$ rpki-client -vvf repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft File: 3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft (raw, json) Hash identifier: kBndeQn5vL6TaUomBmR4mcXSyaH+R2qcii/ZvRl9mbA= Subject key identifier: C4:66:89:81:51:CF:CF:90:C5:D4:5D:38:C1:38:34:78:86:4E:19:CE Authority key identifier: 3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3 Certificate issuer: /CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3 Certificate serial: 089E332D1179359EFBFA4075BBE5F466259A7BBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft Manifest number: 0171 Signing time: Wed 15 Apr 2026 17:51:29 +0000 Manifest this update: Wed 15 Apr 2026 17:46:29 +0000 Manifest next update: Sun 19 Apr 2026 02:00:29 +0000 Files and hashes: 1: 3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa (hash: fcE9nxP4F/tonEL2jLycsAVcDyzYWrh05xw29/4haAg=) 2: 3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (hash: FC4YL6B+zkeYZOTJZ5N7Yi4YIq94WZ3uKMPO/1YmBIg=) 3: 3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl (hash: zp2LQhAi3r/zcyjrLL7IqFrvUprgF0VoEycFDDbnAZI=) 4: 3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa (hash: WyVvseBUv5X8ksDjsVqSJfve5PyMPgdJn+/FGNUqcmk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:9e:33:2d:11:79:35:9e:fb:fa:40:75:bb:e5:f4:66:25:9a:7b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3 Validity Not Before: Apr 15 17:46:29 2026 GMT Not After : Apr 19 02:00:29 2026 GMT Subject: CN=C466898151CFCF90C5D45D38C1383478864E19CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:73:2f:03:8c:25:fd:2a:6b:85:e9:40:cb:1b: 47:8b:cc:74:65:34:2a:1c:4a:0d:88:23:a7:f9:6e: c7:16:d3:e6:41:a8:9d:f3:83:7e:76:3c:4e:a4:cf: 81:16:fc:40:be:b8:b9:da:b1:fa:03:1f:ef:01:2e: 68:63:7b:31:2c:69:2f:74:05:7b:39:1f:47:60:67: 14:5b:4f:8e:be:0e:35:79:a0:3d:22:8a:31:16:19: 4e:ff:33:6d:f0:5f:95:80:b1:de:e3:e1:2a:bf:2f: 05:e8:5f:3d:ee:6c:e0:09:57:8b:7e:2a:84:dd:b0: a7:cc:87:59:23:fa:19:0c:f7:99:d5:f8:a4:b0:23: 1a:34:0f:6d:6e:39:e8:22:43:66:78:00:96:30:9d: df:0b:0d:7f:a0:78:de:a9:95:bb:d5:9b:0d:25:37: 84:23:38:46:cd:81:70:91:95:8b:d5:dc:a2:77:91: 44:25:b1:eb:84:eb:df:92:60:03:71:94:d9:62:4e: f8:f8:be:51:3d:84:5c:e7:1f:89:73:4a:84:bb:71: 1b:5c:67:65:a3:c6:c2:46:de:fa:c5:cb:26:26:05: 02:2a:d1:3d:c8:f5:bf:43:11:36:7c:03:81:cf:77: d4:fe:99:83:b4:f0:a2:c2:92:ad:6c:43:2d:ea:b4: c8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:66:89:81:51:CF:CF:90:C5:D4:5D:38:C1:38:34:78:86:4E:19:CE X509v3 Authority Key Identifier: keyid:3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:cf:ee:1b:93:99:2a:43:e7:01:9c:e1:ce:04:8a:96:ee:44: df:56:6a:8f:89:30:4b:25:a8:59:bb:c9:68:98:47:0c:a7:db: 39:0b:47:4b:db:30:97:13:32:b7:42:a3:f5:e3:91:59:7d:36: 82:31:1c:a8:e9:38:7e:b4:4a:3c:02:2b:30:15:f2:6e:dc:0c: 45:c8:4f:fe:53:d7:d8:d9:17:0b:82:82:2f:45:c4:68:0f:87: 6a:c6:1a:4c:52:7b:8f:91:0b:4d:ee:62:61:44:36:a6:29:b2: 2d:cf:76:45:bb:15:1f:7d:b0:d9:e7:98:dc:9d:a0:58:70:48: 57:1c:b6:3f:28:14:07:6b:c1:99:8b:4c:c3:a8:e6:2c:b1:55: 6f:bb:87:69:c5:04:43:a9:4a:b0:9b:3e:b9:e9:af:53:aa:e1: 9f:ff:f9:3f:bb:94:34:b6:28:04:ef:6b:f3:02:e1:74:25:63: 47:52:3c:c3:8b:de:25:7b:5b:e5:11:92:59:e2:b1:e9:aa:a8: 2a:42:7e:ee:2e:bd:a7:73:fe:4c:5d:7f:1d:28:4a:c3:1f:c0: 3f:93:9b:87:95:40:24:a5:8f:16:29:00:8b:6f:7c:8b:a6:e2: b0:7f:32:2e:f8:38:73:a6:f8:49:58:6d:ba:c1:bf:ee:b3:bd: 1e:a4:ab:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJ4zLRF5NZ77+kB1u+X0ZiWae7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3 MjM3OEJGMzAeFw0yNjA0MTUxNzQ2MjlaFw0yNjA0MTkwMjAwMjlaMDMxMTAvBgNV BAMTKEM0NjY4OTgxNTFDRkNGOTBDNUQ0NUQzOEMxMzgzNDc4ODY0RTE5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCcy8DjCX9KmuF6UDLG0eLzHRl NCocSg2II6f5bscW0+ZBqJ3zg352PE6kz4EW/EC+uLnasfoDH+8BLmhjezEsaS90 BXs5H0dgZxRbT46+DjV5oD0iijEWGU7/M23wX5WAsd7j4Sq/LwXoXz3ubOAJV4t+ KoTdsKfMh1kj+hkM95nV+KSwIxo0D21uOegiQ2Z4AJYwnd8LDX+geN6plbvVmw0l N4QjOEbNgXCRlYvV3KJ3kUQlseuE69+SYANxlNliTvj4vlE9hFznH4lzSoS7cRtc Z2WjxsJG3vrFyyYmBQIq0T3I9b9DETZ8A4HPd9T+mYO08KLCkq1sQy3qtMgPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxGaJgVHPz5DF1F04wTg0eIZOGc4wHwYDVR0j BBgwFoAUPguVe1gtiu+ZpJxkSPmZPHI3i/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZWRjOWU0Zi04MTgwLTQxZDYtYjA4ZC04ZWU1YThhNzBhMDUvMC8zRTBCOTU3QjU4 MkQ4QUVGOTlBNDlDNjQ0OEY5OTkzQzcyMzc4QkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3MjM3 OEJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGVkYzllNGYtODE4MC00MWQ2LWIw OGQtOGVlNWE4YTcwYTA1LzAvM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5 M0M3MjM3OEJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTP7huTmSpD5wGc4c4EipbuRN9Wao+JMEsl qFm7yWiYRwyn2zkLR0vbMJcTMrdCo/XjkVl9NoIxHKjpOH60SjwCKzAV8m7cDEXI T/5T19jZFwuCgi9FxGgPh2rGGkxSe4+RC03uYmFENqYpsi3PdkW7FR99sNnnmNyd oFhwSFcctj8oFAdrwZmLTMOo5iyxVW+7h2nFBEOpSrCbPrnpr1Oq4Z//+T+7lDS2 KATva/MC4XQlY0dSPMOL3iV7W+URklnisemqqCpCfu4uvadz/kxdfx0oSsMfwD+T m4eVQCSljxYpAItvfIum4rB/Mi74OHOm+ElYbbrBv+6zvR6kqw8= -----END CERTIFICATE-----Generated at Fri Apr 17 18:20:23 2026 by rpki-client