f:1a:cf:25:8b: 4a:00:a8:82:ee:1b:f9:40:d9:35:c5:28:70:de:5b: 44:b0:ad:b9:8d:a7:da:06:2a:57:97:a7:e8:be:d0: 22:05:d9:9d:ff:cc:b7:b2:bb:da:0a:4e:88:d5:0c: 4d:e0:ce:9c:8d:1c:53:5e:5c:d4:11:60:99:4d:3c: 0d:f5:8c:09:3f:52:6f:a2:b4:11:e0:48:a7:08:f4: d5:dd:c2:be:ea:6a:0d:fc:9b:88:ba:15:4d:8d:a9: b0:a8:cf:d1:e5:d6:5d:9c:61:36:1f:32:92:1c:d8: 27:77:9d:37:20:34:e8:c1:33:85:5b:da:25:34:42: 47:63:a3:97:09:e7:72:90:de:ba:17:88:dc:47:41: 3c:df:06:a5:87:9a:51:23:cd:db:32:33:48:01:4d: d0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:23:55:C3:FE:5F:D9:04:E4:A3:29:1F:1C:9F:D2:50:6B:4B:85:92 X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:57:c9:b2:90:b4:89:9f:89:55:7e:83:91:41:75:72:74:89: 2e:24:f0:6a:53:a6:a6:c5:c5:08:b3:da:d3:e9:79:d0:8b:e8: 58:21:5f:83:fd:b3:17:30:07:d4:dd:42:f2:51:04:c5:d2:f8: 08:9c:bb:fa:6c:7c:93:51:81:a5:9a:69:d8:d8:cd:80:91:ac: 7f:04:1b:76:04:67:7c:ac:bb:82:a4:e2:7c:fc:12:c5:35:bb: 0a:92:f6:f9:80:ef:0e:91:84:15:50:b2:a3:a4:e4:9d:ae:34: 33:e7:8d:78:54:b5:3b:25:9d:17:a0:12:85:61:92:56:cf:6f: 3a:f1:2a:bc:04:b0:54:8f:92:85:5e:aa:c5:67:80:c2:95:53: 8f:a6:8c:7c:94:9f:a3:20:88:5c:fd:87:e0:7f:75:35:52:47: d4:b8:cd:00:89:15:71:e3:bc:b0:71:4b:2b:49:d5:ae:b6:f3: 7c:af:2f:f0:d2:13:a2:a0:7c:c9:87:b6:78:66:3e:c2:97:1f: 40:7f:43:d8:98:9f:bc:84:a8:ed:a7:d0:ea:52:14:a5:f3:64: 01:93:70:92:a7:17:29:93:19:f0:ab:fb:59:74:ab:b1:88:6b: 6a:da:cc:c8:2a:a5:d8:7c:15:41:a6:bb:89:7d:49:9a:eb:a8: 0d:8a:89:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUON8uOBd7EnEMGvjt6J0SMVvTy+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNjA0MTYwMzM3MTFaFw0yNjA0MTkwNzUyMTFaMDMxMTAvBgNV BAMTKDEyMjM1NUMzRkU1RkQ5MDRFNEEzMjkxRjFDOUZEMjUwNkI0Qjg1OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLV4fiIbSArPyhSXhirbCs3N+w 0rj2Cw1rYPnl/yVcWunlfbcUt48j0csbwRTWS6QUYWhvxVB9PlARivufbFhMbbT/ D0zw8Cu+h4MFDgQEc4ERZ2tkKmYBrbiUmuwnqlOnn1J/Gs8li0oAqILuG/lA2TXF KHDeW0SwrbmNp9oGKleXp+i+0CIF2Z3/zLeyu9oKTojVDE3gzpyNHFNeXNQRYJlN PA31jAk/Um+itBHgSKcI9NXdwr7qag38m4i6FU2NqbCoz9Hl1l2cYTYfMpIc2Cd3 nTcgNOjBM4Vb2iU0Qkdjo5cJ53KQ3roXiNxHQTzfBqWHmlEjzdsyM0gBTdBdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEiNVw/5f2QTkoykfHJ/SUGtLhZIwHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRB ODA1RURFMzMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANXybKQtImfiVV+g5FBdXJ0iS4k8GpTpqbF xQiz2tPpedCL6FghX4P9sxcwB9TdQvJRBMXS+Aicu/psfJNRgaWaadjYzYCRrH8E G3YEZ3ysu4Kk4nz8EsU1uwqS9vmA7w6RhBVQsqOk5J2uNDPnjXhUtTslnRegEoVh klbPbzrxKrwEsFSPkoVeqsVngMKVU4+mjHyUn6MgiFz9h+B/dTVSR9S4zQCJFXHj vLBxSytJ1a6283yvL/DSE6KgfMmHtnhmPsKXH0B/Q9iYn7yEqO2n0OpSFKXzZAGT cJKnFymTGfCr+1l0q7GIa2razMgqpdh8FUGmu4l9SZrrqA2KiQk= -----END CERTIFICATE-----Generated at Fri Apr 17 15:17:04 2026 by rpki-client