$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft File: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json) Hash identifier: Kvf66Um3Y3FsL98EAQr+QF+n8Ao43JX5PMIeeIAMbnw= Subject key identifier: 8B:3C:48:F4:D6:3E:8E:7A:E5:BF:15:37:65:C4:7B:0D:7A:82:F3:3B Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 Certificate issuer: /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Certificate serial: 24568612CC31A0DBF7CDA7F82CF63EECA4504627 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft Manifest number: EE Signing time: Thu 16 Apr 2026 18:21:04 +0000 Manifest this update: Thu 16 Apr 2026 18:16:04 +0000 Manifest next update: Mon 20 Apr 2026 00:49:04 +0000 Files and hashes: 1: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: homg5w1o8Ac7RkByH0/Fbb96kiXTeJPDkxjgg7Q4x1k=) 2: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: Oxq6SR4Kl2D0aM9c2ZYqxEX6hDi1YfPsr6Jrr15OEFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:56:86:12:cc:31:a0:db:f7:cd:a7:f8:2c:f6:3e:ec:a4:50:46:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Validity Not Before: Apr 16 18:16:04 2026 GMT Not After : Apr 20 00:49:04 2026 GMT Subject: CN=8B3C48F4D63E8E7AE5BF153765C47B0D7A82F33B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:34:cf:8d:73:4c:9b:0c:5b:4e:e2:ec:86:20: 13:17:79:3f:76:cc:7e:13:42:5e:76:78:89:e6:05: 65:cc:4b:3f:45:6a:00:ef:2b:a0:c6:14:50:ea:b3: 35:d4:86:70:bd:6d:f1:ef:d5:66:f0:0c:d1:41:bb: 50:df:67:a1:6b:73:b0:fc:30:80:22:b1:86:fa:9d: de:13:8a:81:4e:14:96:0a:18:47:f9:05:f5:97:ff: 24:ee:3c:0f:62:a1:ff:26:b2:e6:cd:15:74:0a:bc: 01:c7:db:68:d0:14:d4:7b:c8:8c:24:2d:ca:72:c5: 69:71:3f:5f:94:f5:58:d9:31:63:49:2f:dd:f8:95: 47:8d:e9:0c:5c:84:bf:ad:48:5b:fe:8d:ea:02:6b: 47:5b:f5:91:e0:4b:ef:60:80:41:b4:3f:c5:87:c8: fa:6b:60:35:c6:1e:4b:c3:e3:79:67:74:a1:89:bf: 8d:68:17:bf:4d:f6:7f:db:b5:c2:8b:86:81:07:24: 86:de:e1:19:cc:6d:df:31:3f:02:26:51:ee:7f:20: 75:a8:34:d7:ea:80:1f:e8:53:8b:bc:2c:0e:85:0b: b8:8c:ec:ea:77:0d:63:5c:c4:0f:4c:09:5c:0a:33: 2a:fc:65:e0:10:0c:c4:58:b5:82:20:54:26:f4:24: 94:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3C:48:F4:D6:3E:8E:7A:E5:BF:15:37:65:C4:7B:0D:7A:82:F3:3B X509v3 Authority Key Identifier: keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:25:75:e4:4a:39:80:15:6b:99:70:21:d1:fd:c4:54:5c:24: 16:f6:5a:4b:3d:51:b3:7d:a6:c1:24:be:b9:f4:26:db:b3:56: 8a:d3:fd:28:d6:b1:7a:7c:12:a4:85:7e:ce:1f:7f:96:1b:23: 04:db:83:54:18:2b:e7:f9:c6:06:43:41:22:c8:c1:22:22:7e: 6d:c1:c8:2f:40:2c:8b:e4:a4:98:65:be:01:32:71:8f:42:d0: 64:4d:9e:ca:1d:e5:2c:39:22:8c:f2:39:59:03:cd:a4:16:e0: 87:cb:ec:c6:63:3f:6b:83:38:a5:77:8d:2f:2b:25:0a:f5:ff: e9:cb:e1:01:95:2f:3a:9f:4b:67:20:cf:72:ae:ef:87:ff:26: 53:a6:34:ec:f5:18:24:d3:25:98:91:ab:95:8b:80:86:11:c0: f2:19:af:3e:e1:63:67:71:e9:35:35:07:60:9a:5b:cf:ba:a1: 2a:49:94:7b:ee:1e:7b:9c:dd:3e:66:22:62:6d:12:34:fa:8c: fd:2d:2a:60:fc:f7:23:89:8f:92:3b:af:70:0b:df:71:06:42: 1b:62:c1:09:47:2f:d9:0a:c7:b2:5b:b6:fb:d7:0b:2d:5b:ad: 2a:a4:e6:9b:9a:e0:94:25:a2:59:90:eb:e7:65:3a:4c:e9:32: 4e:5d:c7:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJFaGEswxoNv3zaf4LPY+7KRQRicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVF OUUwN0JGNDAeFw0yNjA0MTYxODE2MDRaFw0yNjA0MjAwMDQ5MDRaMDMxMTAvBgNV BAMTKDhCM0M0OEY0RDYzRThFN0FFNUJGMTUzNzY1QzQ3QjBEN0E4MkYzM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2NM+Nc0ybDFtO4uyGIBMXeT92 zH4TQl52eInmBWXMSz9FagDvK6DGFFDqszXUhnC9bfHv1WbwDNFBu1DfZ6Frc7D8 MIAisYb6nd4TioFOFJYKGEf5BfWX/yTuPA9iof8msubNFXQKvAHH22jQFNR7yIwk LcpyxWlxP1+U9VjZMWNJL934lUeN6QxchL+tSFv+jeoCa0db9ZHgS+9ggEG0P8WH yPprYDXGHkvD43lndKGJv41oF79N9n/btcKLhoEHJIbe4RnMbd8xPwImUe5/IHWo NNfqgB/oU4u8LA6FC7iM7Op3DWNcxA9MCVwKMyr8ZeAQDMRYtYIgVCb0JJQrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUizxI9NY+jnrlvxU3ZcR7DXqC8zswHwYDVR0j BBgwFoAUPOympdKxOPXgXOgV1qnZBenge/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMC8zQ0VDQTZBNUQy QjEzOEY1RTA1Q0U4MTVENkE5RDkwNUU5RTA3QkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVFOUUw N0JGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ4ZWM1ZWItMDM1NC00ZDg3LWIy YmUtMDhmZmFkNGFhMDZhLzAvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5 MDVFOUUwN0JGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEldeRKOYAVa5lwIdH9xFRcJBb2Wks9UbN9 psEkvrn0JtuzVorT/SjWsXp8EqSFfs4ff5YbIwTbg1QYK+f5xgZDQSLIwSIifm3B yC9ALIvkpJhlvgEycY9C0GRNnsod5Sw5IozyOVkDzaQW4IfL7MZjP2uDOKV3jS8r JQr1/+nL4QGVLzqfS2cgz3Ku74f/JlOmNOz1GCTTJZiRq5WLgIYRwPIZrz7hY2dx 6TU1B2CaW8+6oSpJlHvuHnuc3T5mImJtEjT6jP0tKmD89yOJj5I7r3AL33EGQhti wQlHL9kKx7JbtvvXCy1brSqk5pua4JQlolmQ6+dlOkzpMk5dx9k= -----END CERTIFICATE-----Generated at Fri Apr 17 20:52:48 2026 by rpki-client