$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft File: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft (raw, json) Hash identifier: X5m1hcXkHm8+yA1CqHbty0dvDcXKdMwzI5GXP6N4UN0= Subject key identifier: 92:3F:E6:CC:DD:6F:D5:20:10:E7:00:15:4F:3F:88:8F:9A:3F:D7:B7 Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A Certificate issuer: /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Certificate serial: 0C25FBCC02A0D0CC85D77600127A3B26A5189954 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft Manifest number: 0297 Signing time: Fri 17 Apr 2026 00:32:07 +0000 Manifest this update: Fri 17 Apr 2026 00:27:07 +0000 Manifest next update: Mon 20 Apr 2026 09:58:07 +0000 Files and hashes: 1: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: DTS/Msv2+J+yWcCmX3IMnnNepiaqaJENVR2ewyRj56c=) 2: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl (hash: QeIEd8CVhYfOU+Rle5FS06UsgIBBnJNp9hRJyCUJ7m0=) 3: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: Iu3jqOF1OKCYSUkajjnPtBWzUDppzjUa82PRV4A9qHs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:25:fb:cc:02:a0:d0:cc:85:d7:76:00:12:7a:3b:26:a5:18:99:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Validity Not Before: Apr 17 00:27:07 2026 GMT Not After : Apr 20 09:58:07 2026 GMT Subject: CN=923FE6CCDD6FD52010E700154F3F888F9A3FD7B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:c0:a6:a7:14:b1:54:21:83:12:8b:ff:ed: af:8b:79:03:d6:76:f5:4a:49:33:d3:fc:d9:e4:37: 67:5d:42:1b:1b:3e:7d:b0:4b:06:e0:b1:a8:e2:4a: a8:87:a0:81:f4:68:37:d7:67:05:65:8b:ff:b7:92: 5a:02:3d:88:4f:af:91:0c:5e:30:51:49:e1:0f:82: a4:51:60:ef:e5:bb:0c:c3:18:20:a8:2e:df:f1:63: 8e:36:ef:71:86:08:a1:4e:13:16:c5:68:bf:11:35: 63:1c:8b:31:fa:a8:46:83:b4:ee:65:f7:e1:16:17: 4b:52:16:f4:4c:a3:b9:2e:f5:b5:db:bb:06:e5:e3: 9d:b0:a0:d6:10:34:64:24:a6:71:d6:20:85:d0:1a: 72:23:a6:2e:77:90:fc:4a:47:05:1d:e6:2c:69:31: e5:57:28:d6:93:0c:a6:08:c2:c2:4b:36:90:b0:0d: 6e:88:ee:d1:1e:71:5e:ae:b1:98:b3:07:57:5b:02: 55:9f:56:1b:fd:25:df:85:0e:72:1f:9b:d6:19:2b: 45:1d:42:a6:d1:2a:9b:18:1e:b9:90:08:9a:9d:1a: 09:53:af:e5:5f:38:3e:1e:d5:3e:85:94:ea:f4:c2: 26:e0:fd:60:14:bd:da:6e:18:f9:88:8f:96:08:76: d5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3F:E6:CC:DD:6F:D5:20:10:E7:00:15:4F:3F:88:8F:9A:3F:D7:B7 X509v3 Authority Key Identifier: keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:73:7b:01:af:66:21:b7:d0:c0:c3:9f:d2:c4:f6:c0:da:40: 92:fe:68:ff:a1:48:a0:4e:f8:55:5b:10:6a:be:9b:1c:6a:46: ca:d8:c4:32:9c:8f:b8:de:f5:c4:a9:90:0f:d9:3e:90:fe:40: 8f:d6:17:2d:78:95:b4:10:10:85:71:e2:9e:38:84:dd:8d:1f: eb:d1:5d:f5:65:94:11:92:b1:4e:71:4c:5b:43:ba:51:41:6b: 3b:7b:a4:ea:e7:40:1d:48:8a:87:8f:68:0e:a9:d5:73:3e:b8: f1:86:c5:c8:ca:7a:77:bb:df:61:29:99:fc:b3:64:cc:c8:84: 5d:e0:f0:a8:4d:be:ca:76:5b:12:8b:0a:f2:90:a9:a0:b3:da: 7d:e7:e0:9b:85:45:64:7f:2c:4a:92:8d:91:4e:6b:bd:d1:eb: 55:66:12:ae:ca:0b:b0:f0:ec:12:14:1d:e5:ce:c6:83:c5:21: 5a:0e:aa:8f:f3:13:e7:a8:82:d8:50:4b:3d:49:47:85:f2:a0: 3f:be:3f:8c:20:3d:b3:7d:49:99:45:2e:ad:01:9f:f3:0c:39: 05:0f:b4:fd:ad:8f:eb:ce:ef:08:20:8a:05:32:dd:77:49:03: 57:46:f7:0a:f6:3c:9f:c9:0b:37:e1:e6:c2:ef:45:7e:ab:95: ba:87:f9:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDCX7zAKg0MyF13YAEno7JqUYmVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAy N0FCM0Y5QTAeFw0yNjA0MTcwMDI3MDdaFw0yNjA0MjAwOTU4MDdaMDMxMTAvBgNV BAMTKDkyM0ZFNkNDREQ2RkQ1MjAxMEU3MDAxNTRGM0Y4ODhGOUEzRkQ3QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKH8CmpxSxVCGDEov/7a+LeQPW dvVKSTPT/NnkN2ddQhsbPn2wSwbgsajiSqiHoIH0aDfXZwVli/+3kloCPYhPr5EM XjBRSeEPgqRRYO/luwzDGCCoLt/xY44273GGCKFOExbFaL8RNWMcizH6qEaDtO5l 9+EWF0tSFvRMo7ku9bXbuwbl452woNYQNGQkpnHWIIXQGnIjpi53kPxKRwUd5ixp MeVXKNaTDKYIwsJLNpCwDW6I7tEecV6usZizB1dbAlWfVhv9Jd+FDnIfm9YZK0Ud QqbRKpsYHrmQCJqdGglTr+VfOD4e1T6FlOr0wibg/WAUvdpuGPmIj5YIdtVlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkj/mzN1v1SAQ5wAVTz+Ij5o/17cwHwYDVR0j BBgwFoAUP9brF+Z6zEBg93f1pOP5oCerP5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTIyNjk0OC1iMWExLTQyOTQtOTE1MC02YWYwZTBiZWJmYjgvMC8zRkQ2RUIxN0U2 N0FDQzQwNjBGNzc3RjVBNEUzRjlBMDI3QUIzRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAyN0FC M0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjkyMjY5NDgtYjFhMS00Mjk0LTkx NTAtNmFmMGUwYmViZmI4LzAvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5 QTAyN0FCM0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtzewGvZiG30MDDn9LE9sDaQJL+aP+hSKBO +FVbEGq+mxxqRsrYxDKcj7je9cSpkA/ZPpD+QI/WFy14lbQQEIVx4p44hN2NH+vR XfVllBGSsU5xTFtDulFBazt7pOrnQB1IioePaA6p1XM+uPGGxcjKene732Epmfyz ZMzIhF3g8KhNvsp2WxKLCvKQqaCz2n3n4JuFRWR/LEqSjZFOa73R61VmEq7KC7Dw 7BIUHeXOxoPFIVoOqo/zE+eogthQSz1JR4XyoD++P4wgPbN9SZlFLq0Bn/MMOQUP tP2tj+vO7wggigUy3XdJA1dG9wr2PJ/JCzfh5sLvRX6rlbqH+Z0= -----END CERTIFICATE-----Generated at Sat Apr 18 10:07:55 2026 by rpki-client