$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: RjciaQ2VsxAwpdmmkxDKeKWCfEqx7nLl8lVogqzrPWk= Subject key identifier: 60:CA:7C:19:93:AD:0F:1D:EE:A3:93:94:71:AD:61:96:DF:58:5D:AB Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 5AD0A14478BFC5D7E38CCF14DEE2AFCD1A8C3768 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: 016D Signing time: Sat 18 Apr 2026 11:10:51 +0000 Manifest this update: Sat 18 Apr 2026 11:05:51 +0000 Manifest next update: Tue 21 Apr 2026 17:52:51 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: UbbU2D0zzDJgabuQpMMLJqLBHYCvjxY3e+JS2nioJsQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 17:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d0:a1:44:78:bf:c5:d7:e3:8c:cf:14:de:e2:af:cd:1a:8c:37:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: Apr 18 11:05:51 2026 GMT Not After : Apr 21 17:52:51 2026 GMT Subject: CN=60CA7C1993AD0F1DEEA3939471AD6196DF585DAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e5:d4:b8:35:bb:63:87:0e:c6:c4:d5:ff:4b: 8a:9a:9c:a1:9a:fa:2c:0f:20:37:db:ed:2a:76:a2: c6:7c:8f:da:93:79:75:2b:08:6a:32:d5:74:d5:61: 06:90:22:10:6e:d8:40:33:7a:49:a4:d9:cc:da:59: 06:15:3e:65:04:a1:6d:d9:75:73:44:80:5f:7e:ca: 9a:11:00:ea:85:32:75:90:62:1d:90:a0:61:5d:d3: 11:8a:c9:3f:53:61:b8:5e:60:8d:8b:74:3a:3d:1e: c5:0a:7b:cf:c7:65:68:09:0f:86:69:a7:fe:af:92: 15:88:9a:9d:bf:b0:31:11:48:c7:42:cd:b0:48:ed: 85:95:7b:67:8f:6f:7b:72:c6:69:2e:74:a1:33:c2: 8c:64:12:5e:30:5b:1a:50:99:1d:5a:8a:c6:d8:c7: e7:b2:6d:d3:96:54:51:da:88:2d:92:7e:2e:fe:97: 29:9c:76:84:5c:d2:9a:8f:f3:45:b0:ef:6f:e8:d5: b2:6a:4f:08:39:8e:29:1c:54:c3:e7:18:d2:3c:4c: e3:b3:5e:0d:e1:ae:df:62:cd:da:4f:13:e1:70:31: cb:3d:a0:4b:a1:29:81:c6:fe:3f:d3:bc:ea:81:07: 91:1c:e0:ad:b5:96:1c:0a:c5:ec:54:b1:2e:8d:22: 23:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CA:7C:19:93:AD:0F:1D:EE:A3:93:94:71:AD:61:96:DF:58:5D:AB X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:ff:e1:5c:38:cf:8b:ba:51:10:9d:95:dd:c0:06:e6:6d:5c: 01:8c:8c:1f:26:eb:0a:b5:ea:6e:a0:7c:87:d2:92:47:41:62: 49:b7:76:f1:77:50:69:63:f4:c3:d0:65:67:45:c2:08:b9:f5: 71:58:f8:45:ff:ae:2e:2c:ca:6e:2e:8e:d2:37:12:71:83:81: 3f:1a:9d:b7:78:93:4d:cd:fe:4d:47:ce:29:7e:ce:53:b1:d8: 37:e0:7b:c5:8f:36:2f:05:7f:dc:9f:c6:8d:03:17:01:c3:7c: 89:e2:56:f3:04:7f:6b:4b:9d:3b:44:42:f4:26:8e:56:0d:b8: bf:af:4c:30:a2:8c:47:99:ac:77:d2:a5:1a:be:88:5e:52:29: 4b:9d:34:bd:8c:f2:52:b3:cc:90:27:bf:26:eb:cb:86:ed:1d: 9a:be:44:b3:8d:49:63:2f:e4:cf:c4:00:67:ca:46:d2:68:69: d0:1e:0a:b8:3b:64:dd:5f:db:6b:7b:41:17:5c:ab:97:a5:5f: 29:d9:92:fa:2a:61:bc:dd:19:41:88:25:9b:0e:86:a6:dd:ad: 8d:6e:67:f4:6e:ca:a3:c1:b6:e1:1c:b4:44:43:fd:09:f3:e1: 92:4d:45:b1:e5:a8:65:5e:8b:82:55:91:3f:03:8c:a7:64:7c: 70:37:d2:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWtChRHi/xdfjjM8U3uKvzRqMN2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNjA0MTgxMTA1NTFaFw0yNjA0MjExNzUyNTFaMDMxMTAvBgNV BAMTKDYwQ0E3QzE5OTNBRDBGMURFRUEzOTM5NDcxQUQ2MTk2REY1ODVEQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN5dS4Nbtjhw7GxNX/S4qanKGa +iwPIDfb7Sp2osZ8j9qTeXUrCGoy1XTVYQaQIhBu2EAzekmk2czaWQYVPmUEoW3Z dXNEgF9+ypoRAOqFMnWQYh2QoGFd0xGKyT9TYbheYI2LdDo9HsUKe8/HZWgJD4Zp p/6vkhWImp2/sDERSMdCzbBI7YWVe2ePb3tyxmkudKEzwoxkEl4wWxpQmR1aisbY x+eybdOWVFHaiC2Sfi7+lymcdoRc0pqP80Ww72/o1bJqTwg5jikcVMPnGNI8TOOz Xg3hrt9izdpPE+FwMcs9oEuhKYHG/j/TvOqBB5Ec4K21lhwKxexUsS6NIiMDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYMp8GZOtDx3uo5OUca1hlt9YXaswHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOX/4Vw4z4u6URCdld3ABuZtXAGMjB8m6wq1 6m6gfIfSkkdBYkm3dvF3UGlj9MPQZWdFwgi59XFY+EX/ri4sym4ujtI3EnGDgT8a nbd4k03N/k1Hzil+zlOx2Dfge8WPNi8Ff9yfxo0DFwHDfIniVvMEf2tLnTtEQvQm jlYNuL+vTDCijEeZrHfSpRq+iF5SKUudNL2M8lKzzJAnvybry4btHZq+RLONSWMv 5M/EAGfKRtJoadAeCrg7ZN1f22t7QRdcq5elXynZkvoqYbzdGUGIJZsOhqbdrY1u Z/RuyqPBtuEctERD/Qnz4ZJNRbHlqGVei4JVkT8DjKdkfHA30lE= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:59 2026 by rpki-client