$ rpki-client -vvf repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft File: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft (raw, json) Hash identifier: mAoYXYHeXjUzxI4z5RWPTqiEHboUdhdUmX2l/WOeE/M= Subject key identifier: 4D:D6:5B:44:E7:E2:EE:2C:B0:00:BB:FF:82:64:81:92:BC:7F:3B:45 Authority key identifier: 3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 Certificate issuer: /CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Certificate serial: 4641ED85DFA3D44EEBCC324D72BBBD0E27B59BD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft Manifest number: 053A Signing time: Thu 16 Apr 2026 17:00:55 +0000 Manifest this update: Thu 16 Apr 2026 16:55:55 +0000 Manifest next update: Sun 19 Apr 2026 21:55:55 +0000 Files and hashes: 1: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl (hash: ZIktm1u/BNOtuig7ki+2dJgfFyGsh8QBK+8ypHur48I=) 2: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: IK+u+i97z9eMvyQxyRqv23SPg6t3j5oWeOL0K/ItAE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 21:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:41:ed:85:df:a3:d4:4e:eb:cc:32:4d:72:bb:bd:0e:27:b5:9b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Validity Not Before: Apr 16 16:55:55 2026 GMT Not After : Apr 19 21:55:55 2026 GMT Subject: CN=4DD65B44E7E2EE2CB000BBFF82648192BC7F3B45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:65:71:e6:df:a3:de:f7:ba:36:04:16:77: 1f:62:8d:03:ed:fa:e8:5a:4e:d0:d9:85:79:90:1e: 33:ee:83:8e:0c:c7:f0:4e:8e:4b:49:f6:82:f1:94: 40:dc:2c:a4:74:90:c7:0d:f1:4e:1d:8b:23:5b:3d: 6a:81:24:52:f7:15:0f:db:54:5e:4f:9a:fd:6a:12: 8e:ba:96:90:98:3e:1f:97:ce:4c:6b:28:06:1e:38: c2:96:88:4e:c0:71:72:ed:16:27:cb:ae:25:9a:28: b4:31:7a:ce:97:c3:a1:14:f9:1a:5b:c8:64:bd:72: 47:2a:e0:6e:6e:a0:bd:f3:9a:93:f4:35:77:3e:7b: d3:fa:d3:cf:8c:00:25:a8:d2:e3:a3:74:52:4e:be: b1:83:86:5f:47:d6:d7:d2:6f:fe:f5:e9:94:a2:25: 18:fa:e6:54:64:ff:98:e0:b8:70:7b:4f:e8:d2:0a: 4c:35:49:0a:ca:90:fb:0c:e0:63:f2:9f:f6:3b:80: db:fc:e8:68:0f:d0:34:d6:72:8a:59:e5:74:2a:0b: d2:90:cb:77:3b:f5:eb:b7:68:01:01:23:ba:a2:bb: 4e:de:3f:be:2f:32:4a:88:62:ff:c2:d4:c5:22:b6: b3:b6:0b:bb:6c:a1:b3:9a:23:66:c7:33:16:ea:05: e4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D6:5B:44:E7:E2:EE:2C:B0:00:BB:FF:82:64:81:92:BC:7F:3B:45 X509v3 Authority Key Identifier: keyid:3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:73:e9:99:c9:bb:b2:09:4c:ca:ab:8e:c9:7f:3b:02:af:9f: 4f:ca:2f:54:ba:14:82:02:d4:3f:83:1d:2f:41:8f:7a:2c:52: 70:1f:a4:21:11:9e:3c:df:9b:18:ca:6f:91:d9:a3:e1:39:8d: b0:96:d3:91:10:41:52:7e:fd:2a:46:ea:80:c7:29:ba:a7:75: 43:d6:40:e8:62:b9:bf:c5:b4:68:83:34:a9:25:7d:b4:6e:3b: 01:09:3f:fc:b8:c4:36:d1:a2:44:66:ed:98:7a:e6:d7:cb:5e: 25:9b:e4:85:90:ff:f6:d4:ea:ea:7a:bc:a8:9d:fb:82:d4:1e: b8:33:91:a5:c4:55:b3:e2:8e:07:b4:77:66:44:bf:56:10:7f: d7:a1:54:90:a1:0e:95:f2:d6:14:5a:63:a9:f7:c8:be:f8:4d: 2c:ec:81:a4:77:86:56:a5:ea:96:76:47:57:66:e7:03:2d:df: 6b:bf:82:06:80:3a:7f:6c:6b:0e:64:87:b2:85:34:d3:b3:33: 03:6d:a5:21:43:dd:39:02:07:bf:ee:a4:3e:f9:22:3b:18:12: f7:78:e8:30:7e:fb:0d:6e:25:7c:f5:b2:65:35:e1:f9:3d:e2: 9c:f2:f5:a3:6a:b0:2c:ae:76:67:b1:ee:c8:8e:ea:77:d4:c3: ce:96:c4:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURkHthd+j1E7rzDJNcru9Die1m9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEy QzlBRDRBMjAeFw0yNjA0MTYxNjU1NTVaFw0yNjA0MTkyMTU1NTVaMDMxMTAvBgNV BAMTKDRERDY1QjQ0RTdFMkVFMkNCMDAwQkJGRjgyNjQ4MTkyQkM3RjNCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy62Vx5t+j3ve6NgQWdx9ijQPt +uhaTtDZhXmQHjPug44Mx/BOjktJ9oLxlEDcLKR0kMcN8U4diyNbPWqBJFL3FQ/b VF5Pmv1qEo66lpCYPh+XzkxrKAYeOMKWiE7AcXLtFifLriWaKLQxes6Xw6EU+Rpb yGS9ckcq4G5uoL3zmpP0NXc+e9P608+MACWo0uOjdFJOvrGDhl9H1tfSb/716ZSi JRj65lRk/5jguHB7T+jSCkw1SQrKkPsM4GPyn/Y7gNv86GgP0DTWcopZ5XQqC9KQ y3c79eu3aAEBI7qiu07eP74vMkqIYv/C1MUitrO2C7tsobOaI2bHMxbqBeQBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTdZbROfi7iywALv/gmSBkrx/O0UwHwYDVR0j BBgwFoAUOg6iohzkI6JNTQitwQhp8Sya1KIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjYxZmFiYi1kNDZmLTRmOGMtODEwMC03MTRjMjBlN2IzY2EvMC8zQTBFQTJBMjFD RTQyM0EyNEQ0RDA4QURDMTA4NjlGMTJDOUFENEEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEyQzlB RDRBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5 RjEyQzlBRDRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1z6ZnJu7IJTMqrjsl/OwKvn0/KL1S6FIIC 1D+DHS9Bj3osUnAfpCERnjzfmxjKb5HZo+E5jbCW05EQQVJ+/SpG6oDHKbqndUPW QOhiub/FtGiDNKklfbRuOwEJP/y4xDbRokRm7Zh65tfLXiWb5IWQ//bU6up6vKid +4LUHrgzkaXEVbPijge0d2ZEv1YQf9ehVJChDpXy1hRaY6n3yL74TSzsgaR3hlal 6pZ2R1dm5wMt32u/ggaAOn9saw5kh7KFNNOzMwNtpSFD3TkCB7/upD75IjsYEvd4 6DB++w1uJXz1smU14fk94pzy9aNqsCyudmex7siO6nfUw86WxGo= -----END CERTIFICATE-----Generated at Sat Apr 18 06:16:27 2026 by rpki-client