$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json) Hash identifier: bbrqkZHchZtH7LrtSeBQB33/653EhzC0/nU2MwQg9eU= Subject key identifier: D0:80:0F:CE:26:30:7D:44:3F:E5:BF:A2:D9:47:01:28:B4:AB:8D:37 Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Certificate serial: 531B9C3130A17D5806AED60B204EB6DDCCAD016E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft Manifest number: 0127 Signing time: Fri 17 Apr 2026 05:42:36 +0000 Manifest this update: Fri 17 Apr 2026 05:37:36 +0000 Manifest next update: Mon 20 Apr 2026 15:22:36 +0000 Files and hashes: 1: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: Gt/zy9SOqgOtFLRu+JCorllMaeea+cVI7EsPRYyKbJM=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: Sfdp2ETmAB6FU1WSvmecpTzRs2Nz0Rf6LLcGShnuuzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:1b:9c:31:30:a1:7d:58:06:ae:d6:0b:20:4e:b6:dd:cc:ad:01:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Validity Not Before: Apr 17 05:37:36 2026 GMT Not After : Apr 20 15:22:36 2026 GMT Subject: CN=D0800FCE26307D443FE5BFA2D9470128B4AB8D37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:53:c4:f3:0e:23:93:76:0b:50:e4:c5:9d:3a: 12:ba:c3:68:1a:e4:4b:ec:f7:31:b6:de:8f:6b:85: 91:10:44:09:61:ee:6b:e0:2a:4e:59:ce:77:45:82: af:9e:6e:ad:ad:7d:fa:c1:88:17:fe:48:4d:f7:2d: ac:87:51:c7:fd:9d:5e:8e:4c:b2:66:8e:10:9d:26: f2:a1:f7:76:97:df:c5:82:80:f3:91:2b:42:a6:5b: 78:b1:5f:36:24:88:97:e1:fc:f3:23:57:d0:f7:29: e0:de:e6:5d:e2:04:00:b1:88:6c:9b:6f:5e:13:8f: d8:6f:df:ae:78:8f:f5:18:7b:54:42:d4:f8:11:d5: 34:92:80:c6:4a:b1:dc:ca:43:21:22:f7:cb:67:c5: d5:15:81:3c:11:08:ae:07:6a:33:23:d7:dd:9c:18: 71:9a:06:18:00:63:21:40:bb:06:14:80:b2:90:67: 69:69:c9:d3:8c:aa:37:f6:e3:e1:a0:a2:ba:76:07: 6c:cd:8e:b9:38:02:b7:6c:f8:e7:60:64:31:ce:a3: 92:04:d2:9d:e1:a1:22:a2:50:c3:0e:47:50:fa:ae: c8:0b:48:d2:b3:85:78:2c:da:70:71:9e:8c:88:cb: 18:85:d6:89:c3:78:72:7c:6b:31:ef:b8:b4:88:15: 43:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:80:0F:CE:26:30:7D:44:3F:E5:BF:A2:D9:47:01:28:B4:AB:8D:37 X509v3 Authority Key Identifier: keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f9:4f:d8:dc:67:65:6e:65:59:89:c8:47:6b:b1:6a:14:42: 2f:94:7b:74:c1:6c:b0:45:96:12:8c:f2:e1:d3:58:41:56:fb: 12:6f:7a:a2:4f:19:6d:a7:2e:9a:c1:46:40:8d:a4:cc:4d:f2: ef:2e:59:81:ae:6d:ab:fa:3e:c0:be:29:87:d7:4b:8e:0d:cb: 4b:3a:a1:eb:23:ce:e5:0b:fe:24:1a:4b:7c:54:44:cf:66:d8: da:0f:4a:8f:24:90:55:e8:c0:ee:55:71:10:0d:ea:86:64:48: 55:fb:ad:f0:0a:a0:a7:5c:73:70:bb:41:24:19:6f:d7:0c:f3: 42:0b:5b:b6:4c:c6:8f:81:2c:d5:0a:d8:25:63:f5:64:40:11: 02:d9:50:67:e2:db:78:db:c4:2e:fb:2e:07:b3:3f:95:92:9e: 48:cb:69:2e:69:20:37:42:0a:bf:05:86:ba:fd:39:19:19:82: 3f:36:53:f0:95:4e:a1:73:e3:5b:47:82:d2:de:57:72:62:55: 6f:a3:d2:1d:d5:9c:0e:79:bc:d5:18:12:a1:39:df:bb:39:a2: 03:9e:16:7d:77:8e:0c:8e:b1:87:2a:bd:56:d4:21:cb:f0:1b: 51:a8:da:74:3a:76:3b:0f:b7:62:6e:75:54:89:b8:f1:e7:b6: 22:8b:c9:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUxucMTChfVgGrtYLIE623cytAW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4 RjM4QkFBNjAeFw0yNjA0MTcwNTM3MzZaFw0yNjA0MjAxNTIyMzZaMDMxMTAvBgNV BAMTKEQwODAwRkNFMjYzMDdENDQzRkU1QkZBMkQ5NDcwMTI4QjRBQjhEMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaU8TzDiOTdgtQ5MWdOhK6w2ga 5Evs9zG23o9rhZEQRAlh7mvgKk5ZzndFgq+ebq2tffrBiBf+SE33LayHUcf9nV6O TLJmjhCdJvKh93aX38WCgPORK0KmW3ixXzYkiJfh/PMjV9D3KeDe5l3iBACxiGyb b14Tj9hv3654j/UYe1RC1PgR1TSSgMZKsdzKQyEi98tnxdUVgTwRCK4HajMj192c GHGaBhgAYyFAuwYUgLKQZ2lpydOMqjf24+Ggorp2B2zNjrk4Ards+OdgZDHOo5IE 0p3hoSKiUMMOR1D6rsgLSNKzhXgs2nBxnoyIyxiF1onDeHJ8azHvuLSIFUOTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0IAPziYwfUQ/5b+i2UcBKLSrjTcwHwYDVR0j BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5 MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4 QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/5T9jcZ2VuZVmJyEdrsWoUQi+Ue3TBbLBF lhKM8uHTWEFW+xJveqJPGW2nLprBRkCNpMxN8u8uWYGubav6PsC+KYfXS44Ny0s6 oesjzuUL/iQaS3xURM9m2NoPSo8kkFXowO5VcRAN6oZkSFX7rfAKoKdcc3C7QSQZ b9cM80ILW7ZMxo+BLNUK2CVj9WRAEQLZUGfi23jbxC77LgezP5WSnkjLaS5pIDdC Cr8Fhrr9ORkZgj82U/CVTqFz41tHgtLeV3JiVW+j0h3VnA55vNUYEqE537s5ogOe Fn13jgyOsYcqvVbUIcvwG1Go2nQ6djsPt2JudVSJuPHntiKLyQI= -----END CERTIFICATE-----Generated at Sat Apr 18 04:39:35 2026 by rpki-client