$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: NeXa25a2L8aBP7kSYVpxNz0DiOprBihGECFkhGv2NwA= Subject key identifier: DF:B8:C6:21:05:0E:54:5B:A9:B3:9D:83:23:95:88:D6:0B:A3:4D:84 Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 6C3F4EEDA1886A101B60DD99195F17D351C7396C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: 015E Signing time: Sun 19 Apr 2026 07:52:13 +0000 Manifest this update: Sun 19 Apr 2026 07:47:13 +0000 Manifest next update: Wed 22 Apr 2026 12:37:13 +0000 Files and hashes: 1: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: Phd2HFa3U8fZbQ7Fi7hmhWFGxrAOwcHa0E/u25hX9PE=) 2: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: vBd/o6+RGsJU4ZF5dz1yRiYJvku7rSkDAbo5yX1o1lY=) 3: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: 82ZZd9ZKqDtwhlONQ96AcoNzTHzQmEXlz9QIND1/UOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 10:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:3f:4e:ed:a1:88:6a:10:1b:60:dd:99:19:5f:17:d3:51:c7:39:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: Apr 19 07:47:13 2026 GMT Not After : Apr 22 12:37:13 2026 GMT Subject: CN=DFB8C621050E545BA9B39D83239588D60BA34D84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:6b:ec:c8:c9:c9:7a:79:ed:a0:c9:2d:ad: 59:d5:03:3d:8b:26:65:b7:10:6b:74:8b:21:16:13: 85:47:3c:b7:57:16:60:7e:8c:7e:2c:d5:19:77:e1: 25:cf:80:64:c6:8d:84:38:bc:0d:11:5b:e0:4e:d3: 7a:f1:96:11:56:9e:19:04:59:3b:39:f7:69:76:4e: a0:90:f7:dc:b2:81:9a:c8:4c:3e:1b:3b:47:64:cc: 80:03:31:31:e0:6f:59:cb:c9:96:e6:45:9c:94:58: db:61:11:23:9c:dc:d8:83:02:37:40:23:aa:ac:7b: a9:da:04:9b:af:d5:0d:fc:d9:e8:f9:56:ff:62:b3: 53:c5:16:70:a3:5e:9e:c5:cc:b5:fb:8c:43:07:fe: 7b:7f:0f:68:b0:57:38:51:38:6e:ff:c2:6c:6b:a8: 54:a1:22:8c:d3:0e:ab:60:74:c2:36:c6:08:9a:c6: 4c:a7:62:ee:cd:73:9c:f2:e7:b3:8e:6a:87:02:b7: a0:d1:c0:35:86:a2:a8:3d:cb:bc:03:09:3c:16:72: d9:99:bd:9f:34:c1:3a:08:fd:d3:28:b3:6f:f6:00: 11:7f:70:04:ea:e4:1b:ad:e4:5a:7a:e8:29:d5:bc: c2:90:84:2a:7b:e4:fb:8f:c2:79:f6:a9:ff:61:d1: fe:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B8:C6:21:05:0E:54:5B:A9:B3:9D:83:23:95:88:D6:0B:A3:4D:84 X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:45:9f:3e:09:3b:f3:25:20:b5:2f:51:ac:65:b5:05:27:f7: 1a:96:9a:c9:6d:3c:19:2c:68:f6:99:f9:53:b0:4e:15:ad:f7: c5:84:46:25:af:4b:e8:81:8a:72:f9:b6:b4:b3:7c:81:cf:c3: 16:f7:a6:73:c0:30:e2:dd:4d:73:0b:57:c6:9e:b8:df:5a:4c: 59:9b:74:61:1b:1b:27:c1:35:99:bc:b3:d8:b4:70:7b:9d:5d: 62:9e:8b:0d:89:07:91:1d:e9:f6:b6:fc:85:a0:54:84:a1:81: 61:d2:40:3e:44:92:1f:1b:5e:67:87:e0:90:b6:d9:6d:d2:e9: 13:ab:ac:fe:94:db:72:ab:ab:6f:7e:8e:f2:bf:d6:88:94:3a: b1:61:1f:04:86:f9:87:97:a0:f3:8f:9e:b9:07:79:7e:56:fb: 9a:1b:78:fa:2f:e8:92:67:c8:0b:42:7c:64:0a:3c:8a:22:93: 46:5b:28:0a:40:97:e3:96:77:23:9e:4d:2a:4b:99:d7:13:5e: 42:fe:05:44:24:2f:e7:be:05:a3:9e:0e:53:2f:ed:c5:02:19: 86:a3:f1:82:f3:5e:b8:c4:ef:d3:63:ad:11:0b:78:b5:89:21: 36:83:9d:dd:f2:db:d1:2f:41:93:74:cd:d7:02:a9:0a:bc:7b: 7f:75:18:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbD9O7aGIahAbYN2ZGV8X01HHOWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNjA0MTkwNzQ3MTNaFw0yNjA0MjIxMjM3MTNaMDMxMTAvBgNV BAMTKERGQjhDNjIxMDUwRTU0NUJBOUIzOUQ4MzIzOTU4OEQ2MEJBMzREODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5O2vsyMnJenntoMktrVnVAz2L JmW3EGt0iyEWE4VHPLdXFmB+jH4s1Rl34SXPgGTGjYQ4vA0RW+BO03rxlhFWnhkE WTs592l2TqCQ99yygZrITD4bO0dkzIADMTHgb1nLyZbmRZyUWNthESOc3NiDAjdA I6qse6naBJuv1Q382ej5Vv9is1PFFnCjXp7FzLX7jEMH/nt/D2iwVzhROG7/wmxr qFShIozTDqtgdMI2xgiaxkynYu7Nc5zy57OOaocCt6DRwDWGoqg9y7wDCTwWctmZ vZ80wToI/dMos2/2ABF/cATq5But5Fp66CnVvMKQhCp75PuPwnn2qf9h0f6/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU37jGIQUOVFups52DI5WI1gujTYQwHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABFnz4JO/MlILUvUaxltQUn9xqWmsltPBks aPaZ+VOwThWt98WERiWvS+iBinL5trSzfIHPwxb3pnPAMOLdTXMLV8aeuN9aTFmb dGEbGyfBNZm8s9i0cHudXWKeiw2JB5Ed6fa2/IWgVIShgWHSQD5Ekh8bXmeH4JC2 2W3S6ROrrP6U23Krq29+jvK/1oiUOrFhHwSG+YeXoPOPnrkHeX5W+5obePov6JJn yAtCfGQKPIoik0ZbKApAl+OWdyOeTSpLmdcTXkL+BUQkL+e+BaOeDlMv7cUCGYaj 8YLzXrjE79NjrRELeLWJITaDnd3y29EvQZN0zdcCqQq8e391GOY= -----END CERTIFICATE-----Generated at Sun Apr 19 11:22:33 2026 by rpki-client