$ rpki-client -vvf repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft File: 3A594744F1BEA2F04C7437AD77133DD4423F2302.mft (raw, json) Hash identifier: 0/55B+jsUbVTvqbzgZ4APPyla9HdLJ+f2UVjR0x+aZw= Subject key identifier: 1C:02:EE:E3:3A:A8:11:3A:47:C1:81:2C:2E:69:62:B4:8B:C5:C1:CA Authority key identifier: 3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 Certificate issuer: /CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Certificate serial: 409359432FB4FEA4D330301BA3C1EABA51CD9154 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft Manifest number: 01DD Signing time: Fri 17 Apr 2026 21:02:10 +0000 Manifest this update: Fri 17 Apr 2026 20:57:10 +0000 Manifest next update: Mon 20 Apr 2026 21:42:10 +0000 Files and hashes: 1: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: V7xwcl0k/wohTR9W8bA+ryS5bQrHzSDEtp81r7CMd0o=) 2: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: NewfUB+lgmscpjQ8d8uHTPa+ibrc/cZ+CDOKTYvxIBA=) 3: 3A594744F1BEA2F04C7437AD77133DD4423F2302.crl (hash: YSR1mhylUAL+xBV0H8qOf0QM/f8Ibu+PZWJePc9AIIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:93:59:43:2f:b4:fe:a4:d3:30:30:1b:a3:c1:ea:ba:51:cd:91:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Validity Not Before: Apr 17 20:57:10 2026 GMT Not After : Apr 20 21:42:10 2026 GMT Subject: CN=1C02EEE33AA8113A47C1812C2E6962B48BC5C1CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:d2:4d:96:40:a5:af:94:3f:0f:a4:a5:84: c5:09:3e:11:ac:ed:32:0e:b0:10:87:c7:ae:a6:a8: f2:53:48:68:08:45:f5:db:dd:4f:8d:a4:c6:66:a5: 1e:f3:9d:47:cf:e6:cd:44:2e:5f:3d:fa:d3:34:0c: c6:4c:52:8a:67:3e:74:df:43:c5:57:71:62:2d:d7: 65:d3:99:73:ea:df:56:44:33:76:94:e0:fa:6f:45: d8:fd:42:10:52:2c:33:c9:11:b4:38:cb:da:a2:db: c1:0b:f4:b5:99:4d:da:53:7a:c0:c8:6f:9c:4d:2b: 06:07:28:92:ae:9f:a1:98:28:88:26:e2:6a:3b:00: 84:71:2d:d5:6c:dc:ec:02:62:0f:04:53:81:af:6e: 0c:a9:71:43:4d:f1:dc:ae:b5:b8:6d:7d:73:46:78: bf:a9:aa:fb:7c:e9:44:6e:27:a8:0d:2e:76:d0:7a: b3:d8:09:1b:db:a3:94:24:76:c3:c9:01:45:33:2a: f2:d5:03:7e:88:bb:b6:23:6b:b8:09:f3:d8:69:8a: df:73:6a:23:ab:d2:79:47:17:2f:57:ec:65:1e:b5: 6a:f9:4b:bb:10:9d:6b:db:87:c3:9c:dc:c6:2c:37: 20:24:57:85:4c:e5:82:f6:e5:df:0c:fa:42:c4:c3: 7a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:02:EE:E3:3A:A8:11:3A:47:C1:81:2C:2E:69:62:B4:8B:C5:C1:CA X509v3 Authority Key Identifier: keyid:3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c4:c5:65:36:8a:68:67:68:c7:54:f8:2b:93:6f:26:e5:e4: d3:f1:91:52:b6:9f:75:1a:aa:29:3e:ee:bc:a2:b5:ec:d6:b4: 3a:84:e8:61:53:8e:6e:d6:7d:a7:fd:ce:ab:34:0c:b7:46:04: c3:d3:13:9d:79:5a:74:2f:0e:9d:2a:76:3f:2f:1a:e9:ba:fb: 52:55:39:c4:e1:9b:fc:ed:15:86:61:00:f7:15:d5:36:ef:c0: c0:e1:95:ed:ac:96:63:6e:ea:e6:a6:b6:e2:19:53:d7:32:26: 0b:4b:b7:bf:20:07:de:9a:46:d2:3a:43:fb:48:b2:00:4d:e7: e5:55:45:4e:d3:8c:ff:51:bc:0a:90:e4:b5:a8:e7:bb:b9:42: bf:a3:d0:9e:5f:60:fa:08:ff:fc:ea:74:6a:a9:3a:8c:bf:57: 90:64:f5:92:34:e2:cb:45:cc:08:b9:e8:30:96:9b:97:3c:05: a8:7d:e1:e3:c8:b2:85:bd:2c:97:c0:e8:75:e7:bb:9f:3d:46: cb:3e:5c:38:52:89:9f:14:f2:89:b1:21:bb:81:dd:da:4d:68: 83:71:e0:f9:b6:5e:49:f3:54:22:12:04:6b:f4:16:62:b9:23: 27:63:8d:50:39:25:69:46:7f:b8:7e:4e:f5:e8:f9:39:a7:fc: f5:64:07:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQJNZQy+0/qTTMDAbo8HqulHNkVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0 MjNGMjMwMjAeFw0yNjA0MTcyMDU3MTBaFw0yNjA0MjAyMTQyMTBaMDMxMTAvBgNV BAMTKDFDMDJFRUUzM0FBODExM0E0N0MxODEyQzJFNjk2MkI0OEJDNUMxQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxiNJNlkClr5Q/D6SlhMUJPhGs 7TIOsBCHx66mqPJTSGgIRfXb3U+NpMZmpR7znUfP5s1ELl89+tM0DMZMUopnPnTf Q8VXcWIt12XTmXPq31ZEM3aU4PpvRdj9QhBSLDPJEbQ4y9qi28EL9LWZTdpTesDI b5xNKwYHKJKun6GYKIgm4mo7AIRxLdVs3OwCYg8EU4GvbgypcUNN8dyutbhtfXNG eL+pqvt86URuJ6gNLnbQerPYCRvbo5QkdsPJAUUzKvLVA36Iu7Yja7gJ89hpit9z aiOr0nlHFy9X7GUetWr5S7sQnWvbh8Oc3MYsNyAkV4VM5YL25d8M+kLEw3otAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHALu4zqoETpHwYEsLmlitIvFwcowHwYDVR0j BBgwFoAUOllHRPG+ovBMdDetdxM91EI/IwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDYxNDE2My00Y2E0LTQ5MzYtYmY4Yi04NGQ4YzJkMWYwMmQvMC8zQTU5NDc0NEYx QkVBMkYwNEM3NDM3QUQ3NzEzM0RENDQyM0YyMzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0MjNG MjMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNE RDQ0MjNGMjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDExWU2imhnaMdU+CuTbybl5NPxkVK2n3Ua qik+7ryitezWtDqE6GFTjm7Wfaf9zqs0DLdGBMPTE515WnQvDp0qdj8vGum6+1JV OcThm/ztFYZhAPcV1TbvwMDhle2slmNu6uamtuIZU9cyJgtLt78gB96aRtI6Q/tI sgBN5+VVRU7TjP9RvAqQ5LWo57u5Qr+j0J5fYPoI//zqdGqpOoy/V5Bk9ZI04stF zAi56DCWm5c8Bah94ePIsoW9LJfA6HXnu589Rss+XDhSiZ8U8omxIbuB3dpNaINx 4Pm2XknzVCISBGv0FmK5IydjjVA5JWlGf7h+TvXo+Tmn/PVkB20= -----END CERTIFICATE-----Generated at Sat Apr 18 00:41:30 2026 by rpki-client