$ rpki-client -vvf repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/3809A288AA4D4C241EA6011D90DBF2693B3333D2.mft File: 3809A288AA4D4C241EA6011D90DBF2693B3333D2.mft (raw, json) Hash identifier: nzTNsghaY1jjNdiXneRopWkuxENOzAP3RuL71sAy9WM= Subject key identifier: E2:12:1B:1C:D6:67:CD:11:A9:4B:DD:D0:1C:86:01:07:D4:EF:B2:08 Authority key identifier: 38:09:A2:88:AA:4D:4C:24:1E:A6:01:1D:90:DB:F2:69:3B:33:33:D2 Certificate issuer: /CN=3809A288AA4D4C241EA6011D90DBF2693B3333D2 Certificate serial: 05D035E8695645DF1E41DA2FD5BE7C46137FAED6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3809A288AA4D4C241EA6011D90DBF2693B3333D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/3809A288AA4D4C241EA6011D90DBF2693B3333D2.mft Manifest number: 31 Signing time: Fri 17 Apr 2026 15:30:04 +0000 Manifest this update: Fri 17 Apr 2026 15:25:04 +0000 Manifest next update: Tue 21 Apr 2026 00:35:04 +0000 Files and hashes: 1: 3809A288AA4D4C241EA6011D90DBF2693B3333D2.crl (hash: wDwnW3w1oEsvBuC9f/rm1rAGwW+o9BWGv1iSomjbYCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/3809A288AA4D4C241EA6011D90DBF2693B3333D2.crl rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/3809A288AA4D4C241EA6011D90DBF2693B3333D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3809A288AA4D4C241EA6011D90DBF2693B3333D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 00:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d0:35:e8:69:56:45:df:1e:41:da:2f:d5:be:7c:46:13:7f:ae:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3809A288AA4D4C241EA6011D90DBF2693B3333D2 Validity Not Before: Apr 17 15:25:04 2026 GMT Not After : Apr 21 00:35:04 2026 GMT Subject: CN=E2121B1CD667CD11A94BDDD01C860107D4EFB208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a4:0e:f6:3a:a0:7b:0b:5b:5e:aa:e8:9f:02: 69:21:68:a0:42:c5:bd:62:63:15:e8:eb:c9:75:18: cd:ca:c0:4c:6c:2a:29:e6:82:25:b0:6b:2c:fa:87: 9f:12:6c:5c:5c:d6:62:83:24:59:98:35:70:17:b2: 67:d0:65:6f:f3:4c:f0:79:45:34:d7:fd:c1:cd:3f: 6c:3f:88:ce:1c:f1:12:b0:c0:85:fa:a0:b5:ea:d0: 2a:78:b4:a7:df:74:f7:cb:ee:e5:ff:59:16:9b:fd: 7a:f4:cb:fc:9d:0e:4f:3e:d4:65:96:b7:1d:c8:d3: fe:55:8a:a4:7b:22:35:fc:77:4d:1f:62:e0:bb:75: 30:c8:04:85:21:7a:82:c7:d5:ec:65:97:f6:05:62: 80:2e:79:03:2b:a2:d5:2d:4b:2d:dc:c2:f7:44:c9: 26:05:9f:6a:3d:3a:86:6b:18:4a:56:b1:0e:70:53: 19:32:f0:e2:4a:0b:f2:a6:69:7b:a3:75:96:29:56: 2f:9f:c8:73:21:bf:76:36:36:45:30:35:fe:b5:a7: 7b:11:8a:bb:ad:6f:8b:34:d2:dc:fa:ec:0b:92:98: b7:2d:a1:dc:91:fd:58:f6:fa:0c:f3:4d:ba:8d:ad: 13:6e:1f:58:7e:1c:d3:44:cc:6d:d2:87:6c:fe:fb: 1d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:12:1B:1C:D6:67:CD:11:A9:4B:DD:D0:1C:86:01:07:D4:EF:B2:08 X509v3 Authority Key Identifier: keyid:38:09:A2:88:AA:4D:4C:24:1E:A6:01:1D:90:DB:F2:69:3B:33:33:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/3809A288AA4D4C241EA6011D90DBF2693B3333D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3809A288AA4D4C241EA6011D90DBF2693B3333D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/3809A288AA4D4C241EA6011D90DBF2693B3333D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:60:8a:6a:ea:1f:64:e9:e4:da:3a:4d:57:b1:69:81:08:05: 17:29:c1:3c:87:e4:75:0f:fc:be:01:c0:34:30:c0:66:6b:84: 0c:b1:88:b5:fa:53:42:ad:62:34:e5:cf:ce:65:fc:de:ae:2c: 80:e0:99:23:ee:81:d9:3c:2d:3a:c6:7d:07:e2:9c:e6:52:56: 3b:a2:72:60:56:8d:d1:b8:d3:7a:9e:b1:8a:fa:fc:e9:b8:92: 3f:c9:f2:19:4e:1d:2d:e1:46:f9:af:7e:98:10:56:66:a2:18: 13:e1:a5:f2:1e:8a:68:57:e9:89:8d:7a:97:9f:ea:d0:df:ad: ba:33:74:52:fe:7f:ca:d8:de:ce:d0:21:07:78:88:e1:bc:0f: 9f:cf:d9:aa:57:1b:41:d1:12:d5:57:9f:b7:95:95:e3:ad:08: 97:e6:63:c5:b3:3e:9a:b2:68:8d:14:f6:98:be:ef:d8:8b:a0: 8e:1c:60:ce:8c:b0:48:90:68:9c:99:d6:dd:49:3f:f8:f1:5d: 68:c8:93:a7:b9:41:69:55:2c:31:fc:8f:cb:67:33:e6:31:d9: 27:52:3a:73:75:c5:9c:37:7b:8f:67:3e:9e:bd:ed:ee:13:3f: 96:ec:75:50:a1:8a:bb:77:d9:c7:b1:77:fe:95:53:1e:73:ed: 4c:6f:9c:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBdA16GlWRd8eQdov1b58RhN/rtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgwOUEyODhBQTRENEMyNDFFQTYwMTFEOTBEQkYyNjkz QjMzMzNEMjAeFw0yNjA0MTcxNTI1MDRaFw0yNjA0MjEwMDM1MDRaMDMxMTAvBgNV BAMTKEUyMTIxQjFDRDY2N0NEMTFBOTRCREREMDFDODYwMTA3RDRFRkIyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtpA72OqB7C1tequifAmkhaKBC xb1iYxXo68l1GM3KwExsKinmgiWwayz6h58SbFxc1mKDJFmYNXAXsmfQZW/zTPB5 RTTX/cHNP2w/iM4c8RKwwIX6oLXq0Cp4tKffdPfL7uX/WRab/Xr0y/ydDk8+1GWW tx3I0/5ViqR7IjX8d00fYuC7dTDIBIUheoLH1exll/YFYoAueQMrotUtSy3cwvdE ySYFn2o9OoZrGEpWsQ5wUxky8OJKC/KmaXujdZYpVi+fyHMhv3Y2NkUwNf61p3sR irutb4s00tz67AuSmLctodyR/Vj2+gzzTbqNrRNuH1h+HNNEzG3Sh2z++x1jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4hIbHNZnzRGpS93QHIYBB9TvsggwHwYDVR0j BBgwFoAUOAmiiKpNTCQepgEdkNvyaTszM9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDc4YjUwYi00NDljLTQ1NGItODUwZC1mMjA4MDM3ODliNTgvMC8zODA5QTI4OEFB NEQ0QzI0MUVBNjAxMUQ5MERCRjI2OTNCMzMzM0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzgwOUEyODhBQTRENEMyNDFFQTYwMTFEOTBEQkYyNjkzQjMz MzNEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzAvMzgwOUEyODhBQTRENEMyNDFFQTYwMTFEOTBEQkYy NjkzQjMzMzNEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVgimrqH2Tp5No6TVexaYEIBRcpwTyH5HUP /L4BwDQwwGZrhAyxiLX6U0KtYjTlz85l/N6uLIDgmSPugdk8LTrGfQfinOZSVjui cmBWjdG403qesYr6/Om4kj/J8hlOHS3hRvmvfpgQVmaiGBPhpfIeimhX6YmNepef 6tDfrbozdFL+f8rY3s7QIQd4iOG8D5/P2apXG0HREtVXn7eVleOtCJfmY8WzPpqy aI0U9pi+79iLoI4cYM6MsEiQaJyZ1t1JP/jxXWjIk6e5QWlVLDH8j8tnM+Yx2SdS OnN1xZw3e49nPp697e4TP5bsdVChirt32cexd/6VUx5z7UxvnA0= -----END CERTIFICATE-----Generated at Fri Apr 17 22:05:25 2026 by rpki-client